Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6BPa_1VGWL18d0-AX11stBFUY_o.roa
File: 6BPa_1VGWL18d0-AX11stBFUY_o.roa (raw, json)
Hash identifier: 3N/2azt18sKbB4dia3kgehlJ5GTfvLZClfEoyG7fY0s=
Subject key identifier: E8:13:DA:FF:55:46:58:BD:7C:77:4F:80:5F:5D:6C:B4:11:54:63:FA
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 019016671D40C2E0E9E50EDD2CF29860EA24
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6BPa_1VGWL18d0-AX11stBFUY_o.roa
Signing time: Fri 14 Jun 2024 10:59:34 +0000
ROA not before: Fri 14 Jun 2024 10:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/19 maxlen: 19
85.234.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:67:1d:40:c2:e0:e9:e5:0e:dd:2c:f2:98:60:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 14 10:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e813daff554658bd7c774f805f5d6cb4115463fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:bb:49:fe:4f:d9:f4:a1:b6:bc:0a:d9:11:
50:06:79:3e:d1:c2:26:ba:39:60:d9:05:60:ea:19:
80:39:f7:17:52:e4:12:de:0a:56:ac:15:ef:63:24:
b9:8b:ff:a2:df:0f:25:79:92:7b:a0:46:34:db:b0:
5a:00:ad:fe:f8:94:2c:7a:6a:6f:dd:a6:0a:73:57:
66:7a:f1:a8:eb:fa:f3:47:09:e0:d1:00:2c:82:4b:
f1:c8:e4:fd:66:c1:62:ae:04:ec:78:5b:7c:12:27:
89:cb:6c:9e:6b:f0:60:69:83:12:fd:d3:fb:1c:2e:
9b:80:25:80:99:d8:a9:ec:51:87:ad:4f:95:63:9d:
03:43:75:f2:d6:2b:00:0e:c9:f9:06:ec:67:10:9c:
d7:c5:db:75:0d:1d:64:47:60:ec:aa:01:b3:33:ad:
1a:5a:3f:34:9d:0b:fa:9c:86:95:6d:0c:d2:d5:92:
46:1a:6d:f8:9c:58:09:51:11:a9:73:04:10:98:6a:
4a:fc:e3:4a:36:f5:0b:2d:21:51:d9:88:65:34:4e:
d7:23:88:a6:b9:f3:15:0b:4b:6a:cc:09:46:ec:47:
ed:8b:0c:c3:a1:a3:4b:3a:f3:b7:07:2f:83:aa:95:
ca:f3:84:a4:0f:08:09:3a:ff:1b:64:c8:ad:fe:d3:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:DA:FF:55:46:58:BD:7C:77:4F:80:5F:5D:6C:B4:11:54:63:FA
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6BPa_1VGWL18d0-AX11stBFUY_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/19
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:05:9a:d3:de:2c:7d:57:09:3e:b1:4c:97:45:6c:59:64:db:
f6:8e:74:b3:90:e0:77:db:2f:c1:69:77:f6:6b:68:91:86:74:
31:8b:5c:e2:97:f7:62:ec:18:fd:e0:fd:7e:ff:2f:02:d7:49:
25:24:7a:28:06:c1:35:0d:d7:4c:b7:51:4b:35:cc:32:cc:f6:
58:d3:6a:d4:74:36:b3:f7:c8:80:a2:e0:ad:70:84:5b:6c:f1:
23:2f:59:bb:39:3e:57:78:db:8b:25:93:fe:ee:4b:85:55:91:
1d:16:9b:27:f5:aa:fb:a2:09:07:ca:14:24:ea:5d:f1:04:ec:
00:32:67:87:b4:9f:81:dc:2d:af:14:8b:f8:c4:9c:a1:0f:bf:
d6:1b:0f:ef:2a:0c:20:e7:92:57:63:55:bf:10:c5:ba:b5:8c:
dc:43:36:0f:56:e9:fe:3d:f2:c0:d9:62:f0:89:1a:99:6e:11:
57:ee:7d:41:8d:2c:ae:49:58:ac:b2:71:6a:5c:da:ba:b9:dc:
4e:0e:ab:82:a6:73:85:ab:46:ef:93:49:06:15:c9:86:31:9a:
e2:97:16:48:25:a1:05:f1:bc:e2:4c:35:4f:a5:1a:a0:5e:f0:
2a:da:2d:77:1a:22:a6:f1:de:a1:71:51:32:93:05:82:d8:8f:
81:57:1a:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAWZx1AwuDp5Q7dLPKYYOokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjQwNjE0MTA1OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODEzZGFmZjU1NDY1OGJkN2M3NzRmODA1ZjVkNmNiNDExNTQ2M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0C7Sf5P2fShtrwK2RFQBnk+0cIm
ujlg2QVg6hmAOfcXUuQS3gpWrBXvYyS5i/+i3w8leZJ7oEY027BaAK3++JQsempv
3aYKc1dmevGo6/rzRwng0QAsgkvxyOT9ZsFirgTseFt8EieJy2yea/BgaYMS/dP7
HC6bgCWAmdip7FGHrU+VY50DQ3Xy1isADsn5BuxnEJzXxdt1DR1kR2DsqgGzM60a
Wj80nQv6nIaVbQzS1ZJGGm34nFgJURGpcwQQmGpK/ONKNvULLSFR2YhlNE7XI4im
ufMVC0tqzAlG7EftiwzDoaNLOvO3By+DqpXK84SkDwgJOv8bZMit/tMxrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgT2v9VRli9fHdPgF9dbLQRVGP6MB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvNkJQYV8xVkdXTDE4ZDAtQVgxMXN0QkZVWV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFT4RAAwQF
VeqgMA0GCSqGSIb3DQEBCwUAA4IBAQBKBZrT3ix9Vwk+sUyXRWxZZNv2jnSzkOB3
2y/BaXf2a2iRhnQxi1zil/di7Bj94P1+/y8C10klJHooBsE1DddMt1FLNcwyzPZY
02rUdDaz98iAouCtcIRbbPEjL1m7OT5XeNuLJZP+7kuFVZEdFpsn9ar7ogkHyhQk
6l3xBOwAMmeHtJ+B3C2vFIv4xJyhD7/WGw/vKgwg55JXY1W/EMW6tYzcQzYPVun+
PfLA2WLwiRqZbhFX7n1BjSyuSVissnFqXNq6udxODquCpnOFq0bvk0kGFcmGMZri
lxZIJaEF8bziTDVPpRqgXvAq2i13GiKm8d6hcVEykwWC2I+BVxqx
-----END CERTIFICATE-----
Generated at Wed Aug 7 08:47:52 2024 by rpki-client on console-fra.rpki-client.org