Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/AwMe3JInzXRWDEOWTDafSJGiR54.roa
File: AwMe3JInzXRWDEOWTDafSJGiR54.roa (raw, json)
Hash identifier: mCsf3Qpd0dPgf/T0o+yHNMgVt5GW0OyIKpO9Wzdh708=
Subject key identifier: 03:03:1E:DC:92:27:CD:74:56:0C:43:96:4C:36:9F:48:91:A2:47:9E
Certificate issuer: /CN=a647395afe26d6f0d0072c4708497d4b74284639
Certificate serial: 0185723115B8E77F8BB37065D89A6AFF8977
Authority key identifier: A6:47:39:5A:FE:26:D6:F0:D0:07:2C:47:08:49:7D:4B:74:28:46:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkc5Wv4m1vDQByxHCEl9S3QoRjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/AwMe3JInzXRWDEOWTDafSJGiR54.roa
Signing time: Mon 02 Jan 2023 11:14:57 +0000
ROA not before: Mon 02 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 109.234.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:15:b8:e7:7f:8b:b3:70:65:d8:9a:6a:ff:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647395afe26d6f0d0072c4708497d4b74284639
Validity
Not Before: Jan 2 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03031edc9227cd74560c43964c369f4891a2479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:6f:dd:80:5f:4f:54:05:60:7b:fc:2c:2c:
75:ee:93:a0:ff:3a:b6:dc:6e:4c:58:46:8a:06:ab:
49:46:8c:aa:87:4b:28:10:41:30:8e:28:66:ea:db:
a9:87:82:30:74:07:fc:fc:32:ba:be:92:a1:a6:60:
0d:2f:8f:c1:9d:10:16:84:85:c2:16:d6:d4:e6:0d:
44:25:08:fb:8a:75:03:41:67:a6:ee:5a:6d:7a:62:
ba:37:6d:91:ef:c1:c4:8a:41:8c:ce:66:f2:78:ed:
13:2a:29:77:f2:f6:36:40:1f:c2:1d:75:74:fd:3c:
b6:19:b0:0a:12:e8:27:b7:56:f8:9a:e3:40:32:78:
2a:b7:73:c0:ad:35:f9:ba:a0:37:d6:cf:cf:47:ad:
43:37:10:7e:ae:e9:e8:db:79:bb:41:b7:d1:cd:5c:
e8:97:78:8e:bf:de:2d:dd:6c:48:d6:31:f0:c0:2f:
be:d7:13:62:af:1a:5f:2b:30:9a:41:11:11:9d:1f:
42:16:ae:3a:d1:e2:80:57:44:59:4a:69:f5:10:72:
48:2e:66:61:ea:c0:68:66:69:13:b6:15:e8:8e:bf:
13:7b:cc:e3:f1:2e:dd:6b:65:a4:4b:57:dd:b7:a9:
7f:c4:e9:bf:60:ae:2b:8c:49:ce:23:fd:40:40:05:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:03:1E:DC:92:27:CD:74:56:0C:43:96:4C:36:9F:48:91:A2:47:9E
X509v3 Authority Key Identifier:
keyid:A6:47:39:5A:FE:26:D6:F0:D0:07:2C:47:08:49:7D:4B:74:28:46:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkc5Wv4m1vDQByxHCEl9S3QoRjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/AwMe3JInzXRWDEOWTDafSJGiR54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/pkc5Wv4m1vDQByxHCEl9S3QoRjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:46:a2:27:04:ca:b9:df:8b:dc:98:83:16:dd:00:4d:d5:01:
b7:58:b9:91:b4:bb:aa:84:ff:7d:5f:b3:0c:7d:f6:aa:b2:0a:
d4:81:a7:67:05:3e:6e:fb:d1:df:63:9e:85:05:d0:7a:6d:1a:
3d:dc:58:59:19:a3:bf:c8:eb:73:1e:67:83:74:7c:02:58:0a:
a1:1c:a2:56:4d:a1:b6:e1:14:9c:ab:16:b7:69:90:2e:fd:1f:
82:b5:0f:5e:c7:09:40:58:f8:af:84:10:71:d4:36:38:8d:4d:
65:c0:df:94:a9:c9:65:be:eb:6e:70:e0:b3:52:5e:1d:ee:5f:
7b:ab:64:c7:5c:a8:e7:f5:fc:e6:97:1b:ce:00:54:c9:e3:15:
ce:0a:4f:89:0f:e3:a8:8e:00:17:89:53:bf:66:37:9a:78:07:
62:15:93:75:d6:ad:7f:84:02:7c:b6:9f:5f:39:6a:43:10:2b:
48:af:6a:40:99:a9:00:bc:04:bf:e5:92:b2:77:6c:70:b6:8e:
ab:83:25:db:02:22:5e:d5:ec:0d:43:5c:2b:e5:5f:16:2e:bf:
00:85:1f:7b:0b:06:6e:cb:29:90:a4:3a:33:1c:5e:16:d2:d9:
3c:5f:7b:b4:a2:e7:fe:e8:f7:ef:0a:33:34:cd:64:0b:e3:4e:
b7:42:d1:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMRW453+Ls3Bl2Jpq/4l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDczOTVhZmUyNmQ2ZjBkMDA3MmM0NzA4NDk3ZDRiNzQy
ODQ2MzkwHhcNMjMwMTAyMTExNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzAzMWVkYzkyMjdjZDc0NTYwYzQzOTY0YzM2OWY0ODkxYTI0NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdpv3YBfT1QFYHv8LCx17pOg/zq2
3G5MWEaKBqtJRoyqh0soEEEwjihm6tuph4IwdAf8/DK6vpKhpmANL4/BnRAWhIXC
FtbU5g1EJQj7inUDQWem7lptemK6N22R78HEikGMzmbyeO0TKil38vY2QB/CHXV0
/Ty2GbAKEugnt1b4muNAMngqt3PArTX5uqA31s/PR61DNxB+runo23m7QbfRzVzo
l3iOv94t3WxI1jHwwC++1xNirxpfKzCaQRERnR9CFq460eKAV0RZSmn1EHJILmZh
6sBoZmkTthXojr8Te8zj8S7da2WkS1fdt6l/xOm/YK4rjEnOI/1AQAWolQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMDHtySJ810VgxDlkw2n0iRokeeMB8GA1UdIwQY
MBaAFKZHOVr+Jtbw0AcsRwhJfUt0KEY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtjNVd2NG0xdkRRQnl4SENFbDlTM1FvUmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZjk0ZjYtYjQ0MC00Y2JlLTgwYzYt
NTJiYmRmYjY1ZTE5LzEvQXdNZTNKSW56WFJXREVPV1REYWZTSkdpUjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZjk0ZjYtYjQ0MC00Y2JlLTgwYzYtNTJiYmRmYjY1ZTE5
LzEvcGtjNVd2NG0xdkRRQnl4SENFbDlTM1FvUmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbepJMA0G
CSqGSIb3DQEBCwUAA4IBAQAbRqInBMq534vcmIMW3QBN1QG3WLmRtLuqhP99X7MM
ffaqsgrUgadnBT5u+9HfY56FBdB6bRo93FhZGaO/yOtzHmeDdHwCWAqhHKJWTaG2
4RScqxa3aZAu/R+CtQ9exwlAWPivhBBx1DY4jU1lwN+UqcllvutucOCzUl4d7l97
q2THXKjn9fzmlxvOAFTJ4xXOCk+JD+OojgAXiVO/ZjeaeAdiFZN11q1/hAJ8tp9f
OWpDECtIr2pAmakAvAS/5ZKyd2xwto6rgyXbAiJe1ewNQ1wr5V8WLr8AhR97CwZu
yymQpDozHF4W0tk8X3u0ouf+6PfvCjM0zWQL4063QtHr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org