Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/QUv0TTJetpkNeA9mFBI0864f0ZY.roa
File: QUv0TTJetpkNeA9mFBI0864f0ZY.roa (raw, json)
Hash identifier: jPz3GYJOI9IBQrx5ER4zczjjfIZScueV77soH3/L1dQ=
Subject key identifier: 41:4B:F4:4D:32:5E:B6:99:0D:78:0F:66:14:12:34:F3:AE:1F:D1:96
Certificate issuer: /CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Certificate serial: 01856BCA3B2FD2BDD1E70902B6B490283940
Authority key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/QUv0TTJetpkNeA9mFBI0864f0ZY.roa
Signing time: Sun 01 Jan 2023 05:24:53 +0000
ROA not before: Sun 01 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.205.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3b:2f:d2:bd:d1:e7:09:02:b6:b4:90:28:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Validity
Not Before: Jan 1 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=414bf44d325eb6990d780f66141234f3ae1fd196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:f4:39:f4:60:73:88:a1:96:d2:80:49:ec:
aa:21:56:6f:30:d3:5f:74:42:97:0f:bc:96:c8:07:
d7:d3:07:3e:f9:02:d8:11:0d:20:24:a8:44:d8:b3:
6c:c0:3c:31:ee:ea:83:78:b4:4b:8d:11:08:92:36:
72:f1:f0:93:4a:b4:2e:32:29:fc:d4:7f:e4:8d:11:
ad:83:fb:ba:06:9c:0f:ae:0b:f4:40:b9:8d:7c:8f:
9f:c6:ee:b6:9c:d8:d1:0b:4c:e4:84:12:a9:b2:e1:
26:36:d9:2f:a0:13:61:d7:dd:0c:45:fc:c9:ac:dc:
54:e2:dd:7b:1a:e7:02:aa:bb:10:ca:45:99:5f:51:
bf:7b:4f:6e:17:32:ca:f1:85:2e:37:3e:4f:13:40:
5c:59:b1:0f:7e:b4:ae:ac:48:76:d3:1f:cf:c3:b7:
c5:5f:1f:61:35:16:d6:04:5f:dd:40:d7:bc:7c:8b:
51:aa:cb:57:23:f2:c9:cc:66:ce:25:62:d4:77:ea:
c4:e8:5b:37:6b:5b:12:22:56:aa:fb:09:53:f6:82:
ee:96:b4:93:ae:dd:33:49:16:79:06:83:01:01:6b:
2b:a6:31:80:d9:88:f4:f1:78:7a:ff:57:6a:4f:1e:
4c:a3:f3:53:15:a6:94:43:71:c7:a9:ce:c3:5f:fe:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:F4:4D:32:5E:B6:99:0D:78:0F:66:14:12:34:F3:AE:1F:D1:96
X509v3 Authority Key Identifier:
keyid:6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/QUv0TTJetpkNeA9mFBI0864f0ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.184.0/24
Signature Algorithm: sha256WithRSAEncryption
70:71:1d:70:fd:67:a4:4b:82:7c:27:85:42:a7:95:9f:09:c3:
26:16:52:76:2e:17:4b:44:88:0b:9a:e6:87:be:42:79:37:81:
41:e4:f1:9b:34:03:b2:4a:6f:ae:cf:3a:4e:65:ae:d1:b7:c2:
55:41:3e:50:88:e1:12:f2:00:d0:3f:c4:7b:bd:07:ac:63:6a:
d5:37:f4:85:4f:9b:bc:c9:5f:12:2e:f2:01:e6:f1:0d:82:fd:
bf:2f:33:65:b8:79:b6:aa:b1:fd:5e:62:2e:dd:3f:2e:6b:2c:
d3:76:a8:02:fa:7a:84:54:4c:8d:63:b0:17:82:0b:ee:55:4a:
70:cf:f8:ea:36:53:80:c5:d9:d7:7a:53:90:30:48:82:de:91:
f3:92:09:f0:11:13:b5:82:89:d7:7e:2d:c8:9e:75:14:a3:c4:
c6:71:89:57:d9:9b:98:29:44:99:a9:8d:ae:dc:59:f5:5e:8e:
79:63:45:4a:b1:f9:c7:e0:16:be:41:b5:5f:e0:46:3c:9e:e3:
ad:d4:6a:4f:52:5c:73:ba:5e:d8:d9:a9:39:26:56:c5:40:b1:
4f:8e:54:ee:2b:59:97:35:73:39:fa:62:17:20:8b:84:9b:83:
85:2c:66:42:31:32:91:2a:ac:9a:2c:e5:3b:c6:37:f2:01:e5:
9c:aa:08:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVryjsv0r3R5wkCtrSQKDlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOWEzNGM1MjFlYTYwNzNlMDljMjA0OTM0ZjdjZTBlYTA4
NmJhMWIwHhcNMjMwMTAxMDUyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTRiZjQ0ZDMyNWViNjk5MGQ3ODBmNjYxNDEyMzRmM2FlMWZkMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5P0OfRgc4ihltKASeyqIVZvMNNf
dEKXD7yWyAfX0wc++QLYEQ0gJKhE2LNswDwx7uqDeLRLjREIkjZy8fCTSrQuMin8
1H/kjRGtg/u6BpwPrgv0QLmNfI+fxu62nNjRC0zkhBKpsuEmNtkvoBNh190MRfzJ
rNxU4t17GucCqrsQykWZX1G/e09uFzLK8YUuNz5PE0BcWbEPfrSurEh20x/Pw7fF
Xx9hNRbWBF/dQNe8fItRqstXI/LJzGbOJWLUd+rE6Fs3a1sSIlaq+wlT9oLulrST
rt0zSRZ5BoMBAWsrpjGA2Yj08Xh6/1dqTx5Mo/NTFaaUQ3HHqc7DX/5zeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFL9E0yXraZDXgPZhQSNPOuH9GWMB8GA1UdIwQY
MBaAFGyaNMUh6mBz4JwgSTT3zg6ghrobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpvMHhTSHFZSFBnbkNCSk5QZk9EcUNHdWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNDBkYzItNTczNi00NDQ0LThkNTYt
ZDQxYmJkMWQ2ZmU4LzEvUVV2MFRUSmV0cGtOZUE5bUZCSTA4NjRmMFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNDBkYzItNTczNi00NDQ0LThkNTYtZDQxYmJkMWQ2ZmU4
LzEvYkpvMHhTSHFZSFBnbkNCSk5QZk9EcUNHdWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc24MA0G
CSqGSIb3DQEBCwUAA4IBAQBwcR1w/WekS4J8J4VCp5WfCcMmFlJ2LhdLRIgLmuaH
vkJ5N4FB5PGbNAOySm+uzzpOZa7Rt8JVQT5QiOES8gDQP8R7vQesY2rVN/SFT5u8
yV8SLvIB5vENgv2/LzNluHm2qrH9XmIu3T8uayzTdqgC+nqEVEyNY7AXggvuVUpw
z/jqNlOAxdnXelOQMEiC3pHzkgnwERO1gonXfi3InnUUo8TGcYlX2ZuYKUSZqY2u
3Fn1Xo55Y0VKsfnH4Ba+QbVf4EY8nuOt1GpPUlxzul7Y2ak5JlbFQLFPjlTuK1mX
NXM5+mIXIIuEm4OFLGZCMTKRKqyaLOU7xjfyAeWcqgjS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:59 2024 by rpki-client on console-ams.rpki-client.org