Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/dBXcnNpm19_JA9QT9cMmOn5n2eY.roa
File: dBXcnNpm19_JA9QT9cMmOn5n2eY.roa (raw, json)
Hash identifier: SkW/Kl/lISu0G3Ler/rqnFYBPhe/KCR08Bqhj39AkvI=
Subject key identifier: 74:15:DC:9C:DA:66:D7:DF:C9:03:D4:13:F5:C3:26:3A:7E:67:D9:E6
Certificate issuer: /CN=a0db124ef35c222167894a5a5e93704a811c34ac
Certificate serial: 170D3758
Authority key identifier: A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/dBXcnNpm19_JA9QT9cMmOn5n2eY.roa
Signing time: Sat 01 Jan 2022 03:00:50 +0000
ROA not before: Sat 01 Jan 2022 03:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60199
IP address blocks: 84.239.96.0/22 maxlen: 22
141.101.60.0/22 maxlen: 24
2a00:6900:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386742104 (0x170d3758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0db124ef35c222167894a5a5e93704a811c34ac
Validity
Not Before: Jan 1 03:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7415dc9cda66d7dfc903d413f5c3263a7e67d9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:5f:9e:41:92:94:8e:0f:76:6f:3c:74:eb:
a4:59:1d:0b:bb:43:ef:16:97:a2:76:3d:57:86:c7:
3d:c2:e4:46:14:41:a3:9f:42:d1:d8:ec:0b:f4:48:
02:d6:85:cb:c0:d6:60:76:73:99:b8:3d:24:49:28:
25:1b:45:21:f3:eb:03:da:4c:e6:69:06:51:b9:28:
e9:0d:ea:83:44:0c:ea:07:1a:03:ca:05:12:b3:a8:
82:82:68:c7:95:10:3c:5e:99:09:01:38:05:df:d2:
4a:b4:db:6a:9f:b6:d4:41:bd:52:c2:89:40:a9:ca:
3c:c8:9c:16:c5:a2:96:26:99:bc:14:d2:8a:a9:b8:
f4:ea:07:71:53:84:da:b3:5a:42:54:c1:3c:69:a9:
2e:a7:3e:c4:1c:f7:f3:c8:e9:5b:7a:67:64:2d:6b:
a2:81:75:00:5c:b1:c9:b2:4b:bd:c6:18:ba:16:a4:
34:85:97:a3:e2:e7:29:58:90:5a:7d:8e:cf:f6:c7:
e3:26:6c:69:7f:1a:54:44:5c:e4:28:71:88:3d:61:
d9:99:fc:9b:6c:5c:e3:35:e2:a1:d7:89:2e:bf:34:
e5:d4:cc:f6:56:89:ff:20:5f:ed:f7:95:89:23:98:
5c:f4:8f:d7:2f:be:8b:85:7e:73:7c:c9:da:e6:8f:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:DC:9C:DA:66:D7:DF:C9:03:D4:13:F5:C3:26:3A:7E:67:D9:E6
X509v3 Authority Key Identifier:
keyid:A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/dBXcnNpm19_JA9QT9cMmOn5n2eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/oNsSTvNcIiFniUpaXpNwSoEcNKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.96.0/22
141.101.60.0/22
IPv6:
2a00:6900:10::/48
Signature Algorithm: sha256WithRSAEncryption
60:ae:90:d0:cb:45:3b:06:e7:10:fc:ed:7b:94:f1:a3:12:df:
1a:47:a5:72:ca:b3:e7:04:68:4d:3b:b0:9f:f5:d2:29:cd:75:
d9:1c:88:52:ab:b1:64:42:d4:ff:13:6f:92:ab:cc:43:91:53:
c3:66:2a:fa:c5:81:52:8a:72:a5:41:af:90:75:e1:44:4a:0b:
8c:81:ae:3c:c6:52:ba:6b:06:6b:25:2f:57:e5:2d:32:5d:b9:
41:22:a6:0a:01:b1:6c:26:53:4b:aa:5f:31:06:3e:66:80:25:
db:9b:af:29:76:88:c7:5f:c9:62:94:e6:3b:1b:05:83:5a:bc:
d0:00:86:8a:ca:b9:e4:68:65:53:c0:78:3d:d1:94:75:af:71:
bb:7b:0e:78:6b:f0:86:a6:82:e6:c1:c6:58:0a:1e:68:a1:80:
ce:e0:67:94:58:f8:ef:b8:06:03:13:30:a1:23:f3:ed:72:1d:
90:79:38:00:e5:cb:7e:14:95:b2:28:69:66:43:bc:e5:70:55:
d1:c3:8c:4e:a8:a4:b7:40:a4:d1:3d:ec:d9:e8:7b:38:1c:45:
c2:03:b1:6c:cc:ca:31:c1:75:e2:a5:e9:bf:5b:c6:b9:8c:26:
e9:80:52:36:52:f5:bc:8d:f5:12:8d:2e:2b:3b:01:7d:b2:b5:
f6:d1:bf:d1
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEFw03WDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MGRiMTI0ZWYzNWMyMjIxNjc4OTRhNWE1ZTkzNzA0YTgxMWMzNGFjMB4XDTIyMDEw
MTAzMDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQxNWRjOWNkYTY2
ZDdkZmM5MDNkNDEzZjVjMzI2M2E3ZTY3ZDllNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJx8X55BkpSOD3ZvPHTrpFkdC7tD7xaXonY9V4bHPcLkRhRB
o59C0djsC/RIAtaFy8DWYHZzmbg9JEkoJRtFIfPrA9pM5mkGUbko6Q3qg0QM6gca
A8oFErOogoJox5UQPF6ZCQE4Bd/SSrTbap+21EG9UsKJQKnKPMicFsWiliaZvBTS
iqm49OoHcVOE2rNaQlTBPGmpLqc+xBz388jpW3pnZC1rooF1AFyxybJLvcYYuhak
NIWXo+LnKViQWn2Oz/bH4yZsaX8aVERc5ChxiD1h2Zn8m2xc4zXiodeJLr805dTM
9laJ/yBf7feViSOYXPSP1y++i4V+c3zJ2uaPvb0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBR0Fdyc2mbX38kD1BP1wyY6fmfZ5jAfBgNVHSMEGDAWgBSg2xJO81wiIWeJ
Slpek3BKgRw0rDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29Oc1NUdk5jSWlGbmlVcGFYcE53U29FY05Ldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMmRlYzkzLTdiMGEtNDYxNC1hMDU5LWY3ZTA5MmNlMjE3MC8x
L2RCWGNuTnBtMTlfSkE5UVQ5Y01tT241bjJlWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MmRlYzkzLTdiMGEtNDYxNC1hMDU5LWY3ZTA5MmNlMjE3MC8xL29Oc1NUdk5jSWlG
bmlVcGFYcE53U29FY05Ldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAlTvYAMEAo1lPDAPBAIAAjAJAwcA
KgBpAAAQMA0GCSqGSIb3DQEBCwUAA4IBAQBgrpDQy0U7BucQ/O17lPGjEt8aR6Vy
yrPnBGhNO7Cf9dIpzXXZHIhSq7FkQtT/E2+Sq8xDkVPDZir6xYFSinKlQa+QdeFE
SguMga48xlK6awZrJS9X5S0yXblBIqYKAbFsJlNLql8xBj5mgCXbm68pdojHX8li
lOY7GwWDWrzQAIaKyrnkaGVTwHg90ZR1r3G7ew54a/CGpoLmwcZYCh5ooYDO4GeU
WPjvuAYDEzChI/Ptch2QeTgA5ct+FJWyKGlmQ7zlcFXRw4xOqKS3QKTRPezZ6Hs4
HEXCA7FszMoxwXXipem/W8a5jCbpgFI2UvW8jfUSjS4rOwF9srX20b/R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:51 2024 by rpki-client on console-fra.rpki-client.org