Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa
File: aEFBMCM598JyzpG9p_aFZPBqqZw.roa (raw, json)
Hash identifier: md5XZAT/qFxiIyX5Ja9orRVRD5g/Bzp/r9GS77nN+4I=
Subject key identifier: 68:41:41:30:23:39:F7:C2:72:CE:91:BD:A7:F6:85:64:F0:6A:A9:9C
Certificate issuer: /CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Certificate serial: 0189F2CF7CC416A7F2E5AAF22A807298B905
Authority key identifier: 9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa
Signing time: Mon 14 Aug 2023 06:50:31 +0000
ROA not before: Mon 14 Aug 2023 06:50:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59950
IP address blocks: 212.6.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:cf:7c:c4:16:a7:f2:e5:aa:f2:2a:80:72:98:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Validity
Not Before: Aug 14 06:50:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=684141302339f7c272ce91bda7f68564f06aa99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:9d:04:28:e9:21:2f:1e:43:80:94:b9:31:
d3:ab:4d:6d:95:4c:39:98:f7:96:25:7a:51:53:7d:
8b:f3:71:9d:4b:25:75:0c:48:ae:5b:49:e4:3e:32:
c8:7b:60:56:89:81:a7:7d:16:3f:70:31:e3:b3:f8:
34:f7:d2:e2:16:e3:8e:2c:62:fc:0f:27:7e:80:94:
44:aa:5a:2f:97:5f:6f:29:aa:c0:ff:64:ae:7e:b0:
b4:1d:7f:ad:f0:00:61:75:73:1a:d3:d9:81:cf:8f:
a6:24:88:bb:2f:4b:0f:09:73:74:a6:48:90:0b:ee:
4a:ed:a1:b7:cc:a9:af:ed:8a:59:89:50:2a:0a:9f:
4e:3b:93:0e:a5:f5:4b:fa:b0:68:89:33:95:ce:5c:
11:6d:25:09:d9:b2:f4:15:b4:9f:0d:99:50:a3:4e:
fd:1c:2a:ee:e0:5f:55:ec:93:d7:c7:de:cf:ff:85:
55:a9:99:8f:c9:c2:e9:9f:c7:1d:85:e2:c4:df:da:
d1:53:3b:51:79:fa:41:19:14:95:1d:82:da:7a:38:
eb:79:b7:aa:ca:f9:95:da:67:21:e3:8e:59:14:4d:
19:a6:fd:1d:d0:b8:2b:8d:39:d9:91:68:84:dc:7a:
cc:ca:35:4c:8f:c9:74:95:a0:4d:f8:c6:88:e9:33:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:41:30:23:39:F7:C2:72:CE:91:BD:A7:F6:85:64:F0:6A:A9:9C
X509v3 Authority Key Identifier:
keyid:9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.48.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b9:b1:07:ae:bb:33:94:ff:16:54:74:7b:a6:65:65:44:8e:
08:e5:7a:56:b5:ba:de:14:ff:4f:1d:5e:ee:61:f6:4b:b3:a4:
4e:3a:cf:6f:fe:48:91:e5:dd:af:52:e2:31:5d:64:ac:a0:7a:
d2:f3:0e:25:16:b0:a2:69:98:ae:a5:bc:c8:a8:22:b8:38:8b:
eb:c3:9b:2d:18:af:88:7b:82:f7:18:f2:c7:14:60:b0:25:e7:
50:1b:7d:68:f2:97:1c:06:72:9c:45:fb:11:c9:ca:98:36:0d:
84:7d:eb:88:68:5e:f6:b2:9e:11:5f:d7:fc:c0:9a:bb:df:a5:
6e:c0:c2:78:9c:40:a5:8d:9a:8b:63:d6:32:af:67:e6:b9:01:
6a:6d:62:8b:1e:b8:aa:22:c6:b7:07:9d:76:5c:20:1e:99:0d:
80:91:75:0d:e4:55:64:2f:6b:26:b2:47:4f:83:48:94:5c:39:
e1:3b:70:28:ff:62:1d:fe:d0:98:9d:22:6c:b9:0e:f0:c9:68:
1b:d4:86:0a:a6:b8:46:c0:56:c6:09:63:75:0f:c8:7e:6a:0a:
e8:4e:6d:a6:6d:d0:3e:a4:c0:ec:f1:b4:a4:fd:16:80:e5:7c:
d7:9a:dd:3f:5d:bf:87:03:d4:b3:6c:11:27:68:8e:1e:66:f2:
3a:ff:e9:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnyz3zEFqfy5aryKoBymLkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMThhZWU4ZmU3MDM1NGY3NWVhNmRhYmY4OWVkOGY5NGI2
YTFlNTgwHhcNMjMwODE0MDY1MDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODQxNDEzMDIzMzlmN2MyNzJjZTkxYmRhN2Y2ODU2NGYwNmFhOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp2dBCjpIS8eQ4CUuTHTq01tlUw5
mPeWJXpRU32L83GdSyV1DEiuW0nkPjLIe2BWiYGnfRY/cDHjs/g099LiFuOOLGL8
Dyd+gJREqlovl19vKarA/2SufrC0HX+t8ABhdXMa09mBz4+mJIi7L0sPCXN0pkiQ
C+5K7aG3zKmv7YpZiVAqCp9OO5MOpfVL+rBoiTOVzlwRbSUJ2bL0FbSfDZlQo079
HCru4F9V7JPXx97P/4VVqZmPycLpn8cdheLE39rRUztRefpBGRSVHYLaejjrebeq
yvmV2mch445ZFE0Zpv0d0LgrjTnZkWiE3HrMyjVMj8l0laBN+MaI6TMhJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhBQTAjOffCcs6Rvaf2hWTwaqmcMB8GA1UdIwQY
MBaAFJ4Yruj+cDVPdeptq/ie2PlLah5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhpdTZQNXdOVTkxNm0yci1KN1ktVXRxSGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZGUxNTgtYjE5YS00OWViLWE2ZWMt
Mjg0ZWE0MjVlNDA1LzEvYUVGQk1DTTU5OEp5enBHOXBfYUZaUEJxcVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZGUxNTgtYjE5YS00OWViLWE2ZWMtMjg0ZWE0MjVlNDA1
LzEvbmhpdTZQNXdOVTkxNm0yci1KN1ktVXRxSGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1AYwMA0G
CSqGSIb3DQEBCwUAA4IBAQAqubEHrrszlP8WVHR7pmVlRI4I5XpWtbreFP9PHV7u
YfZLs6ROOs9v/kiR5d2vUuIxXWSsoHrS8w4lFrCiaZiupbzIqCK4OIvrw5stGK+I
e4L3GPLHFGCwJedQG31o8pccBnKcRfsRycqYNg2EfeuIaF72sp4RX9f8wJq736Vu
wMJ4nECljZqLY9Yyr2fmuQFqbWKLHriqIsa3B512XCAemQ2AkXUN5FVkL2smskdP
g0iUXDnhO3Ao/2Id/tCYnSJsuQ7wyWgb1IYKprhGwFbGCWN1D8h+agroTm2mbdA+
pMDs8bSk/RaA5XzXmt0/Xb+HA9SzbBEnaI4eZvI6/+m6
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:19 2025 by rpki-client