Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/AHn-spbUydmI9de2PYy8HlcMZfo.roa
File: AHn-spbUydmI9de2PYy8HlcMZfo.roa (raw, json)
Hash identifier: RA4lH6zO97nPMI+qx4ajc5QW/WGqAlTeJO3WuWqUqJE=
Subject key identifier: 00:79:FE:B2:96:D4:C9:D9:88:F5:D7:B6:3D:8C:BC:1E:57:0C:65:FA
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 01820584902D577BDCB4749724EDFE2D1DB8
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/AHn-spbUydmI9de2PYy8HlcMZfo.roa
Signing time: Sat 16 Jul 2022 05:39:09 +0000
ROA not before: Sat 16 Jul 2022 05:39:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:84:90:2d:57:7b:dc:b4:74:97:24:ed:fe:2d:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jul 16 05:39:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0079feb296d4c9d988f5d7b63d8cbc1e570c65fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:f8:09:52:9f:0b:69:d0:db:01:76:cf:62:
f0:e6:ff:72:24:3a:55:ad:44:3e:a9:aa:aa:1c:84:
9b:4e:5f:1b:9e:ed:75:45:b1:8d:3c:58:8a:74:c5:
41:ce:26:0c:d4:d2:c7:fa:03:49:50:2d:ae:cb:9c:
72:00:bf:55:77:a3:3f:35:60:dd:f2:08:42:c0:39:
74:6e:b1:b2:4c:ba:e2:87:34:15:cb:a5:f3:01:92:
74:fe:34:d6:36:a1:a5:82:3f:df:b9:3c:e8:05:49:
8e:05:01:b5:b3:9a:a5:81:79:f7:18:f4:72:5d:88:
ef:59:db:26:4f:d9:73:4c:71:43:c5:ce:bb:db:19:
c4:89:5d:83:ce:6c:b3:4f:84:43:bc:bd:64:e9:7c:
da:da:14:7e:8d:16:a2:50:62:eb:1b:25:79:8b:2b:
ef:02:45:12:03:93:89:75:7d:90:87:7c:97:05:3f:
19:c9:71:82:36:45:7c:60:f4:ec:6e:d4:22:b1:77:
e5:10:ca:30:35:62:b2:c0:d9:0b:92:d9:f7:f2:22:
92:e8:08:28:0a:da:f0:c8:43:10:07:7b:6b:08:bd:
41:ae:01:f0:73:da:26:da:40:c7:f8:22:dd:51:54:
19:01:f7:d2:f8:aa:3a:fe:d9:9b:c4:32:dd:e4:43:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:FE:B2:96:D4:C9:D9:88:F5:D7:B6:3D:8C:BC:1E:57:0C:65:FA
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/AHn-spbUydmI9de2PYy8HlcMZfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
1f:67:96:98:1c:1d:58:c7:8a:03:cf:e4:a4:5b:1d:6e:31:4a:
4f:a8:0a:ca:6a:97:0a:f5:09:98:fd:25:d5:63:16:ab:61:13:
4b:42:cd:f9:86:40:7b:8b:35:5d:60:1f:41:6b:74:1a:9b:17:
f4:51:fb:1b:cb:04:69:98:2e:47:fa:aa:df:4b:85:d6:a5:1c:
b1:5e:27:b2:15:e1:cd:69:90:37:f4:5a:70:a1:1f:9d:c7:c5:
15:5d:fd:eb:22:55:5b:ed:4a:70:5e:7b:2a:56:f6:93:54:e8:
ef:e8:f5:8f:ea:66:62:4c:0f:a6:af:e6:a2:84:dd:54:39:d6:
8a:8f:95:88:88:94:15:09:27:79:8a:a8:79:c9:ed:45:16:9c:
01:a8:f2:69:1b:aa:54:b9:63:41:78:9d:70:34:b7:31:81:29:
98:00:91:84:bc:67:a5:3a:0a:e6:29:8e:66:3e:95:74:68:6e:
f4:c3:37:77:f0:dd:90:16:13:fa:56:5c:4a:6f:c8:fe:09:82:
92:07:ae:b0:2b:de:c0:64:78:e5:af:b1:b6:9b:c6:1a:31:f1:
7a:3d:9b:af:06:af:a4:86:58:53:ce:22:1c:64:c1:0d:5c:63:
9b:09:f5:04:31:03:bf:ec:fd:49:d7:a5:16:98:07:08:13:b7:
f2:f7:23:13
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYIFhJAtV3vctHSXJO3+LR24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWIzNWIwODQ2MDhjZDFjMjU5NGJiYWE1ZTQ2OTM3NjAw
NTAwMzcwHhcNMjIwNzE2MDUzOTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDc5ZmViMjk2ZDRjOWQ5ODhmNWQ3YjYzZDhjYmMxZTU3MGM2NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4D4CVKfC2nQ2wF2z2Lw5v9yJDpV
rUQ+qaqqHISbTl8bnu11RbGNPFiKdMVBziYM1NLH+gNJUC2uy5xyAL9Vd6M/NWDd
8ghCwDl0brGyTLrihzQVy6XzAZJ0/jTWNqGlgj/fuTzoBUmOBQG1s5qlgXn3GPRy
XYjvWdsmT9lzTHFDxc672xnEiV2DzmyzT4RDvL1k6Xza2hR+jRaiUGLrGyV5iyvv
AkUSA5OJdX2Qh3yXBT8ZyXGCNkV8YPTsbtQisXflEMowNWKywNkLktn38iKS6Ago
CtrwyEMQB3trCL1BrgHwc9om2kDH+CLdUVQZAffS+Ko6/tmbxDLd5EMpLwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAB5/rKW1MnZiPXXtj2MvB5XDGX6MB8GA1UdIwQY
MBaAFPabNbCEYIzRwllLuqXkaTdgBQA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODct
NjQ1MDk4NTEyOWFhLzEvQUhuLXNwYlV5ZG1JOWRlMlBZeThIbGNNWmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82ZDM4ZWUtMGNhNi00ZTFmLTlhODctNjQ1MDk4NTEyOWFh
LzEvOXBzMXNJUmdqTkhDV1V1NnBlUnBOMkFGQURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBQLvQMA0E
AgACMAcDBQMqBqNAMA0GCSqGSIb3DQEBCwUAA4IBAQAfZ5aYHB1Yx4oDz+SkWx1u
MUpPqArKapcK9QmY/SXVYxarYRNLQs35hkB7izVdYB9Ba3Qamxf0UfsbywRpmC5H
+qrfS4XWpRyxXieyFeHNaZA39FpwoR+dx8UVXf3rIlVb7UpwXnsqVvaTVOjv6PWP
6mZiTA+mr+aihN1UOdaKj5WIiJQVCSd5iqh5ye1FFpwBqPJpG6pUuWNBeJ1wNLcx
gSmYAJGEvGelOgrmKY5mPpV0aG70wzd38N2QFhP6VlxKb8j+CYKSB66wK97AZHjl
r7G2m8YaMfF6PZuvBq+khlhTziIcZMENXGObCfUEMQO/7P1J16UWmAcIE7fy9yMT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org