Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa
File: y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa (raw, json)
Hash identifier: bNcrkainz5RHeXvJqBbYP2TxUyzDrQiRicAqavxrCCI=
Subject key identifier: CB:AA:90:34:9F:A2:EA:97:FE:43:6A:B4:A3:B7:D2:A4:D7:6D:A2:8A
Certificate issuer: /CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
Certificate serial: 018CC348C5B006AB9D9559B4CE8708373B48
Authority key identifier: DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199081
IP address blocks: 195.35.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c5:b0:06:ab:9d:95:59:b4:ce:87:08:37:3b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbaa90349fa2ea97fe436ab4a3b7d2a4d76da28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:40:19:ae:4d:22:c9:cd:25:3a:5f:c2:92:
6e:a2:70:8e:4b:0f:f8:6c:60:9b:44:d7:99:ce:5f:
f7:65:cc:4d:59:61:63:65:bd:17:04:d3:13:24:2b:
d0:9d:67:80:28:14:de:d0:3e:f8:45:d9:2f:27:cc:
df:bc:b6:eb:1c:0f:41:42:2c:f5:54:96:26:4d:f4:
d4:a7:7b:09:54:04:6b:ea:dd:b4:52:49:32:4d:ac:
1e:58:30:7f:3c:72:ae:3b:1e:4d:11:dd:d8:cf:9c:
cd:f2:20:1a:98:d1:d6:a2:5b:f6:6c:74:22:59:2d:
96:a9:70:c9:00:84:4e:f5:f8:65:38:0f:79:ab:f4:
bf:30:d2:64:2b:7b:e6:3a:0b:f0:7e:a7:f1:8d:6b:
fb:e6:c8:e2:7b:9f:10:77:f9:57:a1:e1:d4:b6:c4:
d9:7c:69:f7:a0:32:3b:74:c5:4c:ad:72:c2:d6:5f:
cf:24:43:a9:d5:84:53:44:a2:7f:da:d3:f3:08:7a:
c0:a1:56:47:d3:62:b0:19:01:0f:bb:ad:9b:78:d1:
d9:0c:d9:7b:20:31:bd:58:51:68:1c:42:ea:7b:71:
6a:6f:dd:e6:fb:4e:66:cf:f8:f4:af:52:72:51:e7:
96:81:43:48:35:95:a5:49:47:74:d5:c0:b8:74:2e:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:90:34:9F:A2:EA:97:FE:43:6A:B4:A3:B7:D2:A4:D7:6D:A2:8A
X509v3 Authority Key Identifier:
keyid:DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:25:51:64:f9:73:00:a4:51:69:e2:02:6f:79:a7:9b:63:73:
11:6f:a4:fd:d7:64:bd:70:46:0b:ff:98:d3:fc:a7:db:67:e4:
3e:7b:bc:ac:2b:df:1d:90:d4:3e:bf:c3:f1:66:0c:e6:24:46:
50:d2:82:8d:df:c3:fb:1f:ea:98:41:13:df:62:14:68:a7:07:
c2:d4:f7:af:88:63:25:4e:50:14:0f:4f:e7:72:c4:66:a5:bf:
63:f0:54:56:ae:38:30:cb:ed:f8:8c:9d:c0:d5:82:66:31:cb:
9d:34:08:4d:3a:a8:e7:72:68:b4:b6:3d:65:d1:e2:60:09:4d:
b6:51:89:82:bd:08:fd:ce:8c:06:71:30:5c:ca:84:8e:46:8f:
fe:5c:7c:92:7b:ff:b4:ec:56:a7:23:30:5a:24:3b:1b:a2:fd:
1b:c8:a8:e3:11:ac:a8:e6:1f:a3:a5:5b:15:dd:65:4e:37:1a:
03:0e:c1:16:f6:8d:2a:73:d1:b4:a0:46:d8:74:0b:d9:6c:23:
67:2a:eb:23:da:1e:ad:af:40:1c:4f:41:eb:2b:ea:51:13:36:
22:f8:6e:17:bc:b2:8d:91:ea:5f:a4:46:77:38:f5:0e:7a:0c:
19:4c:f6:4a:32:8d:0d:d7:46:b3:5c:a2:1d:95:4f:87:7e:8e:
7a:08:ee:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSMWwBqudlVm0zocINztIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTljYzQ4Zjc1NTI1NmVmNTI1NGZiYTFkMWI5ZmI2YmFm
ZjkxYTAwHhcNMjQwMTAxMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmFhOTAzNDlmYTJlYTk3ZmU0MzZhYjRhM2I3ZDJhNGQ3NmRhMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3hAGa5NIsnNJTpfwpJuonCOSw/4
bGCbRNeZzl/3ZcxNWWFjZb0XBNMTJCvQnWeAKBTe0D74RdkvJ8zfvLbrHA9BQiz1
VJYmTfTUp3sJVARr6t20UkkyTaweWDB/PHKuOx5NEd3Yz5zN8iAamNHWolv2bHQi
WS2WqXDJAIRO9fhlOA95q/S/MNJkK3vmOgvwfqfxjWv75sjie58Qd/lXoeHUtsTZ
fGn3oDI7dMVMrXLC1l/PJEOp1YRTRKJ/2tPzCHrAoVZH02KwGQEPu62beNHZDNl7
IDG9WFFoHELqe3Fqb93m+05mz/j0r1JyUeeWgUNINZWlSUd01cC4dC6CwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMuqkDSfouqX/kNqtKO30qTXbaKKMB8GA1UdIwQY
MBaAFNqpzEj3VSVu9SVPuh0bn7a6/5GgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2Qt
OGUwNDQwM2EzMjVhLzEveTZxUU5KLWk2cGYtUTJxMG83ZlNwTmR0b29vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2QtOGUwNDQwM2EzMjVh
LzEvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwyNcMA0G
CSqGSIb3DQEBCwUAA4IBAQCfJVFk+XMApFFp4gJveaebY3MRb6T912S9cEYL/5jT
/KfbZ+Q+e7ysK98dkNQ+v8PxZgzmJEZQ0oKN38P7H+qYQRPfYhRopwfC1PeviGMl
TlAUD0/ncsRmpb9j8FRWrjgwy+34jJ3A1YJmMcudNAhNOqjncmi0tj1l0eJgCU22
UYmCvQj9zowGcTBcyoSORo/+XHySe/+07FanIzBaJDsbov0byKjjEayo5h+jpVsV
3WVONxoDDsEW9o0qc9G0oEbYdAvZbCNnKusj2h6tr0AcT0HrK+pREzYi+G4XvLKN
kepfpEZ3OPUOegwZTPZKMo0N10azXKIdlU+Hfo56CO5m
-----END CERTIFICATE-----
Generated at Wed Mar 20 11:52:48 2024 by rpki-client on console-fra.rpki-client.org