Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/KT51obIKEQF_LTy8_759ArmErJc.roa
File: KT51obIKEQF_LTy8_759ArmErJc.roa (raw, json)
Hash identifier: margMdKeOZNZLI2RiyFJgXUqc1TfSjGDzjSFie70Fh0=
Subject key identifier: 29:3E:75:A1:B2:0A:11:01:7F:2D:3C:BC:FF:BE:7D:02:B9:84:AC:97
Certificate issuer: /CN=7500905a8bd301328d081485c0334c37408ab572
Certificate serial: 02356EDA
Authority key identifier: 75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/KT51obIKEQF_LTy8_759ArmErJc.roa
Signing time: Sat 01 Jan 2022 10:54:28 +0000
ROA not before: Sat 01 Jan 2022 10:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 92.249.60.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37056218 (0x2356eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7500905a8bd301328d081485c0334c37408ab572
Validity
Not Before: Jan 1 10:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=293e75a1b20a11017f2d3cbcffbe7d02b984ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:ba:4e:03:37:d9:2e:b6:f2:88:65:e9:61:
de:13:43:ab:73:5a:43:ea:90:8a:64:01:02:44:6b:
a4:b7:79:69:c5:a9:0e:a0:cc:9f:3a:0d:a0:94:f1:
c4:86:52:a2:af:a5:f9:72:4f:79:8e:00:02:4a:6d:
bd:09:73:d0:60:e2:ca:ce:7d:57:dd:b8:85:62:b7:
59:5b:e9:e3:32:bc:ba:88:73:4c:c5:6c:2b:7a:3c:
88:a7:8b:f5:9e:db:b3:30:15:5c:4c:d5:68:25:84:
ad:0d:ac:27:43:99:c1:99:d5:00:d5:3b:d0:bb:cf:
b3:64:1b:e7:5b:2b:4a:ad:23:34:50:90:e3:10:37:
a4:9e:54:bc:b0:49:88:82:8b:c2:2b:6b:41:58:d9:
ae:f7:ed:e7:f9:01:98:93:39:72:ec:9a:35:b1:2e:
03:f3:46:86:e0:94:8a:de:15:28:69:bd:1e:ae:3d:
f4:34:36:bb:92:74:8c:6c:8d:72:48:4a:fc:1a:53:
32:83:91:4a:07:19:b4:66:ad:ad:16:63:26:11:db:
91:54:5f:5e:16:8d:44:ef:36:4f:19:f1:25:7a:16:
eb:5a:c9:52:e5:1f:eb:f8:d9:12:5f:e1:bb:fe:ce:
07:a4:96:5e:40:73:99:7d:26:ce:df:f0:fc:5a:34:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:75:A1:B2:0A:11:01:7F:2D:3C:BC:FF:BE:7D:02:B9:84:AC:97
X509v3 Authority Key Identifier:
keyid:75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/KT51obIKEQF_LTy8_759ArmErJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/22
Signature Algorithm: sha256WithRSAEncryption
87:45:c7:ff:2d:c2:3f:39:d1:5e:61:72:68:a2:d6:5e:0b:c0:
6e:09:fd:cc:24:ff:ac:4f:76:23:ae:aa:ee:b8:47:e7:bf:7c:
79:c7:21:ec:85:27:47:c1:ad:ff:a2:c9:d2:3a:5d:80:72:e1:
55:47:a7:08:d3:eb:55:73:07:89:d3:64:47:5c:cb:b1:eb:ce:
7a:62:eb:a7:24:a8:97:8e:ca:52:fa:ef:2f:a5:4b:0f:58:de:
fe:d9:1f:7c:86:d5:46:39:5a:7f:5c:d3:d7:cf:31:a3:79:e2:
2b:28:0b:d8:72:32:b7:80:17:84:50:ae:45:94:c1:8b:ba:a6:
b5:f3:59:75:a8:c6:a9:ef:3d:be:a0:e4:53:01:c4:64:73:e2:
56:a5:27:f9:6e:9e:a2:d7:5a:b7:29:e3:8d:06:ba:d4:72:e6:
61:8c:08:c8:72:84:c9:15:39:a1:66:55:9c:1d:a1:e1:b4:e7:
16:ab:15:0e:5c:29:11:ed:6f:3a:b0:27:1e:aa:8a:9c:1c:73:
87:a9:af:03:10:bd:44:02:ee:93:73:70:a6:e2:d6:1a:e0:df:
25:db:40:16:fa:ab:dc:4c:f4:48:35:85:69:d9:78:1b:36:de:
51:fb:4a:1c:1e:5d:fe:40:d4:0a:a8:e0:84:d8:22:e6:4b:2b:
f2:94:e4:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjVu2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTAwOTA1YThiZDMwMTMyOGQwODE0ODVjMDMzNGMzNzQwOGFiNTcyMB4XDTIyMDEw
MTEwNTQyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjkzZTc1YTFiMjBh
MTEwMTdmMmQzY2JjZmZiZTdkMDJiOTg0YWM5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTpuk4DN9kutvKIZelh3hNDq3NaQ+qQimQBAkRrpLd5acWp
DqDMnzoNoJTxxIZSoq+l+XJPeY4AAkptvQlz0GDiys59V924hWK3WVvp4zK8uohz
TMVsK3o8iKeL9Z7bszAVXEzVaCWErQ2sJ0OZwZnVANU70LvPs2Qb51srSq0jNFCQ
4xA3pJ5UvLBJiIKLwitrQVjZrvft5/kBmJM5cuyaNbEuA/NGhuCUit4VKGm9Hq49
9DQ2u5J0jGyNckhK/BpTMoORSgcZtGatrRZjJhHbkVRfXhaNRO82TxnxJXoW61rJ
UuUf6/jZEl/hu/7OB6SWXkBzmX0mzt/w/Fo0eukCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQpPnWhsgoRAX8tPLz/vn0CuYSslzAfBgNVHSMEGDAWgBR1AJBai9MBMo0I
FIXAM0w3QIq1cjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RRQ1FXb3ZUQVRLTkNCU0Z3RE5NTjBDS3RYSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2EvNGE4NTRjLTBlMmItNDVhZi05M2JkLTM3Y2I2ZGFjNzIzNy8x
L0tUNTFvYklLRVFGX0xUeThfNzU5QXJtRXJKYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Ev
NGE4NTRjLTBlMmItNDVhZi05M2JkLTM3Y2I2ZGFjNzIzNy8xL2RRQ1FXb3ZUQVRL
TkNCU0Z3RE5NTjBDS3RYSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlz5PDANBgkqhkiG9w0BAQsFAAOC
AQEAh0XH/y3CPznRXmFyaKLWXgvAbgn9zCT/rE92I66q7rhH5798ecch7IUnR8Gt
/6LJ0jpdgHLhVUenCNPrVXMHidNkR1zLsevOemLrpySol47KUvrvL6VLD1je/tkf
fIbVRjlaf1zT188xo3niKygL2HIyt4AXhFCuRZTBi7qmtfNZdajGqe89vqDkUwHE
ZHPiVqUn+W6eotdatynjjQa61HLmYYwIyHKEyRU5oWZVnB2h4bTnFqsVDlwpEe1v
OrAnHqqKnBxzh6mvAxC9RALuk3NwpuLWGuDfJdtAFvqr3Ez0SDWFadl4GzbeUftK
HB5d/kDUCqjghNgi5ksr8pTk1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org