Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa
File: x-kliemXvGkBoPELlrwO0lnaGV4.roa (raw, json)
Hash identifier: mF1khZOeryluexH7loSnj6qDIDqyOKxMeOwomet63eE=
Subject key identifier: C7:E9:25:89:E9:97:BC:69:01:A0:F1:0B:96:BC:0E:D2:59:DA:19:5E
Certificate issuer: /CN=b14c73d37f47d87711b6c39c450d21356afc9a57
Certificate serial: 01851A75F15C2AC229CE5B041C3ADF94B746
Authority key identifier: B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa
Signing time: Fri 16 Dec 2022 10:23:35 +0000
ROA not before: Fri 16 Dec 2022 10:23:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200924
IP address blocks: 185.6.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:75:f1:5c:2a:c2:29:ce:5b:04:1c:3a:df:94:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14c73d37f47d87711b6c39c450d21356afc9a57
Validity
Not Before: Dec 16 10:23:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e92589e997bc6901a0f10b96bc0ed259da195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:58:da:bd:47:66:e6:2a:e4:bd:85:cd:47:
22:a6:1a:37:cd:5a:2b:51:d3:aa:5d:c9:44:05:1b:
f9:10:30:5a:d4:17:78:25:dd:39:67:ba:f2:f8:a7:
d6:82:55:78:63:78:bf:cb:96:b2:af:c8:1f:cd:61:
78:61:3c:ea:3c:5e:5c:93:8f:f2:68:2d:68:38:d3:
68:a5:36:f3:04:36:9b:f5:fd:54:38:52:51:96:bd:
4d:00:ed:34:30:be:e6:54:f4:0f:7f:07:05:d7:33:
c4:59:99:9b:7d:8d:fe:2c:19:4d:45:d5:38:89:d2:
0e:8c:03:b9:7d:97:ce:d3:e0:c7:7c:03:1a:57:4e:
f9:80:4a:e7:d1:cd:61:41:08:1c:55:5d:4d:55:af:
dc:6c:41:c8:73:dc:36:9f:b9:2b:24:b1:5c:77:14:
3d:4a:a8:3b:f8:e4:24:ae:54:a4:0e:cf:c1:bc:09:
05:ba:ad:d1:7d:97:2a:1e:88:c6:66:e4:c8:c4:d2:
66:02:92:87:a5:40:7b:77:0d:05:8c:40:35:64:08:
93:f6:50:f8:c1:27:a0:65:d0:8a:b5:84:ce:2a:98:
da:12:3b:aa:bc:72:8e:51:23:8e:c0:15:96:f1:4e:
e2:f1:a7:91:1a:6a:98:42:b2:b7:d5:ce:8f:1c:56:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:25:89:E9:97:BC:69:01:A0:F1:0B:96:BC:0E:D2:59:DA:19:5E
X509v3 Authority Key Identifier:
keyid:B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/x-kliemXvGkBoPELlrwO0lnaGV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.120.0/22
Signature Algorithm: sha256WithRSAEncryption
04:9d:f1:d2:cd:27:b3:2e:fd:3c:c3:1a:44:7d:92:3f:5f:56:
6b:89:44:81:39:30:fc:8c:bd:22:c1:73:7b:cb:1e:97:95:3c:
b5:63:da:16:31:12:29:93:20:d9:c6:d7:8a:87:85:25:60:25:
a9:be:ba:a8:8c:ab:60:11:c4:d7:8b:02:15:19:97:d6:14:fc:
29:91:1b:3d:cc:ac:ab:af:6c:fd:a1:3a:99:13:94:de:8f:19:
c1:de:8a:e1:05:79:a2:33:6f:9c:6c:3b:41:51:c9:b2:71:e9:
ce:24:60:da:f6:62:89:20:e9:f9:17:05:0b:c2:e3:51:83:0e:
35:e1:87:d8:cb:48:80:82:5b:b8:7c:8b:9e:ed:0d:9d:b9:56:
e0:29:d3:6f:3f:fa:bb:3a:60:86:12:bb:aa:08:14:fe:8a:b8:
ff:ec:86:d5:bb:a2:58:ff:38:80:0d:ae:d6:cb:45:a3:37:94:
40:01:f8:4b:7d:19:23:5f:2f:d1:8e:44:64:09:6f:81:60:c8:
d1:37:18:34:e2:d2:2f:3a:9f:8d:b7:9a:57:4a:bd:ca:b9:cf:
82:64:96:b7:be:49:3a:de:d8:ed:ed:e4:0b:47:45:7e:e1:04:
e6:7c:4f:6a:bf:e9:f9:5d:77:79:4c:c8:a8:a1:9e:54:03:f7:
29:5e:48:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUadfFcKsIpzlsEHDrflLdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGM3M2QzN2Y0N2Q4NzcxMWI2YzM5YzQ1MGQyMTM1NmFm
YzlhNTcwHhcNMjIxMjE2MTAyMzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2U5MjU4OWU5OTdiYzY5MDFhMGYxMGI5NmJjMGVkMjU5ZGExOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TFY2r1HZuYq5L2FzUcipho3zVor
UdOqXclEBRv5EDBa1Bd4Jd05Z7ry+KfWglV4Y3i/y5ayr8gfzWF4YTzqPF5ck4/y
aC1oONNopTbzBDab9f1UOFJRlr1NAO00ML7mVPQPfwcF1zPEWZmbfY3+LBlNRdU4
idIOjAO5fZfO0+DHfAMaV075gErn0c1hQQgcVV1NVa/cbEHIc9w2n7krJLFcdxQ9
Sqg7+OQkrlSkDs/BvAkFuq3RfZcqHojGZuTIxNJmApKHpUB7dw0FjEA1ZAiT9lD4
wSegZdCKtYTOKpjaEjuqvHKOUSOOwBWW8U7i8aeRGmqYQrK31c6PHFYoaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfpJYnpl7xpAaDxC5a8DtJZ2hleMB8GA1UdIwQY
MBaAFLFMc9N/R9h3EbbDnEUNITVq/JpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1V4ejAzOUgySGNSdHNPY1JRMGhOV3I4bWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZDU1YzgtNTVhYS00NzFmLWEzZWMt
MjdjODRkNTZiMDA4LzEveC1rbGllbVh2R2tCb1BFTGxyd08wbG5hR1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82ZDU1YzgtNTVhYS00NzFmLWEzZWMtMjdjODRkNTZiMDA4
LzEvc1V4ejAzOUgySGNSdHNPY1JRMGhOV3I4bWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQZ4MA0G
CSqGSIb3DQEBCwUAA4IBAQAEnfHSzSezLv08wxpEfZI/X1ZriUSBOTD8jL0iwXN7
yx6XlTy1Y9oWMRIpkyDZxteKh4UlYCWpvrqojKtgEcTXiwIVGZfWFPwpkRs9zKyr
r2z9oTqZE5TejxnB3orhBXmiM2+cbDtBUcmycenOJGDa9mKJIOn5FwULwuNRgw41
4YfYy0iAglu4fIue7Q2duVbgKdNvP/q7OmCGEruqCBT+irj/7IbVu6JY/ziADa7W
y0WjN5RAAfhLfRkjXy/RjkRkCW+BYMjRNxg04tIvOp+Nt5pXSr3Kuc+CZJa3vkk6
3tjt7eQLR0V+4QTmfE9qv+n5XXd5TMiooZ5UA/cpXkic
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:49 2024 by rpki-client on console-fra.rpki-client.org