Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/S6DheFHkj7db9wE--jDz5CeowJo.roa
File: S6DheFHkj7db9wE--jDz5CeowJo.roa (raw, json)
Hash identifier: TIolXtMqpq+yKs/ibdP4TAETqyHmQZGHem1eStn0QlQ=
Subject key identifier: 4B:A0:E1:78:51:E4:8F:B7:5B:F7:01:3E:FA:30:F3:E4:27:A8:C0:9A
Certificate issuer: /CN=3ab79a94103c03e99b5201a798d338865be63574
Certificate serial: 01821F83BB69251D71B6F5664ABC91107AB0
Authority key identifier: 3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/S6DheFHkj7db9wE--jDz5CeowJo.roa
Signing time: Thu 21 Jul 2022 06:48:23 +0000
ROA not before: Thu 21 Jul 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.140.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:83:bb:69:25:1d:71:b6:f5:66:4a:bc:91:10:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab79a94103c03e99b5201a798d338865be63574
Validity
Not Before: Jul 21 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ba0e17851e48fb75bf7013efa30f3e427a8c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:71:af:9c:5d:ef:9b:a1:9f:78:36:9a:1c:
a9:1b:8f:7f:90:92:c1:db:9f:42:ed:4c:bd:87:14:
d4:6e:99:a4:31:08:44:3f:b5:67:6f:25:95:9b:3e:
f9:91:cb:c2:c9:48:1c:e6:b5:97:06:05:13:ca:e8:
0d:c3:40:78:81:69:0e:d1:a0:9f:86:cf:36:bd:f1:
35:fe:cd:02:ad:e1:65:02:36:94:ff:5d:2c:d3:aa:
e8:8e:a1:00:3b:d0:c3:e9:e7:17:d4:c7:26:68:b3:
29:88:af:57:fb:65:05:97:79:7a:24:19:11:57:dd:
2b:e5:98:7e:4b:fe:23:c9:c8:70:7c:21:09:f2:6c:
19:97:b0:80:9b:1a:26:12:3a:02:81:28:29:13:35:
0e:30:cc:47:d8:ee:7f:fd:d0:a3:38:46:2b:3a:8d:
19:ab:e0:f2:bf:80:97:9f:95:fe:dc:23:7e:c2:29:
3b:77:df:c2:5e:51:4b:07:dd:d8:fe:25:72:89:0e:
bf:8c:b4:89:77:db:7d:78:f8:2d:4c:62:95:9c:9d:
bc:c7:09:f6:69:df:26:2e:80:ea:f1:87:b8:36:d0:
46:cd:5f:04:0c:f3:73:1c:1f:76:3d:f4:f6:56:4a:
78:31:43:20:8b:50:0e:bf:e3:42:d7:a5:d7:b5:e4:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:E1:78:51:E4:8F:B7:5B:F7:01:3E:FA:30:F3:E4:27:A8:C0:9A
X509v3 Authority Key Identifier:
keyid:3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/S6DheFHkj7db9wE--jDz5CeowJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/OrealBA8A-mbUgGnmNM4hlvmNXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.173.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a7:79:27:a3:cb:f9:f9:73:88:57:31:a4:db:07:a9:27:ad:
5b:ce:1f:30:55:b9:89:9b:e1:90:28:c8:61:41:09:36:e8:ce:
d4:7e:f7:16:8e:fc:39:da:d6:0a:75:c5:76:a9:f8:36:3a:28:
24:4c:21:ab:1d:8b:26:37:10:8f:76:60:82:18:a8:11:91:e8:
46:9d:de:42:3a:26:84:17:cb:93:52:f1:64:8b:9f:9a:2a:b0:
37:dd:f6:ff:7e:11:35:f9:63:c3:83:de:0d:9d:62:5a:a0:d9:
1c:50:02:f1:1a:a0:f9:eb:ce:ab:cd:41:d6:05:3b:4a:b2:60:
70:2e:70:d5:ca:29:c9:fd:f0:fa:b3:b7:ca:74:e8:2e:93:d1:
85:64:30:5f:2c:dd:1e:0b:25:9e:fe:45:c0:06:11:6d:33:ff:
8c:04:11:f6:c2:9b:a9:7a:d3:ba:16:81:04:e9:4a:0a:f0:8f:
d7:38:93:74:af:b5:4e:a3:80:59:4d:01:65:08:1a:f4:5b:2a:
6f:5e:b7:05:6e:2f:c7:0b:7c:a5:89:b8:f3:33:ed:be:ea:2c:
7f:c8:35:e6:08:99:25:fd:c1:fc:56:3b:58:1a:7f:12:ec:ee:
c1:2e:12:5e:3f:7f:cd:45:05:62:4b:fa:55:71:3a:36:75:d0:
ed:38:a6:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIfg7tpJR1xtvVmSryREHqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYjc5YTk0MTAzYzAzZTk5YjUyMDFhNzk4ZDMzODg2NWJl
NjM1NzQwHhcNMjIwNzIxMDY0ODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmEwZTE3ODUxZTQ4ZmI3NWJmNzAxM2VmYTMwZjNlNDI3YThjMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt9xr5xd75uhn3g2mhypG49/kJLB
259C7Uy9hxTUbpmkMQhEP7VnbyWVmz75kcvCyUgc5rWXBgUTyugNw0B4gWkO0aCf
hs82vfE1/s0CreFlAjaU/10s06rojqEAO9DD6ecX1McmaLMpiK9X+2UFl3l6JBkR
V90r5Zh+S/4jychwfCEJ8mwZl7CAmxomEjoCgSgpEzUOMMxH2O5//dCjOEYrOo0Z
q+Dyv4CXn5X+3CN+wik7d9/CXlFLB93Y/iVyiQ6/jLSJd9t9ePgtTGKVnJ28xwn2
ad8mLoDq8Ye4NtBGzV8EDPNzHB92PfT2Vkp4MUMgi1AOv+NC16XXteSPaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEug4XhR5I+3W/cBPvow8+QnqMCaMB8GA1UdIwQY
MBaAFDq3mpQQPAPpm1IBp5jTOIZb5jV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JlYWxCQThBLW1iVWdHbm1OTTRobHZtTlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85MWRkNDEtMDA5MC00Njc5LTlkYmYt
ZWUzYjU4MWFhYTA3LzEvUzZEaGVGSGtqN2RiOXdFLS1qRHo1Q2Vvd0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85MWRkNDEtMDA5MC00Njc5LTlkYmYtZWUzYjU4MWFhYTA3
LzEvT3JlYWxCQThBLW1iVWdHbm1OTTRobHZtTlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYytMA0G
CSqGSIb3DQEBCwUAA4IBAQAJp3kno8v5+XOIVzGk2wepJ61bzh8wVbmJm+GQKMhh
QQk26M7UfvcWjvw52tYKdcV2qfg2OigkTCGrHYsmNxCPdmCCGKgRkehGnd5COiaE
F8uTUvFki5+aKrA33fb/fhE1+WPDg94NnWJaoNkcUALxGqD5686rzUHWBTtKsmBw
LnDVyinJ/fD6s7fKdOguk9GFZDBfLN0eCyWe/kXABhFtM/+MBBH2wpupetO6FoEE
6UoK8I/XOJN0r7VOo4BZTQFlCBr0WypvXrcFbi/HC3ylibjzM+2+6ix/yDXmCJkl
/cH8VjtYGn8S7O7BLhJeP3/NRQViS/pVcTo2ddDtOKYh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:06 2024 by rpki-client on console-fra.rpki-client.org