Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_MR9OVEptFgASgkCkibSgHctuLk.roa
File: _MR9OVEptFgASgkCkibSgHctuLk.roa (raw, json)
Hash identifier: V0TyLlRTzt1f3T0BMsOilXlebtB9bB46nB6kaIK4O/g=
Subject key identifier: FC:C4:7D:39:51:29:B4:58:00:4A:09:02:92:26:D2:80:77:2D:B8:B9
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 042E5E2F
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_MR9OVEptFgASgkCkibSgHctuLk.roa
Signing time: Mon 04 Jul 2022 19:44:25 +0000
ROA not before: Mon 04 Jul 2022 19:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 84.252.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70147631 (0x42e5e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 4 19:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcc47d395129b458004a09029226d280772db8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:4b:05:79:50:54:4b:06:8a:94:5e:f8:12:
e8:97:70:92:d1:3c:fa:1f:bd:e0:4c:12:24:f4:94:
cf:76:62:0e:fc:08:cb:3b:11:d9:fd:d1:2c:68:fd:
b5:7b:ad:ba:83:c7:08:d4:aa:36:46:a9:c6:20:20:
0c:72:86:58:e5:a7:67:5c:23:a8:b4:f6:c9:1b:4b:
5f:93:45:90:81:d7:59:8b:0a:c5:7c:96:b3:fe:a1:
22:c9:8b:9d:74:7f:7b:19:79:b9:99:7c:bd:6f:a7:
32:24:9f:85:f6:9e:ed:84:82:08:d9:7b:67:6a:b5:
f5:cd:76:a7:37:8b:ba:56:a4:84:17:60:f4:55:12:
2b:63:61:a6:6f:4d:ca:4b:cd:2a:7b:37:59:7a:9b:
f8:28:c6:21:47:fe:2b:15:e4:23:7a:35:09:e0:a5:
43:6a:fe:04:09:ae:92:0e:a4:f9:db:1f:97:ab:9e:
a0:03:31:c5:72:3b:31:85:7c:ce:65:91:65:92:1b:
44:30:a8:bb:ea:97:29:aa:69:d0:a7:4a:da:3d:c7:
8f:f6:64:e4:f9:60:e3:d2:d6:67:84:a2:ec:25:57:
d4:5d:a0:5f:35:8a:36:bf:3c:cd:3e:10:fc:13:b9:
48:90:b5:06:8a:a7:eb:58:9d:16:a1:cd:70:30:15:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C4:7D:39:51:29:B4:58:00:4A:09:02:92:26:D2:80:77:2D:B8:B9
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/_MR9OVEptFgASgkCkibSgHctuLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.64.0/22
Signature Algorithm: sha256WithRSAEncryption
da:51:6a:3c:b2:fc:cb:fb:e3:bb:43:ab:d3:a6:36:66:39:86:
27:91:a0:97:29:04:b1:c6:9c:33:61:55:c6:b8:54:f9:fe:bf:
2e:10:3e:ef:9e:e1:99:bf:5e:bc:eb:bd:72:ea:bf:96:4a:44:
b4:ca:ca:db:c8:39:58:af:e9:eb:9b:72:21:02:a7:ab:76:7b:
44:9c:0e:30:ea:a7:62:7d:d6:fe:9e:94:8c:29:aa:d0:ba:e8:
b2:ad:0b:40:b6:5d:cf:c8:1e:55:aa:bc:93:27:94:3a:31:14:
02:3c:a1:bf:ac:09:74:5f:7b:fb:e4:40:55:af:cc:93:2b:33:
d7:cd:95:ef:8f:6b:6b:60:2f:80:31:71:25:ba:8d:db:e9:76:
72:ad:9c:c5:5b:c3:27:12:f9:9a:84:21:48:7d:4d:03:e6:62:
34:48:82:16:b0:06:ba:9a:ef:a3:2c:24:4b:fd:51:dd:87:c2:
23:7d:08:5d:45:c0:11:02:55:c9:cf:2f:d2:12:39:34:13:db:
f8:d8:61:f1:0f:20:24:92:05:36:76:85:ed:ad:80:dd:4f:a9:
fd:4f:15:a1:7d:51:7d:e3:dd:b5:8d:09:90:a8:da:60:c1:15:
fa:60:4b:0c:77:eb:85:a4:f7:98:7a:37:44:c2:3a:68:74:84:
23:4f:29:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBC5eLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDcw
NDE5NDQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNjNDdkMzk1MTI5
YjQ1ODAwNGEwOTAyOTIyNmQyODA3NzJkYjhiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/hSwV5UFRLBoqUXvgS6JdwktE8+h+94EwSJPSUz3ZiDvwI
yzsR2f3RLGj9tXutuoPHCNSqNkapxiAgDHKGWOWnZ1wjqLT2yRtLX5NFkIHXWYsK
xXyWs/6hIsmLnXR/exl5uZl8vW+nMiSfhfae7YSCCNl7Z2q19c12pzeLulakhBdg
9FUSK2Nhpm9NykvNKns3WXqb+CjGIUf+KxXkI3o1CeClQ2r+BAmukg6k+dsfl6ue
oAMxxXI7MYV8zmWRZZIbRDCou+qXKapp0KdK2j3Hj/Zk5Plg49LWZ4Si7CVX1F2g
XzWKNr88zT4Q/BO5SJC1Boqn61idFqHNcDAVcusCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT8xH05USm0WABKCQKSJtKAdy24uTAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L19NUjlPVkVwdEZnQVNna0NraWJTZ0hjdHVMay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlT8QDANBgkqhkiG9w0BAQsFAAOC
AQEA2lFqPLL8y/vju0Or06Y2ZjmGJ5GglykEscacM2FVxrhU+f6/LhA+757hmb9e
vOu9cuq/lkpEtMrK28g5WK/p65tyIQKnq3Z7RJwOMOqnYn3W/p6UjCmq0Lrosq0L
QLZdz8geVaq8kyeUOjEUAjyhv6wJdF97++RAVa/Mkysz182V749ra2AvgDFxJbqN
2+l2cq2cxVvDJxL5moQhSH1NA+ZiNEiCFrAGuprvoywkS/1R3YfCI30IXUXAEQJV
yc8v0hI5NBPb+Nhh8Q8gJJIFNnaF7a2A3U+p/U8VoX1RfePdtY0JkKjaYMEV+mBL
DHfrhaT3mHo3RMI6aHSEI08pRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:44 2024 by rpki-client on console-ams.rpki-client.org