Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/YUWvk1aq7nLYEy0fa665zh_CfNs.roa
File: YUWvk1aq7nLYEy0fa665zh_CfNs.roa (raw, json)
Hash identifier: 2bg1lGkq5273low3BkKiP3oyqh7wyNpbXDoNTKPGKJs=
Subject key identifier: 61:45:AF:93:56:AA:EE:72:D8:13:2D:1F:6B:AE:B9:CE:1F:C2:7C:DB
Certificate issuer: /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial: DA221E
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/YUWvk1aq7nLYEy0fa665zh_CfNs.roa
Signing time: Sat 01 Jan 2022 12:06:52 +0000
ROA not before: Sat 01 Jan 2022 12:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.103.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14295582 (0xda221e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Validity
Not Before: Jan 1 12:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6145af9356aaee72d8132d1f6baeb9ce1fc27cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:f2:50:e4:72:65:23:40:35:e4:4d:26:12:
c6:f6:9d:9c:4e:a5:96:5d:cc:51:44:68:f7:53:6c:
0b:67:d5:b4:0b:ac:c2:c6:cf:24:18:32:de:1f:4d:
e2:25:6a:60:8f:b4:e2:4d:96:9b:32:62:ec:4c:e6:
ef:21:0e:d6:89:bf:d7:e7:fa:ff:f8:c1:ee:70:4b:
8f:e3:06:76:04:ab:3f:d8:0d:09:2f:aa:16:77:fe:
a4:ce:20:c2:6d:fe:cc:80:d9:67:7c:9d:3c:1e:9b:
1f:34:4c:78:79:c4:09:57:4e:44:05:df:86:9b:5d:
be:19:ad:96:be:9c:48:ec:c2:fb:94:01:8a:dd:08:
ac:ea:df:2e:ca:9f:d9:77:ac:c3:9f:44:8b:0f:c3:
42:6a:13:91:05:bf:eb:4c:95:3b:ec:ce:64:95:f8:
d3:0d:f6:c6:c7:18:71:eb:b0:3b:47:b9:4f:bb:a0:
8b:de:ab:7a:9a:b1:59:7e:50:8b:bd:af:b0:71:90:
35:cb:a2:65:fa:7c:0a:90:4c:5b:ea:f6:d7:f6:13:
0e:5d:b2:37:0a:51:69:fe:c3:57:48:b5:e4:f5:7c:
2a:1d:5a:36:0f:3a:91:e5:dc:67:83:bf:65:ae:fa:
99:b6:cf:aa:fa:09:7a:a3:50:b0:e0:eb:74:37:12:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:AF:93:56:AA:EE:72:D8:13:2D:1F:6B:AE:B9:CE:1F:C2:7C:DB
X509v3 Authority Key Identifier:
keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/YUWvk1aq7nLYEy0fa665zh_CfNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9d:c7:45:08:fe:9c:fe:26:8c:42:23:e6:68:9b:66:cc:b1:
8d:f7:3d:a9:77:cf:ad:ea:46:2b:50:ed:e0:10:78:59:5e:60:
d9:ec:8b:3a:2a:77:a8:b8:f1:f7:e1:7d:a5:81:60:94:e9:47:
75:88:04:6b:5a:af:89:4e:d9:25:39:2c:2b:d6:71:33:2e:23:
80:95:d6:6b:cf:71:39:a9:05:43:b6:fd:48:f3:01:22:9b:72:
68:ca:c1:38:20:0a:c4:75:9d:0d:6d:cd:07:90:75:39:45:af:
22:4b:9d:ab:38:f6:8d:f2:9f:c7:60:84:12:6b:f4:5d:ab:3d:
b4:22:65:9a:ee:cc:de:7e:cb:5a:61:e0:20:4d:32:a9:f1:e9:
62:96:bf:0c:54:aa:69:40:5b:c6:6e:77:d9:cb:c9:1e:8a:ae:
70:ba:98:4a:5d:7b:74:cb:76:c6:1f:11:d4:69:f8:14:ec:79:
4b:29:c6:a7:be:a4:2f:a7:d7:bc:0c:f2:5a:d4:9a:c0:9c:6f:
86:28:48:43:8e:f3:ca:59:42:98:f1:5a:0b:36:c9:00:12:4f:
40:a2:b9:a2:a2:19:c4:3a:94:4d:cd:2b:d2:ba:b5:d5:bc:51:
f9:49:88:4b:e8:a9:69:60:d0:67:a9:f1:f4:eb:cd:7f:fc:5a:
47:9b:7c:94
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANoiHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWUxNDZhZmNiNmU5Njg2OGExY2Q4MzdkZTQ2Y2IxODQ4OTJkYzI4MB4XDTIyMDEw
MTEyMDY1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjE0NWFmOTM1NmFh
ZWU3MmQ4MTMyZDFmNmJhZWI5Y2UxZmMyN2NkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMe+8lDkcmUjQDXkTSYSxvadnE6lll3MUURo91NsC2fVtAus
wsbPJBgy3h9N4iVqYI+04k2WmzJi7Ezm7yEO1om/1+f6//jB7nBLj+MGdgSrP9gN
CS+qFnf+pM4gwm3+zIDZZ3ydPB6bHzRMeHnECVdORAXfhptdvhmtlr6cSOzC+5QB
it0IrOrfLsqf2Xesw59Eiw/DQmoTkQW/60yVO+zOZJX40w32xscYceuwO0e5T7ug
i96repqxWX5Qi72vsHGQNcuiZfp8CpBMW+r21/YTDl2yNwpRaf7DV0i15PV8Kh1a
Ng86keXcZ4O/Za76mbbPqvoJeqNQsODrdDcSfw8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRhRa+TVqructgTLR9rrrnOH8J82zAfBgNVHSMEGDAWgBRa4Uavy26Whooc
2DfeRssYSJLcKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d1RkdyOHR1bG9hS0hOZzMza2JMR0VpUzNDZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvMGQ3NTlkLTM2ODItNDk0My04ODRjLWUzYmU1MzcwZjA4Zi8x
L1lVV3ZrMWFxN25MWUV5MGZhNjY1emhfQ2ZOcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
MGQ3NTlkLTM2ODItNDk0My04ODRjLWUzYmU1MzcwZjA4Zi8xL1d1RkdyOHR1bG9h
S0hOZzMza2JMR0VpUzNDZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5nujANBgkqhkiG9w0BAQsFAAOC
AQEAuJ3HRQj+nP4mjEIj5mibZsyxjfc9qXfPrepGK1Dt4BB4WV5g2eyLOip3qLjx
9+F9pYFglOlHdYgEa1qviU7ZJTksK9ZxMy4jgJXWa89xOakFQ7b9SPMBIptyaMrB
OCAKxHWdDW3NB5B1OUWvIkudqzj2jfKfx2CEEmv0Xas9tCJlmu7M3n7LWmHgIE0y
qfHpYpa/DFSqaUBbxm532cvJHoqucLqYSl17dMt2xh8R1Gn4FOx5SynGp76kL6fX
vAzyWtSawJxvhihIQ47zyllCmPFaCzbJABJPQKK5oqIZxDqUTc0r0rq11bxR+UmI
S+ipaWDQZ6nx9OvNf/xaR5t8lA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org