Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/eA6SPgmSKNrRAHmK-h2fTJ16bIw.roa
File: eA6SPgmSKNrRAHmK-h2fTJ16bIw.roa (raw, json)
Hash identifier: Yl7Bd+aZ4t+0RcfP3ORIicjbxC+fnE53ocZGl7qe2gs=
Subject key identifier: 78:0E:92:3E:09:92:28:DA:D1:00:79:8A:FA:1D:9F:4C:9D:7A:6C:8C
Certificate issuer: /CN=15d1c3fcd694456e325b2460aebc785c995585ea
Certificate serial: 08C71F6C
Authority key identifier: 15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/eA6SPgmSKNrRAHmK-h2fTJ16bIw.roa
Signing time: Sat 01 Jan 2022 02:51:34 +0000
ROA not before: Sat 01 Jan 2022 02:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.104.169.0/24 maxlen: 24
195.200.230.0/23 maxlen: 23
2001:67c:b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147267436 (0x8c71f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1c3fcd694456e325b2460aebc785c995585ea
Validity
Not Before: Jan 1 02:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=780e923e099228dad100798afa1d9f4c9d7a6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:56:da:ee:bd:8d:d3:ba:b4:21:6d:d4:04:
60:45:c6:6a:71:08:5a:af:97:c1:24:7b:0a:ac:b5:
f1:f3:a6:40:23:3f:46:98:24:04:63:d8:d3:e8:66:
c1:53:55:9c:33:8f:68:6b:f8:e8:4e:a7:34:21:45:
69:a7:cc:8a:f6:a4:c0:ce:bc:4c:0a:cd:3b:52:95:
7b:c1:03:e8:84:a3:6e:4a:8c:41:93:44:e0:e6:c5:
ac:bb:e7:9c:60:66:0a:b1:eb:b5:5e:4d:1c:d7:a9:
57:b5:38:c1:70:93:d5:bb:db:1d:ba:7e:74:5f:95:
a2:18:8f:45:72:e9:13:2e:94:91:34:43:94:67:7f:
eb:22:3c:58:9b:29:98:a2:e0:7c:d1:b4:f9:a5:b6:
25:91:98:01:ca:ea:9c:25:69:7f:01:f2:6d:e0:9a:
b6:66:b5:c4:86:45:bd:05:de:77:38:3c:f1:26:ce:
f4:3f:41:d5:58:ee:68:a4:ee:59:c5:da:05:8f:e6:
5a:a3:74:f0:f6:d9:09:68:fe:3e:10:03:56:a9:e9:
ef:e7:cb:83:3d:b4:dc:79:e9:6f:3f:e3:b6:d4:21:
7d:c0:50:6a:d2:3c:c1:61:e7:74:0b:ce:8d:10:78:
e0:a5:af:9e:09:75:fe:54:62:ba:9b:00:4a:f2:2c:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:92:3E:09:92:28:DA:D1:00:79:8A:FA:1D:9F:4C:9D:7A:6C:8C
X509v3 Authority Key Identifier:
keyid:15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/eA6SPgmSKNrRAHmK-h2fTJ16bIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.169.0/24
195.200.230.0/23
IPv6:
2001:67c:b4::/48
Signature Algorithm: sha256WithRSAEncryption
52:e1:5b:4e:c5:bb:35:12:60:be:b7:bb:25:6d:4f:6c:d5:3b:
d5:1e:90:c8:bd:51:17:14:f4:c8:a2:a9:95:cc:c7:53:53:af:
59:53:58:54:78:04:cf:53:4a:49:27:c7:4d:65:ab:fc:3b:de:
2e:d8:9f:fb:4d:27:b7:e5:c1:8c:4d:81:50:91:d5:d8:60:d1:
f4:f6:bd:a3:8d:92:ff:fc:df:33:a1:06:e7:9e:eb:e4:09:25:
db:77:b0:03:23:19:34:a6:35:47:5b:8e:46:a9:5b:b9:70:1a:
f3:ee:95:57:23:7d:37:19:1f:71:3e:ed:a4:6f:16:df:ac:7f:
b3:37:21:de:02:fd:ad:51:92:aa:e1:b6:d9:60:5d:25:e7:55:
51:1b:11:b1:b3:ec:d4:54:d5:23:6d:99:48:3c:83:93:c9:1c:
b4:7c:27:3b:8f:e6:7f:41:7d:f6:62:95:52:3f:9e:59:b6:fa:
27:54:90:f8:ab:18:ad:71:1b:a6:2c:2b:08:74:d6:4f:3e:e3:
bc:fd:4a:e2:0b:78:32:5e:1b:90:e0:0f:d3:f6:03:f3:36:df:
17:98:8c:50:76:c3:ac:fa:de:01:b1:ef:ec:84:38:42:3a:2e:
2e:35:9e:cd:d6:58:9c:db:74:3b:ec:8d:3f:2f:56:61:ea:ae:
80:84:bf:8e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIECMcfbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWQxYzNmY2Q2OTQ0NTZlMzI1YjI0NjBhZWJjNzg1Yzk5NTU4NWVhMB4XDTIyMDEw
MTAyNTEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzgwZTkyM2UwOTky
MjhkYWQxMDA3OThhZmExZDlmNGM5ZDdhNmM4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMetVtruvY3TurQhbdQEYEXGanEIWq+XwSR7Cqy18fOmQCM/
RpgkBGPY0+hmwVNVnDOPaGv46E6nNCFFaafMivakwM68TArNO1KVe8ED6ISjbkqM
QZNE4ObFrLvnnGBmCrHrtV5NHNepV7U4wXCT1bvbHbp+dF+VohiPRXLpEy6UkTRD
lGd/6yI8WJspmKLgfNG0+aW2JZGYAcrqnCVpfwHybeCatma1xIZFvQXedzg88SbO
9D9B1VjuaKTuWcXaBY/mWqN08PbZCWj+PhADVqnp7+fLgz203Hnpbz/jttQhfcBQ
atI8wWHndAvOjRB44KWvngl1/lRiupsASvIsKxcCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBR4DpI+CZIo2tEAeYr6HZ9MnXpsjDAfBgNVHSMEGDAWgBQV0cP81pRFbjJb
JGCuvHhcmVWF6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZkSERfTmFVUlc0eVd5Umdycng0WEpsVmhlby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvZWU3OTljLTFkYzUtNDgzYi04ZWMwLThmMmZhNDMxNjA5OC8x
L2VBNlNQZ21TS05yUkFIbUstaDJmVEoxNmJJdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
ZWU3OTljLTFkYzUtNDgzYi04ZWMwLThmMmZhNDMxNjA5OC8xL0ZkSERfTmFVUlc0
eVd5Umdycng0WEpsVmhlby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMFoqQMEAcPI5jAPBAIAAjAJAwcA
IAEGfAC0MA0GCSqGSIb3DQEBCwUAA4IBAQBS4VtOxbs1EmC+t7slbU9s1TvVHpDI
vVEXFPTIoqmVzMdTU69ZU1hUeATPU0pJJ8dNZav8O94u2J/7TSe35cGMTYFQkdXY
YNH09r2jjZL//N8zoQbnnuvkCSXbd7ADIxk0pjVHW45GqVu5cBrz7pVXI303GR9x
Pu2kbxbfrH+zNyHeAv2tUZKq4bbZYF0l51VRGxGxs+zUVNUjbZlIPIOTyRy0fCc7
j+Z/QX32YpVSP55ZtvonVJD4qxitcRumLCsIdNZPPuO8/UriC3gyXhuQ4A/T9gPz
Nt8XmIxQdsOs+t4Bse/shDhCOi4uNZ7N1lic23Q77I0/L1Zh6q6AhL+O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org