Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/aoQ4VY2ZEwpxfCN_sj_1GgIimTo.roa
File: aoQ4VY2ZEwpxfCN_sj_1GgIimTo.roa (raw, json)
Hash identifier: e+FC7jc/WpeA1cw1T6xpNObF19YbPkLQobOAp3TC0A4=
Subject key identifier: 6A:84:38:55:8D:99:13:0A:71:7C:23:7F:B2:3F:F5:1A:02:22:99:3A
Certificate issuer: /CN=0797c6ad41e69667fb8fabd223c8baa88dfc5090
Certificate serial: 015B20C8
Authority key identifier: 07:97:C6:AD:41:E6:96:67:FB:8F:AB:D2:23:C8:BA:A8:8D:FC:50:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5fGrUHmlmf7j6vSI8i6qI38UJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/aoQ4VY2ZEwpxfCN_sj_1GgIimTo.roa
Signing time: Thu 03 Mar 2022 22:48:53 +0000
ROA not before: Thu 03 Mar 2022 22:48:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 213.5.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22749384 (0x15b20c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0797c6ad41e69667fb8fabd223c8baa88dfc5090
Validity
Not Before: Mar 3 22:48:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a8438558d99130a717c237fb23ff51a0222993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:3a:64:d9:55:5c:66:7e:e3:62:18:bd:e2:
06:41:31:3a:d8:33:c3:dc:eb:bc:6b:bd:6e:4c:82:
bf:50:45:3a:e0:5a:f6:03:42:13:6a:40:1d:cf:42:
5a:fe:76:9c:45:9e:d2:5e:83:cc:8b:05:80:f3:8b:
fe:a9:03:9f:3f:e8:20:9c:fd:2f:b8:25:20:c5:1d:
a5:05:b3:df:49:64:b5:ea:5e:ad:40:3a:78:89:41:
59:ce:54:42:54:44:59:5b:a4:a8:bf:f1:dc:e7:0a:
5f:c7:d9:80:90:d4:fc:b2:89:ce:34:b0:8c:bf:4b:
50:28:87:14:d7:e8:75:12:b1:04:05:42:90:9a:6f:
74:4c:3f:a5:04:3c:ab:54:ff:30:58:10:d9:61:fe:
27:64:e0:bb:7e:9b:45:21:82:40:fc:09:60:13:5b:
52:ba:4c:c5:63:c5:e9:a8:e4:ae:11:25:a0:7a:4d:
37:54:6b:be:90:d5:df:0c:4e:e4:12:45:a1:6c:80:
a6:bb:56:ee:cb:d3:de:3c:a5:1d:55:ff:c7:d9:4b:
6a:89:3a:34:8b:d2:f4:95:78:49:d8:d3:59:c2:72:
0e:d4:e8:87:57:0e:3b:a3:10:be:cf:a0:c3:c0:5a:
8e:aa:c1:47:15:c8:89:40:9c:66:87:2f:8a:a7:c9:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:38:55:8D:99:13:0A:71:7C:23:7F:B2:3F:F5:1A:02:22:99:3A
X509v3 Authority Key Identifier:
keyid:07:97:C6:AD:41:E6:96:67:FB:8F:AB:D2:23:C8:BA:A8:8D:FC:50:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5fGrUHmlmf7j6vSI8i6qI38UJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/aoQ4VY2ZEwpxfCN_sj_1GgIimTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/B5fGrUHmlmf7j6vSI8i6qI38UJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:64:fc:f8:d4:f2:03:79:b4:da:9a:2c:ec:77:66:33:e2:03:
22:c2:d8:5f:ea:a9:96:65:26:f8:24:ca:54:8e:5a:f2:59:4b:
61:d0:4f:3a:8f:4c:63:b9:15:84:95:c8:61:54:01:ac:8d:f6:
ae:e1:f1:1e:7f:c1:9a:8b:7a:6b:be:33:97:cc:44:0f:fb:59:
8a:ef:f8:ca:64:f9:75:86:2b:e2:fc:ae:e0:c4:42:e3:2b:a8:
29:36:02:4b:45:f0:2d:df:40:b3:8f:cd:8b:40:9f:77:32:88:
02:07:62:8c:94:12:19:ae:31:d9:73:cc:b9:72:6f:ac:28:e1:
a1:e7:2d:a1:83:cc:f5:c2:a4:83:02:f9:e7:47:56:8e:80:07:
77:ff:3e:5e:02:16:b0:05:7c:50:a8:e5:9e:05:d2:85:2d:bf:
23:57:4b:93:5b:2e:de:06:74:15:8b:49:6a:bc:a0:b1:21:85:
42:5a:cb:19:1d:65:d2:8e:ad:71:85:2a:5d:86:19:f6:b3:31:
94:59:a4:38:3c:d6:05:de:49:d3:1c:61:24:7b:0a:5b:27:bc:
2c:f8:d4:12:93:9f:c0:58:39:ef:a3:40:1d:c9:07:ab:e7:c7:
07:23:6f:31:20:b5:76:bf:ae:a3:cf:7b:ee:6d:87:b2:6a:50:
c9:8f:49:8d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVsgyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Nzk3YzZhZDQxZTY5NjY3ZmI4ZmFiZDIyM2M4YmFhODhkZmM1MDkwMB4XDTIyMDMw
MzIyNDg1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE4NDM4NTU4ZDk5
MTMwYTcxN2MyMzdmYjIzZmY1MWEwMjIyOTkzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWlOmTZVVxmfuNiGL3iBkExOtgzw9zrvGu9bkyCv1BFOuBa
9gNCE2pAHc9CWv52nEWe0l6DzIsFgPOL/qkDnz/oIJz9L7glIMUdpQWz30lktepe
rUA6eIlBWc5UQlREWVukqL/x3OcKX8fZgJDU/LKJzjSwjL9LUCiHFNfodRKxBAVC
kJpvdEw/pQQ8q1T/MFgQ2WH+J2Tgu36bRSGCQPwJYBNbUrpMxWPF6ajkrhEloHpN
N1RrvpDV3wxO5BJFoWyAprtW7svT3jylHVX/x9lLaok6NIvS9JV4SdjTWcJyDtTo
h1cOO6MQvs+gw8BajqrBRxXIiUCcZocviqfJj38CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqhDhVjZkTCnF8I3+yP/UaAiKZOjAfBgNVHSMEGDAWgBQHl8atQeaWZ/uP
q9IjyLqojfxQkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I1ZkdyVUhtbG1mN2o2dlNJOGk2cUkzOFVKQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvZWNjOWJkLTg5YWItNDllMi1hYjliLTBhNDdlMGFhYTg5NS8x
L2FvUTRWWTJaRXdweGZDTl9zal8xR2dJaW1Uby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
ZWNjOWJkLTg5YWItNDllMi1hYjliLTBhNDdlMGFhYTg5NS8xL0I1ZkdyVUhtbG1m
N2o2dlNJOGk2cUkzOFVKQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANUFgTANBgkqhkiG9w0BAQsFAAOC
AQEAWGT8+NTyA3m02pos7HdmM+IDIsLYX+qplmUm+CTKVI5a8llLYdBPOo9MY7kV
hJXIYVQBrI32ruHxHn/Bmot6a74zl8xED/tZiu/4ymT5dYYr4vyu4MRC4yuoKTYC
S0XwLd9As4/Ni0CfdzKIAgdijJQSGa4x2XPMuXJvrCjhoectoYPM9cKkgwL550dW
joAHd/8+XgIWsAV8UKjlngXShS2/I1dLk1su3gZ0FYtJarygsSGFQlrLGR1l0o6t
cYUqXYYZ9rMxlFmkODzWBd5J0xxhJHsKWye8LPjUEpOfwFg576NAHckHq+fHByNv
MSC1dr+uo8977m2HsmpQyY9JjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org