Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/afVQ43GZXkbEs2H7Wn_z5aw-xW4.roa
File: afVQ43GZXkbEs2H7Wn_z5aw-xW4.roa (raw, json)
Hash identifier: AGm0u3MDjh7e5gRZJUw0xtXpfMDxtdIGxbQg9XQqI1M=
Subject key identifier: 69:F5:50:E3:71:99:5E:46:C4:B3:61:FB:5A:7F:F3:E5:AC:3E:C5:6E
Certificate issuer: /CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Certificate serial: 09F1D988
Authority key identifier: 60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/afVQ43GZXkbEs2H7Wn_z5aw-xW4.roa
Signing time: Sat 01 Jan 2022 08:03:54 +0000
ROA not before: Sat 01 Jan 2022 08:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211560
IP address blocks: 185.141.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166844808 (0x9f1d988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
Validity
Not Before: Jan 1 08:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f550e371995e46c4b361fb5a7ff3e5ac3ec56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:c6:54:05:20:db:e7:ba:ae:ff:f9:ef:62:
b1:62:13:c3:d2:fb:00:d6:53:af:80:29:5e:2b:43:
47:ee:45:fe:40:0b:1c:99:6e:60:28:37:ae:96:75:
68:ec:aa:99:83:f8:d0:c0:11:33:7a:a1:ed:97:49:
c7:90:6c:71:80:f4:bf:ff:de:0e:3f:b1:2f:94:84:
77:d7:e4:39:41:57:d6:0d:10:73:97:eb:9a:58:5f:
1b:35:82:6f:29:07:5a:07:55:89:a9:56:43:1c:00:
36:31:36:da:2e:e3:55:7d:65:ba:47:cd:5f:6e:d0:
93:1c:61:56:f9:0a:f1:20:cb:cc:08:32:e6:69:f5:
85:38:e0:b9:4f:57:63:6a:c7:af:b0:49:6c:d2:41:
31:99:5e:a1:69:fd:14:ce:e7:b2:05:35:fb:ec:4f:
f9:30:47:67:12:1f:d0:b5:0e:b7:6a:b0:4c:39:6c:
aa:34:22:11:79:05:a2:39:ab:9f:8d:0c:20:9f:8e:
ff:97:0c:f7:08:39:b5:b6:a0:da:14:61:b7:da:d0:
49:2a:db:a1:28:7d:34:8c:1e:6d:4d:85:dd:c5:81:
63:d8:f0:c9:e3:d6:48:2a:31:32:37:fc:9b:ab:cd:
da:8f:1b:4e:aa:d1:af:b3:08:09:f2:bb:0b:56:01:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:50:E3:71:99:5E:46:C4:B3:61:FB:5A:7F:F3:E5:AC:3E:C5:6E
X509v3 Authority Key Identifier:
keyid:60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/afVQ43GZXkbEs2H7Wn_z5aw-xW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:79:02:d2:0e:48:d3:73:cb:3f:c4:ca:46:13:ed:15:82:ab:
0e:6d:ae:4b:07:4e:2c:13:0d:0d:d2:0f:05:0c:af:d0:8e:df:
47:22:86:24:ce:c6:e6:b2:8a:36:b8:d8:a1:bf:9a:d0:63:3b:
66:9d:03:a6:45:0d:e7:aa:02:95:06:85:4f:92:8e:03:82:ff:
54:ec:f0:be:aa:43:b4:64:ff:35:50:7f:bb:fa:25:30:b5:e8:
2a:ba:40:f2:ca:0d:8e:54:c6:41:f8:ab:ff:56:50:26:bd:d4:
6e:f8:17:b8:fe:11:e9:42:3d:ac:40:aa:e7:57:69:95:38:f1:
35:65:e6:a8:6f:18:1a:d3:86:25:1b:b0:9d:b5:9a:5f:f9:ee:
e8:28:cd:63:0a:be:a1:6a:a4:08:1f:64:a9:67:3f:3e:4f:9f:
c3:bf:74:95:4f:01:49:98:a1:80:51:95:1a:2e:70:cb:74:09:
e2:28:05:30:ba:00:89:f3:2c:c8:21:8f:e0:b7:2e:b5:cf:fc:
a5:c4:43:b9:fb:d6:c7:46:d7:0d:60:6e:f0:1f:3f:09:92:2a:
f4:a8:78:f7:2f:eb:8c:26:53:76:fa:4d:eb:56:e0:40:d4:86:
63:c6:83:1d:79:9d:56:c3:de:d2:24:8e:08:65:f6:26:05:13:
80:d6:82:c9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECfHZiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDQ2Y2RkMTBhNzQ4OWYzYWVmMTIxOTlkMjRmMDFhOWQ5YTlkNTMzMB4XDTIyMDEw
MTA4MDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjlmNTUwZTM3MTk5
NWU0NmM0YjM2MWZiNWE3ZmYzZTVhYzNlYzU2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVxxlQFINvnuq7/+e9isWITw9L7ANZTr4ApXitDR+5F/kAL
HJluYCg3rpZ1aOyqmYP40MARM3qh7ZdJx5BscYD0v//eDj+xL5SEd9fkOUFX1g0Q
c5frmlhfGzWCbykHWgdVialWQxwANjE22i7jVX1lukfNX27QkxxhVvkK8SDLzAgy
5mn1hTjguU9XY2rHr7BJbNJBMZleoWn9FM7nsgU1++xP+TBHZxIf0LUOt2qwTDls
qjQiEXkFojmrn40MIJ+O/5cM9wg5tbag2hRht9rQSSrboSh9NIwebU2F3cWBY9jw
yePWSCoxMjf8m6vN2o8bTqrRr7MICfK7C1YBz8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRp9VDjcZleRsSzYftaf/PlrD7FbjAfBgNVHSMEGDAWgBRgRs3RCnSJ867x
IZnSTwGp2anVMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lFYk4wUXAwaWZPdThTR1owazhCcWRtcDFUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvODI1NThkLThlMzYtNDhkYi1iNWNjLWJkOTE4ZGYyZGViNi8x
L2FmVlE0M0daWGtiRXMySDdXbl96NWF3LXhXNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
ODI1NThkLThlMzYtNDhkYi1iNWNjLWJkOTE4ZGYyZGViNi8xL1lFYk4wUXAwaWZP
dThTR1owazhCcWRtcDFUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmNIjANBgkqhkiG9w0BAQsFAAOC
AQEAXXkC0g5I03PLP8TKRhPtFYKrDm2uSwdOLBMNDdIPBQyv0I7fRyKGJM7G5rKK
NrjYob+a0GM7Zp0DpkUN56oClQaFT5KOA4L/VOzwvqpDtGT/NVB/u/olMLXoKrpA
8soNjlTGQfir/1ZQJr3UbvgXuP4R6UI9rECq51dplTjxNWXmqG8YGtOGJRuwnbWa
X/nu6CjNYwq+oWqkCB9kqWc/Pk+fw790lU8BSZihgFGVGi5wy3QJ4igFMLoAifMs
yCGP4Lcutc/8pcRDufvWx0bXDWBu8B8/CZIq9Kh49y/rjCZTdvpN61bgQNSGY8aD
HXmdVsPe0iSOCGX2JgUTgNaCyQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:43 2023 by rpki-client on console-ams.rpki-client.org