Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/aMQjNhQjZyxsfmOKyFdDvxG430M.roa
File: aMQjNhQjZyxsfmOKyFdDvxG430M.roa (raw, json)
Hash identifier: ypNN3hu/y1JPgLoJZPyGaaGpDqCglFJirNhWdg4mu9A=
Subject key identifier: 68:C4:23:36:14:23:67:2C:6C:7E:63:8A:C8:57:43:BF:11:B8:DF:43
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 046736F9
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/aMQjNhQjZyxsfmOKyFdDvxG430M.roa
Signing time: Sat 01 Jan 2022 09:03:34 +0000
ROA not before: Sat 01 Jan 2022 09:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207344
IP address blocks: 185.232.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73873145 (0x46736f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Jan 1 09:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68c423361423672c6c7e638ac85743bf11b8df43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:61:a3:87:ee:dc:e1:f1:c8:56:90:37:a5:
2f:0d:a4:52:85:72:b8:76:48:71:45:98:90:37:34:
87:c4:29:8b:c0:56:24:db:31:73:94:e1:4c:24:27:
1f:50:37:44:48:dc:78:3c:3e:e3:bd:10:4b:6a:42:
a3:f8:54:1d:fa:46:b9:02:42:f9:46:23:5a:98:41:
07:4c:4f:27:31:fd:0f:7f:96:85:3b:1f:a3:1c:cf:
14:4c:34:9b:8f:34:05:1e:2c:16:6a:17:de:ab:1c:
f4:52:e0:f7:0c:56:19:60:fe:90:e7:0c:73:a7:0b:
ce:44:7f:dd:19:a5:f4:81:e3:e1:c3:01:df:d6:32:
68:74:c0:54:5c:c2:3f:4c:02:f4:f6:46:7d:c4:01:
7f:ef:db:cb:1b:e1:7b:6f:55:8b:52:e9:18:96:79:
db:87:d4:5c:ca:ff:b5:ad:df:7e:4e:62:de:ec:30:
a5:47:50:18:47:ea:3c:d2:3f:97:de:a7:f2:49:d7:
3e:b7:d1:08:b2:82:f3:34:2c:cf:cf:b5:d0:ab:ac:
b8:c9:6d:dd:dd:78:e5:b7:6a:f1:01:6c:78:b6:d0:
c6:32:8a:3f:ea:7b:4f:a5:ef:2f:ea:16:0a:02:8d:
fc:95:ee:2c:c3:53:f7:9f:29:33:0e:eb:29:30:83:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:23:36:14:23:67:2C:6C:7E:63:8A:C8:57:43:BF:11:B8:DF:43
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/aMQjNhQjZyxsfmOKyFdDvxG430M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:02:1a:43:f5:41:7e:a8:5a:ea:74:dc:c2:e9:fe:f6:38:bd:
f3:d3:38:8f:48:d6:47:06:d1:28:fa:12:03:cd:cf:fa:67:9b:
59:91:a1:3e:bb:4b:b0:c9:6b:62:ca:a9:87:47:c0:e1:75:61:
60:03:d9:d1:17:26:4c:83:31:7e:e1:3b:7e:22:15:7b:5b:b6:
99:77:5e:6d:71:35:2d:43:ce:29:bd:01:ab:39:ea:d4:6b:52:
85:12:40:10:a8:18:71:7e:5f:94:1b:e7:ae:19:7d:26:f2:aa:
ae:77:58:e7:25:37:d3:df:a8:a4:eb:14:11:02:b5:fb:0d:0c:
84:71:b8:75:12:47:ea:33:36:a3:4e:e0:d5:fb:0d:9d:4b:7f:
32:ce:00:46:76:db:a4:1c:ae:3d:58:aa:19:01:33:f3:28:22:
c4:0f:74:dc:d4:41:a2:cc:88:f8:cc:e6:f2:0c:a6:8a:3b:a0:
e2:7b:90:9e:a6:cc:57:a4:d1:8d:72:34:54:8b:fd:dc:92:71:
69:aa:57:46:43:3b:19:32:3f:84:b4:28:eb:67:96:53:7c:13:
eb:8c:b2:00:64:cd:9d:2d:e6:84:7a:c1:e6:1a:31:1a:48:4c:
fb:4d:34:25:08:c7:4a:ea:cb:cb:24:98:75:7f:70:cf:e8:a9:
96:95:ac:f4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBGc2+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWE4NzkwYTA4YzhlMGQ4NDU4OGQ5NGQxYTUxYmNhOWFiZTc1ODFkMB4XDTIyMDEw
MTA5MDMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhjNDIzMzYxNDIz
NjcyYzZjN2U2MzhhYzg1NzQzYmYxMWI4ZGY0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbwYaOH7tzh8chWkDelLw2kUoVyuHZIcUWYkDc0h8Qpi8BW
JNsxc5ThTCQnH1A3REjceDw+470QS2pCo/hUHfpGuQJC+UYjWphBB0xPJzH9D3+W
hTsfoxzPFEw0m480BR4sFmoX3qsc9FLg9wxWGWD+kOcMc6cLzkR/3Rml9IHj4cMB
39YyaHTAVFzCP0wC9PZGfcQBf+/byxvhe29Vi1LpGJZ524fUXMr/ta3ffk5i3uww
pUdQGEfqPNI/l96n8knXPrfRCLKC8zQsz8+10KusuMlt3d145bdq8QFseLbQxjKK
P+p7T6XvL+oWCgKN/JXuLMNT958pMw7rKTCDLQsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRoxCM2FCNnLGx+Y4rIV0O/EbjfQzAfBgNVHSMEGDAWgBReqHkKCMjg2EWI
2U0aUbypq+dYHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hxaDVDZ2pJNE5oRmlObE5HbEc4cWF2bldCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvYzA2YTIzLTAxNjMtNDdhNS04NjA4LTMwYzBhMTExY2Q1NS8x
L2FNUWpOaFFqWnl4c2ZtT0t5RmREdnhHNDMwTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
YzA2YTIzLTAxNjMtNDdhNS04NjA4LTMwYzBhMTExY2Q1NS8xL1hxaDVDZ2pJNE5o
RmlObE5HbEc4cWF2bldCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALno5zANBgkqhkiG9w0BAQsFAAOC
AQEAhwIaQ/VBfqha6nTcwun+9ji989M4j0jWRwbRKPoSA83P+mebWZGhPrtLsMlr
Ysqph0fA4XVhYAPZ0RcmTIMxfuE7fiIVe1u2mXdebXE1LUPOKb0Bqznq1GtShRJA
EKgYcX5flBvnrhl9JvKqrndY5yU309+opOsUEQK1+w0MhHG4dRJH6jM2o07g1fsN
nUt/Ms4ARnbbpByuPViqGQEz8ygixA903NRBosyI+Mzm8gymijug4nuQnqbMV6TR
jXI0VIv93JJxaapXRkM7GTI/hLQo62eWU3wT64yyAGTNnS3mhHrB5hoxGkhM+000
JQjHSurLyySYdX9wz+iplpWs9A==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client