Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/a5spDB61S2v2t2FcTwlgrYd-kEo.roa
File: a5spDB61S2v2t2FcTwlgrYd-kEo.roa (raw, json)
Hash identifier: HJ6xbY8LYE40z1+aFBZR94jcLmgnj0S8YV+dbh/QRyI=
Subject key identifier: 6B:9B:29:0C:1E:B5:4B:6B:F6:B7:61:5C:4F:09:60:AD:87:7E:90:4A
Certificate issuer: /CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Certificate serial: 02B2C498
Authority key identifier: 80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/a5spDB61S2v2t2FcTwlgrYd-kEo.roa
Signing time: Sat 01 Jan 2022 02:51:33 +0000
ROA not before: Sat 01 Jan 2022 02:51:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49173
IP address blocks: 194.146.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45270168 (0x2b2c498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Validity
Not Before: Jan 1 02:51:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b9b290c1eb54b6bf6b7615c4f0960ad877e904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:46:32:a7:7f:7b:dc:6c:6a:4c:f1:25:2a:
74:3f:d9:d9:e3:f3:ab:4b:1c:6d:79:6b:b2:d2:82:
76:7a:e3:0c:02:29:7c:03:6b:63:be:49:c8:a4:ec:
b2:39:c6:e6:45:b5:d4:48:65:69:f8:52:a0:5f:ff:
52:fe:e8:9d:1d:3d:f6:88:26:6f:c6:1c:83:2d:c6:
27:23:c3:12:c9:d2:33:26:88:b2:e8:3a:be:fc:71:
0a:14:8e:df:58:cb:2b:91:98:07:a8:82:e1:0a:1f:
ba:45:e0:88:ee:16:de:48:38:9f:ce:a1:db:5b:05:
e1:6a:bf:b8:3b:6c:bb:12:ae:e2:47:57:ad:c2:06:
24:4e:3e:6a:b8:6e:00:99:f9:4d:02:44:51:ab:5a:
74:63:82:44:ef:fa:cb:78:9f:e0:13:1e:28:8e:ff:
af:1d:96:25:be:8d:29:4f:dc:6f:77:ba:40:42:16:
bb:ec:06:58:0d:6c:d9:d1:df:61:88:82:c6:d0:30:
f6:e2:76:19:3f:7d:bd:70:ad:d6:79:21:f7:4d:68:
98:71:1c:90:d0:04:64:0a:96:76:74:97:29:92:97:
2e:e1:45:d8:8d:25:5e:ba:6c:c1:b8:ad:2f:1a:8b:
91:1c:f8:a6:ad:f6:e0:e2:ba:41:07:2a:72:9d:49:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9B:29:0C:1E:B5:4B:6B:F6:B7:61:5C:4F:09:60:AD:87:7E:90:4A
X509v3 Authority Key Identifier:
keyid:80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/a5spDB61S2v2t2FcTwlgrYd-kEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
45:27:86:b8:57:50:ea:5a:8a:ed:2e:e7:3c:58:3c:91:19:c1:
5a:92:9d:bd:f2:ee:de:ff:21:b7:56:68:95:ca:cc:f4:05:fd:
07:15:7a:1d:1e:07:fb:06:31:54:52:20:77:db:f6:09:91:42:
ed:fd:1d:f7:e2:18:eb:c6:7d:0c:8b:df:58:8a:bb:ff:2d:08:
e9:da:05:c9:95:8e:8d:b4:ed:d6:4d:75:e8:c8:ea:70:14:e1:
47:b1:4d:cc:1d:82:fd:95:79:85:26:eb:25:4c:07:27:72:26:
3b:37:21:c2:d9:5e:08:41:8f:d4:f3:6e:79:9c:54:c5:16:7c:
25:b4:1a:0f:7d:54:24:ee:fb:df:9e:f6:a4:ca:62:e3:59:6a:
ce:4a:3f:21:36:49:96:1e:a1:18:28:d8:4d:96:cb:fb:9b:95:
82:75:e0:43:06:a2:3c:26:8b:4b:4f:7e:35:7f:56:21:59:fb:
a4:6e:d5:9c:e0:d0:06:80:37:9b:3b:52:32:4d:e2:97:7d:b8:
94:25:ec:b7:e5:fe:bb:05:7a:91:2d:4c:cd:21:61:e6:ba:80:
47:0b:da:a6:c4:d8:15:3e:f8:09:42:9b:5a:19:bc:62:69:8a:
9b:f1:2f:8c:01:e0:a2:1b:fc:58:13:77:49:5b:ff:5f:e4:cb:
e2:53:df:52
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEArLEmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MDQ0MjQ0YmY1YzJlODQ2ODVkYmQyMTJmMzIxNmE4MmZmYWUwZjA5MB4XDTIyMDEw
MTAyNTEzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI5YjI5MGMxZWI1
NGI2YmY2Yjc2MTVjNGYwOTYwYWQ4NzdlOTA0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKA4RjKnf3vcbGpM8SUqdD/Z2ePzq0scbXlrstKCdnrjDAIp
fANrY75JyKTssjnG5kW11EhlafhSoF//Uv7onR099ogmb8Ycgy3GJyPDEsnSMyaI
sug6vvxxChSO31jLK5GYB6iC4QofukXgiO4W3kg4n86h21sF4Wq/uDtsuxKu4kdX
rcIGJE4+arhuAJn5TQJEUatadGOCRO/6y3if4BMeKI7/rx2WJb6NKU/cb3e6QEIW
u+wGWA1s2dHfYYiCxtAw9uJ2GT99vXCt1nkh901omHEckNAEZAqWdnSXKZKXLuFF
2I0lXrpswbitLxqLkRz4pq324OK6QQcqcp1JBBkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrmykMHrVLa/a3YVxPCWCth36QSjAfBgNVHSMEGDAWgBSARCRL9cLoRoXb
0hLzIWqC/64PCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dFUWtTX1hDNkVhRjI5SVM4eUZxZ3YtdUR3ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvZGJlMzJmLTg2ZGMtNDBjOC1hODkzLTFkODRlOTA5MmU1Mi8x
L2E1c3BEQjYxUzJ2MnQyRmNUd2xncllkLWtFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
ZGJlMzJmLTg2ZGMtNDBjOC1hODkzLTFkODRlOTA5MmU1Mi8xL2dFUWtTX1hDNkVh
RjI5SVM4eUZxZ3YtdUR3ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsKSHDANBgkqhkiG9w0BAQsFAAOC
AQEARSeGuFdQ6lqK7S7nPFg8kRnBWpKdvfLu3v8ht1ZolcrM9AX9BxV6HR4H+wYx
VFIgd9v2CZFC7f0d9+IY68Z9DIvfWIq7/y0I6doFyZWOjbTt1k116MjqcBThR7FN
zB2C/ZV5hSbrJUwHJ3ImOzchwtleCEGP1PNueZxUxRZ8JbQaD31UJO773572pMpi
41lqzko/ITZJlh6hGCjYTZbL+5uVgnXgQwaiPCaLS09+NX9WIVn7pG7VnODQBoA3
mztSMk3il324lCXst+X+uwV6kS1MzSFh5rqARwvapsTYFT74CUKbWhm8YmmKm/Ev
jAHgohv8WBN3SVv/X+TL4lPfUg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:09 2025 by rpki-client