Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/cO654fSaQJGu3yN6RZXAPBjkPzk.roa
File: cO654fSaQJGu3yN6RZXAPBjkPzk.roa (raw, json)
Hash identifier: MN2//S+4TZLYa5DO4svtKVrjFT2+IieQkAbetTQk1i8=
Subject key identifier: 70:EE:B9:E1:F4:9A:40:91:AE:DF:23:7A:45:95:C0:3C:18:E4:3F:39
Certificate issuer: /CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Certificate serial: 0182E9DEC918070A0F172B5DF3F95B1614C0
Authority key identifier: 73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/cO654fSaQJGu3yN6RZXAPBjkPzk.roa
Signing time: Mon 29 Aug 2022 13:51:07 +0000
ROA not before: Mon 29 Aug 2022 13:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208196
IP address blocks: 91.206.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:de:c9:18:07:0a:0f:17:2b:5d:f3:f9:5b:16:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Validity
Not Before: Aug 29 13:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70eeb9e1f49a4091aedf237a4595c03c18e43f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:4a:b0:d8:1e:c7:29:93:e0:76:ee:32:35:
49:85:49:b5:83:8e:00:97:69:31:3d:83:87:25:71:
18:c0:03:d0:3f:ea:06:f7:eb:40:d9:d8:a4:4a:0b:
f3:c6:3c:38:dd:46:e5:77:c2:4d:ec:ae:71:ec:73:
12:6e:b5:77:81:16:c2:3a:28:d8:99:f3:aa:24:de:
b0:64:a7:de:72:8b:43:1a:62:92:fc:a3:dd:5f:d5:
e7:f6:60:3b:5c:11:68:68:70:1a:a8:07:6d:b5:45:
8c:21:ed:b0:4a:b6:94:13:b0:d0:67:e0:5f:ee:1a:
12:9b:a2:4c:58:3b:1d:6b:ee:b9:3c:49:51:19:dc:
1c:2d:14:7a:4d:78:d7:85:65:41:98:c2:65:79:5d:
bf:62:f8:34:e4:c4:79:07:48:75:14:5d:f2:4a:88:
ea:ab:fb:c7:a4:47:eb:ca:ea:8a:68:84:79:43:4d:
7a:26:95:b3:69:7e:60:05:22:d5:c4:75:20:89:06:
0e:c4:7a:3f:ec:9e:e9:64:b1:9d:23:35:f2:f5:aa:
1f:d1:bb:44:6e:74:53:a4:2c:f4:99:78:43:d9:12:
80:ea:52:95:75:63:8b:eb:f8:8e:33:72:67:db:9d:
9a:fd:d0:67:9a:4b:a1:fb:7f:82:97:ec:f6:c6:5e:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EE:B9:E1:F4:9A:40:91:AE:DF:23:7A:45:95:C0:3C:18:E4:3F:39
X509v3 Authority Key Identifier:
keyid:73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/cO654fSaQJGu3yN6RZXAPBjkPzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:57:ad:d3:53:ee:df:d4:90:fd:a8:d1:6b:c8:f9:34:50:
ad:64:b2:7e:2e:9a:78:9c:44:eb:be:34:74:aa:2d:09:20:d0:
03:08:20:0f:56:c9:ca:76:77:19:ff:e0:93:92:3a:87:78:74:
00:fe:3a:4a:02:3e:04:ba:d7:bb:e2:fd:66:6d:72:0c:62:92:
68:e0:31:29:cf:69:e0:9a:5a:98:d5:64:c3:b2:46:e2:03:82:
c2:ad:aa:fa:c9:ff:db:74:42:6a:2a:f5:2d:7e:95:60:b5:c7:
fe:24:76:bb:b0:66:88:ca:de:9b:e0:51:b0:61:8c:4a:7f:7d:
f9:3f:0a:ac:ec:3f:21:0a:d2:31:b5:cf:92:af:cb:12:95:fd:
fe:19:f5:de:ef:62:23:54:83:58:ff:75:ab:45:27:ed:ce:94:
63:02:2c:2a:91:1b:91:54:7f:78:b7:9f:96:98:16:c5:ca:ec:
bf:47:2e:b6:56:bc:28:5b:c0:a0:47:e3:98:2b:d9:09:25:8b:
de:72:2a:6b:00:ae:33:25:0a:17:f3:a0:78:87:b2:70:e1:9a:
63:7d:f5:b5:c0:a2:76:da:d3:18:55:51:eb:dc:08:ac:32:14:
c3:9d:15:fa:5e:18:29:b5:17:14:3e:2d:c9:04:53:7b:47:1a:
4d:16:fd:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLp3skYBwoPFytd8/lbFhTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczN2M0YzJjZDRjYzhkNjAyNTM5YWJiZTkzMWI1N2ZiOTcz
NWYwNWQwHhcNMjIwODI5MTM1MTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGVlYjllMWY0OWE0MDkxYWVkZjIzN2E0NTk1YzAzYzE4ZTQzZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyFKsNgexymT4HbuMjVJhUm1g44A
l2kxPYOHJXEYwAPQP+oG9+tA2dikSgvzxjw43Ubld8JN7K5x7HMSbrV3gRbCOijY
mfOqJN6wZKfecotDGmKS/KPdX9Xn9mA7XBFoaHAaqAdttUWMIe2wSraUE7DQZ+Bf
7hoSm6JMWDsda+65PElRGdwcLRR6TXjXhWVBmMJleV2/Yvg05MR5B0h1FF3ySojq
q/vHpEfryuqKaIR5Q016JpWzaX5gBSLVxHUgiQYOxHo/7J7pZLGdIzXy9aof0btE
bnRTpCz0mXhD2RKA6lKVdWOL6/iOM3Jn252a/dBnmkuh+3+Cl+z2xl4oxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDuueH0mkCRrt8jekWVwDwY5D85MB8GA1UdIwQY
MBaAFHN8TCzUzI1gJTmrvpMbV/uXNfBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzN4TUxOVE1qV0FsT2F1LWt4dFgtNWMxOEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wMDNkZTItY2Y5Yy00ODAzLWFkNTYt
Y2E2YTQ0Zjk5MDJiLzEvY082NTRmU2FRSkd1M3lONlJaWEFQQmprUHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wMDNkZTItY2Y5Yy00ODAzLWFkNTYtY2E2YTQ0Zjk5MDJi
LzEvYzN4TUxOVE1qV0FsT2F1LWt4dFgtNWMxOEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW87lMA0G
CSqGSIb3DQEBCwUAA4IBAQBM1let01Pu39SQ/ajRa8j5NFCtZLJ+Lpp4nETrvjR0
qi0JINADCCAPVsnKdncZ/+CTkjqHeHQA/jpKAj4Eute74v1mbXIMYpJo4DEpz2ng
mlqY1WTDskbiA4LCrar6yf/bdEJqKvUtfpVgtcf+JHa7sGaIyt6b4FGwYYxKf335
Pwqs7D8hCtIxtc+Sr8sSlf3+GfXe72IjVINY/3WrRSftzpRjAiwqkRuRVH94t5+W
mBbFyuy/Ry62VrwoW8CgR+OYK9kJJYveciprAK4zJQoX86B4h7Jw4ZpjffW1wKJ2
2tMYVVHr3AisMhTDnRX6XhgptRcUPi3JBFN7RxpNFv2Z
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:11 2023 by rpki-client on console-ams.rpki-client.org