Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/a8VOXAMv1WF-fxwyRDBlx7wQgbI.roa
File: a8VOXAMv1WF-fxwyRDBlx7wQgbI.roa (raw, json)
Hash identifier: X/lBHX2ISmg8fjlL7wph2mstD3J7G+1Tl5jZt99x+tg=
Subject key identifier: 6B:C5:4E:5C:03:2F:D5:61:7E:7F:1C:32:44:30:65:C7:BC:10:81:B2
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018C5468C2EF87BA8C9E802803707DCE18E8
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/a8VOXAMv1WF-fxwyRDBlx7wQgbI.roa
Signing time: Sun 10 Dec 2023 15:46:40 +0000
ROA not before: Sun 10 Dec 2023 15:46:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215870
IP address blocks: 85.114.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:68:c2:ef:87:ba:8c:9e:80:28:03:70:7d:ce:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Dec 10 15:46:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bc54e5c032fd5617e7f1c32443065c7bc1081b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:96:28:a4:b2:fa:7e:d2:33:8d:34:46:8f:
9c:78:6d:7a:63:78:90:7c:6c:58:e1:c8:6f:10:9f:
2d:25:d3:ec:95:4a:11:13:72:f7:4f:b4:e3:6d:d0:
9f:d3:57:f8:30:b7:b8:69:a2:bd:6f:d2:ac:53:6d:
e0:8a:ed:d9:50:4f:54:1b:b0:18:c9:e1:0e:20:3e:
b3:59:cd:76:ef:61:ab:fa:16:92:97:9d:b0:a6:7f:
83:af:8a:de:b2:07:74:31:db:5e:40:9a:fb:ca:c3:
8f:e8:1d:9d:cc:cf:6f:c0:bb:95:bb:b5:8a:52:da:
43:2e:1d:a1:c8:c4:a9:97:db:46:cf:e4:a9:9e:ed:
4c:fe:77:fb:09:c4:de:51:9f:ee:cb:d4:4c:be:87:
04:01:2a:4c:1a:69:fb:23:f8:ce:d0:f7:51:05:77:
84:f8:de:17:95:9b:8f:15:13:d6:13:72:3a:0c:7c:
61:d1:c4:74:e2:9c:4f:96:64:ea:c7:f3:72:a3:56:
36:11:0b:ac:7f:2d:73:98:93:7c:4d:ee:b4:49:f5:
e3:61:b1:ae:76:d4:4f:e1:46:da:eb:5e:81:14:ba:
9e:a6:68:65:63:d8:8b:5d:82:20:74:62:89:50:2b:
e0:27:50:e2:b0:05:63:2e:14:d5:1d:df:e1:34:97:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:4E:5C:03:2F:D5:61:7E:7F:1C:32:44:30:65:C7:BC:10:81:B2
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/a8VOXAMv1WF-fxwyRDBlx7wQgbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:95:54:29:4f:70:33:8d:0e:56:1a:21:2d:f8:6b:fa:58:c0:
b0:a3:d3:9b:bd:dc:8e:04:d3:58:9f:a1:04:37:b3:76:20:29:
79:2a:cb:36:db:0a:50:59:f1:15:58:4e:75:b3:93:6a:ee:f3:
11:df:76:8c:4e:41:fe:dc:cf:1c:ff:7d:2a:de:a8:38:90:e6:
08:5f:9a:5b:7e:6c:51:3e:5a:9c:3c:a9:b0:18:18:8a:3c:eb:
0d:a8:af:92:b7:3d:81:24:66:0f:ca:8a:02:01:f0:c8:31:e5:
27:6d:fe:6f:34:97:71:d4:92:8d:84:74:0e:0b:b0:16:25:50:
fa:82:e9:8f:87:80:50:33:46:23:12:e3:6a:d8:b4:69:7a:38:
c4:e2:7a:00:42:b9:30:85:85:81:42:fe:9e:56:75:c4:d1:60:
25:4c:0f:ac:88:35:11:79:e7:25:a7:33:b8:84:fa:da:81:19:
93:c8:d9:d3:f7:74:2e:c8:a9:b7:16:0c:58:d3:cc:52:c7:dc:
e7:39:e6:07:41:33:5d:0a:f1:c3:7b:63:6f:cd:1e:32:f0:25:
f0:66:86:59:04:e6:d5:a2:2c:7f:16:0f:e7:3c:8a:89:58:f3:
95:a6:79:77:ab:37:4f:66:07:b3:03:35:e2:e6:53:84:11:4e:
77:6f:1b:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxUaMLvh7qMnoAoA3B9zhjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzQ3NDY1YmM5MjVjOGU3NTZkZGZhYTYwOWVkYTAyY2M1
MmQwMzEwHhcNMjMxMjEwMTU0NjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmM1NGU1YzAzMmZkNTYxN2U3ZjFjMzI0NDMwNjVjN2JjMTA4MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp6WKKSy+n7SM400Ro+ceG16Y3iQ
fGxY4chvEJ8tJdPslUoRE3L3T7TjbdCf01f4MLe4aaK9b9KsU23giu3ZUE9UG7AY
yeEOID6zWc1272Gr+haSl52wpn+Dr4resgd0MdteQJr7ysOP6B2dzM9vwLuVu7WK
UtpDLh2hyMSpl9tGz+Spnu1M/nf7CcTeUZ/uy9RMvocEASpMGmn7I/jO0PdRBXeE
+N4XlZuPFRPWE3I6DHxh0cR04pxPlmTqx/Nyo1Y2EQusfy1zmJN8Te60SfXjYbGu
dtRP4Uba616BFLqepmhlY9iLXYIgdGKJUCvgJ1DisAVjLhTVHd/hNJdmWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvFTlwDL9Vhfn8cMkQwZce8EIGyMB8GA1UdIwQY
MBaAFGQ0dGW8klyOdW3fqmCe2gLMUtAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQt
YzBhN2I3Mzc3ZWFiLzEvYThWT1hBTXYxV0YtZnh3eVJEQmx4N3dRZ2JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQtYzBhN2I3Mzc3ZWFi
LzEvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXJ4MA0G
CSqGSIb3DQEBCwUAA4IBAQAJlVQpT3AzjQ5WGiEt+Gv6WMCwo9ObvdyOBNNYn6EE
N7N2ICl5Kss22wpQWfEVWE51s5Nq7vMR33aMTkH+3M8c/30q3qg4kOYIX5pbfmxR
PlqcPKmwGBiKPOsNqK+Stz2BJGYPyooCAfDIMeUnbf5vNJdx1JKNhHQOC7AWJVD6
gumPh4BQM0YjEuNq2LRpejjE4noAQrkwhYWBQv6eVnXE0WAlTA+siDUReeclpzO4
hPragRmTyNnT93QuyKm3FgxY08xSx9znOeYHQTNdCvHDe2NvzR4y8CXwZoZZBObV
oix/Fg/nPIqJWPOVpnl3qzdPZgezAzXi5lOEEU53bxtn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org