Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/x6aMoh5-gIIgUBUkYn5xu5eGPVs.roa
File: x6aMoh5-gIIgUBUkYn5xu5eGPVs.roa (raw, json)
Hash identifier: +gPWjcf5rwJOL+ZbXYi5XjgXvNoO4/cglqoqhYXH6n0=
Subject key identifier: C7:A6:8C:A2:1E:7E:80:82:20:50:15:24:62:7E:71:BB:97:86:3D:5B
Certificate issuer: /CN=409ab9c0e3282134bb825d100495d142223e95ec
Certificate serial: 0184190BAC0A9BDBCBD47E393F10828ED211
Authority key identifier: 40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/x6aMoh5-gIIgUBUkYn5xu5eGPVs.roa
Signing time: Thu 27 Oct 2022 10:45:06 +0000
ROA not before: Thu 27 Oct 2022 10:45:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43581
IP address blocks: 46.253.143.0/24 maxlen: 24
2a13:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:0b:ac:0a:9b:db:cb:d4:7e:39:3f:10:82:8e:d2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409ab9c0e3282134bb825d100495d142223e95ec
Validity
Not Before: Oct 27 10:45:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7a68ca21e7e808220501524627e71bb97863d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:e0:7b:40:7d:a9:f7:89:7f:a8:2a:b2:f9:
be:5c:b5:dd:c2:8b:fb:5e:82:0e:f3:df:20:24:83:
1b:23:8c:d1:1b:68:8e:ab:ac:94:47:61:f2:79:f3:
c6:73:9d:2b:d7:6d:e4:14:ab:47:40:0d:60:a3:64:
c5:ce:cc:8e:77:92:c3:a0:0e:d4:d7:10:af:43:e7:
66:ff:10:f3:64:35:75:51:90:09:39:69:20:79:2b:
bb:ce:f0:45:d6:b0:43:30:ab:8e:68:3d:81:9c:b3:
e4:71:2c:53:5b:f1:44:79:8c:31:f1:58:1e:81:53:
27:a9:78:4a:f8:d0:0a:a0:4c:67:34:d6:ae:d2:c6:
2b:ff:cc:b7:53:fc:64:ea:34:ed:31:ce:fd:20:b3:
a0:dd:9a:ff:37:3b:02:55:44:4e:19:43:4a:c9:45:
f6:61:4f:10:85:bd:f1:e3:fc:87:ac:39:d9:ed:28:
83:87:17:f5:a8:55:a9:f5:46:19:b7:29:79:a2:b2:
4c:72:fb:b1:23:f1:bd:40:ec:5a:45:ec:d0:45:27:
52:21:9f:75:13:3c:85:2c:6f:dd:c1:71:92:64:37:
3d:09:03:46:39:fd:53:77:02:55:fd:7f:8d:b3:60:
29:07:4e:7c:23:30:cd:63:cb:80:03:76:e8:e1:f6:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:8C:A2:1E:7E:80:82:20:50:15:24:62:7E:71:BB:97:86:3D:5B
X509v3 Authority Key Identifier:
keyid:40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/x6aMoh5-gIIgUBUkYn5xu5eGPVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
IPv6:
2a13:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:d7:95:04:d4:f6:e3:3e:7c:c3:96:32:b6:7b:28:44:95:9c:
b6:43:89:4c:a4:a9:1c:f2:1d:04:02:3f:9b:87:26:68:8f:9b:
04:87:55:6a:ba:3a:85:c8:17:7f:d5:a4:94:61:55:98:17:80:
3e:d6:d9:84:2a:0c:e3:ed:02:07:09:2e:e4:61:fd:01:3c:7d:
47:ca:89:3d:a6:1d:35:ea:86:df:e1:8d:e4:e3:f5:39:5e:a5:
dc:66:f3:d6:74:21:cb:bf:aa:9a:a8:9c:65:62:8f:16:2a:b5:
60:3b:60:af:4a:48:7e:9f:c6:2c:01:de:d7:a8:8b:b7:12:99:
2f:7a:d6:3f:80:6d:ab:eb:b0:8b:a5:89:3b:ec:b6:5d:83:94:
1c:fa:4a:45:b4:bc:04:40:f5:f9:87:02:67:81:31:0e:ce:da:
61:eb:e8:80:10:6d:bf:49:3b:f8:59:ff:9c:25:32:d6:ea:27:
8c:dc:0c:59:4e:d5:70:d3:a5:3d:10:43:e6:da:3c:f7:f2:fe:
74:9c:e8:c3:b2:7e:7d:9c:3f:26:10:47:e4:ee:70:9f:40:7f:
83:ed:3d:b7:9b:4f:6b:39:c0:ae:9b:d6:02:74:ea:9d:12:54:
cc:d7:36:15:82:c6:b1:fb:39:fc:6e:27:9d:54:25:c4:b8:a3:
f8:90:1c:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYQZC6wKm9vL1H45PxCCjtIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWFiOWMwZTMyODIxMzRiYjgyNWQxMDA0OTVkMTQyMjIz
ZTk1ZWMwHhcNMjIxMDI3MTA0NTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2E2OGNhMjFlN2U4MDgyMjA1MDE1MjQ2MjdlNzFiYjk3ODYzZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQTge0B9qfeJf6gqsvm+XLXdwov7
XoIO898gJIMbI4zRG2iOq6yUR2HyefPGc50r123kFKtHQA1go2TFzsyOd5LDoA7U
1xCvQ+dm/xDzZDV1UZAJOWkgeSu7zvBF1rBDMKuOaD2BnLPkcSxTW/FEeYwx8Vge
gVMnqXhK+NAKoExnNNau0sYr/8y3U/xk6jTtMc79ILOg3Zr/NzsCVUROGUNKyUX2
YU8Qhb3x4/yHrDnZ7SiDhxf1qFWp9UYZtyl5orJMcvuxI/G9QOxaRezQRSdSIZ91
EzyFLG/dwXGSZDc9CQNGOf1TdwJV/X+Ns2ApB058IzDNY8uAA3bo4fbOoQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMemjKIefoCCIFAVJGJ+cbuXhj1bMB8GA1UdIwQY
MBaAFECaucDjKCE0u4JdEASV0UIiPpXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpxNXdPTW9JVFM3Z2wwUUJKWFJRaUktbGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kYjI1ZTAtNTE0My00OTQ5LTg0MWIt
NDc3NDA4OWJkMzhlLzEveDZhTW9oNS1nSUlnVUJVa1luNXh1NWVHUFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kYjI1ZTAtNTE0My00OTQ5LTg0MWItNDc3NDA4OWJkMzhl
LzEvUUpxNXdPTW9JVFM3Z2wwUUJKWFJRaUktbGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALv2PMA0E
AgACMAcDBQMqExfAMA0GCSqGSIb3DQEBCwUAA4IBAQCm15UE1PbjPnzDljK2eyhE
lZy2Q4lMpKkc8h0EAj+bhyZoj5sEh1VqujqFyBd/1aSUYVWYF4A+1tmEKgzj7QIH
CS7kYf0BPH1Hyok9ph016obf4Y3k4/U5XqXcZvPWdCHLv6qaqJxlYo8WKrVgO2Cv
Skh+n8YsAd7XqIu3EpkvetY/gG2r67CLpYk77LZdg5Qc+kpFtLwEQPX5hwJngTEO
ztph6+iAEG2/STv4Wf+cJTLW6ieM3AxZTtVw06U9EEPm2jz38v50nOjDsn59nD8m
EEfk7nCfQH+D7T23m09rOcCum9YCdOqdElTM1zYVgsax+zn8biedVCXEuKP4kBxF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:53 2024 by rpki-client on console-ams.rpki-client.org