Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/Am66AGHmQHT5c6TQjC6TVrfzb_U.roa
File: Am66AGHmQHT5c6TQjC6TVrfzb_U.roa (raw, json)
Hash identifier: s/ZF6XlqhMFC22kw9/2V/FzdsemY+CTGFPhfrk4P5EY=
Subject key identifier: 02:6E:BA:00:61:E6:40:74:F9:73:A4:D0:8C:2E:93:56:B7:F3:6F:F5
Certificate issuer: /CN=83b31e4956a84e6b2a41244016acbc43ce81abbc
Certificate serial: 018CC7272A2DCAD9929924467804EFBCC773
Authority key identifier: 83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/Am66AGHmQHT5c6TQjC6TVrfzb_U.roa
Signing time: Mon 01 Jan 2024 22:31:21 +0000
ROA not before: Mon 01 Jan 2024 22:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48642
IP address blocks: 91.193.148.0/22 maxlen: 22
195.206.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2a:2d:ca:d9:92:99:24:46:78:04:ef:bc:c7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b31e4956a84e6b2a41244016acbc43ce81abbc
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026eba0061e64074f973a4d08c2e9356b7f36ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:eb:2a:bb:4a:db:74:43:04:fd:37:5d:b2:bf:
68:94:b9:89:b2:0b:56:48:9d:b6:32:1b:b3:78:a6:
d8:88:23:6c:d0:b5:78:29:18:0a:9f:5c:7e:18:1c:
48:c9:fd:63:f1:9a:2e:02:21:9a:1d:a1:60:4a:9f:
50:f7:f7:ee:f5:a8:ab:0a:b4:01:cc:4a:9c:10:96:
58:db:7e:2e:6c:ab:97:df:8a:3b:54:b4:85:33:e0:
1b:f6:53:41:89:d7:9e:b1:72:f6:cb:22:72:44:ff:
3d:25:ef:9b:37:4c:b4:56:75:80:5c:b8:df:0b:bf:
b1:2f:e2:2f:e3:3d:fd:ca:2f:43:8f:1a:9a:e0:ca:
b5:0b:6c:2c:4d:94:31:5f:22:7d:23:0c:9a:39:4d:
49:dd:2d:95:ea:d9:07:e3:6e:6e:89:3b:45:cf:82:
35:2e:2d:b8:52:a7:8d:d0:1a:85:b5:31:24:d9:d3:
4a:97:44:0b:90:e0:1c:12:dc:3b:36:e4:36:c8:81:
c9:d3:22:d6:c1:be:31:a8:5e:3f:c3:c0:d6:96:ad:
2f:1e:1c:06:ea:3b:71:87:b3:0c:e9:43:46:8c:38:
7f:68:70:1e:e4:58:ca:c2:7a:15:3d:17:36:b2:c5:
a8:ff:a4:78:8b:03:c4:fe:f8:d8:7e:39:84:4f:a0:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:BA:00:61:E6:40:74:F9:73:A4:D0:8C:2E:93:56:B7:F3:6F:F5
X509v3 Authority Key Identifier:
keyid:83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/Am66AGHmQHT5c6TQjC6TVrfzb_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.148.0/22
195.206.226.0/23
Signature Algorithm: sha256WithRSAEncryption
28:9b:d4:50:9f:46:64:16:4f:86:94:f1:3a:ac:0c:06:71:76:
c7:9b:17:e7:ad:0e:98:ee:68:97:78:3b:3e:7a:89:1f:b1:2d:
b1:1b:32:ba:3d:04:3b:f4:ee:8d:4a:c5:ec:a3:82:8e:76:ac:
8d:a1:d4:74:5a:02:cb:c9:5b:c9:38:14:7d:87:e0:3d:5d:27:
20:50:e9:72:9b:c8:a7:99:16:0a:e5:6c:29:1c:37:db:88:67:
d7:f2:59:d5:bb:d8:32:c0:65:a2:72:a6:37:31:84:2d:dd:af:
fa:d6:2b:2a:b9:49:59:c0:4a:cc:fc:f3:20:5c:f5:48:46:a8:
4d:53:38:18:33:d7:ad:32:92:b0:b0:6b:d9:93:05:1f:97:25:
e2:fc:30:9e:48:49:c6:1c:c4:94:23:85:0d:44:9d:30:17:5c:
85:ba:de:4c:07:92:df:66:fc:1c:7f:54:a3:60:02:5c:bd:af:
00:c6:5f:c3:57:00:4a:d3:8c:a1:b8:e6:ec:4f:56:41:4b:d9:
a7:f6:ec:8f:8c:dd:59:42:0d:36:89:62:44:b3:2d:7b:b9:0d:
61:42:71:27:e9:97:eb:f4:38:ee:19:82:63:c2:a7:7c:9c:35:
be:59:32:75:50:8c:07:8c:81:13:c8:a2:e0:78:35:98:b8:51:
49:6c:7f:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJyotytmSmSRGeATvvMdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjMxZTQ5NTZhODRlNmIyYTQxMjQ0MDE2YWNiYzQzY2U4
MWFiYmMwHhcNMjQwMTAxMjIzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjZlYmEwMDYxZTY0MDc0Zjk3M2E0ZDA4YzJlOTM1NmI3ZjM2ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiesqu0rbdEME/Tddsr9olLmJsgtW
SJ22MhuzeKbYiCNs0LV4KRgKn1x+GBxIyf1j8ZouAiGaHaFgSp9Q9/fu9airCrQB
zEqcEJZY234ubKuX34o7VLSFM+Ab9lNBideesXL2yyJyRP89Je+bN0y0VnWAXLjf
C7+xL+Iv4z39yi9Djxqa4Mq1C2wsTZQxXyJ9IwyaOU1J3S2V6tkH425uiTtFz4I1
Li24UqeN0BqFtTEk2dNKl0QLkOAcEtw7NuQ2yIHJ0yLWwb4xqF4/w8DWlq0vHhwG
6jtxh7MM6UNGjDh/aHAe5FjKwnoVPRc2ssWo/6R4iwPE/vjYfjmET6DWIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAJuugBh5kB0+XOk0Iwuk1a382/1MB8GA1UdIwQY
MBaAFIOzHklWqE5rKkEkQBasvEPOgau8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdNZVNWYW9UbXNxUVNSQUZxeThRODZCcTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83YTY4MWEtNjBhZS00ZWYzLWI5NTct
N2E5OTRkZDNkMzJhLzEvQW02NkFHSG1RSFQ1YzZUUWpDNlRWcmZ6Yl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83YTY4MWEtNjBhZS00ZWYzLWI5NTctN2E5OTRkZDNkMzJh
LzEvZzdNZVNWYW9UbXNxUVNSQUZxeThRODZCcTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8GUAwQB
w87iMA0GCSqGSIb3DQEBCwUAA4IBAQAom9RQn0ZkFk+GlPE6rAwGcXbHmxfnrQ6Y
7miXeDs+eokfsS2xGzK6PQQ79O6NSsXso4KOdqyNodR0WgLLyVvJOBR9h+A9XScg
UOlym8inmRYK5WwpHDfbiGfX8lnVu9gywGWicqY3MYQt3a/61isquUlZwErM/PMg
XPVIRqhNUzgYM9etMpKwsGvZkwUflyXi/DCeSEnGHMSUI4UNRJ0wF1yFut5MB5Lf
Zvwcf1SjYAJcva8Axl/DVwBK04yhuObsT1ZBS9mn9uyPjN1ZQg02iWJEsy17uQ1h
QnEn6Zfr9DjuGYJjwqd8nDW+WTJ1UIwHjIETyKLgeDWYuFFJbH/O
-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:02 2024 by rpki-client on console-ams.rpki-client.org