Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/Qnd69zqmB-pWVrVtDcLMAbc-nHw.roa
File: Qnd69zqmB-pWVrVtDcLMAbc-nHw.roa (raw, json)
Hash identifier: 4baNKc4UZo28Ryidf8HqVklKKcUk7FwSgV4JeE2PxFY=
Subject key identifier: 42:77:7A:F7:3A:A6:07:EA:56:56:B5:6D:0D:C2:CC:01:B7:3E:9C:7C
Certificate issuer: /CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Certificate serial: 0D6B942C
Authority key identifier: 5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/Qnd69zqmB-pWVrVtDcLMAbc-nHw.roa
Signing time: Sat 01 Jan 2022 03:54:56 +0000
ROA not before: Sat 01 Jan 2022 03:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52084
IP address blocks: 46.255.8.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225154092 (0xd6b942c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Validity
Not Before: Jan 1 03:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42777af73aa607ea5656b56d0dc2cc01b73e9c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:28:8a:74:2a:b4:04:af:2b:54:68:a4:c0:
c4:c7:e1:f8:9b:89:e2:e3:24:62:68:3d:0f:ab:ac:
1a:83:ed:26:7e:00:7f:d5:03:0f:88:38:7b:d8:68:
7b:23:5c:e8:65:bb:15:d9:17:84:ee:2b:89:d8:d5:
16:aa:1c:58:6b:c3:27:c0:94:c9:26:33:06:85:88:
5d:35:a3:61:8e:53:4c:0e:cc:7b:1e:c7:5b:4d:a9:
2d:91:62:66:ed:83:59:53:45:9d:13:7b:43:2c:42:
e7:e0:50:cf:ae:04:18:d0:6a:5f:38:d0:37:62:9f:
52:40:41:63:08:64:10:da:f7:c4:62:19:cd:ca:ab:
83:c4:32:ba:d9:bc:ac:9c:97:cd:72:07:55:74:f2:
31:f2:2f:d5:b8:ae:fb:7a:f5:f6:0b:c5:61:18:d7:
1e:3b:3b:38:0f:7a:87:0b:22:70:37:b9:a9:a5:df:
2c:08:a9:ed:d7:44:17:70:03:bb:14:58:d4:e7:7d:
7a:23:8c:cc:08:0b:48:40:ec:90:d9:41:21:ca:3b:
5f:14:d0:da:90:cc:eb:68:79:5c:59:21:d9:75:66:
3d:01:94:08:6c:ec:df:34:a5:cc:de:a9:c6:fe:c9:
d2:7b:6a:93:3a:a7:b8:91:2f:75:ce:3c:31:3f:5f:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:7A:F7:3A:A6:07:EA:56:56:B5:6D:0D:C2:CC:01:B7:3E:9C:7C
X509v3 Authority Key Identifier:
keyid:5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/Qnd69zqmB-pWVrVtDcLMAbc-nHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:97:4d:71:db:69:ee:b7:54:b3:39:bd:0d:c1:f5:07:37:3d:
a1:5e:c3:4d:61:1f:29:1c:08:af:b9:5e:de:95:c7:b3:07:38:
ea:73:bc:5d:7d:67:a6:f7:c8:52:bb:ce:af:3f:77:0f:20:4f:
e8:54:b4:a2:5a:8b:d0:1d:64:d4:fe:9e:95:45:ce:25:c2:d3:
fc:da:71:79:e4:ac:71:57:51:b7:30:04:98:a5:60:81:2b:a5:
5e:14:79:89:27:80:85:2e:32:d6:58:10:8f:2b:3c:cd:dc:7e:
a0:82:53:6f:bd:65:d0:64:65:ff:57:d6:d7:86:c4:a0:f5:dc:
0b:9e:59:bc:fb:10:e1:8f:8d:1c:cc:8e:0a:b9:15:41:54:d5:
8e:19:eb:4c:8c:89:fa:2c:2f:9c:09:94:b6:5a:7b:ed:f9:3d:
55:8c:a3:04:bc:9f:bb:92:d6:81:a1:24:83:43:43:e2:ed:cb:
71:10:aa:be:fc:19:75:72:de:f9:8e:33:ae:71:df:67:28:fa:
a6:95:01:7b:c8:34:51:11:d3:7f:6b:e9:51:c8:8b:60:a3:df:
c8:c2:45:16:24:fa:d9:1f:dd:41:11:43:94:42:5c:a4:0d:2c:
46:9c:da:f9:63:eb:0c:b4:7b:d1:9e:83:27:43:60:2c:dd:f8:
de:1a:76:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDWuULDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZTQzMWU5YjI1ZTg4OWMwMzZkM2MzZTUwMzg0OGY3N2YxY2VjOTliMB4XDTIyMDEw
MTAzNTQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDI3NzdhZjczYWE2
MDdlYTU2NTZiNTZkMGRjMmNjMDFiNzNlOWM3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMB/KIp0KrQErytUaKTAxMfh+JuJ4uMkYmg9D6usGoPtJn4A
f9UDD4g4e9hoeyNc6GW7FdkXhO4ridjVFqocWGvDJ8CUySYzBoWIXTWjYY5TTA7M
ex7HW02pLZFiZu2DWVNFnRN7QyxC5+BQz64EGNBqXzjQN2KfUkBBYwhkENr3xGIZ
zcqrg8Qyutm8rJyXzXIHVXTyMfIv1biu+3r19gvFYRjXHjs7OA96hwsicDe5qaXf
LAip7ddEF3ADuxRY1Od9eiOMzAgLSEDskNlBIco7XxTQ2pDM62h5XFkh2XVmPQGU
CGzs3zSlzN6pxv7J0ntqkzqnuJEvdc48MT9fjIMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRCd3r3OqYH6lZWtW0NwswBtz6cfDAfBgNVHSMEGDAWgBReQx6bJeiJwDbT
w+UDhI938c7JmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hrTWVteVhvaWNBMjA4UGxBNFNQZF9IT3lacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvY2Y1ZmU0LWJlNWQtNDBjNi04M2Y0LTBjZDgxODZlNzI5ZS8x
L1FuZDY5enFtQi1wV1ZyVnREY0xNQWJjLW5Idy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
Y2Y1ZmU0LWJlNWQtNDBjNi04M2Y0LTBjZDgxODZlNzI5ZS8xL1hrTWVteVhvaWNB
MjA4UGxBNFNQZF9IT3lacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy7/CDANBgkqhkiG9w0BAQsFAAOC
AQEAppdNcdtp7rdUszm9DcH1Bzc9oV7DTWEfKRwIr7le3pXHswc46nO8XX1npvfI
UrvOrz93DyBP6FS0olqL0B1k1P6elUXOJcLT/NpxeeSscVdRtzAEmKVggSulXhR5
iSeAhS4y1lgQjys8zdx+oIJTb71l0GRl/1fW14bEoPXcC55ZvPsQ4Y+NHMyOCrkV
QVTVjhnrTIyJ+iwvnAmUtlp77fk9VYyjBLyfu5LWgaEkg0ND4u3LcRCqvvwZdXLe
+Y4zrnHfZyj6ppUBe8g0URHTf2vpUciLYKPfyMJFFiT62R/dQRFDlEJcpA0sRpza
+WPrDLR70Z6DJ0NgLN343hp2kQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:02 2024 by rpki-client on console-ams.rpki-client.org