Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/QSxsbCRbmzsq0qLayEdisGvOqWM.roa
File: QSxsbCRbmzsq0qLayEdisGvOqWM.roa (raw, json)
Hash identifier: olfWydEaNmaxMfo7UtS/Fk8MWh1SZwlT1xKMn6/kvZ0=
Subject key identifier: 41:2C:6C:6C:24:5B:9B:3B:2A:D2:A2:DA:C8:47:62:B0:6B:CE:A9:63
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 016A56B0
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/QSxsbCRbmzsq0qLayEdisGvOqWM.roa
Signing time: Sat 01 Jan 2022 04:57:59 +0000
ROA not before: Sat 01 Jan 2022 04:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23746224 (0x16a56b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 1 04:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=412c6c6c245b9b3b2ad2a2dac84762b06bcea963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:60:1d:d7:ce:41:7b:d1:a4:de:28:c9:fa:
1c:4f:e3:da:06:ee:17:ce:4f:b3:c5:1a:97:e7:6f:
e6:7b:78:38:49:0c:4d:d5:14:c6:9f:09:de:04:15:
24:52:5c:69:09:64:b8:5a:52:c7:43:52:7d:c3:80:
3b:90:8d:27:ef:33:49:8f:0f:8d:3f:2f:d6:ab:91:
a6:6d:cd:be:ce:9a:97:89:83:34:97:e5:76:9b:67:
df:fc:c6:bf:2b:9a:80:90:ff:8f:8a:51:df:a1:fb:
dd:02:a0:15:89:64:c6:56:f2:34:25:cf:41:a0:46:
4e:be:cf:7f:55:d5:04:09:de:d4:cd:a8:66:b7:5b:
9c:34:66:ef:f3:05:59:cf:3b:2a:54:41:86:15:13:
cc:e0:71:a4:6f:8a:bd:4c:d1:8c:fb:c1:77:e8:ab:
18:95:b0:7d:18:c0:55:ff:c7:6c:a1:f2:75:42:65:
5a:fc:64:a7:51:39:27:56:0c:c4:78:f5:da:49:62:
30:4d:96:99:3c:00:e9:45:a5:bb:12:9d:05:01:ea:
52:12:7d:43:aa:7a:cd:1d:d2:dd:2d:22:46:56:14:
3e:15:30:dd:03:05:fb:24:36:82:8a:b0:5b:6c:b6:
d6:63:97:22:1d:d8:a0:3e:60:61:a6:62:d1:4b:91:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:6C:6C:24:5B:9B:3B:2A:D2:A2:DA:C8:47:62:B0:6B:CE:A9:63
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/QSxsbCRbmzsq0qLayEdisGvOqWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ce:cf:05:71:22:ac:ea:0c:8d:72:8a:61:39:70:dc:ad:e0:
24:92:2a:48:81:91:3f:eb:25:db:6d:d1:4e:59:e9:c8:3b:e4:
d8:ac:f2:3e:5d:90:9a:59:db:db:44:e4:b3:6c:37:2d:2f:0c:
79:96:27:35:c0:ed:e9:6a:dd:00:02:42:04:fc:43:6a:2c:77:
fb:ba:b2:f2:83:cf:2e:f0:cc:e7:5f:8c:81:f8:8a:9a:1b:b2:
fa:0d:bf:36:40:b7:a4:84:0f:e6:e7:88:3c:1d:5b:8a:d0:42:
5b:b7:23:82:a1:3e:b1:7c:bc:9b:36:37:b8:e7:de:cf:7c:42:
18:69:fc:f1:8d:ee:57:b1:1c:bb:e5:f9:04:36:3e:a3:d2:10:
86:0b:52:e4:9f:c5:1e:b2:bf:9d:c6:56:45:b0:30:9b:0f:fe:
1c:38:9c:c0:60:39:1e:58:d8:34:47:39:dc:69:f7:c4:18:96:
6a:b0:b7:48:9e:33:ea:c6:b2:00:63:af:93:da:e6:6f:52:0f:
27:fa:87:7a:2e:79:e1:c0:18:bb:b3:28:54:fc:6e:65:77:84:
a6:7a:be:a8:2a:e0:34:1d:10:e1:97:d7:c1:cb:d9:2e:57:85:
03:83:a4:f6:1a:35:74:ce:fa:52:21:49:23:38:02:93:08:9e:
fb:a5:a9:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWpWsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGU0ODQ4NWNlOWIwZTQyNTY0MDgwNGVkYzBlZDJiYTZiOGY0YjhmMB4XDTIyMDEw
MTA0NTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDEyYzZjNmMyNDVi
OWIzYjJhZDJhMmRhYzg0NzYyYjA2YmNlYTk2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMg2YB3XzkF70aTeKMn6HE/j2gbuF85Ps8Ual+dv5nt4OEkM
TdUUxp8J3gQVJFJcaQlkuFpSx0NSfcOAO5CNJ+8zSY8PjT8v1quRpm3Nvs6al4mD
NJfldptn3/zGvyuagJD/j4pR36H73QKgFYlkxlbyNCXPQaBGTr7Pf1XVBAne1M2o
ZrdbnDRm7/MFWc87KlRBhhUTzOBxpG+KvUzRjPvBd+irGJWwfRjAVf/HbKHydUJl
Wvxkp1E5J1YMxHj12kliME2WmTwA6UWluxKdBQHqUhJ9Q6p6zR3S3S0iRlYUPhUw
3QMF+yQ2goqwW2y21mOXIh3YoD5gYaZi0UuRhtECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRBLGxsJFubOyrSotrIR2Kwa86pYzAfBgNVHSMEGDAWgBSA5ISFzpsOQlZA
gE7cDtK6a49LjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPU0VoYzZiRGtKV1FJQk8zQTdTdW11UFM0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8x
L1FTeHNiQ1JibXpzcTBxTGF5RWRpc0d2T3FXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8xL2dPU0VoYzZiRGtK
V1FJQk8zQTdTdW11UFM0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC7+ajANBgkqhkiG9w0BAQsFAAOC
AQEAaM7PBXEirOoMjXKKYTlw3K3gJJIqSIGRP+sl223RTlnpyDvk2KzyPl2Qmlnb
20Tks2w3LS8MeZYnNcDt6WrdAAJCBPxDaix3+7qy8oPPLvDM51+MgfiKmhuy+g2/
NkC3pIQP5ueIPB1bitBCW7cjgqE+sXy8mzY3uOfez3xCGGn88Y3uV7Ecu+X5BDY+
o9IQhgtS5J/FHrK/ncZWRbAwmw/+HDicwGA5HljYNEc53Gn3xBiWarC3SJ4z6say
AGOvk9rmb1IPJ/qHei554cAYu7MoVPxuZXeEpnq+qCrgNB0Q4ZfXwcvZLleFA4Ok
9ho1dM76UiFJIzgCkwie+6WpAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org