Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/6Qkl-14tcbpV0T3zL5vdXk4nRC0.roa
File: 6Qkl-14tcbpV0T3zL5vdXk4nRC0.roa (raw, json)
Hash identifier: UTIl5Yupon/4mDikHbHaxol3LZHPGqc4YxnVn+y9t/M=
Subject key identifier: E9:09:25:FB:5E:2D:71:BA:55:D1:3D:F3:2F:9B:DD:5E:4E:27:44:2D
Certificate issuer: /CN=be55ecdf74c6b37e0e021a5c31c7b1b388808f69
Certificate serial: 0E890FC3
Authority key identifier: BE:55:EC:DF:74:C6:B3:7E:0E:02:1A:5C:31:C7:B1:B3:88:80:8F:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlXs33TGs34OAhpcMcexs4iAj2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/6Qkl-14tcbpV0T3zL5vdXk4nRC0.roa
Signing time: Sat 01 Jan 2022 00:52:09 +0000
ROA not before: Sat 01 Jan 2022 00:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205673
IP address blocks: 185.210.84.0/22 maxlen: 24
185.235.132.0/22 maxlen: 24
2a0b:53c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243863491 (0xe890fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55ecdf74c6b37e0e021a5c31c7b1b388808f69
Validity
Not Before: Jan 1 00:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e90925fb5e2d71ba55d13df32f9bdd5e4e27442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:8d:a2:7f:7c:79:92:31:33:6b:73:0a:42:
a6:9c:be:8f:ce:97:1d:21:6a:2a:48:97:18:94:35:
61:26:c0:7a:f1:60:1a:06:47:f7:55:cb:6b:56:eb:
d5:cb:17:3b:40:67:ff:d7:46:62:69:f6:e5:b2:e5:
49:29:89:58:2a:e1:21:43:58:55:ef:8e:c4:b2:8c:
c4:87:db:de:b9:e2:f8:b0:bb:94:3b:3a:79:87:c8:
c6:b3:50:38:69:33:f4:c9:e9:06:76:04:29:89:e4:
77:01:e7:01:9a:8c:34:3e:ea:eb:d4:8f:7a:af:66:
95:e4:fc:79:ea:f6:39:bb:b0:1d:34:8d:d5:d1:29:
93:16:bb:b6:9c:bb:a8:56:d2:50:1c:f5:df:4d:c3:
ee:74:31:a9:06:0f:b3:fa:95:a1:c1:ba:7d:58:74:
f5:6f:68:d7:83:6a:ba:8a:6c:10:90:fe:08:71:ff:
ef:24:3d:43:ea:0b:73:e7:41:bd:a5:71:8f:05:68:
ff:bd:f6:b6:e9:19:a7:42:6e:ba:f5:00:97:98:fa:
11:42:07:03:b6:2b:a1:77:48:14:c7:aa:70:93:0d:
f9:df:b7:1a:31:df:73:9f:7f:13:6f:4a:6d:39:e0:
44:7a:5b:f8:71:56:89:88:47:0c:64:95:8c:1e:ab:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:25:FB:5E:2D:71:BA:55:D1:3D:F3:2F:9B:DD:5E:4E:27:44:2D
X509v3 Authority Key Identifier:
keyid:BE:55:EC:DF:74:C6:B3:7E:0E:02:1A:5C:31:C7:B1:B3:88:80:8F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlXs33TGs34OAhpcMcexs4iAj2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/6Qkl-14tcbpV0T3zL5vdXk4nRC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/vlXs33TGs34OAhpcMcexs4iAj2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.84.0/22
185.235.132.0/22
IPv6:
2a0b:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:85:44:81:1e:6f:04:7f:e7:2f:82:27:13:7f:31:09:cb:73:
51:04:62:77:43:fc:0f:c2:49:12:8f:72:28:68:3c:e5:21:f8:
3f:a6:4e:ea:30:75:f9:3e:be:2a:82:da:23:47:5d:51:90:fe:
5f:93:1a:4f:65:fa:0b:a4:cd:bc:ee:a1:fd:d8:8a:4d:82:54:
c7:d4:3f:4e:88:25:8b:08:90:39:ef:d0:e1:e7:7f:9e:77:0c:
83:6b:97:39:c4:81:9f:8f:ca:70:66:9a:70:2c:35:fa:51:5a:
29:e1:92:72:09:20:b1:29:ea:58:49:9e:96:99:4f:a9:cf:94:
39:b8:cb:26:73:ce:84:66:54:f9:37:44:92:33:be:61:0e:99:
6e:f1:fe:0f:01:53:2c:25:39:52:a9:06:4b:88:99:02:31:aa:
e6:7a:5e:bb:d1:80:07:a8:73:35:b4:51:10:e2:3d:26:c6:e1:
2d:91:1b:5d:63:48:93:f5:84:0d:df:5a:f6:7f:ac:7d:d2:ee:
9b:e6:db:ac:76:66:33:74:e7:78:2e:b7:dd:0c:d8:8a:32:42:
61:f4:11:7a:38:51:0b:7f:48:b7:ba:25:2e:86:20:0a:6e:fc:
a9:df:47:e3:aa:f2:6a:28:21:fa:2e:a5:13:c3:64:da:18:3f:
c8:42:70:6e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDokPwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTU1ZWNkZjc0YzZiMzdlMGUwMjFhNWMzMWM3YjFiMzg4ODA4ZjY5MB4XDTIyMDEw
MTAwNTIwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTkwOTI1ZmI1ZTJk
NzFiYTU1ZDEzZGYzMmY5YmRkNWU0ZTI3NDQyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJiQjaJ/fHmSMTNrcwpCppy+j86XHSFqKkiXGJQ1YSbAevFg
GgZH91XLa1br1csXO0Bn/9dGYmn25bLlSSmJWCrhIUNYVe+OxLKMxIfb3rni+LC7
lDs6eYfIxrNQOGkz9MnpBnYEKYnkdwHnAZqMND7q69SPeq9mleT8eer2ObuwHTSN
1dEpkxa7tpy7qFbSUBz1303D7nQxqQYPs/qVocG6fVh09W9o14NquopsEJD+CHH/
7yQ9Q+oLc+dBvaVxjwVo/732tukZp0JuuvUAl5j6EUIHA7YroXdIFMeqcJMN+d+3
GjHfc59/E29KbTngRHpb+HFWiYhHDGSVjB6r+E8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTpCSX7Xi1xulXRPfMvm91eTidELTAfBgNVHSMEGDAWgBS+VezfdMazfg4C
Glwxx7GziICPaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZsWHMzM1RHczM0T0FocGNNY2V4czRpQWoyay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvZmJkZjAxLWNhYTctNDcyYi05NWFhLWUyMzk4NzA5MjQ4ZS8x
LzZRa2wtMTR0Y2JwVjBUM3pMNXZkWGs0blJDMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
ZmJkZjAxLWNhYTctNDcyYi05NWFhLWUyMzk4NzA5MjQ4ZS8xL3ZsWHMzM1RHczM0
T0FocGNNY2V4czRpQWoyay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArnSVAMEArnrhDANBAIAAjAHAwUA
KgtTwDANBgkqhkiG9w0BAQsFAAOCAQEAjIVEgR5vBH/nL4InE38xCctzUQRid0P8
D8JJEo9yKGg85SH4P6ZO6jB1+T6+KoLaI0ddUZD+X5MaT2X6C6TNvO6h/diKTYJU
x9Q/TogliwiQOe/Q4ed/nncMg2uXOcSBn4/KcGaacCw1+lFaKeGScgkgsSnqWEme
lplPqc+UObjLJnPOhGZU+TdEkjO+YQ6ZbvH+DwFTLCU5UqkGS4iZAjGq5npeu9GA
B6hzNbRREOI9JsbhLZEbXWNIk/WEDd9a9n+sfdLum+bbrHZmM3TneC633QzYijJC
YfQRejhRC39It7olLoYgCm78qd9H46ryaigh+i6lE8Nk2hg/yEJwbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:19 2024 by rpki-client on console-fra.rpki-client.org