Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa
File: 6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa (raw, json)
Hash identifier: nLGmkB6cET0f7zZ+7yzfCP5cqCq21kCcBvLgSfloPDo=
Subject key identifier: EA:4E:3B:6E:64:D8:0A:C3:65:1D:73:CD:47:9B:44:27:6C:41:5B:F8
Certificate issuer: /CN=fb3d0aad7f5bca77cf928fb2b29754bd8c2330e1
Certificate serial: 02EF3AA0
Authority key identifier: FB:3D:0A:AD:7F:5B:CA:77:CF:92:8F:B2:B2:97:54:BD:8C:23:30:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z0KrX9bynfPko-yspdUvYwjMOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa
Signing time: Sat 01 Jan 2022 07:58:51 +0000
ROA not before: Sat 01 Jan 2022 07:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200738
IP address blocks: 193.26.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49232544 (0x2ef3aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d0aad7f5bca77cf928fb2b29754bd8c2330e1
Validity
Not Before: Jan 1 07:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea4e3b6e64d80ac3651d73cd479b44276c415bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:e4:25:58:c3:7c:73:17:99:18:4c:69:8c:
a5:2a:af:3a:d5:3b:ed:3d:fa:69:72:b9:0d:46:e2:
17:b9:5c:06:19:ff:04:ee:f7:22:f1:a1:6e:87:8f:
30:80:04:b5:8b:04:a6:e3:8e:62:cc:4f:b9:f5:85:
f3:9d:50:39:e8:8e:a7:36:32:f5:88:51:35:98:c9:
59:db:ee:82:95:c7:10:21:b8:5e:b9:d4:a9:8c:cb:
de:22:5b:28:66:54:e7:63:8e:d5:af:ee:b5:47:24:
9d:81:04:07:4e:21:45:6e:fd:5c:d5:51:f3:8b:22:
bf:31:6c:a7:62:85:bd:4c:0b:61:45:8d:cd:e8:c9:
2b:ba:f5:27:00:6a:0d:96:b3:c3:6a:04:7a:c9:b3:
7b:3a:ec:a1:81:44:e9:f5:f5:83:5d:53:a4:85:e0:
a2:90:7a:a5:e9:7f:92:f9:aa:b7:15:f0:f3:4c:06:
90:b1:74:69:fe:9a:54:32:4c:93:8f:0f:1f:03:9b:
6b:dc:99:77:a5:69:61:a8:70:10:1a:6e:f9:e4:b4:
52:bc:c9:ee:3e:fe:d8:05:cc:66:81:4f:dc:55:52:
d8:9f:79:3f:2c:91:37:0c:4f:8c:9f:1b:2d:88:0e:
4c:68:f0:ad:45:50:08:b3:0d:7d:b5:49:aa:af:25:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4E:3B:6E:64:D8:0A:C3:65:1D:73:CD:47:9B:44:27:6C:41:5B:F8
X509v3 Authority Key Identifier:
keyid:FB:3D:0A:AD:7F:5B:CA:77:CF:92:8F:B2:B2:97:54:BD:8C:23:30:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z0KrX9bynfPko-yspdUvYwjMOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/1-z0KrX9bynfPko-yspdUvYwjMOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.148.0/22
Signature Algorithm: sha256WithRSAEncryption
99:41:18:d5:fc:14:ee:74:ee:55:22:d1:6c:8c:22:f8:d9:a2:
34:fc:61:7a:9a:c6:0d:75:a1:6d:27:fb:ff:86:cb:d5:a6:f9:
f1:73:97:c9:07:fe:83:17:b2:2d:12:94:cd:e9:43:39:fe:2f:
6d:f6:18:e9:36:1b:e4:2f:67:b6:7f:82:c0:eb:0d:ee:4f:31:
2d:c1:7c:f5:21:76:23:5e:2a:a4:34:2d:b0:24:bd:6e:3b:50:
e1:53:94:ae:cc:fa:52:ba:08:08:86:19:5e:ae:f6:2e:65:f2:
96:31:70:e4:5e:27:d8:37:23:67:a8:56:c1:4c:17:8b:bf:4a:
d6:ae:31:1e:f6:17:3c:7f:03:30:c2:e8:7a:68:ca:bf:ee:74:
53:52:07:09:56:3d:41:ae:7b:a0:37:d1:5c:d5:23:3e:7d:d1:
4c:ae:8f:92:fb:67:a5:8e:c6:fb:72:d1:8b:a7:32:e5:a3:9b:
c7:2b:98:8a:1c:2d:21:ef:02:3b:3b:2d:18:a3:29:86:ef:a5:
4f:a5:1f:53:f7:d9:3f:9f:ee:24:be:d6:22:e3:81:9d:ca:e0:
3a:88:62:10:ba:cb:c8:61:b4:1c:11:b0:78:c5:39:8d:78:3a:
1f:2d:1b:79:66:16:11:bb:ef:e6:ab:0a:79:63:76:2d:0b:a2:
e2:dc:dd:31
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAu86oDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjNkMGFhZDdmNWJjYTc3Y2Y5MjhmYjJiMjk3NTRiZDhjMjMzMGUxMB4XDTIyMDEw
MTA3NTg1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWE0ZTNiNmU2NGQ4
MGFjMzY1MWQ3M2NkNDc5YjQ0Mjc2YzQxNWJmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFD5CVYw3xzF5kYTGmMpSqvOtU77T36aXK5DUbiF7lcBhn/
BO73IvGhboePMIAEtYsEpuOOYsxPufWF851QOeiOpzYy9YhRNZjJWdvugpXHECG4
XrnUqYzL3iJbKGZU52OO1a/utUcknYEEB04hRW79XNVR84sivzFsp2KFvUwLYUWN
zejJK7r1JwBqDZazw2oEesmzezrsoYFE6fX1g11TpIXgopB6pel/kvmqtxXw80wG
kLF0af6aVDJMk48PHwOba9yZd6VpYahwEBpu+eS0UrzJ7j7+2AXMZoFP3FVS2J95
PyyRNwxPjJ8bLYgOTGjwrUVQCLMNfbVJqq8lg9MCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTqTjtuZNgKw2Udc81Hm0QnbEFb+DAfBgNVHSMEGDAWgBT7PQqtf1vKd8+S
j7Kyl1S9jCMw4TAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtejBLclg5YnluZlBrby15c3BkVXZZd2pNT0UuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzhlLzNkOGVjZi0zNTRhLTQ3MjYtYjlmMC1mNzA3MDA4ZjRmMzIv
MS82azQ3Ym1UWUNzTmxIWFBOUjV0RUoyeEJXX2cucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhl
LzNkOGVjZi0zNTRhLTQ3MjYtYjlmMC1mNzA3MDA4ZjRmMzIvMS8xLXowS3JYOWJ5
bmZQa28teXNwZFV2WXdqTU9FLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRqUMA0GCSqGSIb3DQEBCwUA
A4IBAQCZQRjV/BTudO5VItFsjCL42aI0/GF6msYNdaFtJ/v/hsvVpvnxc5fJB/6D
F7ItEpTN6UM5/i9t9hjpNhvkL2e2f4LA6w3uTzEtwXz1IXYjXiqkNC2wJL1uO1Dh
U5SuzPpSuggIhhlervYuZfKWMXDkXifYNyNnqFbBTBeLv0rWrjEe9hc8fwMwwuh6
aMq/7nRTUgcJVj1BrnugN9Fc1SM+fdFMro+S+2eljsb7ctGLpzLlo5vHK5iKHC0h
7wI7Oy0YoymG76VPpR9T99k/n+4kvtYi44GdyuA6iGIQusvIYbQcEbB4xTmNeDof
LRt5ZhYRu+/mqwp5Y3YtC6Li3N0x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:53 2024 by rpki-client on console-fra.rpki-client.org