Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/mENa3cjEon3znvzdfzNhqbg9dWI.roa
File: mENa3cjEon3znvzdfzNhqbg9dWI.roa (raw, json)
Hash identifier: zhzY1/+l5vOYENL/sNvQzrJ6j0n2lRvZvnaP9t2WC6U=
Subject key identifier: 98:43:5A:DD:C8:C4:A2:7D:F3:9E:FC:DD:7F:33:61:A9:B8:3D:75:62
Certificate issuer: /CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Certificate serial: 01856E38CC6EAEC7BFFF24B9877967F1F148
Authority key identifier: 67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/mENa3cjEon3znvzdfzNhqbg9dWI.roa
Signing time: Sun 01 Jan 2023 16:44:54 +0000
ROA not before: Sun 01 Jan 2023 16:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:cc:6e:ae:c7:bf:ff:24:b9:87:79:67:f1:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Validity
Not Before: Jan 1 16:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98435addc8c4a27df39efcdd7f3361a9b83d7562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:70:c3:d8:9e:e9:5e:3b:a3:9d:f2:e5:96:
c5:d5:ab:a9:dd:b7:d3:ed:c7:0d:43:23:2f:cf:2d:
e2:af:37:93:8d:18:e3:3b:cb:d1:5f:a5:20:b0:e9:
11:f1:83:b4:7c:c9:0d:c0:31:16:1a:17:c2:bf:45:
6a:82:db:32:c8:82:39:b8:6a:79:c5:52:23:18:54:
d0:07:e9:89:35:03:1d:92:a2:9c:05:3e:4d:e3:c7:
f4:2f:eb:90:23:c3:0f:24:2a:2b:39:55:8d:72:df:
27:b7:66:43:8c:53:28:ad:8e:72:02:94:6d:29:cc:
8c:2d:2e:92:ce:8b:6c:7d:1c:75:83:4f:21:98:2a:
84:9b:db:70:51:cb:1d:e8:fd:76:76:82:2e:a7:9f:
c8:38:8e:e8:00:09:c3:9d:f5:a0:3d:29:c5:b4:e6:
ad:fb:ae:e4:34:89:f4:5a:f5:62:3d:2a:59:42:4f:
17:2d:18:7b:97:0a:e7:16:08:b7:c1:96:0e:58:4e:
f9:98:4a:34:86:23:4f:d1:fa:9a:c9:61:d1:44:18:
ec:43:c4:53:5a:9b:82:39:d3:d7:14:be:c7:ab:6f:
a3:b1:51:6e:f2:79:08:29:df:56:46:d3:04:42:29:
c5:bb:36:fe:19:96:c3:7e:4a:43:b1:6f:01:4b:1a:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:43:5A:DD:C8:C4:A2:7D:F3:9E:FC:DD:7F:33:61:A9:B8:3D:75:62
X509v3 Authority Key Identifier:
keyid:67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/mENa3cjEon3znvzdfzNhqbg9dWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:e1:3c:f3:f4:79:97:13:f7:74:c0:a3:24:09:79:cc:35:
f6:c5:d2:46:85:aa:01:1c:8a:6f:36:54:9d:cc:2c:f8:4c:7d:
6f:56:6f:68:31:32:41:9e:92:36:00:b0:be:8a:06:d4:ee:f6:
e4:35:7a:3a:ad:bc:29:4e:f5:be:6e:3d:3a:e5:48:d7:7f:4b:
e5:0d:83:6f:90:f3:78:c5:24:bf:85:11:51:6a:bf:b8:69:ce:
9f:31:8d:a9:17:64:d3:eb:f2:28:e5:c1:09:4e:74:90:90:5e:
28:0b:c7:a8:c9:12:eb:6d:52:af:4f:3a:12:9e:c2:69:8e:ee:
ea:cc:32:b2:bd:e5:77:3a:e1:cc:c2:4d:3b:ec:21:54:de:20:
d0:09:2e:a8:33:c3:a1:d0:af:2a:ec:e9:8f:13:60:77:fd:79:
fc:40:c3:7a:1d:11:8d:ee:ce:c5:b7:4b:65:b0:0f:42:f8:c1:
e8:b2:84:97:aa:bd:a4:0a:1f:86:d0:a9:fe:fb:15:d6:50:ab:
21:f8:26:df:38:08:20:13:93:b0:fd:38:76:6c:94:7a:5f:9a:
d3:ba:01:39:2a:44:ff:8a:7d:0a:28:5f:e6:2b:0f:36:2b:37:
a4:14:f0:8b:64:d5:18:6f:2d:5b:f0:90:ed:e5:8b:38:36:2c:
8c:46:e1:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuOMxurse//yS5h3ln8fFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODFlZjc0NDZhZmU3MDhlYjYxN2NhNTAzNmE2M2RlMGI0
YTQ1ODkwHhcNMjMwMTAxMTY0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODQzNWFkZGM4YzRhMjdkZjM5ZWZjZGQ3ZjMzNjFhOWI4M2Q3NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRJww9ie6V47o53y5ZbF1aup3bfT
7ccNQyMvzy3irzeTjRjjO8vRX6UgsOkR8YO0fMkNwDEWGhfCv0VqgtsyyII5uGp5
xVIjGFTQB+mJNQMdkqKcBT5N48f0L+uQI8MPJCorOVWNct8nt2ZDjFMorY5yApRt
KcyMLS6SzotsfRx1g08hmCqEm9twUcsd6P12doIup5/IOI7oAAnDnfWgPSnFtOat
+67kNIn0WvViPSpZQk8XLRh7lwrnFgi3wZYOWE75mEo0hiNP0fqayWHRRBjsQ8RT
WpuCOdPXFL7Hq2+jsVFu8nkIKd9WRtMEQinFuzb+GZbDfkpDsW8BSxox1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhDWt3IxKJ985783X8zYam4PXViMB8GA1UdIwQY
MBaAFGeB73RGr+cI62F8pQNqY94LSkWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEt
ZDE2MTRkNDE5YjA0LzEvbUVOYTNjakVvbjN6bnZ6ZGZ6TmhxYmc5ZFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEtZDE2MTRkNDE5YjA0
LzEvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5rMA0G
CSqGSIb3DQEBCwUAA4IBAQCclOE88/R5lxP3dMCjJAl5zDX2xdJGhaoBHIpvNlSd
zCz4TH1vVm9oMTJBnpI2ALC+igbU7vbkNXo6rbwpTvW+bj065UjXf0vlDYNvkPN4
xSS/hRFRar+4ac6fMY2pF2TT6/Io5cEJTnSQkF4oC8eoyRLrbVKvTzoSnsJpju7q
zDKyveV3OuHMwk077CFU3iDQCS6oM8Oh0K8q7OmPE2B3/Xn8QMN6HRGN7s7Ft0tl
sA9C+MHosoSXqr2kCh+G0Kn++xXWUKsh+CbfOAggE5Ow/Th2bJR6X5rTugE5KkT/
in0KKF/mKw82KzekFPCLZNUYby1b8JDt5Ys4NiyMRuH4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org