Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/qN-fVz6Y_zwHIftVCoDsNQsiITQ.roa
File: qN-fVz6Y_zwHIftVCoDsNQsiITQ.roa (raw, json)
Hash identifier: ok3VggH508ZFtxIZisXe9paeIscxKX/QKcHGeWqMjkU=
Subject key identifier: A8:DF:9F:57:3E:98:FF:3C:07:21:FB:55:0A:80:EC:35:0B:22:21:34
Certificate issuer: /CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Certificate serial: 0186873E574BCEBC62D50615636ACE22943E
Authority key identifier: 67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/qN-fVz6Y_zwHIftVCoDsNQsiITQ.roa
Signing time: Sat 25 Feb 2023 06:24:15 +0000
ROA not before: Sat 25 Feb 2023 06:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:3e:57:4b:ce:bc:62:d5:06:15:63:6a:ce:22:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Validity
Not Before: Feb 25 06:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8df9f573e98ff3c0721fb550a80ec350b222134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:11:f5:e6:6c:95:5d:a2:a9:7e:f6:1d:ad:
69:d3:0d:54:87:9d:ea:0c:90:c5:d6:b5:80:be:2e:
73:ec:15:c2:13:d8:10:26:e5:de:a9:2a:2e:0c:2f:
af:d5:31:71:3a:6b:65:74:ec:f0:93:4b:30:38:28:
a9:9c:67:b4:4e:7a:97:d7:25:b8:1b:a6:a7:1e:dc:
db:53:72:33:7e:05:fc:92:14:9a:8e:48:a9:41:fc:
c2:55:9a:8f:ee:df:45:aa:b9:ff:75:60:b4:c3:c7:
ac:17:8b:0a:3c:4b:56:d9:6c:05:c9:a6:b0:05:3a:
d0:1d:29:91:0c:55:b9:71:8a:d9:77:0b:54:2b:20:
2f:13:67:22:4c:77:1f:01:b2:4c:94:bc:73:4b:cd:
70:fa:65:80:61:ef:96:1b:09:0b:99:69:4a:83:5f:
d5:6e:20:56:17:b7:34:3d:ea:8f:ed:1a:7a:90:11:
24:63:a9:9d:78:d9:79:47:a0:4f:23:ee:c4:1e:8d:
8e:cd:a7:c5:79:62:27:f4:3f:f8:a9:89:e8:37:a2:
a0:1a:2d:04:b4:41:95:82:b4:81:e5:39:41:73:fb:
f1:a6:9e:82:96:2f:d9:09:9b:64:66:73:d0:57:cc:
57:df:a4:5f:1c:e6:13:8a:99:ed:32:08:a7:55:a5:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:9F:57:3E:98:FF:3C:07:21:FB:55:0A:80:EC:35:0B:22:21:34
X509v3 Authority Key Identifier:
keyid:67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/qN-fVz6Y_zwHIftVCoDsNQsiITQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:c0:5f:af:34:92:f6:20:3b:f0:6b:fd:8c:d0:8d:16:ab:
8a:df:d5:64:3e:0f:6c:6e:ff:29:b3:b5:9b:b3:7c:d0:43:0e:
31:ea:4b:8e:db:51:0d:e6:57:24:ca:54:b3:0c:e0:05:7a:53:
87:49:cb:d4:20:43:bc:f8:5e:40:4d:30:a3:03:c0:09:ab:d7:
58:33:c2:6c:2c:9a:89:81:23:af:19:29:61:6e:db:9c:8c:95:
74:ee:03:46:f7:2e:77:ae:24:51:ae:14:26:34:ad:23:ca:17:
86:be:66:3c:fd:8e:fc:e8:b6:fe:20:d0:f9:dc:9a:cc:9a:39:
66:e7:de:87:99:e7:9f:43:dc:17:d1:57:e1:66:52:ca:f7:d7:
94:02:7a:d7:93:cb:06:0e:0f:08:60:1a:ee:d3:b0:e2:3e:ad:
1d:66:3a:6a:2f:7b:81:d3:a9:79:97:6f:38:24:02:4a:4c:21:
2f:b5:03:eb:78:0a:2c:a7:26:22:68:31:fe:40:7a:67:68:79:
b5:c1:e4:68:ed:f4:66:8c:17:7e:00:36:d7:8e:92:78:40:02:
d4:da:1c:94:e9:28:0b:40:fc:87:93:a0:ff:49:28:f7:6f:9e:
be:cf:22:89:5c:ee:4e:72:21:00:9f:b6:4c:45:ae:57:7a:a7:
47:ca:ba:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaHPldLzrxi1QYVY2rOIpQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODFlZjc0NDZhZmU3MDhlYjYxN2NhNTAzNmE2M2RlMGI0
YTQ1ODkwHhcNMjMwMjI1MDYyNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGRmOWY1NzNlOThmZjNjMDcyMWZiNTUwYTgwZWMzNTBiMjIyMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApasR9eZslV2iqX72Ha1p0w1Uh53q
DJDF1rWAvi5z7BXCE9gQJuXeqSouDC+v1TFxOmtldOzwk0swOCipnGe0TnqX1yW4
G6anHtzbU3IzfgX8khSajkipQfzCVZqP7t9Fqrn/dWC0w8esF4sKPEtW2WwFyaaw
BTrQHSmRDFW5cYrZdwtUKyAvE2ciTHcfAbJMlLxzS81w+mWAYe+WGwkLmWlKg1/V
biBWF7c0PeqP7Rp6kBEkY6mdeNl5R6BPI+7EHo2OzafFeWIn9D/4qYnoN6KgGi0E
tEGVgrSB5TlBc/vxpp6Cli/ZCZtkZnPQV8xX36RfHOYTipntMginVaUvxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjfn1c+mP88ByH7VQqA7DULIiE0MB8GA1UdIwQY
MBaAFGeB73RGr+cI62F8pQNqY94LSkWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEt
ZDE2MTRkNDE5YjA0LzEvcU4tZlZ6NllfendISWZ0VkNvRHNOUXNpSVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEtZDE2MTRkNDE5YjA0
LzEvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5rMA0G
CSqGSIb3DQEBCwUAA4IBAQBikcBfrzSS9iA78Gv9jNCNFquK39VkPg9sbv8ps7Wb
s3zQQw4x6kuO21EN5lckylSzDOAFelOHScvUIEO8+F5ATTCjA8AJq9dYM8JsLJqJ
gSOvGSlhbtucjJV07gNG9y53riRRrhQmNK0jyheGvmY8/Y786Lb+IND53JrMmjlm
596HmeefQ9wX0VfhZlLK99eUAnrXk8sGDg8IYBru07DiPq0dZjpqL3uB06l5l284
JAJKTCEvtQPreAospyYiaDH+QHpnaHm1weRo7fRmjBd+ADbXjpJ4QALU2hyU6SgL
QPyHk6D/SSj3b56+zyKJXO5OciEAn7ZMRa5XeqdHyrog
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:14:24 2023 by rpki-client on console-ams.rpki-client.org