Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/6zXKqqWhcuNW1e9kU61u4AwQE9w.roa
File: 6zXKqqWhcuNW1e9kU61u4AwQE9w.roa (raw, json)
Hash identifier: rGkMlGf0uFwVpax2xyGKSBebtbJipeKRcIbvyXKcL3g=
Subject key identifier: EB:35:CA:AA:A5:A1:72:E3:56:D5:EF:64:53:AD:6E:E0:0C:10:13:DC
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 020753DA
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/6zXKqqWhcuNW1e9kU61u4AwQE9w.roa
Signing time: Mon 20 Jun 2022 14:45:44 +0000
ROA not before: Mon 20 Jun 2022 14:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34034650 (0x20753da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Jun 20 14:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb35caaaa5a172e356d5ef6453ad6ee00c1013dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:f1:bd:41:40:df:02:a4:29:27:9a:d6:ad:
fa:08:34:ea:17:b2:ea:dd:dc:55:28:6e:f1:22:d2:
d7:24:a5:68:0a:ef:fa:1d:26:51:39:06:7c:74:05:
90:4b:2f:62:57:30:65:50:43:53:d7:ba:bf:06:2e:
09:ad:67:fb:25:53:6d:7d:dd:66:ba:fa:0e:f3:1b:
4e:9f:8e:f7:97:3f:80:2b:23:38:72:ae:54:61:3c:
26:6d:99:b6:0e:cb:91:82:27:80:31:fc:7c:13:37:
ef:09:c4:53:1d:7f:e5:b9:47:4f:5f:92:19:e4:68:
a8:72:be:a3:fa:d9:ad:0c:85:62:06:ff:9d:35:18:
ea:0d:5a:e7:b5:6f:2d:a4:37:64:5c:67:f2:90:92:
fa:6c:c1:01:22:b1:81:69:08:bd:bf:e4:f7:83:31:
cc:85:d0:76:54:1b:64:84:69:cc:29:89:22:26:0f:
9f:dd:6e:3c:0e:60:99:e2:1e:5f:13:38:ec:9c:0b:
4f:df:a0:61:3d:6c:d2:eb:fa:8d:31:98:b9:5c:ed:
1c:c9:24:47:d6:77:4e:95:d7:53:37:cc:94:1a:81:
81:1a:b8:7d:12:2d:a8:fa:90:ca:24:ed:77:32:af:
25:27:52:6b:ec:62:76:ee:4e:d9:41:60:78:b7:52:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:CA:AA:A5:A1:72:E3:56:D5:EF:64:53:AD:6E:E0:0C:10:13:DC
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/6zXKqqWhcuNW1e9kU61u4AwQE9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:53:ae:e7:a7:95:b3:73:d5:34:f8:3d:de:6f:4b:0d:f9:c9:
cc:77:ff:1b:53:09:ee:7d:63:d0:2f:10:54:b3:2f:83:19:18:
1c:d6:4b:60:ae:91:7c:7c:da:db:6c:8b:57:9d:92:bd:23:c2:
99:a5:87:8e:91:9b:63:aa:c2:b4:a2:38:91:60:41:68:36:c0:
e3:26:c7:50:33:81:6f:fb:a6:b7:9e:ff:a7:5b:a7:c9:a3:d1:
e4:ef:1a:72:25:9f:03:08:f8:a6:a1:a6:2d:c6:42:53:51:2c:
98:73:f0:95:b2:58:6c:b1:ad:a0:c9:ff:bb:4b:bc:92:5f:05:
4c:c8:1c:76:b5:46:0b:53:a1:04:49:e6:53:ce:52:a1:01:21:
28:fb:82:1e:91:cf:1a:31:76:ea:d7:33:0f:4d:05:57:66:d8:
48:ec:4f:3b:53:c9:01:05:53:03:40:5e:7b:4f:f1:e7:68:4f:
de:2d:c3:a3:8d:a5:9a:67:6a:3c:1a:91:3e:65:f2:3d:75:94:
94:88:e4:fe:74:68:9f:79:72:3e:75:ad:81:89:53:5f:0a:b7:
57:cd:c1:60:39:82:d4:7e:ca:75:cc:fe:ef:f5:56:16:e1:cb:
12:4a:62:ee:61:3b:89:2c:2d:5b:51:33:e5:b6:4f:18:7d:9a:
bc:21:c8:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAgdT2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZDg0OTA2MzYxNmFlZThiOWFlOTA4NGFkZTcyODQyYTAwN2QzNjc2MB4XDTIyMDYy
MDE0NDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIzNWNhYWFhNWEx
NzJlMzU2ZDVlZjY0NTNhZDZlZTAwYzEwMTNkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLs8b1BQN8CpCknmtat+gg06hey6t3cVShu8SLS1ySlaArv
+h0mUTkGfHQFkEsvYlcwZVBDU9e6vwYuCa1n+yVTbX3dZrr6DvMbTp+O95c/gCsj
OHKuVGE8Jm2Ztg7LkYIngDH8fBM37wnEUx1/5blHT1+SGeRoqHK+o/rZrQyFYgb/
nTUY6g1a57VvLaQ3ZFxn8pCS+mzBASKxgWkIvb/k94MxzIXQdlQbZIRpzCmJIiYP
n91uPA5gmeIeXxM47JwLT9+gYT1s0uv6jTGYuVztHMkkR9Z3TpXXUzfMlBqBgRq4
fRItqPqQyiTtdzKvJSdSa+xidu5O2UFgeLdSo3MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTrNcqqpaFy41bV72RTrW7gDBAT3DAfBgNVHSMEGDAWgBTdhJBjYWrui5rp
CErecoQqAH02djAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNZU1FZMkZxN291YTZRaEszbktFS2dCOU5uWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTEvMDkzMDU4LWRlNDAtNDVkOS04ZjJmLWM4ZjFlMTQ3ODgzOC8x
LzZ6WEtxcVdoY3VOVzFlOWtVNjF1NEF3UUU5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEv
MDkzMDU4LWRlNDAtNDVkOS04ZjJmLWM4ZjFlMTQ3ODgzOC8xLzNZU1FZMkZxN291
YTZRaEszbktFS2dCOU5uWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITJjANBgkqhkiG9w0BAQsFAAOC
AQEA0lOu56eVs3PVNPg93m9LDfnJzHf/G1MJ7n1j0C8QVLMvgxkYHNZLYK6RfHza
22yLV52SvSPCmaWHjpGbY6rCtKI4kWBBaDbA4ybHUDOBb/umt57/p1unyaPR5O8a
ciWfAwj4pqGmLcZCU1EsmHPwlbJYbLGtoMn/u0u8kl8FTMgcdrVGC1OhBEnmU85S
oQEhKPuCHpHPGjF26tczD00FV2bYSOxPO1PJAQVTA0Bee0/x52hP3i3Do42lmmdq
PBqRPmXyPXWUlIjk/nRon3lyPnWtgYlTXwq3V83BYDmC1H7Kdcz+7/VWFuHLEkpi
7mE7iSwtW1Ez5bZPGH2avCHIAg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:15 2023 by rpki-client on console-ams.rpki-client.org