Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/kEPe-Os_HEWKbhon8U9KNiv-j1s.roa
File: kEPe-Os_HEWKbhon8U9KNiv-j1s.roa (raw, json)
Hash identifier: ZcY1ZvV10JsoB9Mc6GKZwBFdWlmpXQmrZJ7jo3TlOpg=
Subject key identifier: 90:43:DE:F8:EB:3F:1C:45:8A:6E:1A:27:F1:4F:4A:36:2B:FE:8F:5B
Certificate issuer: /CN=abdc639a367adaf9b3382d09bda05ee545433159
Certificate serial: BFDE29
Authority key identifier: AB:DC:63:9A:36:7A:DA:F9:B3:38:2D:09:BD:A0:5E:E5:45:43:31:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xjmjZ62vmzOC0JvaBe5UVDMVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/kEPe-Os_HEWKbhon8U9KNiv-j1s.roa
Signing time: Thu 14 Apr 2022 11:44:29 +0000
ROA not before: Thu 14 Apr 2022 11:44:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 5.42.203.0/24 maxlen: 24
194.5.86.0/24 maxlen: 24
2a12:1840::/39 maxlen: 39
2a12:1840:200::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12574249 (0xbfde29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc639a367adaf9b3382d09bda05ee545433159
Validity
Not Before: Apr 14 11:44:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9043def8eb3f1c458a6e1a27f14f4a362bfe8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:60:b4:66:46:68:61:19:ce:d7:fc:92:84:
e0:3a:2a:43:2b:e4:fe:25:dd:34:b8:9d:25:88:ca:
12:45:24:66:97:f3:0c:57:13:72:77:83:3c:b4:d6:
da:52:9f:3f:33:04:c9:c9:82:ca:87:2d:05:29:06:
68:87:38:30:4e:4c:f8:95:f5:e4:e1:32:2f:ec:71:
24:4b:1c:42:d6:84:04:a1:e0:1b:4a:42:3b:1c:b2:
44:d8:84:eb:fd:e7:8f:76:c2:93:91:b8:f3:f2:94:
af:e4:6b:0b:bb:a8:01:ef:86:01:ee:59:1c:78:8f:
e6:0f:98:57:05:cd:58:ad:08:af:72:2c:db:a0:16:
c9:00:a4:13:60:6b:57:87:1a:40:fb:6f:6d:ae:3c:
78:65:df:21:35:f5:a4:d8:d6:f9:e7:3f:a3:ff:ea:
f3:7b:32:be:ce:19:5f:d6:b2:9f:82:26:ff:60:08:
c4:c8:46:b1:6a:83:21:d1:05:b3:9f:cc:51:5c:69:
d9:f2:c8:70:82:7f:95:93:cb:48:cb:d7:f9:4c:e9:
25:50:12:09:76:9e:73:8b:29:56:c7:43:0c:40:31:
a9:eb:34:09:f2:d6:b8:65:ae:80:b1:d8:45:c5:06:
59:e0:35:b2:73:1d:5d:7b:1d:81:3b:72:a8:08:d1:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:DE:F8:EB:3F:1C:45:8A:6E:1A:27:F1:4F:4A:36:2B:FE:8F:5B
X509v3 Authority Key Identifier:
keyid:AB:DC:63:9A:36:7A:DA:F9:B3:38:2D:09:BD:A0:5E:E5:45:43:31:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xjmjZ62vmzOC0JvaBe5UVDMVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/kEPe-Os_HEWKbhon8U9KNiv-j1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/q9xjmjZ62vmzOC0JvaBe5UVDMVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.203.0/24
194.5.86.0/24
IPv6:
2a12:1840::/38
Signature Algorithm: sha256WithRSAEncryption
48:76:cc:44:12:0c:67:8d:6a:45:61:e8:4c:87:62:11:15:6b:
d3:59:de:5d:02:88:09:94:c3:49:b1:f6:83:9c:76:7c:82:27:
3b:45:8d:64:85:34:a3:47:e3:f3:80:b4:c5:67:71:c4:f6:19:
74:70:6d:b5:fa:1b:9b:87:04:44:c3:ef:10:1c:42:ba:a4:1b:
9c:27:ee:90:60:e7:65:62:db:ad:82:59:3a:03:00:e8:44:2d:
a0:9b:43:79:45:f1:95:ea:1e:6d:0f:f3:4c:74:f3:5b:c5:2f:
68:c8:12:15:1b:3c:b8:bb:6f:35:22:15:a8:2c:57:30:9a:d1:
35:6d:4d:5b:dd:3b:80:ea:01:01:15:b3:ac:bd:8e:56:bd:08:
16:15:1a:ac:b9:81:34:26:c1:48:18:07:e8:69:39:e6:62:8c:
df:c5:3e:b3:9a:56:5b:e7:ea:f1:0e:e8:3e:1b:f0:f0:59:47:
c6:53:e3:6b:b1:79:56:5d:8d:c2:30:b6:02:b9:61:3b:2a:ff:
ca:90:1f:2e:9a:f9:a1:c0:47:f7:e0:61:a9:ba:f4:7e:b5:2c:
33:88:1c:7a:0d:ad:39:f4:c9:8b:8d:2f:38:41:66:cd:a3:6c:
05:ec:70:e1:a0:be:20:1a:3f:95:e0:d4:ae:41:89:82:3f:8f:
b1:79:10:85
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEAL/eKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YmRjNjM5YTM2N2FkYWY5YjMzODJkMDliZGEwNWVlNTQ1NDMzMTU5MB4XDTIyMDQx
NDExNDQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTA0M2RlZjhlYjNm
MWM0NThhNmUxYTI3ZjE0ZjRhMzYyYmZlOGY1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL52YLRmRmhhGc7X/JKE4DoqQyvk/iXdNLidJYjKEkUkZpfz
DFcTcneDPLTW2lKfPzMEycmCyoctBSkGaIc4ME5M+JX15OEyL+xxJEscQtaEBKHg
G0pCOxyyRNiE6/3nj3bCk5G48/KUr+RrC7uoAe+GAe5ZHHiP5g+YVwXNWK0Ir3Is
26AWyQCkE2BrV4caQPtvba48eGXfITX1pNjW+ec/o//q83syvs4ZX9ayn4Im/2AI
xMhGsWqDIdEFs5/MUVxp2fLIcIJ/lZPLSMvX+UzpJVASCXaec4spVsdDDEAxqes0
CfLWuGWugLHYRcUGWeA1snMdXXsdgTtyqAjRl68CAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBSQQ9746z8cRYpuGifxT0o2K/6PWzAfBgNVHSMEGDAWgBSr3GOaNnra+bM4
LQm9oF7lRUMxWTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3E5eGptalo2MnZtek9DMEp2YUJlNVVWRE1Way5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvMzMyNTQ4LTk5YTEtNGZiYS1iMjQ5LTI4ZDVkMDBkYzBjYi8x
L2tFUGUtT3NfSEVXS2Job244VTlLTml2LWoxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
MzMyNTQ4LTk5YTEtNGZiYS1iMjQ5LTI4ZDVkMDBkYzBjYi8xL3E5eGptalo2MnZt
ek9DMEp2YUJlNVVWRE1Way5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAAUqywMEAMIFVjAOBAIAAjAIAwYC
KhIYQAAwDQYJKoZIhvcNAQELBQADggEBAEh2zEQSDGeNakVh6EyHYhEVa9NZ3l0C
iAmUw0mx9oOcdnyCJztFjWSFNKNH4/OAtMVnccT2GXRwbbX6G5uHBETD7xAcQrqk
G5wn7pBg52Vi262CWToDAOhELaCbQ3lF8ZXqHm0P80x081vFL2jIEhUbPLi7bzUi
FagsVzCa0TVtTVvdO4DqAQEVs6y9jla9CBYVGqy5gTQmwUgYB+hpOeZijN/FPrOa
Vlvn6vEO6D4b8PBZR8ZT42uxeVZdjcIwtgK5YTsq/8qQHy6a+aHAR/fgYam69H61
LDOIHHoNrTn0yYuNLzhBZs2jbAXscOGgviAaP5Xg1K5BiYI/j7F5EIU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org