Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/bQhBdkah82S173sAvfTMPvQFhqs.roa
File: bQhBdkah82S173sAvfTMPvQFhqs.roa (raw, json)
Hash identifier: PZAOV/oFIYdh/qmuqqlb8y2Kf9BjdEDNo6UiF1Bir3w=
Subject key identifier: 6D:08:41:76:46:A1:F3:64:B5:EF:7B:00:BD:F4:CC:3E:F4:05:86:AB
Certificate issuer: /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial: 0185700B8BFCB98CB0649658E93F29E61B55
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/bQhBdkah82S173sAvfTMPvQFhqs.roa
Signing time: Mon 02 Jan 2023 01:14:43 +0000
ROA not before: Mon 02 Jan 2023 01:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.140.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8b:fc:b9:8c:b0:64:96:58:e9:3f:29:e6:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
Validity
Not Before: Jan 2 01:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d08417646a1f364b5ef7b00bdf4cc3ef40586ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:f8:0f:4d:3e:9d:f4:75:43:1e:0d:6b:bc:
82:e1:b1:64:d7:93:fa:21:c2:2d:09:7f:ff:b8:17:
64:c3:c3:53:e4:b8:4e:cc:80:d8:af:95:d2:1d:c9:
a8:76:6f:c5:b0:f3:bb:c7:df:a4:c1:76:39:7b:74:
76:e3:a2:2d:eb:c6:a9:a3:de:77:33:61:41:fe:4f:
70:0c:cf:95:be:f8:92:ad:c0:29:6c:62:69:65:d5:
9e:1d:ad:59:34:be:e9:e0:a1:6b:01:1b:65:c8:9d:
2a:7d:66:96:81:4e:ef:e8:3e:b9:b3:45:27:4e:8d:
c4:44:72:b5:53:eb:d4:2d:3e:12:40:b2:02:b8:1a:
5f:9f:58:33:e7:ef:39:d4:19:da:81:63:0a:46:ff:
54:a5:0a:5f:43:67:0e:8c:bc:4d:c1:18:34:9f:4e:
3b:3c:fa:e9:47:9b:d1:d5:19:57:85:54:56:6f:8d:
4d:45:b1:a2:a4:0a:87:d7:86:67:05:8f:37:1b:ce:
1e:54:a1:65:e2:21:2d:ce:a8:0a:8a:29:ac:3e:c6:
d0:30:d1:2a:a5:82:d5:b1:94:e9:24:90:b0:31:3f:
b8:c0:5f:f2:31:4d:8b:da:90:3e:cf:db:3b:c8:e3:
f3:fc:41:8a:ed:22:16:f7:45:60:f0:05:79:7b:5a:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:08:41:76:46:A1:F3:64:B5:EF:7B:00:BD:F4:CC:3E:F4:05:86:AB
X509v3 Authority Key Identifier:
keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/bQhBdkah82S173sAvfTMPvQFhqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c4:61:06:4a:da:85:6c:fe:50:ed:38:f4:e3:9b:ae:f9:24:
65:c7:57:13:50:b2:d1:a7:d0:d4:cc:3a:b3:02:d0:44:e3:60:
63:7f:de:59:cb:e4:bf:15:08:2e:aa:70:71:b4:68:37:1c:83:
33:df:51:fd:4d:2f:6f:69:95:96:ec:fe:23:fe:f1:58:88:7d:
8d:31:a6:53:23:5c:64:37:da:4e:66:6a:ea:a7:07:31:52:84:
36:95:84:e9:8e:96:50:9d:8d:6f:7a:a3:62:d7:17:30:53:ff:
be:47:04:aa:70:8a:9e:79:c9:c1:84:70:06:61:49:cd:bf:fd:
22:74:68:11:85:19:86:05:7e:5f:7a:51:9f:f1:82:cc:a0:44:
62:73:f9:68:55:95:12:97:0e:ba:c2:57:95:e5:ee:14:fd:ea:
cc:49:c7:71:cf:ac:ff:c7:2e:b0:89:c6:dd:f4:00:c9:9e:e4:
47:09:5d:d3:69:ff:c7:30:17:75:46:70:6c:6b:45:1a:7c:de:
e5:f1:ec:de:e1:a7:4a:9c:83:2a:76:34:de:9f:16:56:1d:cc:
bd:0d:da:71:9e:94:bb:49:5f:c2:ad:9a:48:fc:ab:33:a7:c1:
82:92:0d:44:d9:0a:d1:9c:70:ce:59:16:be:be:8c:c8:33:d7:
71:23:05:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwC4v8uYywZJZY6T8p5htVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWU3NDRhMDRjOWEzNGRkYzcwNDAyOTJjZTU1OTM0NDUw
Njg3NmMwHhcNMjMwMTAyMDExNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDA4NDE3NjQ2YTFmMzY0YjVlZjdiMDBiZGY0Y2MzZWY0MDU4NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkr4D00+nfR1Qx4Na7yC4bFk15P6
IcItCX//uBdkw8NT5LhOzIDYr5XSHcmodm/FsPO7x9+kwXY5e3R246It68apo953
M2FB/k9wDM+VvviSrcApbGJpZdWeHa1ZNL7p4KFrARtlyJ0qfWaWgU7v6D65s0Un
To3ERHK1U+vULT4SQLICuBpfn1gz5+851BnagWMKRv9UpQpfQ2cOjLxNwRg0n047
PPrpR5vR1RlXhVRWb41NRbGipAqH14ZnBY83G84eVKFl4iEtzqgKiimsPsbQMNEq
pYLVsZTpJJCwMT+4wF/yMU2L2pA+z9s7yOPz/EGK7SIW90Vg8AV5e1oPlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0IQXZGofNkte97AL30zD70BYarMB8GA1UdIwQY
MBaAFJuudEoEyaNN3HBAKSzlWTRFBodsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY1MFNnVEpvMDNjY0VBcExPVlpORVVHaDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMzg2N2YtMWQ2MC00ODllLTgzYWQt
NmMzZTc2NmNhYTFmLzEvYlFoQmRrYWg4MlMxNzNzQXZmVE1QdlFGaHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lMzg2N2YtMWQ2MC00ODllLTgzYWQtNmMzZTc2NmNhYTFm
LzEvbTY1MFNnVEpvMDNjY0VBcExPVlpORVVHaDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQBtxGEGStqFbP5Q7Tj045uu+SRlx1cTULLRp9DUzDqz
AtBE42Bjf95Zy+S/FQguqnBxtGg3HIMz31H9TS9vaZWW7P4j/vFYiH2NMaZTI1xk
N9pOZmrqpwcxUoQ2lYTpjpZQnY1veqNi1xcwU/++RwSqcIqeecnBhHAGYUnNv/0i
dGgRhRmGBX5felGf8YLMoERic/loVZUSlw66wleV5e4U/erMScdxz6z/xy6wicbd
9ADJnuRHCV3Taf/HMBd1RnBsa0UafN7l8eze4adKnIMqdjTenxZWHcy9DdpxnpS7
SV/CrZpI/Kszp8GCkg1E2QrRnHDOWRa+vozIM9dxIwUX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:47 2024 by rpki-client on console-ams.rpki-client.org