Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/jGq3t-SD_2eqqu-sq5XyZ0IFk5E.roa
File: jGq3t-SD_2eqqu-sq5XyZ0IFk5E.roa (raw, json)
Hash identifier: VFh0tryf5gm5ca0NUia7k/MeWAIUk4ND/OlhfAeWeeE=
Subject key identifier: 8C:6A:B7:B7:E4:83:FF:67:AA:AA:EF:AC:AB:95:F2:67:42:05:93:91
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 01857288BBDDB4481A8118037B23240AB091
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/jGq3t-SD_2eqqu-sq5XyZ0IFk5E.roa
Signing time: Mon 02 Jan 2023 12:50:41 +0000
ROA not before: Mon 02 Jan 2023 12:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61002
IP address blocks: 89.35.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:88:bb:dd:b4:48:1a:81:18:03:7b:23:24:0a:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 2 12:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6ab7b7e483ff67aaaaefacab95f26742059391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:be:15:7b:ac:e7:19:aa:99:e5:cc:d1:8f:
19:e7:89:8b:10:45:96:93:61:c6:bb:a1:59:1e:ee:
4e:a2:9b:f7:12:c5:e4:78:be:b6:75:50:5e:d1:b0:
2b:5f:07:d1:7c:c3:8d:0a:4f:f7:46:00:6f:c8:05:
07:a7:4e:4f:c4:8f:45:5f:a7:92:b1:f1:a9:e0:81:
a5:6f:16:1d:f9:42:11:15:f7:9a:d2:96:73:86:51:
bb:6d:fb:f4:da:a9:f9:ca:97:e3:09:4f:65:7d:f6:
00:6f:89:c7:93:51:49:61:17:5e:39:71:c1:54:f3:
2c:85:b4:ac:0c:7e:b7:d4:c9:39:42:fc:a1:41:6d:
87:b7:6f:da:9e:4f:0f:70:bf:07:6e:c6:26:0b:af:
bd:af:9e:93:e8:a4:1c:b3:3b:2c:aa:cf:22:dd:53:
2e:bf:af:ec:c1:e8:4f:a4:0e:ec:0e:b3:e2:46:72:
24:fa:25:61:b6:8b:e0:26:02:9f:10:38:76:75:28:
9c:1a:e6:8a:30:b4:3f:5c:31:9f:fa:a9:d5:83:a1:
ce:9d:bc:60:6e:96:5e:b2:58:bd:c9:c0:45:49:07:
02:37:a3:0d:90:24:7a:7b:b6:2c:34:23:8d:cb:a6:
09:23:7a:23:37:d4:71:8a:ee:94:52:ab:4d:07:02:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:B7:B7:E4:83:FF:67:AA:AA:EF:AC:AB:95:F2:67:42:05:93:91
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/jGq3t-SD_2eqqu-sq5XyZ0IFk5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.60.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:e2:b6:2d:b3:93:31:91:0d:c9:46:1b:65:ab:2c:64:ee:45:
19:1f:df:c6:98:79:52:2a:1d:95:95:9e:3c:77:90:10:99:35:
cf:7f:5d:4f:a6:92:fa:1c:47:41:54:49:ec:4a:49:77:14:36:
50:62:de:34:4e:80:52:43:36:f5:36:24:ba:af:d7:28:de:24:
c0:1a:3f:40:fd:bf:2a:e3:11:3f:86:45:2b:57:59:1c:86:9d:
cf:d7:90:ea:b6:0f:a6:26:f0:17:77:6b:16:98:8b:8b:3f:4d:
f7:14:98:69:1f:84:2c:98:87:f1:7f:f9:2c:3b:4c:6f:0a:d4:
53:49:d4:72:4f:90:cb:23:ab:0d:61:09:dd:65:3c:0d:72:1c:
f4:2c:e0:0c:55:8e:7a:a4:be:d4:24:f4:34:62:1a:f9:a0:99:
fa:2c:17:71:48:10:2f:ab:bd:7b:5e:a7:6f:d4:66:fc:57:87:
c9:8b:06:fd:90:1d:14:8e:c8:d0:e2:44:2e:b1:51:0e:c8:74:
20:f1:09:dc:1f:df:3d:1a:91:48:cd:45:6e:e5:dc:35:a3:78:
5a:53:9f:47:b6:6c:bc:d9:87:83:61:5b:36:fb:8f:04:76:94:
4f:05:8b:d3:21:c7:ca:3e:00:e3:f2:2b:fb:94:fe:9f:87:0a:
fb:24:30:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyiLvdtEgagRgDeyMkCrCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjQ4ZjdmYWUwMTI5MTZhNzc1ZDVlM2I2ZmEyMzEwOTgz
NDNlYTAwHhcNMjMwMTAyMTI1MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZhYjdiN2U0ODNmZjY3YWFhYWVmYWNhYjk1ZjI2NzQyMDU5MzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNu+FXus5xmqmeXM0Y8Z54mLEEWW
k2HGu6FZHu5Oopv3EsXkeL62dVBe0bArXwfRfMONCk/3RgBvyAUHp05PxI9FX6eS
sfGp4IGlbxYd+UIRFfea0pZzhlG7bfv02qn5ypfjCU9lffYAb4nHk1FJYRdeOXHB
VPMshbSsDH631Mk5QvyhQW2Ht2/ank8PcL8HbsYmC6+9r56T6KQcszssqs8i3VMu
v6/swehPpA7sDrPiRnIk+iVhtovgJgKfEDh2dSicGuaKMLQ/XDGf+qnVg6HOnbxg
bpZesli9ycBFSQcCN6MNkCR6e7YsNCONy6YJI3ojN9Rxiu6UUqtNBwKY/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxqt7fkg/9nqqrvrKuV8mdCBZORMB8GA1UdIwQY
MBaAFEL0j3+uASkWp3XV47b6IxCYND6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZTUGY2NEJLUmFuZGRYanR2b2pFSmcwUHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OTQ0NTUtMWQyZS00ZTJiLThmMGUt
OWEwY2ZjZTg3OGE0LzEvakdxM3QtU0RfMmVxcXUtc3E1WHlaMElGazVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OTQ0NTUtMWQyZS00ZTJiLThmMGUtOWEwY2ZjZTg3OGE0
LzEvUXZTUGY2NEJLUmFuZGRYanR2b2pFSmcwUHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSM8MA0G
CSqGSIb3DQEBCwUAA4IBAQAL4rYts5MxkQ3JRhtlqyxk7kUZH9/GmHlSKh2VlZ48
d5AQmTXPf11PppL6HEdBVEnsSkl3FDZQYt40ToBSQzb1NiS6r9co3iTAGj9A/b8q
4xE/hkUrV1kchp3P15Dqtg+mJvAXd2sWmIuLP033FJhpH4QsmIfxf/ksO0xvCtRT
SdRyT5DLI6sNYQndZTwNchz0LOAMVY56pL7UJPQ0Yhr5oJn6LBdxSBAvq717Xqdv
1Gb8V4fJiwb9kB0UjsjQ4kQusVEOyHQg8QncH989GpFIzUVu5dw1o3haU59Htmy8
2YeDYVs2+48EdpRPBYvTIcfKPgDj8iv7lP6fhwr7JDBW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org