Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/r8RNbA7PFs8JOojYoWC6Rjj1HDY.roa
File: r8RNbA7PFs8JOojYoWC6Rjj1HDY.roa (raw, json)
Hash identifier: /NaSGuWjZbD6iPAxc/YGpib45PR4oqZqeys5ydX1VF4=
Subject key identifier: AF:C4:4D:6C:0E:CF:16:CF:09:3A:88:D8:A1:60:BA:46:38:F5:1C:36
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 0185AA12012BC0425B8B862AF0557B01F702
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/r8RNbA7PFs8JOojYoWC6Rjj1HDY.roa
Signing time: Fri 13 Jan 2023 07:39:44 +0000
ROA not before: Fri 13 Jan 2023 07:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.59.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:12:01:2b:c0:42:5b:8b:86:2a:f0:55:7b:01:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Jan 13 07:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afc44d6c0ecf16cf093a88d8a160ba4638f51c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:65:bd:3b:31:17:bc:ae:88:4a:7f:b6:06:
a9:3f:41:c4:c3:07:5e:28:2c:cb:07:c7:af:aa:d6:
52:ea:cb:3a:18:79:16:bf:6e:41:e0:b5:67:4d:e6:
17:db:b5:f7:d8:39:5b:60:eb:01:42:18:99:b7:01:
65:08:ca:8d:5b:20:c3:f1:c8:79:fc:9f:06:11:5d:
98:79:59:c5:5a:47:54:f6:bc:da:eb:93:43:0b:57:
8e:3d:9e:e9:e1:e7:bc:f7:85:3d:6d:66:65:09:15:
3e:76:d4:bb:6b:45:26:56:83:ac:56:62:71:a8:6f:
96:9a:43:bc:14:e6:e7:5f:fe:70:52:7f:9f:74:b1:
93:4b:9d:b5:47:92:74:a4:21:51:64:61:a6:2b:5e:
67:e6:f9:d4:e5:be:48:ef:3d:75:27:61:8d:c1:e5:
c0:c4:5c:4e:f4:e2:ba:7d:e9:cf:7e:98:ba:19:30:
d6:1f:54:23:03:91:3e:a9:a9:25:c6:bd:6a:cb:ff:
2f:55:43:a5:93:c1:44:66:24:df:a8:97:e6:15:6e:
1d:86:15:f6:8a:13:27:06:2a:c9:59:45:f1:c8:4a:
b0:42:db:e1:9d:31:c2:d2:37:67:1b:f3:11:00:5d:
f2:57:d0:5c:56:13:fd:6d:b2:ed:e7:d3:25:4c:ae:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:4D:6C:0E:CF:16:CF:09:3A:88:D8:A1:60:BA:46:38:F5:1C:36
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/r8RNbA7PFs8JOojYoWC6Rjj1HDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:44:58:49:98:eb:dc:40:20:b4:d4:d3:38:47:01:4c:7a:47:
14:0d:5f:9f:3b:8f:52:61:0b:c6:45:98:c5:d6:c9:7e:9e:8b:
96:9c:4e:28:72:78:9a:26:f1:16:ad:1b:e9:bf:68:e8:b5:d6:
bc:d8:b5:77:af:24:29:9d:92:eb:33:c4:88:95:3b:d6:a6:2c:
88:7c:be:11:5f:d2:c3:11:c1:7d:f9:6b:a7:ab:1b:bc:fe:fb:
7d:72:a1:b7:26:e7:3d:2b:d5:ce:6e:91:90:9b:82:e0:b7:7c:
bb:34:2a:bc:30:c8:b6:52:10:f9:d6:63:a3:e8:e2:2b:ff:29:
ae:73:89:a5:f3:83:27:69:ae:d5:bf:39:18:63:48:08:ba:19:
90:89:8b:da:14:de:ef:41:2d:ee:53:50:64:f0:15:24:de:1a:
18:de:9e:d2:af:f2:11:1f:f9:99:9e:42:bb:63:20:24:9b:ea:
6c:29:d0:4a:8b:76:c3:69:58:dd:37:d1:ef:ac:94:6f:e5:d2:
e0:bc:4f:16:f6:39:05:2a:98:4c:6c:aa:47:ff:42:0e:3d:30:
14:a0:97:44:9e:cf:bc:6e:62:cc:21:1d:ca:2b:b3:2d:dd:58:
66:df:a8:a1:ff:7d:b4:fc:e6:6c:bf:d1:80:27:b4:ec:00:26:
2d:fa:77:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWqEgErwEJbi4Yq8FV7AfcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDY1Y2NmMWViZTU1NWIzNzUyNzE3ZTU5NWMyNzViY2Fk
MDBiNGUwHhcNMjMwMTEzMDczOTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM0NGQ2YzBlY2YxNmNmMDkzYTg4ZDhhMTYwYmE0NjM4ZjUxYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphplvTsxF7yuiEp/tgapP0HEwwde
KCzLB8evqtZS6ss6GHkWv25B4LVnTeYX27X32DlbYOsBQhiZtwFlCMqNWyDD8ch5
/J8GEV2YeVnFWkdU9rza65NDC1eOPZ7p4ee894U9bWZlCRU+dtS7a0UmVoOsVmJx
qG+WmkO8FObnX/5wUn+fdLGTS521R5J0pCFRZGGmK15n5vnU5b5I7z11J2GNweXA
xFxO9OK6fenPfpi6GTDWH1QjA5E+qaklxr1qy/8vVUOlk8FEZiTfqJfmFW4dhhX2
ihMnBirJWUXxyEqwQtvhnTHC0jdnG/MRAF3yV9BcVhP9bbLt59MlTK4BawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/ETWwOzxbPCTqI2KFgukY49Rw2MB8GA1UdIwQY
MBaAFHkGXM8evlVbN1JxfllcJ1vK0AtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTIt
MDE3ZWI1NzM1YjEzLzEvcjhSTmJBN1BGczhKT29qWW9XQzZSamoxSERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTItMDE3ZWI1NzM1YjEz
LzEvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsGMA0G
CSqGSIb3DQEBCwUAA4IBAQCjRFhJmOvcQCC01NM4RwFMekcUDV+fO49SYQvGRZjF
1sl+nouWnE4ocniaJvEWrRvpv2jotda82LV3ryQpnZLrM8SIlTvWpiyIfL4RX9LD
EcF9+Wunqxu8/vt9cqG3Juc9K9XObpGQm4Lgt3y7NCq8MMi2UhD51mOj6OIr/ymu
c4ml84Mnaa7VvzkYY0gIuhmQiYvaFN7vQS3uU1Bk8BUk3hoY3p7Sr/IRH/mZnkK7
YyAkm+psKdBKi3bDaVjdN9HvrJRv5dLgvE8W9jkFKphMbKpH/0IOPTAUoJdEns+8
bmLMIR3KK7Mt3Vhm36ih/320/OZsv9GAJ7TsACYt+nfk
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:57 2025 by rpki-client