Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/xpRuPsrhrc6Xmoqin6X8zbRyZn4.roa
File: xpRuPsrhrc6Xmoqin6X8zbRyZn4.roa (raw, json)
Hash identifier: qW0kpNAFIc0885eqeTbjnfgLk+oa0YrNSxhh1OPYnW0=
Subject key identifier: C6:94:6E:3E:CA:E1:AD:CE:97:9A:8A:A2:9F:A5:FC:CD:B4:72:66:7E
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 582818
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/xpRuPsrhrc6Xmoqin6X8zbRyZn4.roa
Signing time: Thu 28 Apr 2022 16:57:25 +0000
ROA not before: Thu 28 Apr 2022 16:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.195.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5777432 (0x582818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Apr 28 16:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6946e3ecae1adce979a8aa29fa5fccdb472667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:c7:a2:49:d2:d4:55:27:12:16:ff:15:a9:
f0:a3:1b:82:7a:97:dc:bb:3a:78:1d:04:de:af:e9:
f4:3a:fd:f8:32:d7:39:09:12:29:82:89:4e:77:5d:
cd:35:a0:c2:95:0b:23:a5:be:52:6c:d3:51:c6:98:
41:1c:d3:25:35:34:02:7b:77:7a:84:b7:8d:57:62:
b2:6c:b1:88:02:e4:91:78:3d:ed:b5:a9:aa:8a:33:
21:97:2b:e8:28:9b:d4:18:25:b0:44:96:03:88:79:
1d:6b:24:d3:63:67:a7:e2:b1:a3:7a:12:34:e8:4a:
0a:79:9d:e0:6d:39:d2:58:25:03:5f:28:04:52:90:
ea:c9:ba:37:4d:01:3d:86:44:13:11:5c:de:bd:52:
85:ba:c5:ad:f2:b9:35:5a:ec:ec:e0:9a:90:d3:c1:
4e:1a:22:51:08:2f:18:62:bd:a0:f6:3b:5d:0b:78:
07:02:4e:4f:8f:0e:99:97:1c:17:89:f9:e5:35:2a:
b2:06:9e:d9:8b:9a:38:1d:46:27:58:d6:63:8b:ee:
bd:74:ee:96:e9:ff:d5:78:f9:10:2b:0e:62:7c:4c:
d4:db:f9:16:07:cb:2a:1c:69:0a:18:6b:19:6a:b0:
d5:ab:d9:a7:b5:cd:26:80:73:9b:ae:7d:8c:55:42:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:6E:3E:CA:E1:AD:CE:97:9A:8A:A2:9F:A5:FC:CD:B4:72:66:7E
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/xpRuPsrhrc6Xmoqin6X8zbRyZn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.195.0/24
89.32.126.0/24
94.231.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b7:fe:27:03:e4:14:ca:3a:f5:a6:88:6b:6f:68:89:47:bd:
8f:21:8b:f0:1e:69:23:bc:00:2b:9c:53:6b:81:1d:08:7a:14:
d1:2e:5f:23:07:c5:e8:cf:8d:f2:d8:54:ef:e6:87:32:4c:b1:
05:1e:b8:20:af:c0:84:b2:38:49:91:27:54:99:b1:73:cf:b4:
05:bf:5d:41:f0:cf:95:78:2e:8b:20:25:96:a0:d0:1a:f2:ff:
50:43:cf:af:12:90:5a:e5:04:85:f3:5e:2a:63:6c:a5:21:d0:
b3:48:ea:b3:0e:d9:27:a3:12:e2:50:41:c3:d8:0e:99:fc:a9:
a3:67:ba:55:ee:e5:f0:f2:26:85:7b:6f:3f:ad:8b:10:6b:42:
47:d2:52:05:77:be:97:40:d2:04:78:49:4c:15:40:60:2d:3c:
98:27:a4:9a:7d:da:db:21:9e:c2:72:a4:6f:02:de:c1:f9:ac:
cf:f4:37:fc:76:d5:ea:f8:27:e9:7a:d1:29:be:8a:a4:36:d0:
a1:9d:f0:cd:5f:fc:2f:7d:dc:77:92:84:ec:13:4b:30:41:4c:
02:41:75:81:d6:d3:49:be:17:ff:b6:7a:51:09:e1:78:a7:71:
a9:6d:b1:4e:01:db:51:d0:cd:4a:25:ee:0c:08:85:9d:60:61:
00:79:bb:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDWCgYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
MWQ2MTAxZDcyOWJjOTU1OTdkYTUyODYwNGVjMGIwYjdlMDA0MmMwHhcNMjIwNDI4
MTY1NzI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNjk0NmUzZWNhZTFh
ZGNlOTc5YThhYTI5ZmE1ZmNjZGI0NzI2NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyUjHoknS1FUnEhb/FanwoxuCepfcuzp4HQTer+n0Ov34Mtc5
CRIpgolOd13NNaDClQsjpb5SbNNRxphBHNMlNTQCe3d6hLeNV2KybLGIAuSReD3t
tamqijMhlyvoKJvUGCWwRJYDiHkdayTTY2en4rGjehI06EoKeZ3gbTnSWCUDXygE
UpDqybo3TQE9hkQTEVzevVKFusWt8rk1Wuzs4JqQ08FOGiJRCC8YYr2g9jtdC3gH
Ak5Pjw6ZlxwXifnlNSqyBp7Zi5o4HUYnWNZji+69dO6W6f/VePkQKw5ifEzU2/kW
B8sqHGkKGGsZarDVq9mntc0mgHObrn2MVULPdwIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFMaUbj7K4a3Ol5qKop+l/M20cmZ+MB8GA1UdIwQYMBaAFIkdYQHXKbyVWX2l
KGBOwLC34AQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aVIxaEFkY3B2SlZaZmFVb1lFN0FzTGZnQkN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZS80YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEv
eHBSdVBzcmhyYzZYbW9xaW42WDh6YlJ5Wm40LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80
YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEvaVIxaEFkY3B2SlZa
ZmFVb1lFN0FzTGZnQkN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVmgTAwQAVmjDAwQAWSB+AwQAXufG
MA0GCSqGSIb3DQEBCwUAA4IBAQCst/4nA+QUyjr1pohrb2iJR72PIYvwHmkjvAAr
nFNrgR0IehTRLl8jB8Xoz43y2FTv5ocyTLEFHrggr8CEsjhJkSdUmbFzz7QFv11B
8M+VeC6LICWWoNAa8v9QQ8+vEpBa5QSF814qY2ylIdCzSOqzDtknoxLiUEHD2A6Z
/KmjZ7pV7uXw8iaFe28/rYsQa0JH0lIFd76XQNIEeElMFUBgLTyYJ6SafdrbIZ7C
cqRvAt7B+azP9Df8dtXq+CfpetEpvoqkNtChnfDNX/wvfdx3koTsE0swQUwCQXWB
1tNJvhf/tnpRCeF4p3GpbbFOAdtR0M1KJe4MCIWdYGEAebvb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:43 2024 by rpki-client on console-fra.rpki-client.org