Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/x6-xbq7mY5Qi9n7VcMXUdaXXX1A.roa
File: x6-xbq7mY5Qi9n7VcMXUdaXXX1A.roa (raw, json)
Hash identifier: KBNXkXnX7y4v7GBX3S88uqJd+CSmovbfl9HUULRKfoA=
Subject key identifier: C7:AF:B1:6E:AE:E6:63:94:22:F6:7E:D5:70:C5:D4:75:A5:D7:5F:50
Certificate issuer: /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial: 0185E6DEB5B6A4CE988FA828CD8891CF6EC3
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/x6-xbq7mY5Qi9n7VcMXUdaXXX1A.roa
Signing time: Wed 25 Jan 2023 03:00:33 +0000
ROA not before: Wed 25 Jan 2023 03:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 146.19.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:de:b5:b6:a4:ce:98:8f:a8:28:cd:88:91:cf:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
Validity
Not Before: Jan 25 03:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7afb16eaee6639422f67ed570c5d475a5d75f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:ce:11:71:f8:46:29:8f:cc:c3:64:77:c0:
4c:0f:f2:65:67:67:ad:85:aa:7f:0a:8d:67:d5:51:
f4:a6:de:d1:b2:b7:77:32:f2:96:ff:d7:bc:c0:3c:
ed:af:22:15:92:a4:aa:8f:4d:76:0d:6c:02:c4:37:
09:05:ca:bd:f6:ee:f1:17:3f:c4:6c:60:1f:73:6c:
e1:ef:63:6a:dc:f1:3e:ba:a1:31:68:f4:61:db:dc:
76:ad:d5:0b:ac:59:e8:51:99:bb:44:b8:5d:5c:44:
94:68:c0:86:a7:d1:a5:f4:c2:0f:b3:c3:ed:f4:f6:
e6:d1:74:71:ba:4f:26:e5:88:15:98:2b:f4:e1:22:
95:22:a3:01:75:cd:71:ab:1b:de:82:81:e8:ba:36:
c7:2b:86:b9:54:98:b9:57:f6:ba:ce:7d:ff:4b:7d:
f6:1a:95:bb:b8:fb:d2:3d:cc:39:82:98:d0:0a:d3:
ba:19:ba:65:1f:32:11:04:9e:89:61:63:89:6e:89:
4c:50:cd:69:1c:2b:c1:3e:dd:13:8d:e7:84:cd:fd:
49:13:52:b0:ca:05:bb:c5:76:d6:89:08:7c:fd:0c:
96:4a:61:0e:99:6d:bb:2c:95:23:cb:c1:b7:42:7b:
c4:8b:fb:93:b4:bb:d5:c0:c1:a4:5e:dd:9d:00:a4:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:B1:6E:AE:E6:63:94:22:F6:7E:D5:70:C5:D4:75:A5:D7:5F:50
X509v3 Authority Key Identifier:
keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/x6-xbq7mY5Qi9n7VcMXUdaXXX1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:37:3b:ca:64:4d:7d:3d:f1:b6:1d:52:4f:6e:8c:9e:5e:27:
05:75:d7:b9:e6:8f:b6:57:a4:e3:4f:e7:bb:39:c7:ac:eb:6e:
e3:56:08:3e:c6:96:d8:3c:f1:52:94:4a:3d:68:df:b8:b0:c6:
aa:40:f5:3c:1e:b4:c7:e5:87:a2:11:00:ee:89:40:f6:3a:30:
90:cb:57:96:7c:0b:0b:54:a5:e7:e7:69:3d:e3:7c:83:a7:fb:
cc:8a:50:c9:50:45:21:90:f3:82:eb:de:3e:35:1c:0c:48:94:
aa:61:ee:1b:e5:3f:8f:3b:ee:7c:0a:c5:7d:ae:dc:6b:de:55:
ad:34:70:aa:2c:11:ef:38:ce:2b:2f:b0:7f:55:45:2e:ed:f0:
23:3d:2b:de:a6:d8:dc:c1:a1:cb:37:b2:5a:73:9a:a9:83:e2:
c1:fa:f2:da:8a:4b:75:b5:d5:29:30:3f:a9:e1:9b:6d:0d:3b:
4d:61:bf:79:c1:ae:de:7e:d0:95:82:7b:f4:de:27:a2:a8:b6:
c1:78:35:fe:10:3a:62:6b:54:fe:54:59:c2:3a:d8:0b:0c:0f:
07:64:32:92:bc:4f:83:82:d7:69:6e:d9:4a:de:95:1e:aa:88:
af:ec:41:82:25:b4:98:2d:3f:fa:0d:80:be:26:df:3b:bf:79:
af:3f:58:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXm3rW2pM6Yj6gozYiRz27DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NGJhZjQwY2YzMzc0OWM2ODUxNDgyODE1OWU2ZjBkMzYx
MDM1ODUwHhcNMjMwMTI1MDMwMDMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2FmYjE2ZWFlZTY2Mzk0MjJmNjdlZDU3MGM1ZDQ3NWE1ZDc1ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0czOEXH4RimPzMNkd8BMD/JlZ2et
hap/Co1n1VH0pt7Rsrd3MvKW/9e8wDztryIVkqSqj012DWwCxDcJBcq99u7xFz/E
bGAfc2zh72Nq3PE+uqExaPRh29x2rdULrFnoUZm7RLhdXESUaMCGp9Gl9MIPs8Pt
9Pbm0XRxuk8m5YgVmCv04SKVIqMBdc1xqxvegoHoujbHK4a5VJi5V/a6zn3/S332
GpW7uPvSPcw5gpjQCtO6GbplHzIRBJ6JYWOJbolMUM1pHCvBPt0TjeeEzf1JE1Kw
ygW7xXbWiQh8/QyWSmEOmW27LJUjy8G3QnvEi/uTtLvVwMGkXt2dAKQhJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMevsW6u5mOUIvZ+1XDF1HWl119QMB8GA1UdIwQY
MBaAFEhLr0DPM3ScaFFIKBWebw02EDWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0V1dlFNOHpkSnhvVVVnb0ZaNXZEVFlRTllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjJjOGEtMmVhMC00ZmM3LTgwOTkt
ZGYxN2Q5NWIxZGQ2LzEveDYteGJxN21ZNVFpOW43VmNNWFVkYVhYWDFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjJjOGEtMmVhMC00ZmM3LTgwOTktZGYxN2Q5NWIxZGQ2
LzEvU0V1dlFNOHpkSnhvVVVnb0ZaNXZEVFlRTllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPUMA0G
CSqGSIb3DQEBCwUAA4IBAQBtNzvKZE19PfG2HVJPboyeXicFdde55o+2V6TjT+e7
Oces627jVgg+xpbYPPFSlEo9aN+4sMaqQPU8HrTH5YeiEQDuiUD2OjCQy1eWfAsL
VKXn52k943yDp/vMilDJUEUhkPOC694+NRwMSJSqYe4b5T+PO+58CsV9rtxr3lWt
NHCqLBHvOM4rL7B/VUUu7fAjPSveptjcwaHLN7Jac5qpg+LB+vLaikt1tdUpMD+p
4ZttDTtNYb95wa7eftCVgnv03ieiqLbBeDX+EDpia1T+VFnCOtgLDA8HZDKSvE+D
gtdpbtlK3pUeqoiv7EGCJbSYLT/6DYC+Jt87v3mvP1g3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org