Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/XyDcHfJIJs2chTPkiKhThMy7m6o.roa
File: XyDcHfJIJs2chTPkiKhThMy7m6o.roa (raw, json)
Hash identifier: QeVJFeb5X8XkvXppchExNx7OboANaHwQSIc0pSwvpXI=
Subject key identifier: 5F:20:DC:1D:F2:48:26:CD:9C:85:33:E4:88:A8:53:84:CC:BB:9B:AA
Certificate issuer: /CN=147ced88a406124c8c4df166c5740509e6415d2a
Certificate serial: E863DE
Authority key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/XyDcHfJIJs2chTPkiKhThMy7m6o.roa
Signing time: Sat 01 Jan 2022 12:55:35 +0000
ROA not before: Sat 01 Jan 2022 12:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15229918 (0xe863de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147ced88a406124c8c4df166c5740509e6415d2a
Validity
Not Before: Jan 1 12:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f20dc1df24826cd9c8533e488a85384ccbb9baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:4f:e1:d3:51:c7:2a:ee:72:12:92:15:24:
3b:1e:9f:82:54:26:c1:75:b7:f8:16:4d:d6:b4:34:
f7:74:fb:75:d3:f4:19:6a:71:cf:ad:8d:64:9a:f9:
b8:8e:de:aa:ba:59:fb:68:ca:a9:fc:ce:99:3c:c8:
d3:46:8e:31:2f:c9:09:fa:e4:80:d5:22:76:45:40:
e8:cf:31:76:a7:cd:fd:c8:61:89:9b:13:c4:27:98:
0e:37:2b:34:bd:f2:5e:ac:be:5d:95:a0:6e:4a:08:
83:8a:b8:bd:f9:40:35:a9:2c:41:61:e5:0a:76:5a:
63:a7:bc:99:b6:9d:68:df:84:e7:66:66:65:6a:4a:
94:f4:16:8c:79:cd:9e:a7:25:c9:55:6f:33:c4:5b:
48:10:3a:c7:c0:43:b8:dc:bb:da:46:ab:3b:e3:ee:
2f:05:15:a2:a8:dc:54:33:62:33:32:02:56:55:af:
6f:df:5e:5d:48:c1:2c:74:3d:9b:0e:f2:da:8e:0b:
bf:80:6b:38:9f:82:f8:a6:5d:fa:9e:db:5b:97:a8:
ba:d6:bf:2f:c0:8b:c2:f5:5d:80:c9:c1:c4:d1:f0:
b5:7c:90:c9:86:65:f0:4b:94:75:de:b9:0f:48:45:
4a:f8:6a:f1:00:18:7c:93:cf:43:17:92:f8:7e:f8:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:DC:1D:F2:48:26:CD:9C:85:33:E4:88:A8:53:84:CC:BB:9B:AA
X509v3 Authority Key Identifier:
keyid:14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/XyDcHfJIJs2chTPkiKhThMy7m6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bd:0e:06:21:9b:4d:8d:6a:24:b4:d0:57:33:1f:de:5c:dd:
b7:7c:ab:bb:8c:3c:ca:1d:1c:be:96:d7:72:d0:68:de:ff:23:
8b:30:77:18:ed:4e:97:e5:9a:e2:14:18:01:23:78:8c:8b:43:
cb:ab:b8:79:67:fe:8c:2b:f7:39:15:5f:b9:9e:60:86:18:84:
6d:a0:b4:30:6f:21:8f:08:00:98:f9:1b:e4:96:1d:aa:07:2a:
4e:3c:6c:f3:ba:6e:57:4a:70:1c:d8:b8:eb:38:a9:24:cd:25:
d8:89:a5:6e:34:93:40:a8:78:4a:af:a9:05:b0:fe:0a:52:d6:
12:dc:58:d8:c4:c5:3e:97:bd:b1:4f:e1:12:fe:1b:bc:00:d5:
08:28:3b:96:da:0a:16:f4:9b:04:87:42:2b:fb:2d:2b:3d:0b:
ba:e0:79:7d:dd:c7:2d:de:6b:e2:40:92:a3:05:8e:9f:51:b3:
75:17:7e:c5:3c:05:eb:07:fe:8c:cf:7e:5e:17:e8:ec:95:8d:
0c:79:fa:53:b2:de:d4:17:10:c7:6f:c2:86:3b:c6:e6:4d:c1:
b6:bd:01:7f:61:c3:19:89:1a:ad:fe:b1:af:ef:bd:ed:fa:ea:
38:4e:55:1a:d7:86:9d:c9:d0:1a:1d:f1:11:a4:3c:0d:61:8c:
ca:a0:ec:58
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOhj3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NDdjZWQ4OGE0MDYxMjRjOGM0ZGYxNjZjNTc0MDUwOWU2NDE1ZDJhMB4XDTIyMDEw
MTEyNTUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWYyMGRjMWRmMjQ4
MjZjZDljODUzM2U0ODhhODUzODRjY2JiOWJhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/aT+HTUccq7nISkhUkOx6fglQmwXW3+BZN1rQ093T7ddP0
GWpxz62NZJr5uI7eqrpZ+2jKqfzOmTzI00aOMS/JCfrkgNUidkVA6M8xdqfN/chh
iZsTxCeYDjcrNL3yXqy+XZWgbkoIg4q4vflANaksQWHlCnZaY6e8mbadaN+E52Zm
ZWpKlPQWjHnNnqclyVVvM8RbSBA6x8BDuNy72karO+PuLwUVoqjcVDNiMzICVlWv
b99eXUjBLHQ9mw7y2o4Lv4BrOJ+C+KZd+p7bW5eouta/L8CLwvVdgMnBxNHwtXyQ
yYZl8EuUdd65D0hFSvhq8QAYfJPPQxeS+H74pN8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfINwd8kgmzZyFM+SIqFOEzLubqjAfBgNVHSMEGDAWgBQUfO2IpAYSTIxN
8WbFdAUJ5kFdKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZIenRpS1FHRWt5TVRmRm14WFFGQ2VaQlhTby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYTRkM2Y2LTFlNDYtNDdkMy1hNWQwLWZmODk5MTdkNDBkMC8x
L1h5RGNIZkpJSnMyY2hUUGtpS2hUaE15N202by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YTRkM2Y2LTFlNDYtNDdkMy1hNWQwLWZmODk5MTdkNDBkMC8xL0ZIenRpS1FHRWt5
TVRmRm14WFFGQ2VaQlhTby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWM9zANBgkqhkiG9w0BAQsFAAOC
AQEAY70OBiGbTY1qJLTQVzMf3lzdt3yru4w8yh0cvpbXctBo3v8jizB3GO1Ol+Wa
4hQYASN4jItDy6u4eWf+jCv3ORVfuZ5ghhiEbaC0MG8hjwgAmPkb5JYdqgcqTjxs
87puV0pwHNi46zipJM0l2ImlbjSTQKh4Sq+pBbD+ClLWEtxY2MTFPpe9sU/hEv4b
vADVCCg7ltoKFvSbBIdCK/stKz0LuuB5fd3HLd5r4kCSowWOn1GzdRd+xTwF6wf+
jM9+Xhfo7JWNDHn6U7Le1BcQx2/ChjvG5k3Btr0Bf2HDGYkarf6xr++97frqOE5V
GteGncnQGh3xEaQ8DWGMyqDsWA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:27 2025 by rpki-client