Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K6q5e4TVn-Pq6y5KC6rFbfe7K2U.roa
File: K6q5e4TVn-Pq6y5KC6rFbfe7K2U.roa (raw, json)
Hash identifier: xtXp2dtszRMHHZiUqvFmUP3F/DFlV8QPr8na4cT+s9w=
Subject key identifier: 2B:AA:B9:7B:84:D5:9F:E3:EA:EB:2E:4A:0B:AA:C5:6D:F7:BB:2B:65
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0947FCEE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K6q5e4TVn-Pq6y5KC6rFbfe7K2U.roa
Signing time: Wed 02 Feb 2022 05:34:58 +0000
ROA not before: Wed 02 Feb 2022 05:34:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.224.0/21 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155712750 (0x947fcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 2 05:34:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2baab97b84d59fe3eaeb2e4a0baac56df7bb2b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:c1:cf:ae:44:98:56:63:51:80:7e:da:06:
33:21:12:b3:ef:71:c9:ad:5a:66:29:c7:f7:01:a5:
62:ce:6e:28:bc:e2:fb:c3:92:5f:3a:9b:74:df:91:
93:e7:39:91:02:e4:96:11:aa:a0:ae:a1:33:fd:44:
c4:fd:fb:47:ab:5d:6c:12:2e:d8:4b:53:87:65:25:
9d:47:0e:85:c3:6b:c5:e3:94:1c:61:17:72:99:0b:
9b:37:e5:31:2d:fa:05:70:4d:6b:7e:fc:f0:db:da:
63:1e:96:9c:71:01:bd:4a:6e:a1:f3:e6:63:a8:1f:
1e:f3:e0:02:a7:5c:64:7a:84:d6:98:42:16:fe:05:
9b:c7:0f:82:cd:0c:c5:5a:02:b0:11:10:43:ee:0e:
32:2c:3a:e9:c0:c7:b9:a8:92:0e:fd:18:12:8e:4a:
32:34:22:b0:05:1a:6d:b5:f5:03:a6:e7:3c:fc:61:
b4:76:a7:4a:3a:8d:a0:8d:65:27:64:a8:0c:d8:09:
9f:dd:d2:84:d1:c9:54:83:b5:50:cb:5d:8f:f2:57:
1a:ef:8b:07:22:cc:8c:4e:45:58:b3:48:ff:a2:8c:
d7:f9:54:d2:55:fe:16:32:03:50:aa:fb:dd:99:a9:
9d:e1:fe:e8:fc:9e:f0:26:62:8b:b3:ea:45:56:10:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:B9:7B:84:D5:9F:E3:EA:EB:2E:4A:0B:AA:C5:6D:F7:BB:2B:65
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K6q5e4TVn-Pq6y5KC6rFbfe7K2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.224.0/21
Signature Algorithm: sha256WithRSAEncryption
32:09:46:1a:6f:24:63:7d:9c:5e:1d:d7:19:f8:cf:94:c0:1f:
97:b1:59:92:02:11:7d:b3:0b:21:cc:21:0f:c0:5e:c5:f9:1b:
8d:90:7e:e4:5a:e6:1f:23:c4:b3:53:62:24:09:6c:0f:35:27:
6d:de:cd:a8:7a:67:da:43:7b:20:9d:bf:15:7e:f0:68:4c:4e:
bc:63:21:3e:19:fb:66:de:20:ed:3a:4b:28:13:af:c0:95:e0:
dd:5e:93:98:61:9d:1b:e0:56:60:5c:68:cb:13:be:40:4f:db:
9e:d0:08:8c:01:c2:07:34:76:07:a3:28:c4:8b:e3:09:53:6e:
e1:09:63:ba:ce:d1:6f:0f:49:ad:f4:7f:09:ae:e7:c1:29:74:
c4:95:4a:3f:2e:fc:85:1b:f2:8a:c9:e1:61:b5:d2:ec:d2:62:
ea:07:27:a2:7f:dd:15:93:41:2d:23:b6:ed:ad:2d:44:fa:5a:
cd:e3:b6:86:f9:83:be:c8:82:17:80:e4:53:94:c6:3c:f7:cf:
d6:ba:cb:a7:48:98:29:1b:ee:67:ef:7f:b2:fc:f4:fa:bc:8f:
a4:3a:3e:50:98:ad:0e:d6:dc:67:7c:58:cc:47:41:0a:c1:41:
54:fa:cc:e5:76:39:27:2e:4c:43:6b:b5:96:26:8d:ab:96:95:
4c:06:31:d7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECUf87jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIw
MjA1MzQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmJhYWI5N2I4NGQ1
OWZlM2VhZWIyZTRhMGJhYWM1NmRmN2JiMmI2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMcowc+uRJhWY1GAftoGMyESs+9xya1aZinH9wGlYs5uKLzi
+8OSXzqbdN+Rk+c5kQLklhGqoK6hM/1ExP37R6tdbBIu2EtTh2UlnUcOhcNrxeOU
HGEXcpkLmzflMS36BXBNa3788NvaYx6WnHEBvUpuofPmY6gfHvPgAqdcZHqE1phC
Fv4Fm8cPgs0MxVoCsBEQQ+4OMiw66cDHuaiSDv0YEo5KMjQisAUabbX1A6bnPPxh
tHanSjqNoI1lJ2SoDNgJn93ShNHJVIO1UMtdj/JXGu+LByLMjE5FWLNI/6KM1/lU
0lX+FjIDUKr73ZmpneH+6Pye8CZii7PqRVYQsb0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQrqrl7hNWf4+rrLkoLqsVt97srZTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0s2cTVlNFRWbi1QcTZ5NUtDNnJGYmZlN0syVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlQu7AMEA1l04DANBgkqhkiG9w0B
AQsFAAOCAQEAMglGGm8kY32cXh3XGfjPlMAfl7FZkgIRfbMLIcwhD8BexfkbjZB+
5FrmHyPEs1NiJAlsDzUnbd7NqHpn2kN7IJ2/FX7waExOvGMhPhn7Zt4g7TpLKBOv
wJXg3V6TmGGdG+BWYFxoyxO+QE/bntAIjAHCBzR2B6MoxIvjCVNu4Qljus7Rbw9J
rfR/Ca7nwSl0xJVKPy78hRvyisnhYbXS7NJi6gcnon/dFZNBLSO27a0tRPpazeO2
hvmDvsiCF4DkU5TGPPfP1rrLp0iYKRvuZ+9/svz0+ryPpDo+UJitDtbcZ3xYzEdB
CsFBVPrM5XY5Jy5MQ2u1liaNq5aVTAYx1w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org