Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/_qnZf_aG4DX3LPNGkdGs06FQReY.roa
File: _qnZf_aG4DX3LPNGkdGs06FQReY.roa (raw, json)
Hash identifier: 1JcFMBKgEJpTUrcY0ZT1tLRWVR7yh8NctUa3wfJD+jg=
Subject key identifier: FE:A9:D9:7F:F6:86:E0:35:F7:2C:F3:46:91:D1:AC:D3:A1:50:45:E6
Certificate issuer: /CN=42447a77d82f5ba3521653615c982084b6210694
Certificate serial: 3508673A
Authority key identifier: 42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/_qnZf_aG4DX3LPNGkdGs06FQReY.roa
Signing time: Sat 01 Jan 2022 07:59:40 +0000
ROA not before: Sat 01 Jan 2022 07:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199853
IP address blocks: 94.24.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889743162 (0x3508673a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42447a77d82f5ba3521653615c982084b6210694
Validity
Not Before: Jan 1 07:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fea9d97ff686e035f72cf34691d1acd3a15045e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:93:9f:20:19:54:1d:12:62:fe:00:07:7f:
d6:97:1c:ef:9c:fa:35:5a:e4:e8:ff:82:e2:f9:0c:
81:55:ff:b4:20:3f:cc:6a:dc:7d:8b:64:4a:a4:57:
cf:25:cb:12:5c:de:68:77:9e:fd:92:d7:cf:25:e5:
71:ca:3c:af:da:21:63:e4:ab:c4:ac:8a:6f:40:3d:
b5:8c:e0:6d:40:dc:5c:6f:e3:dc:86:fb:64:30:5a:
03:d0:13:7a:a6:d4:5b:e7:b4:68:da:a0:72:f4:1a:
ee:38:26:37:9d:59:04:9d:0d:93:ec:fb:db:dd:11:
94:a6:98:b0:63:a8:96:4b:f1:f5:7e:c8:a7:76:67:
90:41:cf:ff:4d:f6:6d:ea:48:6a:fc:a4:ed:19:81:
62:79:00:b5:80:40:81:49:0d:2d:82:e4:8c:2e:a3:
f9:ce:05:c6:43:c0:fb:b1:10:92:08:16:16:2f:b8:
a5:15:19:bc:b9:5f:ac:06:e0:10:96:46:60:d1:a2:
89:a7:b1:a1:68:5d:e0:47:fd:d2:f2:b9:14:4b:03:
c7:85:62:b3:b7:c2:d0:13:6e:61:2f:8d:13:24:ef:
5a:64:4c:8d:f4:a1:94:ed:56:cc:06:ed:9f:ab:c7:
33:20:2a:36:8a:b7:db:91:3b:93:9b:ad:a3:a0:b7:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:D9:7F:F6:86:E0:35:F7:2C:F3:46:91:D1:AC:D3:A1:50:45:E6
X509v3 Authority Key Identifier:
keyid:42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/_qnZf_aG4DX3LPNGkdGs06FQReY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a6:4e:13:a0:51:5c:0c:45:80:c6:5b:2d:d4:c1:8e:81:d5:
e1:cb:5b:fa:7e:25:64:90:2b:e2:60:2a:f3:b0:58:84:26:eb:
a5:bb:b6:b0:f4:90:a4:15:4b:05:f1:1a:54:ed:e5:39:c1:7e:
4a:9a:74:39:fc:72:65:12:44:d0:b5:71:c3:eb:0e:df:de:e9:
9c:ec:55:54:ce:43:bf:1d:8f:60:48:53:66:53:92:fe:8e:cc:
fd:f5:20:e9:1b:63:b3:1e:ac:23:fd:b2:df:b3:1b:8e:88:7c:
ad:17:9b:4e:4a:80:3f:54:15:9c:61:81:e1:48:14:82:74:cf:
a2:ec:44:bf:f7:ae:c8:30:d5:49:c4:56:2f:f5:06:92:c2:95:
68:43:aa:c4:10:70:bd:6a:53:4e:69:ce:5c:ed:6e:53:7c:1e:
c1:2f:50:79:26:92:fe:96:d5:61:b9:e8:13:c8:39:ff:7d:fe:
cc:8b:fd:78:6a:c5:1d:60:ec:a4:48:e0:62:11:0c:d8:c7:06:
d6:79:08:20:63:43:73:03:0f:bc:34:cf:58:19:b3:b2:42:d0:
1e:89:2c:3d:34:22:96:e1:da:2c:8d:8f:82:5c:da:b5:19:e3:
67:cf:d5:8b:6a:b2:5d:a8:1c:45:c4:81:42:19:1f:fd:91:e8:
1c:13:d4:1e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENQhnOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MjQ0N2E3N2Q4MmY1YmEzNTIxNjUzNjE1Yzk4MjA4NGI2MjEwNjk0MB4XDTIyMDEw
MTA3NTk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmVhOWQ5N2ZmNjg2
ZTAzNWY3MmNmMzQ2OTFkMWFjZDNhMTUwNDVlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIQgk58gGVQdEmL+AAd/1pcc75z6NVrk6P+C4vkMgVX/tCA/
zGrcfYtkSqRXzyXLElzeaHee/ZLXzyXlcco8r9ohY+SrxKyKb0A9tYzgbUDcXG/j
3Ib7ZDBaA9ATeqbUW+e0aNqgcvQa7jgmN51ZBJ0Nk+z7290RlKaYsGOolkvx9X7I
p3ZnkEHP/032bepIavyk7RmBYnkAtYBAgUkNLYLkjC6j+c4FxkPA+7EQkggWFi+4
pRUZvLlfrAbgEJZGYNGiiaexoWhd4Ef90vK5FEsDx4Vis7fC0BNuYS+NEyTvWmRM
jfShlO1WzAbtn6vHMyAqNoq325E7k5uto6C3xQ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+qdl/9obgNfcs80aR0azToVBF5jAfBgNVHSMEGDAWgBRCRHp32C9bo1IW
U2FcmCCEtiEGlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FrUjZkOWd2VzZOU0ZsTmhYSmdnaExZaEJwUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZjliZWU2LWFkYTYtNDk4MS1iZGQyLTBjMWVjY2YwNGE1ZS8x
L19xblpmX2FHNERYM0xQTkdrZEdzMDZGUVJlWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZjliZWU2LWFkYTYtNDk4MS1iZGQyLTBjMWVjY2YwNGE1ZS8xL1FrUjZkOWd2VzZO
U0ZsTmhYSmdnaExZaEJwUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV4YLDANBgkqhkiG9w0BAQsFAAOC
AQEAfqZOE6BRXAxFgMZbLdTBjoHV4ctb+n4lZJAr4mAq87BYhCbrpbu2sPSQpBVL
BfEaVO3lOcF+Spp0OfxyZRJE0LVxw+sO397pnOxVVM5Dvx2PYEhTZlOS/o7M/fUg
6Rtjsx6sI/2y37Mbjoh8rRebTkqAP1QVnGGB4UgUgnTPouxEv/euyDDVScRWL/UG
ksKVaEOqxBBwvWpTTmnOXO1uU3wewS9QeSaS/pbVYbnoE8g5/33+zIv9eGrFHWDs
pEjgYhEM2McG1nkIIGNDcwMPvDTPWBmzskLQHoksPTQiluHaLI2PglzatRnjZ8/V
i2qyXagcRcSBQhkf/ZHoHBPUHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:15 2024 by rpki-client on console-ams.rpki-client.org