Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/SpaYnJyWKSm_WIoYjdRk3LqxCPk.roa
File: SpaYnJyWKSm_WIoYjdRk3LqxCPk.roa (raw, json)
Hash identifier: mFOrkF14sg3YS/hUEoxriVtYuN5u3SDapvo8rW3Qm64=
Subject key identifier: 4A:96:98:9C:9C:96:29:29:BF:58:8A:18:8D:D4:64:DC:BA:B1:08:F9
Certificate issuer: /CN=cc16f57d7534b8d125db8805b3389bffb58516b7
Certificate serial: 01839DB68606873F3225ECC2073CF5BCD042
Authority key identifier: CC:16:F5:7D:75:34:B8:D1:25:DB:88:05:B3:38:9B:FF:B5:85:16:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBb1fXU0uNEl24gFszib_7WFFrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/SpaYnJyWKSm_WIoYjdRk3LqxCPk.roa
Signing time: Mon 03 Oct 2022 11:58:48 +0000
ROA not before: Mon 03 Oct 2022 11:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199164
IP address blocks: 91.146.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:b6:86:06:87:3f:32:25:ec:c2:07:3c:f5:bc:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc16f57d7534b8d125db8805b3389bffb58516b7
Validity
Not Before: Oct 3 11:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a96989c9c962929bf588a188dd464dcbab108f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:97:92:00:48:41:11:4a:d3:15:a8:2e:1b:
ba:5b:1b:ab:77:3c:2d:f2:6d:e3:7e:6f:3e:1e:a6:
06:9b:f6:fb:67:80:6b:2d:b3:29:51:88:17:47:82:
42:e0:88:a6:43:3f:12:6c:79:1b:d6:16:e2:6d:26:
9f:cf:7c:81:bb:d5:f6:4f:e5:40:76:d3:bd:72:9a:
e8:c9:1c:fc:89:38:68:9d:7b:37:4c:77:ce:32:37:
b2:4d:cf:41:dc:64:6b:7c:e9:4b:e7:54:83:b3:59:
a2:e0:9b:01:4d:d9:33:a5:37:ea:39:91:f5:6f:e3:
1a:ed:00:46:ee:a4:42:dd:19:47:d9:18:de:ee:ac:
b6:59:8b:f3:3c:94:ad:75:a1:ff:65:67:97:e0:1c:
96:cd:a8:77:64:27:b4:79:20:16:90:5a:0b:c6:0f:
43:a9:89:62:a8:9d:81:6a:e3:d0:3d:4f:11:91:f2:
32:63:b1:b3:f2:57:83:ac:e7:e9:ef:56:df:ba:69:
b7:cd:d7:9a:4b:f3:68:66:50:f4:79:6e:7b:0d:38:
a4:a5:58:19:fd:a2:a3:89:65:03:4e:72:2d:5c:8b:
8d:7b:63:6d:14:55:b7:7a:3b:02:bd:91:6f:90:53:
90:a5:1b:5a:ec:be:af:e1:b9:83:3c:c8:46:75:e9:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:98:9C:9C:96:29:29:BF:58:8A:18:8D:D4:64:DC:BA:B1:08:F9
X509v3 Authority Key Identifier:
keyid:CC:16:F5:7D:75:34:B8:D1:25:DB:88:05:B3:38:9B:FF:B5:85:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBb1fXU0uNEl24gFszib_7WFFrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/SpaYnJyWKSm_WIoYjdRk3LqxCPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c61698-91a0-4c32-abb2-091c57346ce3/1/zBb1fXU0uNEl24gFszib_7WFFrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.112.0/24
Signature Algorithm: sha256WithRSAEncryption
82:05:e2:f1:a5:7a:56:e6:80:38:0d:db:91:65:6d:78:12:d1:
d3:1f:38:f5:86:bf:81:1b:b5:b6:5d:87:ee:30:48:78:96:a6:
ff:0f:fa:91:21:a5:c4:48:45:a9:68:77:a8:d0:fe:5d:fe:df:
c9:36:c3:92:46:cd:76:ce:89:aa:85:ad:f8:da:46:f6:e1:bc:
2a:cd:e4:b1:91:81:fe:1b:f4:d3:0b:64:ce:92:47:04:d3:90:
83:69:41:5c:62:90:55:1d:98:b3:b4:5e:02:a8:64:1a:12:4e:
c4:77:0e:21:b1:d7:5a:ff:92:f7:48:79:df:15:2c:a8:12:f1:
85:c5:54:07:91:bc:9f:ad:e8:fd:5c:b6:dc:e8:ad:e6:97:df:
b8:8e:13:50:82:6a:0f:43:7f:b8:26:99:a8:ff:21:ad:5e:d3:
82:9f:81:22:d2:56:09:0c:d9:8d:d9:b0:22:f4:b1:98:16:f2:
de:dc:7d:42:c8:81:b4:84:8f:9f:d6:5a:30:8b:71:84:d1:5d:
f7:4b:41:63:fc:e2:32:40:19:a0:d1:f1:6f:e5:35:55:f1:5f:
8f:ae:09:29:ad:60:80:bf:d5:75:e7:92:35:46:8f:aa:ce:71:
58:56:db:b2:57:e7:1f:d1:2d:90:f9:77:8c:aa:33:29:36:a2:
8b:3d:b4:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOdtoYGhz8yJezCBzz1vNBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTZmNTdkNzUzNGI4ZDEyNWRiODgwNWIzMzg5YmZmYjU4
NTE2YjcwHhcNMjIxMDAzMTE1ODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk2OTg5YzljOTYyOTI5YmY1ODhhMTg4ZGQ0NjRkY2JhYjEwOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxqXkgBIQRFK0xWoLhu6Wxurdzwt
8m3jfm8+HqYGm/b7Z4BrLbMpUYgXR4JC4IimQz8SbHkb1hbibSafz3yBu9X2T+VA
dtO9cproyRz8iThonXs3THfOMjeyTc9B3GRrfOlL51SDs1mi4JsBTdkzpTfqOZH1
b+Ma7QBG7qRC3RlH2Rje7qy2WYvzPJStdaH/ZWeX4ByWzah3ZCe0eSAWkFoLxg9D
qYliqJ2BauPQPU8RkfIyY7Gz8leDrOfp71bfumm3zdeaS/NoZlD0eW57DTikpVgZ
/aKjiWUDTnItXIuNe2NtFFW3ejsCvZFvkFOQpRta7L6v4bmDPMhGdelqAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqWmJyclikpv1iKGI3UZNy6sQj5MB8GA1UdIwQY
MBaAFMwW9X11NLjRJduIBbM4m/+1hRa3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJiMWZYVTB1TkVsMjRnRnN6aWJfN1dGRnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jNjE2OTgtOTFhMC00YzMyLWFiYjIt
MDkxYzU3MzQ2Y2UzLzEvU3BhWW5KeVdLU21fV0lvWWpkUmszTHF4Q1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jNjE2OTgtOTFhMC00YzMyLWFiYjItMDkxYzU3MzQ2Y2Uz
LzEvekJiMWZYVTB1TkVsMjRnRnN6aWJfN1dGRnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5JwMA0G
CSqGSIb3DQEBCwUAA4IBAQCCBeLxpXpW5oA4DduRZW14EtHTHzj1hr+BG7W2XYfu
MEh4lqb/D/qRIaXESEWpaHeo0P5d/t/JNsOSRs12zomqha342kb24bwqzeSxkYH+
G/TTC2TOkkcE05CDaUFcYpBVHZiztF4CqGQaEk7Edw4hsdda/5L3SHnfFSyoEvGF
xVQHkbyfrej9XLbc6K3ml9+4jhNQgmoPQ3+4Jpmo/yGtXtOCn4Ei0lYJDNmN2bAi
9LGYFvLe3H1CyIG0hI+f1lowi3GE0V33S0Fj/OIyQBmg0fFv5TVV8V+PrgkprWCA
v9V155I1Ro+qznFYVtuyV+cf0S2Q+XeMqjMpNqKLPbRb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org