Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa
File: a25CbXdcayrpWfySZ7PSdpox_oU.roa (raw, json)
Hash identifier: rbbCatl/ukhAHQ9xyFF8ndQxVBFkeqrJu0+04SKvlCQ=
Subject key identifier: 6B:6E:42:6D:77:5C:6B:2A:E9:59:FC:92:67:B3:D2:76:9A:31:FE:85
Certificate issuer: /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial: 018571958029FE7C171BC873A383295D3B58
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa
Signing time: Mon 02 Jan 2023 08:25:01 +0000
ROA not before: Mon 02 Jan 2023 08:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 79.110.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:80:29:fe:7c:17:1b:c8:73:a3:83:29:5d:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Validity
Not Before: Jan 2 08:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b6e426d775c6b2ae959fc9267b3d2769a31fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:b8:23:39:10:6a:27:0f:90:21:8c:94:f8:
3e:10:17:89:a0:e9:82:d5:5c:19:46:c5:a3:9a:df:
04:6b:7e:19:60:e8:84:57:05:0c:5b:eb:ca:a0:d3:
c5:be:2f:6c:7c:40:3a:f4:b1:57:16:41:0f:25:52:
fa:6a:5b:ef:98:c7:99:3f:e5:dd:61:3f:1c:e8:a9:
3b:11:46:57:42:1a:e4:3f:e2:42:12:ab:bb:c8:5a:
f2:5d:4b:23:49:86:4b:d7:96:a0:66:87:e4:fb:8a:
53:11:f5:9e:bc:ce:90:8c:c2:5c:d1:c9:88:9c:69:
7c:2f:95:8d:7b:9a:69:11:4e:05:5c:e3:6c:af:52:
12:3f:31:b4:f0:1f:b4:13:95:dd:9c:f5:e0:51:59:
3a:61:53:31:1b:48:bf:bd:9c:86:25:bd:89:3f:53:
77:4e:a4:70:ff:61:e3:94:40:df:4a:8c:d8:d8:36:
ea:d9:fc:67:e2:90:95:00:e0:b1:dc:09:c2:bc:23:
32:d8:e1:02:b1:b4:e8:6c:ba:2f:44:42:32:49:89:
c4:fa:bd:76:bb:af:53:7b:c7:0f:1b:c3:88:66:22:
33:96:ad:69:0c:85:4b:80:d2:4e:8e:9b:e1:a6:ab:
fb:d1:4a:5b:58:37:3a:94:16:ed:74:ed:fd:6c:41:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6E:42:6D:77:5C:6B:2A:E9:59:FC:92:67:B3:D2:76:9A:31:FE:85
X509v3 Authority Key Identifier:
keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:49:5c:56:81:7a:c8:e2:61:90:af:c5:04:6e:9a:0d:5a:21:
d6:65:05:7f:f4:fd:cb:4a:c2:bf:8f:f3:a4:78:3c:5b:25:ac:
88:74:00:c3:6f:93:94:eb:76:a6:4d:9f:b6:3e:41:d6:33:0b:
51:de:ae:2b:05:ab:2f:5e:22:27:57:47:f2:a1:1e:02:ab:46:
84:d3:5a:38:e6:67:16:2a:63:97:04:70:88:c0:b4:9f:c7:90:
f0:90:e0:cd:ff:09:18:8b:40:50:9b:b4:b6:14:46:f3:3c:c9:
41:e9:38:ad:cb:fc:82:35:2d:25:55:d8:bc:08:13:ef:15:58:
66:76:83:64:7d:ed:05:0c:7e:02:54:67:15:62:95:50:b8:d3:
57:7d:a6:40:18:c3:5f:54:00:74:e7:b9:63:c4:d2:89:e5:7b:
40:f3:6b:fd:69:56:64:a1:89:e3:6c:7a:03:f6:c6:50:aa:32:
7a:2f:d0:00:19:d1:a2:fc:d9:fc:3a:34:fc:b7:1b:bd:19:bb:
0c:12:b5:b2:01:03:8d:c5:29:32:e5:49:b0:c2:f9:98:03:52:
74:03:79:28:47:c8:de:06:9e:4a:11:35:47:59:f2:19:69:0a:
86:5f:b7:d6:33:03:c1:7e:6f:82:3d:77:60:83:70:e5:11:b9:
35:29:a0:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlYAp/nwXG8hzo4MpXTtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NmQ0ZmVhNDdmYjM5ZWM4YzJlM2FhOTNiZTYwNjg2ZGNl
YWVhNDUwHhcNMjMwMTAyMDgyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjZlNDI2ZDc3NWM2YjJhZTk1OWZjOTI2N2IzZDI3NjlhMzFmZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ji4IzkQaicPkCGMlPg+EBeJoOmC
1VwZRsWjmt8Ea34ZYOiEVwUMW+vKoNPFvi9sfEA69LFXFkEPJVL6alvvmMeZP+Xd
YT8c6Kk7EUZXQhrkP+JCEqu7yFryXUsjSYZL15agZofk+4pTEfWevM6QjMJc0cmI
nGl8L5WNe5ppEU4FXONsr1ISPzG08B+0E5XdnPXgUVk6YVMxG0i/vZyGJb2JP1N3
TqRw/2HjlEDfSozY2Dbq2fxn4pCVAOCx3AnCvCMy2OECsbTobLovREIySYnE+r12
u69Te8cPG8OIZiIzlq1pDIVLgNJOjpvhpqv70UpbWDc6lBbtdO39bEHvpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtuQm13XGsq6Vn8kmez0naaMf6FMB8GA1UdIwQY
MBaAFDRtT+pH+znsjC46qTvmBobc6upFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkcxUDZrZjdPZXlNTGpxcE8tWUdodHpxNmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MTVhZTItZTdkYi00MGQ0LWE3MzYt
MzBiZjM3OGZiMmU3LzEvYTI1Q2JYZGNheXJwV2Z5U1o3UFNkcG94X29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MTVhZTItZTdkYi00MGQ0LWE3MzYtMzBiZjM3OGZiMmU3
LzEvTkcxUDZrZjdPZXlNTGpxcE8tWUdodHpxNmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27nMA0G
CSqGSIb3DQEBCwUAA4IBAQClSVxWgXrI4mGQr8UEbpoNWiHWZQV/9P3LSsK/j/Ok
eDxbJayIdADDb5OU63amTZ+2PkHWMwtR3q4rBasvXiInV0fyoR4Cq0aE01o45mcW
KmOXBHCIwLSfx5DwkODN/wkYi0BQm7S2FEbzPMlB6Tity/yCNS0lVdi8CBPvFVhm
doNkfe0FDH4CVGcVYpVQuNNXfaZAGMNfVAB057ljxNKJ5XtA82v9aVZkoYnjbHoD
9sZQqjJ6L9AAGdGi/Nn8OjT8txu9GbsMErWyAQONxSky5UmwwvmYA1J0A3koR8je
Bp5KETVHWfIZaQqGX7fWMwPBfm+CPXdgg3DlEbk1KaA2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org