Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/xrKdPbqGp6ruiDH1B3ITCZGun9o.roa
File: xrKdPbqGp6ruiDH1B3ITCZGun9o.roa (raw, json)
Hash identifier: YILK62uYSsmUkAZKSmTmWNoh6SrWcY0S89MdCRo/vZ8=
Subject key identifier: C6:B2:9D:3D:BA:86:A7:AA:EE:88:31:F5:07:72:13:09:91:AE:9F:DA
Certificate issuer: /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial: 018571957E35552AF539FE8A0547E48E91B7
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/xrKdPbqGp6ruiDH1B3ITCZGun9o.roa
Signing time: Mon 02 Jan 2023 08:25:00 +0000
ROA not before: Mon 02 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 79.110.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7e:35:55:2a:f5:39:fe:8a:05:47:e4:8e:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Validity
Not Before: Jan 2 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6b29d3dba86a7aaee8831f50772130991ae9fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:f1:5e:19:01:04:b0:11:54:5a:40:42:c0:
d6:bc:26:67:6a:3d:54:b7:63:36:16:5a:23:3e:e3:
72:53:16:5a:7b:0e:c5:ea:c8:50:db:ee:ef:10:5c:
33:cf:27:3a:2d:92:27:82:e9:ab:b3:67:94:bd:57:
02:00:8e:1c:b8:41:79:d9:ba:3f:8f:3f:6b:d1:5f:
61:29:13:08:dd:16:c0:63:32:0d:78:c0:11:e1:78:
46:23:42:31:a7:07:98:48:62:e4:38:ff:ae:32:15:
0f:53:03:b4:e9:2e:d6:c2:4e:cb:60:51:53:17:d1:
e5:b8:14:40:15:2a:ae:24:e2:8a:92:92:f9:7a:e0:
37:d1:32:50:83:8b:6a:70:7b:bd:f0:6d:6c:68:cd:
7a:a7:c3:09:5e:05:40:8a:bc:6a:34:1d:96:6a:08:
c7:6c:5f:7b:be:f5:0b:e7:d1:0b:ff:87:9a:ef:e0:
56:c1:6a:94:66:40:ac:a0:a1:53:eb:d5:4a:2f:8f:
35:36:36:85:f2:1d:ed:a6:2e:f6:c7:75:a0:b7:15:
12:29:ba:ca:72:a3:d7:2d:46:f6:dc:fd:fe:38:8a:
2f:07:97:b2:33:98:33:45:11:30:a2:cc:1f:05:ce:
42:8d:cc:7d:83:bf:ad:fc:1d:68:05:fa:6f:1e:36:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:9D:3D:BA:86:A7:AA:EE:88:31:F5:07:72:13:09:91:AE:9F:DA
X509v3 Authority Key Identifier:
keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/xrKdPbqGp6ruiDH1B3ITCZGun9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9c:52:63:98:84:d8:6e:3c:6f:97:72:e6:34:ff:80:3d:8f:
23:09:28:bb:e1:79:8d:66:03:0b:c3:3d:1b:1c:e6:95:68:6d:
da:fe:c1:1d:83:6d:f5:5e:a3:27:75:b6:c3:76:a7:c7:5a:33:
a3:e0:3c:65:5c:3c:ce:c4:1c:ea:d6:0f:2c:2f:d1:06:51:14:
93:8a:49:98:b7:61:ee:bc:43:0e:69:a4:c6:a4:e0:ae:25:1d:
6d:44:30:63:2a:d2:1e:ba:f7:2a:43:78:89:b3:11:16:7a:21:
6c:24:50:a6:ce:76:1e:b2:76:64:af:34:31:5c:30:c1:c4:72:
6f:d2:1e:52:08:62:c0:07:02:77:51:01:b4:0f:e7:07:d6:43:
d9:a0:e1:40:ed:71:30:30:f4:df:92:83:c1:84:19:51:10:f5:
ad:0f:9e:96:39:45:e2:a3:3b:56:e0:4e:36:7c:52:4a:c3:dc:
46:e3:e8:f2:23:b7:69:c7:55:58:54:f8:41:65:32:6b:ea:dd:
40:85:34:6f:e4:a1:70:54:ca:61:7c:5c:42:b8:71:34:65:a6:
b6:ba:c7:53:e4:91:19:63:d8:d6:bb:49:6e:cc:aa:ba:63:6c:
f9:11:8e:9b:65:17:ef:eb:c9:41:8a:07:98:93:ce:60:5e:32:
92:30:97:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlX41VSr1Of6KBUfkjpG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NmQ0ZmVhNDdmYjM5ZWM4YzJlM2FhOTNiZTYwNjg2ZGNl
YWVhNDUwHhcNMjMwMTAyMDgyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmIyOWQzZGJhODZhN2FhZWU4ODMxZjUwNzcyMTMwOTkxYWU5ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3LxXhkBBLARVFpAQsDWvCZnaj1U
t2M2FlojPuNyUxZaew7F6shQ2+7vEFwzzyc6LZIngumrs2eUvVcCAI4cuEF52bo/
jz9r0V9hKRMI3RbAYzINeMAR4XhGI0IxpweYSGLkOP+uMhUPUwO06S7Wwk7LYFFT
F9HluBRAFSquJOKKkpL5euA30TJQg4tqcHu98G1saM16p8MJXgVAirxqNB2WagjH
bF97vvUL59EL/4ea7+BWwWqUZkCsoKFT69VKL481NjaF8h3tpi72x3WgtxUSKbrK
cqPXLUb23P3+OIovB5eyM5gzRREwoswfBc5Cjcx9g7+t/B1oBfpvHjYnqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMaynT26hqeq7ogx9QdyEwmRrp/aMB8GA1UdIwQY
MBaAFDRtT+pH+znsjC46qTvmBobc6upFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkcxUDZrZjdPZXlNTGpxcE8tWUdodHpxNmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MTVhZTItZTdkYi00MGQ0LWE3MzYt
MzBiZjM3OGZiMmU3LzEveHJLZFBicUdwNnJ1aURIMUIzSVRDWkd1bjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MTVhZTItZTdkYi00MGQ0LWE3MzYtMzBiZjM3OGZiMmU3
LzEvTkcxUDZrZjdPZXlNTGpxcE8tWUdodHpxNmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27nMA0G
CSqGSIb3DQEBCwUAA4IBAQBunFJjmITYbjxvl3LmNP+APY8jCSi74XmNZgMLwz0b
HOaVaG3a/sEdg231XqMndbbDdqfHWjOj4DxlXDzOxBzq1g8sL9EGURSTikmYt2Hu
vEMOaaTGpOCuJR1tRDBjKtIeuvcqQ3iJsxEWeiFsJFCmznYesnZkrzQxXDDBxHJv
0h5SCGLABwJ3UQG0D+cH1kPZoOFA7XEwMPTfkoPBhBlREPWtD56WOUXioztW4E42
fFJKw9xG4+jyI7dpx1VYVPhBZTJr6t1AhTRv5KFwVMphfFxCuHE0Zaa2usdT5JEZ
Y9jWu0luzKq6Y2z5EY6bZRfv68lBigeYk85gXjKSMJcf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org