Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/kJzGXQS1rD5lm7R5D4Zer5v5Am4.roa
File: kJzGXQS1rD5lm7R5D4Zer5v5Am4.roa (raw, json)
Hash identifier: QFa0jB5prwCn3mIPoEP1QnrOs6DbdI3qFRik76/rykw=
Subject key identifier: 90:9C:C6:5D:04:B5:AC:3E:65:9B:B4:79:0F:86:5E:AF:9B:F9:02:6E
Certificate issuer: /CN=c93182d9666e419e667de860d544a50361b3223a
Certificate serial: 01856FCBBA6C028F0BD52A5502992A884D53
Authority key identifier: C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/kJzGXQS1rD5lm7R5D4Zer5v5Am4.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35041
IP address blocks: 109.235.168.0/21 maxlen: 21
194.30.169.0/24 maxlen: 24
195.74.36.0/22 maxlen: 22
193.17.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ba:6c:02:8f:0b:d5:2a:55:02:99:2a:88:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93182d9666e419e667de860d544a50361b3223a
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=909cc65d04b5ac3e659bb4790f865eaf9bf9026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:a0:5d:90:7e:52:28:5d:7c:60:ec:f9:21:
50:ec:eb:0f:fb:bd:a5:e8:65:a5:96:37:d3:7e:4c:
7a:fa:c7:29:d1:6c:eb:09:41:c4:62:df:78:72:8a:
c3:c5:51:50:02:51:27:de:b0:07:3c:3a:16:43:37:
fa:c2:7f:71:3f:1c:41:8a:23:3b:ea:a2:84:09:72:
9c:3d:07:3a:e0:b2:59:ab:35:11:56:24:cc:97:b1:
c7:26:56:fb:79:6a:4d:ae:56:59:03:ef:da:3c:13:
c7:33:39:6f:7c:3d:54:5f:85:31:a1:59:3a:f2:ab:
15:c5:bf:56:5d:4e:bf:ff:97:9e:03:56:cf:b3:a3:
e4:e4:8a:d2:29:28:cd:b8:65:87:fd:ce:a0:ab:c1:
2c:1e:3d:7d:1c:58:08:95:b4:3c:02:5b:91:86:e4:
fc:e4:15:7c:5e:d3:b2:ba:35:c9:57:ac:c7:db:36:
69:9d:e3:56:f7:f5:68:63:e1:fe:d2:74:48:d3:01:
9d:e0:16:ea:bd:1b:9a:7a:88:0d:1a:69:30:96:aa:
f8:ce:81:a4:b5:ed:ec:ae:69:8e:f6:4d:71:f1:7e:
9c:f3:22:e7:fd:a2:41:0c:9f:d8:8f:a5:8a:35:8d:
6a:f7:ab:41:47:cf:ee:77:63:2e:ba:79:41:c9:40:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:C6:5D:04:B5:AC:3E:65:9B:B4:79:0F:86:5E:AF:9B:F9:02:6E
X509v3 Authority Key Identifier:
keyid:C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/kJzGXQS1rD5lm7R5D4Zer5v5Am4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/yTGC2WZuQZ5mfehg1USlA2GzIjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.168.0/21
193.17.218.0/24
194.30.169.0/24
195.74.36.0/22
Signature Algorithm: sha256WithRSAEncryption
31:2e:23:e4:24:d3:c2:60:d1:1b:f2:5e:9f:5f:da:08:0d:36:
ea:0b:23:d3:48:6c:8a:0c:5f:87:38:fd:c9:7c:ec:7a:5f:7d:
62:51:62:40:49:56:f2:e2:94:5c:e9:fb:c3:37:49:7e:75:35:
89:75:a3:37:ad:04:17:66:a1:18:cc:94:d9:05:69:5b:da:2d:
0c:b0:2f:c4:87:f8:df:52:84:71:32:d6:1e:54:3c:68:c7:a1:
f0:6f:55:57:cd:8d:7e:33:61:3f:e1:2b:c9:5a:3a:1a:dd:a9:
58:63:c0:d3:01:66:9b:be:17:96:3a:f3:7d:6f:5f:6c:a7:ab:
7f:b1:32:ca:0a:2d:cd:f9:88:b4:4d:e3:8b:80:05:6e:ce:ad:
08:95:7b:c5:f5:10:0f:4d:f2:28:cf:f0:ad:1b:5f:b9:2a:e9:
35:cd:9d:86:94:9e:94:70:a8:fc:24:48:22:5a:26:0b:09:c8:
74:b9:77:b4:8c:ba:d6:dd:6b:f1:82:ab:ab:3d:f9:66:61:c2:
63:86:68:ad:38:58:dd:d2:61:97:fa:ba:c6:8a:1d:50:04:aa:
2d:7f:96:ae:8c:12:c3:23:99:dd:e5:a7:21:0a:f9:58:d9:ed:
e8:ce:f2:37:51:bb:f2:7f:ce:b8:24:c1:d4:92:00:f4:01:e2:
84:40:ef:43
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVvy7psAo8L1SpVApkqiE1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzE4MmQ5NjY2ZTQxOWU2NjdkZTg2MGQ1NDRhNTAzNjFi
MzIyM2EwHhcNMjMwMTAyMDAwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDljYzY1ZDA0YjVhYzNlNjU5YmI0NzkwZjg2NWVhZjliZjkwMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ6gXZB+UihdfGDs+SFQ7OsP+72l
6GWlljfTfkx6+scp0WzrCUHEYt94corDxVFQAlEn3rAHPDoWQzf6wn9xPxxBiiM7
6qKECXKcPQc64LJZqzURViTMl7HHJlb7eWpNrlZZA+/aPBPHMzlvfD1UX4UxoVk6
8qsVxb9WXU6//5eeA1bPs6Pk5IrSKSjNuGWH/c6gq8EsHj19HFgIlbQ8AluRhuT8
5BV8XtOyujXJV6zH2zZpneNW9/VoY+H+0nRI0wGd4BbqvRuaeogNGmkwlqr4zoGk
te3srmmO9k1x8X6c8yLn/aJBDJ/Yj6WKNY1q96tBR8/ud2MuunlByUA6zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJCcxl0Etaw+ZZu0eQ+GXq+b+QJuMB8GA1UdIwQY
MBaAFMkxgtlmbkGeZn3oYNVEpQNhsyI6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRHQzJXWnVRWjVtZmVoZzFVU2xBMkd6SWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82Mjk3MTUtZGRiNy00YzZhLWJhNDct
ZDM5ZmM0MTFmZTdiLzEva0p6R1hRUzFyRDVsbTdSNUQ0WmVyNXY1QW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82Mjk3MTUtZGRiNy00YzZhLWJhNDctZDM5ZmM0MTFmZTdi
LzEveVRHQzJXWnVRWjVtZmVoZzFVU2xBMkd6SWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDbeuoAwQA
wRHaAwQAwh6pAwQCw0okMA0GCSqGSIb3DQEBCwUAA4IBAQAxLiPkJNPCYNEb8l6f
X9oIDTbqCyPTSGyKDF+HOP3JfOx6X31iUWJASVby4pRc6fvDN0l+dTWJdaM3rQQX
ZqEYzJTZBWlb2i0MsC/Eh/jfUoRxMtYeVDxox6Hwb1VXzY1+M2E/4SvJWjoa3alY
Y8DTAWabvheWOvN9b19sp6t/sTLKCi3N+Yi0TeOLgAVuzq0IlXvF9RAPTfIoz/Ct
G1+5Kuk1zZ2GlJ6UcKj8JEgiWiYLCch0uXe0jLrW3WvxgqurPflmYcJjhmitOFjd
0mGX+rrGih1QBKotf5aujBLDI5nd5achCvlY2e3ozvI3Ubvyf864JMHUkgD0AeKE
QO9D
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org