Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/kknOdMZoaXx9E3GirTqQ69RxfD0.roa
File: kknOdMZoaXx9E3GirTqQ69RxfD0.roa (raw, json)
Hash identifier: fLDKsbZ+aBcZMgJqJCP4QN8iYv904Vrx78D7jMz74Zw=
Subject key identifier: 92:49:CE:74:C6:68:69:7C:7D:13:71:A2:AD:3A:90:EB:D4:71:7C:3D
Certificate issuer: /CN=65e2e5ba6bca74c4894471c0e021d4e278f1af90
Certificate serial: 018964C05D7E37AA90FADC5BFBEB9C184AC3
Authority key identifier: 65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeLlumvKdMSJRHHA4CHU4njxr5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/kknOdMZoaXx9E3GirTqQ69RxfD0.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.255.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5d:7e:37:aa:90:fa:dc:5b:fb:eb:9c:18:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e2e5ba6bca74c4894471c0e021d4e278f1af90
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9249ce74c668697c7d1371a2ad3a90ebd4717c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:00:83:5f:76:11:fa:d2:47:fa:5f:50:02:
af:e5:6f:ba:3b:de:34:b3:54:f5:be:4b:a3:47:b2:
8d:ed:c0:9d:8e:35:76:7f:3f:08:36:b9:91:31:53:
2b:e3:21:7d:a6:16:f7:10:79:d4:f7:79:c4:7d:7d:
55:f9:a7:a9:b8:6f:e5:fa:36:ee:91:31:3d:ea:d0:
a6:f5:d5:21:b2:2d:93:89:83:8a:a1:cb:cf:b3:2f:
81:b4:cd:17:e5:63:28:62:cb:d1:10:a2:72:de:55:
7f:7f:44:01:0d:d8:9a:d5:1f:0a:fd:b8:18:4d:ad:
9e:d6:6d:6c:ab:bf:b4:e8:8a:c4:db:9c:d9:32:2b:
4d:f1:01:89:e2:1d:73:bf:61:57:fd:86:39:88:de:
ce:22:fa:1e:6a:b6:ae:10:cf:41:aa:59:a0:7a:7f:
7c:a8:2a:6a:8a:18:39:1a:12:50:85:75:b8:c7:9b:
4d:0b:a5:16:40:d0:a0:09:39:4a:c8:eb:dd:ff:d9:
0d:50:07:42:6e:d0:1f:b1:15:66:23:f0:57:0e:71:
2c:c4:1c:7f:5f:de:2a:22:d2:53:60:fb:9f:7f:ad:
b0:ba:65:ca:e8:ea:7d:c0:7f:89:61:5f:8f:84:f9:
e5:5b:51:19:f5:d7:df:e1:dd:ae:95:7a:c6:9f:2b:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:49:CE:74:C6:68:69:7C:7D:13:71:A2:AD:3A:90:EB:D4:71:7C:3D
X509v3 Authority Key Identifier:
keyid:65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeLlumvKdMSJRHHA4CHU4njxr5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/kknOdMZoaXx9E3GirTqQ69RxfD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/ZeLlumvKdMSJRHHA4CHU4njxr5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.186.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0e:8f:a6:d4:d0:42:69:d3:c3:99:bf:f2:a8:ce:2f:1a:4c:
22:4c:04:15:b0:fd:24:af:0c:32:fb:16:9e:62:55:cd:1d:e0:
6c:f3:eb:dd:53:a0:03:2a:2e:e1:a3:37:5b:e6:fd:b6:89:12:
c1:c8:63:33:7a:8a:2e:d3:be:fa:39:06:11:3b:66:b7:24:74:
85:ab:4f:6b:59:7d:6e:47:50:bd:b2:34:af:fb:44:e0:1e:0f:
ea:c1:87:60:a5:39:6d:15:2b:39:77:7b:0f:17:dd:e2:60:ee:
d9:09:00:db:69:d3:f7:26:56:b6:d0:6e:89:6a:14:a1:67:d9:
7d:c8:84:99:61:b8:ef:0b:56:1e:ec:eb:cc:a9:33:c5:70:b0:
2e:99:60:bf:37:4d:5b:2e:df:51:36:38:2b:9e:20:32:d1:12:
22:b6:b9:43:02:e6:7c:10:7a:bb:15:1a:2b:08:ad:1e:7b:a4:
a7:40:8d:b6:5a:80:db:39:96:92:65:dc:0f:2e:8a:be:77:00:
37:1b:0f:ae:53:39:b9:e3:1c:c0:d2:39:25:02:83:e4:66:9c:
ad:1c:8b:9c:c3:aa:ff:72:d0:6b:0c:e9:9c:a7:c4:c4:6a:1f:
31:fc:cf:af:36:e6:c5:38:85:14:70:3a:a8:a2:55:0b:d0:45:
c8:5d:ad:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwF1+N6qQ+txb++ucGErDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTJlNWJhNmJjYTc0YzQ4OTQ0NzFjMGUwMjFkNGUyNzhm
MWFmOTAwHhcNMjMwNzE3MTY0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQ5Y2U3NGM2Njg2OTdjN2QxMzcxYTJhZDNhOTBlYmQ0NzE3YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQAg192EfrSR/pfUAKv5W+6O940
s1T1vkujR7KN7cCdjjV2fz8INrmRMVMr4yF9phb3EHnU93nEfX1V+aepuG/l+jbu
kTE96tCm9dUhsi2TiYOKocvPsy+BtM0X5WMoYsvREKJy3lV/f0QBDdia1R8K/bgY
Ta2e1m1sq7+06IrE25zZMitN8QGJ4h1zv2FX/YY5iN7OIvoearauEM9Bqlmgen98
qCpqihg5GhJQhXW4x5tNC6UWQNCgCTlKyOvd/9kNUAdCbtAfsRVmI/BXDnEsxBx/
X94qItJTYPuff62wumXK6Op9wH+JYV+PhPnlW1EZ9dff4d2ulXrGnysxCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJJznTGaGl8fRNxoq06kOvUcXw9MB8GA1UdIwQY
MBaAFGXi5bprynTEiURxwOAh1OJ48a+QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVMbHVtdktkTVNKUkhIQTRDSFU0bmp4cjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kYmZjZTEtOWFlNC00YzU3LWJiMTct
ZjRjNmFjZjViOGRiLzEva2tuT2RNWm9hWHg5RTNHaXJUcVE2OVJ4ZkQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kYmZjZTEtOWFlNC00YzU3LWJiMTctZjRjNmFjZjViOGRi
LzEvWmVMbHVtdktkTVNKUkhIQTRDSFU0bmp4cjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkv+6MA0G
CSqGSIb3DQEBCwUAA4IBAQAQDo+m1NBCadPDmb/yqM4vGkwiTAQVsP0krwwy+xae
YlXNHeBs8+vdU6ADKi7hozdb5v22iRLByGMzeoou0776OQYRO2a3JHSFq09rWX1u
R1C9sjSv+0TgHg/qwYdgpTltFSs5d3sPF93iYO7ZCQDbadP3Jla20G6JahShZ9l9
yISZYbjvC1Ye7OvMqTPFcLAumWC/N01bLt9RNjgrniAy0RIitrlDAuZ8EHq7FRor
CK0ee6SnQI22WoDbOZaSZdwPLoq+dwA3Gw+uUzm54xzA0jklAoPkZpytHIucw6r/
ctBrDOmcp8TEah8x/M+vNubFOIUUcDqoolUL0EXIXa1p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:30 2024 by rpki-client on console-fra.rpki-client.org