Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/4gKuDiireRGn3DHA0M7-vQMqI0A.roa
File: 4gKuDiireRGn3DHA0M7-vQMqI0A.roa (raw, json)
Hash identifier: 13b49EtgP6AzwXNGnaXLR6bmkIOhmHnku52/ujoKSx8=
Subject key identifier: E2:02:AE:0E:28:AB:79:11:A7:DC:31:C0:D0:CE:FE:BD:03:2A:23:40
Certificate issuer: /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial: 01856DCAF11E88D05FAAC7EA7852335C30F1
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/4gKuDiireRGn3DHA0M7-vQMqI0A.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.226.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f1:1e:88:d0:5f:aa:c7:ea:78:52:33:5c:30:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e202ae0e28ab7911a7dc31c0d0cefebd032a2340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:45:57:22:d5:db:9b:b5:ce:18:9f:a4:1f:
99:54:c7:76:5f:c8:f4:8d:11:18:d6:bb:90:ac:cb:
b7:bc:7a:8e:da:ff:13:c5:51:16:32:76:b6:5a:44:
45:94:25:10:a4:45:46:fe:26:70:37:2c:1f:2c:21:
04:04:c5:10:52:a6:3a:22:ab:e4:78:6f:a4:cb:bb:
31:eb:f5:a7:91:32:b6:69:84:60:f3:17:a7:d6:23:
fa:2f:1a:ed:85:08:2d:8f:49:d9:c4:63:24:a4:bf:
98:92:74:8f:60:52:21:99:dd:6e:bc:3b:4c:32:6f:
54:32:61:a1:d6:89:4c:9b:6a:cc:03:1f:38:9b:4a:
6c:81:1d:7c:66:7e:03:ee:02:6e:b6:03:2c:1f:74:
c1:78:01:1c:c7:b3:3d:58:c3:6d:bb:47:3c:ee:45:
92:f0:e8:09:2b:f7:4c:cb:3c:b2:db:67:78:f9:d6:
46:49:b4:a0:9b:04:29:67:ea:8e:bf:f6:42:a3:10:
c0:8d:35:35:e5:91:e7:fe:70:5b:3c:3b:85:0d:2d:
bc:06:e5:b1:6e:b4:3a:20:71:80:50:f1:2f:ca:75:
73:23:d5:c2:17:6d:8a:10:ed:13:15:74:a9:b3:3f:
45:02:60:a4:b8:a0:bd:0c:2a:42:76:6b:e9:d9:6e:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:AE:0E:28:AB:79:11:A7:DC:31:C0:D0:CE:FE:BD:03:2A:23:40
X509v3 Authority Key Identifier:
keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/4gKuDiireRGn3DHA0M7-vQMqI0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c0:85:07:d2:ca:43:89:b3:d7:e2:ce:a9:9f:35:d1:9b:e2:
bb:2d:47:3f:91:17:e9:6b:43:55:5b:a1:a4:c8:ed:d2:e5:45:
09:52:b8:de:7b:1a:1a:fa:bf:8e:ff:2c:4c:cc:d8:cf:2a:b6:
cd:94:4c:7f:4b:08:d1:d3:b9:45:f2:5a:1d:ce:5c:8e:b1:f9:
bd:f5:b6:44:ca:4a:62:6e:ab:37:58:17:0e:dc:bd:e7:c9:d9:
63:16:47:77:34:5c:f8:25:f5:41:66:0d:ba:ae:a6:19:c8:dd:
38:d7:a7:51:51:01:4d:a9:3c:f7:b2:9a:8a:44:ca:5e:70:3a:
f7:06:b0:56:0a:0c:9e:5a:d7:f7:87:47:f1:af:ca:29:1e:26:
cb:2a:8e:f5:9f:81:8a:f9:97:be:f6:eb:37:ff:f9:f3:b2:9c:
fc:de:83:47:9d:cb:a6:95:17:ce:6e:b8:8c:7e:0e:64:c8:8b:
07:41:0e:ff:42:e6:0a:1e:34:a4:0a:a4:6a:2b:44:eb:be:9d:
6e:35:1d:68:27:c5:22:04:10:6c:27:70:1c:ed:e9:be:5d:f7:
4f:df:47:9f:fa:fb:b5:bb:f5:2a:b0:51:0a:74:7c:70:37:02:
3e:6e:dc:bd:e9:83:34:32:04:a7:2f:71:ba:cd:ed:8a:36:06:
e8:db:31:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyvEeiNBfqsfqeFIzXDDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOGU5ZGE0M2RmYzc5M2Q0ZDU0ODgwOTdiNDAwMWJhNDA5
NDE5MDQwHhcNMjMwMTAxMTQ0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjAyYWUwZTI4YWI3OTExYTdkYzMxYzBkMGNlZmViZDAzMmEyMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgflFVyLV25u1zhifpB+ZVMd2X8j0
jREY1ruQrMu3vHqO2v8TxVEWMna2WkRFlCUQpEVG/iZwNywfLCEEBMUQUqY6Iqvk
eG+ky7sx6/WnkTK2aYRg8xen1iP6LxrthQgtj0nZxGMkpL+YknSPYFIhmd1uvDtM
Mm9UMmGh1olMm2rMAx84m0psgR18Zn4D7gJutgMsH3TBeAEcx7M9WMNtu0c87kWS
8OgJK/dMyzyy22d4+dZGSbSgmwQpZ+qOv/ZCoxDAjTU15ZHn/nBbPDuFDS28BuWx
brQ6IHGAUPEvynVzI9XCF22KEO0TFXSpsz9FAmCkuKC9DCpCdmvp2W6mcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOICrg4oq3kRp9wxwNDO/r0DKiNAMB8GA1UdIwQY
MBaAFG6OnaQ9/Hk9TVSICXtAAbpAlBkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm82ZHBEMzhlVDFOVklnSmUwQUJ1a0NVR1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMTYwMjQtZjdkMS00ODc1LTllZmIt
MTA3MDU2ZDg4NjllLzEvNGdLdURpaXJlUkduM0RIQTBNNy12UU1xSTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lMTYwMjQtZjdkMS00ODc1LTllZmItMTA3MDU2ZDg4Njll
LzEvYm82ZHBEMzhlVDFOVklnSmUwQUJ1a0NVR1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuJ8MA0G
CSqGSIb3DQEBCwUAA4IBAQCjwIUH0spDibPX4s6pnzXRm+K7LUc/kRfpa0NVW6Gk
yO3S5UUJUrjeexoa+r+O/yxMzNjPKrbNlEx/SwjR07lF8lodzlyOsfm99bZEykpi
bqs3WBcO3L3nydljFkd3NFz4JfVBZg26rqYZyN0416dRUQFNqTz3spqKRMpecDr3
BrBWCgyeWtf3h0fxr8opHibLKo71n4GK+Ze+9us3//nzspz83oNHncumlRfObriM
fg5kyIsHQQ7/QuYKHjSkCqRqK0Trvp1uNR1oJ8UiBBBsJ3Ac7em+XfdP30ef+vu1
u/UqsFEKdHxwNwI+bty96YM0MgSnL3G6ze2KNgbo2zEJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:35 2024 by rpki-client on console-fra.rpki-client.org