Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acffcd-0c96-4e5c-9357-1c2f7677a88c/1/KkmC4msEm3xQYenTM31l8Twq1-E.roa
File: KkmC4msEm3xQYenTM31l8Twq1-E.roa (raw, json)
Hash identifier: RDEkex2oRPQp9Ol/7kvfL7lNXxKjIS3SzTCT/WyKrZg=
Subject key identifier: 2A:49:82:E2:6B:04:9B:7C:50:61:E9:D3:33:7D:65:F1:3C:2A:D7:E1
Certificate issuer: /CN=5a121a545bd70292157af975466cc836831ab7d6
Certificate serial: 015E0218
Authority key identifier: 5A:12:1A:54:5B:D7:02:92:15:7A:F9:75:46:6C:C8:36:83:1A:B7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhIaVFvXApIVevl1RmzINoMat9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acffcd-0c96-4e5c-9357-1c2f7677a88c/1/KkmC4msEm3xQYenTM31l8Twq1-E.roa
Signing time: Sat 01 Jan 2022 13:04:15 +0000
ROA not before: Sat 01 Jan 2022 13:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28951
IP address blocks: 195.47.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22938136 (0x15e0218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a121a545bd70292157af975466cc836831ab7d6
Validity
Not Before: Jan 1 13:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a4982e26b049b7c5061e9d3337d65f13c2ad7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cf:cd:6f:78:03:e0:4f:d6:98:36:cc:e6:9a:
53:b1:5e:60:77:18:dd:30:7e:12:d7:4d:50:aa:e2:
d6:32:3c:93:0e:62:5e:38:cd:50:70:98:c7:bb:05:
4f:13:d8:55:11:db:98:7f:cf:47:2a:b7:ed:54:b0:
1f:14:24:c4:25:a6:ac:57:47:56:45:76:fd:d9:a8:
91:0c:aa:4e:f2:2b:76:bf:83:32:f6:ff:55:2c:a7:
35:ca:ed:26:65:88:01:d4:4b:db:4e:4e:37:30:4d:
33:17:10:2f:5a:96:d1:86:11:08:2e:3c:47:35:2e:
b8:c9:42:91:6e:fc:0c:40:a8:59:ad:7f:53:74:16:
d2:fd:af:8c:0e:79:de:e7:0f:1f:e8:19:06:cd:c0:
6b:3a:2c:fa:d1:8c:72:d3:81:90:db:bc:f0:d6:4a:
b5:ba:e4:ac:39:4c:1f:93:a7:8c:c7:05:95:a1:85:
7b:74:0d:77:66:a3:5c:90:ed:d1:3a:cc:dc:3d:2a:
31:dc:ea:4b:a1:31:c2:0f:a0:2c:7a:c5:df:0b:cc:
87:8e:1d:66:b8:c1:9c:e7:08:ee:26:dc:28:35:35:
4d:9e:e4:f9:f8:e7:0d:e1:24:93:74:d8:8d:07:45:
d4:bc:67:9d:b6:00:9f:de:86:17:5f:fa:9b:1a:0d:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:82:E2:6B:04:9B:7C:50:61:E9:D3:33:7D:65:F1:3C:2A:D7:E1
X509v3 Authority Key Identifier:
keyid:5A:12:1A:54:5B:D7:02:92:15:7A:F9:75:46:6C:C8:36:83:1A:B7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhIaVFvXApIVevl1RmzINoMat9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acffcd-0c96-4e5c-9357-1c2f7677a88c/1/KkmC4msEm3xQYenTM31l8Twq1-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acffcd-0c96-4e5c-9357-1c2f7677a88c/1/WhIaVFvXApIVevl1RmzINoMat9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.213.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:48:89:c1:73:1c:b9:f9:ae:de:3d:58:79:a3:f0:fc:a4:b9:
3f:43:b0:ec:9a:a1:d9:06:64:f5:f6:54:66:59:eb:a8:95:96:
94:2b:2f:fc:13:fb:91:f5:81:43:25:b1:29:e1:0b:bc:31:d8:
aa:a4:05:31:2d:e9:be:e2:33:07:88:8e:72:17:35:72:de:21:
f1:af:19:2a:2b:88:45:11:de:e8:b1:99:2a:ed:74:e1:d1:f4:
b0:14:7b:d2:38:72:14:a0:0a:6e:af:97:d1:ce:69:ba:c9:db:
7e:87:8e:07:65:a6:72:c5:48:2a:86:6a:fc:7c:1a:e6:5b:f1:
0c:aa:0f:e8:2c:db:b5:95:8d:42:1e:78:43:92:6d:35:24:b7:
53:3b:73:94:ab:d0:6a:76:2c:f9:17:ff:e1:37:65:21:ba:ce:
c9:7d:61:b1:46:66:c2:fe:26:4f:7b:ad:15:87:32:f0:2e:f4:
5b:93:4b:c5:31:39:a4:3f:65:1f:6d:17:41:24:8e:3c:ad:6c:
b4:12:90:eb:da:16:3d:77:45:e4:a8:8a:13:de:a2:f2:95:d6:
8c:36:56:5a:66:cf:16:60:eb:e1:84:a4:21:5b:03:53:f4:f9:
01:c9:48:3f:f2:15:74:ca:e3:18:36:e2:a1:05:ab:63:20:86:
e3:41:31:b7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAV4CGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTEyMWE1NDViZDcwMjkyMTU3YWY5NzU0NjZjYzgzNjgzMWFiN2Q2MB4XDTIyMDEw
MTEzMDQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmE0OTgyZTI2YjA0
OWI3YzUwNjFlOWQzMzM3ZDY1ZjEzYzJhZDdlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPPzW94A+BP1pg2zOaaU7FeYHcY3TB+EtdNUKri1jI8kw5i
XjjNUHCYx7sFTxPYVRHbmH/PRyq37VSwHxQkxCWmrFdHVkV2/dmokQyqTvIrdr+D
Mvb/VSynNcrtJmWIAdRL205ONzBNMxcQL1qW0YYRCC48RzUuuMlCkW78DECoWa1/
U3QW0v2vjA553ucPH+gZBs3Aazos+tGMctOBkNu88NZKtbrkrDlMH5OnjMcFlaGF
e3QNd2ajXJDt0TrM3D0qMdzqS6Exwg+gLHrF3wvMh44dZrjBnOcI7ibcKDU1TZ7k
+fjnDeEkk3TYjQdF1LxnnbYAn96GF1/6mxoNA7kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqSYLiawSbfFBh6dMzfWXxPCrX4TAfBgNVHSMEGDAWgBRaEhpUW9cCkhV6
+XVGbMg2gxq31jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1doSWFWRnZYQXBJVmV2bDFSbXpJTm9NYXQ5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvYWNmZmNkLTBjOTYtNGU1Yy05MzU3LTFjMmY3Njc3YTg4Yy8x
L0trbUM0bXNFbTN4UVllblRNMzFsOFR3cTEtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
YWNmZmNkLTBjOTYtNGU1Yy05MzU3LTFjMmY3Njc3YTg4Yy8xL1doSWFWRnZYQXBJ
VmV2bDFSbXpJTm9NYXQ5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMv1TANBgkqhkiG9w0BAQsFAAOC
AQEA0kiJwXMcufmu3j1YeaPw/KS5P0Ow7Jqh2QZk9fZUZlnrqJWWlCsv/BP7kfWB
QyWxKeELvDHYqqQFMS3pvuIzB4iOchc1ct4h8a8ZKiuIRRHe6LGZKu104dH0sBR7
0jhyFKAKbq+X0c5pusnbfoeOB2WmcsVIKoZq/Hwa5lvxDKoP6CzbtZWNQh54Q5Jt
NSS3UztzlKvQanYs+Rf/4TdlIbrOyX1hsUZmwv4mT3utFYcy8C70W5NLxTE5pD9l
H20XQSSOPK1stBKQ69oWPXdF5KiKE96i8pXWjDZWWmbPFmDr4YSkIVsDU/T5AclI
P/IVdMrjGDbioQWrYyCG40Extw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org