Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/QW1ShGZRcowawot5nMXzHf-MTvQ.roa
File: QW1ShGZRcowawot5nMXzHf-MTvQ.roa (raw, json)
Hash identifier: /SL9kqIRrlHTqlRjuwoYuAScvYvHPgNQb3+xyrwH0NI=
Subject key identifier: 41:6D:52:84:66:51:72:8C:1A:C2:8B:79:9C:C5:F3:1D:FF:8C:4E:F4
Certificate issuer: /CN=5c9cf1e26175fffa6126798eca43812312c4414b
Certificate serial: 0185715E94368514A538BE28A81DBD41E400
Authority key identifier: 5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/QW1ShGZRcowawot5nMXzHf-MTvQ.roa
Signing time: Mon 02 Jan 2023 07:25:01 +0000
ROA not before: Mon 02 Jan 2023 07:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60089
IP address blocks: 185.206.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:94:36:85:14:a5:38:be:28:a8:1d:bd:41:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9cf1e26175fffa6126798eca43812312c4414b
Validity
Not Before: Jan 2 07:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416d52846651728c1ac28b799cc5f31dff8c4ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:5b:14:2e:f2:6d:b7:5c:3a:77:ff:61:4e:
15:bd:85:19:fa:11:6a:7e:8d:e4:5f:5a:1d:d2:3b:
56:3e:32:7c:d8:83:16:7c:f8:56:d8:1c:02:06:e1:
d5:21:86:5c:47:cb:7b:9b:84:cd:2b:b1:03:e6:ff:
8a:f5:65:c9:81:c5:97:9f:6a:e5:1e:44:5c:4b:d9:
c5:aa:0e:dc:14:93:84:e1:36:a7:dd:13:57:ee:ee:
e2:59:ab:7e:d3:6b:4b:06:3f:42:f4:ec:b6:87:01:
fa:cb:74:49:ca:41:a4:de:6f:5b:60:b0:da:69:88:
e5:02:54:50:a3:b5:fe:e8:d7:aa:23:33:8d:43:ac:
3e:8f:9c:42:10:ba:33:c5:2b:6b:71:93:8b:38:f9:
a3:42:36:b4:bd:7a:bb:b6:41:5a:b7:dd:e2:6b:d4:
42:88:91:ee:1e:74:bd:06:c3:9c:6c:c9:6a:f4:99:
50:b5:b2:f9:d3:c7:12:e3:60:5d:af:4f:04:7c:1a:
2f:6c:d3:f4:3d:00:a9:e3:2d:b6:1c:6d:7b:16:78:
07:90:7b:f6:ac:35:4b:c2:2b:e8:0b:f1:2f:48:1b:
d7:4c:5c:2f:f7:8d:51:a4:67:3c:d4:18:6f:2b:a4:
32:df:57:0d:2a:11:d9:79:1f:62:42:97:e9:89:5b:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6D:52:84:66:51:72:8C:1A:C2:8B:79:9C:C5:F3:1D:FF:8C:4E:F4
X509v3 Authority Key Identifier:
keyid:5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/QW1ShGZRcowawot5nMXzHf-MTvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/XJzx4mF1__phJnmOykOBIxLEQUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d3:02:27:a9:4e:66:a6:9e:d7:3b:af:a0:8e:aa:13:37:de:
1f:3b:b8:03:40:88:d2:dc:05:55:a3:25:9c:5e:12:25:97:10:
54:1c:81:99:74:c2:4c:a4:4e:fe:7d:9e:a7:9b:80:f3:19:d9:
2b:0c:df:82:bc:ee:1c:9c:45:95:b8:cd:1a:55:b8:66:66:22:
e4:79:c5:5a:81:25:70:43:81:05:b3:b0:49:61:f6:22:ca:f5:
e2:72:12:e2:45:65:ed:16:6d:9d:90:fc:1d:16:53:cd:a3:0c:
1c:73:a0:f7:eb:da:7a:2d:1f:e0:5d:a8:30:a8:54:d4:13:b4:
87:ad:5e:41:55:af:ea:87:b4:79:a6:cc:1e:33:d1:86:a1:99:
cc:84:56:51:a8:ed:f5:58:91:8f:c1:b5:99:b2:e6:3f:52:6c:
90:6a:b6:c4:0f:1f:f7:05:12:f4:6d:76:07:c4:01:ed:a0:47:
ac:be:e5:2a:80:2d:b3:3b:67:67:2c:dc:2f:d1:40:8d:48:f2:
1c:dc:50:2a:b4:23:2a:88:ec:65:1a:17:b0:7e:a8:ca:32:0a:
45:71:1d:a8:ab:aa:86:b8:fd:53:8c:10:2a:4b:f5:9e:51:43:
30:ae:f2:0b:1b:fa:eb:83:b8:ea:80:f0:71:ac:9c:06:af:b9:
7a:8f:7e:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXpQ2hRSlOL4oqB29QeQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjOWNmMWUyNjE3NWZmZmE2MTI2Nzk4ZWNhNDM4MTIzMTJj
NDQxNGIwHhcNMjMwMTAyMDcyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTZkNTI4NDY2NTE3MjhjMWFjMjhiNzk5Y2M1ZjMxZGZmOGM0ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluFbFC7ybbdcOnf/YU4VvYUZ+hFq
fo3kX1od0jtWPjJ82IMWfPhW2BwCBuHVIYZcR8t7m4TNK7ED5v+K9WXJgcWXn2rl
HkRcS9nFqg7cFJOE4Tan3RNX7u7iWat+02tLBj9C9Oy2hwH6y3RJykGk3m9bYLDa
aYjlAlRQo7X+6NeqIzONQ6w+j5xCELozxStrcZOLOPmjQja0vXq7tkFat93ia9RC
iJHuHnS9BsOcbMlq9JlQtbL508cS42Bdr08EfBovbNP0PQCp4y22HG17FngHkHv2
rDVLwivoC/EvSBvXTFwv941RpGc81BhvK6Qy31cNKhHZeR9iQpfpiVsFYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFtUoRmUXKMGsKLeZzF8x3/jE70MB8GA1UdIwQY
MBaAFFyc8eJhdf/6YSZ5jspDgSMSxEFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEp6eDRtRjFfX3BoSm5tT3lrT0JJeExFUVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jOGMwZjUtMDQyYS00N2ViLWJiMDgt
YjdkMzBkYWU3MTcyLzEvUVcxU2hHWlJjb3dhd290NW5NWHpIZi1NVHZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jOGMwZjUtMDQyYS00N2ViLWJiMDgtYjdkMzBkYWU3MTcy
LzEvWEp6eDRtRjFfX3BoSm5tT3lrT0JJeExFUVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc43MA0G
CSqGSIb3DQEBCwUAA4IBAQBB0wInqU5mpp7XO6+gjqoTN94fO7gDQIjS3AVVoyWc
XhIllxBUHIGZdMJMpE7+fZ6nm4DzGdkrDN+CvO4cnEWVuM0aVbhmZiLkecVagSVw
Q4EFs7BJYfYiyvXichLiRWXtFm2dkPwdFlPNowwcc6D369p6LR/gXagwqFTUE7SH
rV5BVa/qh7R5psweM9GGoZnMhFZRqO31WJGPwbWZsuY/UmyQarbEDx/3BRL0bXYH
xAHtoEesvuUqgC2zO2dnLNwv0UCNSPIc3FAqtCMqiOxlGhewfqjKMgpFcR2oq6qG
uP1TjBAqS/WeUUMwrvILG/rrg7jqgPBxrJwGr7l6j37m
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org