Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/rXaI_II9XZMjoiko_M3L7pfsJak.roa
File: rXaI_II9XZMjoiko_M3L7pfsJak.roa (raw, json)
Hash identifier: 2VLOqaiR6jVTfhdusMNrwkZJ5wBQlse2dL8uQ9ordB4=
Subject key identifier: AD:76:88:FC:82:3D:5D:93:23:A2:29:28:FC:CD:CB:EE:97:EC:25:A9
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 012A96D4
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/rXaI_II9XZMjoiko_M3L7pfsJak.roa
Signing time: Sat 01 Jan 2022 11:04:21 +0000
ROA not before: Sat 01 Jan 2022 11:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19568340 (0x12a96d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 1 11:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad7688fc823d5d9323a22928fccdcbee97ec25a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:8e:f2:9b:dd:f8:df:d4:0c:55:76:ec:10:
7b:34:c7:32:70:a3:a8:4f:d7:54:85:10:ee:dc:18:
ee:0b:be:12:6e:b2:71:55:0b:6a:dd:95:a1:67:1f:
d4:0f:f6:46:6e:41:bb:09:e5:71:70:0a:54:33:bf:
fd:04:3b:78:b5:cc:5e:52:6f:87:d4:f1:41:2f:ad:
a3:c3:19:23:0b:c6:7d:b8:46:15:05:de:aa:51:c3:
02:c9:ac:a1:73:1c:51:78:b1:80:f7:82:53:d2:82:
17:f1:c2:41:04:49:00:ca:c9:c5:08:10:65:46:30:
2e:8a:88:d9:2f:80:a2:3f:35:91:fd:26:5e:0e:62:
3a:3b:b5:97:69:84:3b:e1:b4:c6:ad:3a:ca:92:f6:
61:73:aa:53:0a:df:e6:81:7c:9c:d0:55:97:ff:1d:
23:da:5d:4d:25:83:da:6a:f9:bc:e0:18:4f:b0:f6:
30:fd:9e:ab:0b:7a:c6:6f:3b:87:ec:5e:05:9b:59:
a4:60:eb:96:c5:14:f2:53:25:83:d8:04:b1:9b:05:
c6:7f:d6:50:a1:3a:32:83:56:9f:b0:4d:2c:a5:7c:
9d:5e:53:84:3e:da:30:bc:7c:ad:04:7a:77:98:83:
9f:b9:85:3e:5e:bf:2b:8f:94:1a:3b:29:e5:89:16:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:88:FC:82:3D:5D:93:23:A2:29:28:FC:CD:CB:EE:97:EC:25:A9
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/rXaI_II9XZMjoiko_M3L7pfsJak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
75:13:46:bb:83:c3:18:ea:fa:90:f3:db:1c:1d:de:11:da:80:
52:9d:b1:f0:27:52:f2:f3:f5:fe:18:d0:de:cc:89:04:8d:79:
8e:b3:5d:92:0c:a3:01:eb:4d:0e:38:a1:61:db:f9:da:e3:f2:
3d:98:b6:a2:64:26:0d:2b:c0:2d:29:17:ac:a1:ca:f5:05:c1:
ad:bb:6f:f5:28:6c:e3:32:02:50:c4:5f:4e:39:14:d3:94:57:
2d:27:f2:d3:af:f3:66:5d:61:17:4e:e1:54:a5:74:4c:2b:86:
ac:34:3c:86:21:e4:cc:7d:12:74:7c:ae:65:c0:e0:43:f8:29:
04:9c:26:b1:64:2c:21:45:88:45:25:72:ba:75:71:2c:88:d9:
bc:79:0a:f9:3c:cd:71:2a:48:7f:44:3d:56:92:2e:0e:7b:ed:
b7:2c:1e:ea:d9:f5:c1:5e:76:e0:3f:76:c3:e8:5c:8d:d9:51:
b2:2f:b9:bf:ec:d0:85:00:4c:d0:cb:ba:09:01:3b:72:4c:65:
0c:c6:3a:69:c5:19:88:0d:b2:7b:47:59:5f:7d:8c:92:2c:15:
e1:a7:75:ea:77:8a:14:41:f6:15:0e:44:4c:60:27:d4:c5:54:
1e:32:1f:60:47:3f:33:0a:12:d0:b0:56:05:7e:7f:8c:22:05:
ac:8c:0e:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASqW1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YzI5N2Y1ODI4YWE0ZTFjOGUwNDFlOWRiZWE3YWJkMzliNTU4NGQ3MB4XDTIyMDEw
MTExMDQyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQ3Njg4ZmM4MjNk
NWQ5MzIzYTIyOTI4ZmNjZGNiZWU5N2VjMjVhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6SjvKb3fjf1AxVduwQezTHMnCjqE/XVIUQ7twY7gu+Em6y
cVULat2VoWcf1A/2Rm5BuwnlcXAKVDO//QQ7eLXMXlJvh9TxQS+to8MZIwvGfbhG
FQXeqlHDAsmsoXMcUXixgPeCU9KCF/HCQQRJAMrJxQgQZUYwLoqI2S+Aoj81kf0m
Xg5iOju1l2mEO+G0xq06ypL2YXOqUwrf5oF8nNBVl/8dI9pdTSWD2mr5vOAYT7D2
MP2eqwt6xm87h+xeBZtZpGDrlsUU8lMlg9gEsZsFxn/WUKE6MoNWn7BNLKV8nV5T
hD7aMLx8rQR6d5iDn7mFPl6/K4+UGjsp5YkWy/UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBStdoj8gj1dkyOiKSj8zcvul+wlqTAfBgNVHSMEGDAWgBRMKX9YKKpOHI4E
Hp2+p6vTm1WE1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RDbF9XQ2lxVGh5T0JCNmR2cWVyMDV0VmhOYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvOTI2NGEwLWVkN2ItNDcxMi1hOTEwLWM3ZjY5OGRlZGQ2OC8x
L3JYYUlfSUk5WFpNam9pa29fTTNMN3Bmc0phay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
OTI2NGEwLWVkN2ItNDcxMi1hOTEwLWM3ZjY5OGRlZGQ2OC8xL1RDbF9XQ2lxVGh5
T0JCNmR2cWVyMDV0VmhOYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFT2bzANBgkqhkiG9w0BAQsFAAOC
AQEAdRNGu4PDGOr6kPPbHB3eEdqAUp2x8CdS8vP1/hjQ3syJBI15jrNdkgyjAetN
DjihYdv52uPyPZi2omQmDSvALSkXrKHK9QXBrbtv9Shs4zICUMRfTjkU05RXLSfy
06/zZl1hF07hVKV0TCuGrDQ8hiHkzH0SdHyuZcDgQ/gpBJwmsWQsIUWIRSVyunVx
LIjZvHkK+TzNcSpIf0Q9VpIuDnvttywe6tn1wV524D92w+hcjdlRsi+5v+zQhQBM
0Mu6CQE7ckxlDMY6acUZiA2ye0dZX32MkiwV4ad16neKFEH2FQ5ETGAn1MVUHjIf
YEc/MwoS0LBWBX5/jCIFrIwO7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org