Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/boc6VJNjjNVTgBCttaPkPA7ItyQ.roa
File: boc6VJNjjNVTgBCttaPkPA7ItyQ.roa (raw, json)
Hash identifier: SjJIliGJ4b/9KgFrGZPHj9zAVK4bQr1/JqNUUKVbhFM=
Subject key identifier: 6E:87:3A:54:93:63:8C:D5:53:80:10:AD:B5:A3:E4:3C:0E:C8:B7:24
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01856DCAFA2DD5F99D12E96043FF9A9FFDBA
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/boc6VJNjjNVTgBCttaPkPA7ItyQ.roa
Signing time: Sun 01 Jan 2023 14:44:56 +0000
ROA not before: Sun 01 Jan 2023 14:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57355
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fa:2d:d5:f9:9d:12:e9:60:43:ff:9a:9f:fd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jan 1 14:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e873a5493638cd5538010adb5a3e43c0ec8b724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:76:c4:65:01:47:f2:d4:76:9a:c4:3d:bf:
0c:6c:41:d2:38:24:73:1b:48:53:1b:06:0d:2b:5e:
a6:5c:06:f2:be:d4:42:e3:e9:c9:e5:c2:94:c1:6f:
3f:b3:1e:0b:c6:89:c1:5a:2b:74:14:34:ba:f1:dd:
c0:92:fd:14:9f:18:68:b9:8b:98:83:d8:43:30:6c:
f5:fa:ab:87:01:31:cc:8d:ec:03:f3:fe:60:a5:17:
ed:86:17:e6:2a:fb:62:50:95:d7:fb:71:75:de:bc:
b9:76:78:71:2f:d6:b2:78:7c:38:8d:3f:40:7e:99:
a5:ad:87:c0:d7:01:e6:59:c4:19:45:32:aa:cd:51:
c1:f9:23:1f:88:be:11:4f:75:9d:99:51:ca:c8:b0:
1c:ce:e6:82:a0:ca:07:11:1d:99:37:9b:6a:34:c0:
b6:01:da:fb:b9:a8:22:f7:3c:cd:3b:23:4f:f8:97:
76:25:d4:80:0e:90:af:50:3c:d3:07:ee:d1:11:41:
ed:1f:4e:e0:dd:9d:d5:14:bd:e2:86:71:1f:18:e3:
3a:dd:6b:00:72:11:37:9c:b0:32:01:3f:91:af:4d:
a3:8b:bc:a6:2b:9d:e2:af:8a:85:f0:a3:09:a2:05:
3f:c0:08:62:2c:55:cd:5a:ad:20:01:13:aa:24:8a:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:3A:54:93:63:8C:D5:53:80:10:AD:B5:A3:E4:3C:0E:C8:B7:24
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/boc6VJNjjNVTgBCttaPkPA7ItyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:79:f8:4a:3e:55:df:5e:ac:9e:2a:b0:52:4a:fa:9c:5a:38:
a8:4f:db:da:48:af:b4:b2:93:28:ac:18:55:43:b1:6a:7c:c2:
2c:8c:be:0f:ec:70:c3:fc:88:2e:a8:33:1a:7d:82:a7:c6:42:
94:5d:f3:77:b6:51:2e:f8:1b:5d:3a:c4:65:20:3d:f2:f4:0e:
5b:5e:d3:34:6f:fc:be:8e:aa:d8:1e:55:f5:d8:04:ef:9d:97:
b2:a4:a2:c1:08:2a:17:3a:a1:12:9b:bc:e4:de:92:1a:50:02:
ca:1a:54:82:59:c7:f7:b9:2b:cb:73:af:c9:e9:47:7e:14:95:
30:da:d9:10:ac:d2:9d:4e:22:a6:36:e3:b3:ca:92:4a:58:aa:
be:18:92:68:9f:3b:96:3e:04:1a:36:6c:6e:89:ac:fb:e4:6a:
c4:3c:1e:3e:4e:2f:0d:1f:8e:07:4f:c7:8e:c0:94:1c:8a:2d:
82:0a:ac:d5:02:c0:08:0d:11:ad:92:0f:28:d9:07:84:e3:ab:
9b:84:5c:65:af:5e:23:9b:c6:a3:5a:d7:14:e9:56:89:7b:2f:
52:38:fb:a6:2e:b3:b8:36:25:5f:38:f8:f8:28:d8:09:d7:66:
c0:a7:aa:2f:09:81:ab:a8:77:60:04:df:de:8e:da:07:67:8d:
95:d0:f7:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyvot1fmdEulgQ/+an/26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjMwMTAxMTQ0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTg3M2E1NDkzNjM4Y2Q1NTM4MDEwYWRiNWEzZTQzYzBlYzhiNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZV2xGUBR/LUdprEPb8MbEHSOCRz
G0hTGwYNK16mXAbyvtRC4+nJ5cKUwW8/sx4LxonBWit0FDS68d3Akv0UnxhouYuY
g9hDMGz1+quHATHMjewD8/5gpRfthhfmKvtiUJXX+3F13ry5dnhxL9ayeHw4jT9A
fpmlrYfA1wHmWcQZRTKqzVHB+SMfiL4RT3WdmVHKyLAczuaCoMoHER2ZN5tqNMC2
Adr7uagi9zzNOyNP+Jd2JdSADpCvUDzTB+7REUHtH07g3Z3VFL3ihnEfGOM63WsA
chE3nLAyAT+Rr02ji7ymK53ir4qF8KMJogU/wAhiLFXNWq0gAROqJIr70QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6HOlSTY4zVU4AQrbWj5DwOyLckMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvYm9jNlZKTmpqTlZUZ0JDdHRhUGtQQTdJdHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmVMA0G
CSqGSIb3DQEBCwUAA4IBAQCEefhKPlXfXqyeKrBSSvqcWjioT9vaSK+0spMorBhV
Q7FqfMIsjL4P7HDD/IguqDMafYKnxkKUXfN3tlEu+BtdOsRlID3y9A5bXtM0b/y+
jqrYHlX12ATvnZeypKLBCCoXOqESm7zk3pIaUALKGlSCWcf3uSvLc6/J6Ud+FJUw
2tkQrNKdTiKmNuOzypJKWKq+GJJonzuWPgQaNmxuiaz75GrEPB4+Ti8NH44HT8eO
wJQcii2CCqzVAsAIDRGtkg8o2QeE46ubhFxlr14jm8ajWtcU6VaJey9SOPumLrO4
NiVfOPj4KNgJ12bAp6ovCYGrqHdgBN/ejtoHZ42V0PcW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org