Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/jKRER1M996OjV47LqhtCZ0abSMI.roa
File: jKRER1M996OjV47LqhtCZ0abSMI.roa (raw, json)
Hash identifier: 6c9raMy5hpzU8ZVrAmK8Q1gpy9zcay2CLcZFV+YG7zI=
Subject key identifier: 8C:A4:44:47:53:3D:F7:A3:A3:57:8E:CB:AA:1B:42:67:46:9B:48:C2
Certificate issuer: /CN=4c9afd740b5348119e5119aeaa26a76107739032
Certificate serial: 018964C054BCC21DA0873DD64B2A6660E640
Authority key identifier: 4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJr9dAtTSBGeURmuqianYQdzkDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/jKRER1M996OjV47LqhtCZ0abSMI.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.42.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:54:bc:c2:1d:a0:87:3d:d6:4b:2a:66:60:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9afd740b5348119e5119aeaa26a76107739032
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ca44447533df7a3a3578ecbaa1b4267469b48c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:27:70:bd:98:3b:05:2a:5f:c1:0f:17:03:
64:4a:5a:1f:6c:86:5d:d9:a0:b6:f6:2c:3c:75:1a:
a3:d6:d5:c3:6c:0c:cd:cf:95:bc:f3:3f:5d:4c:10:
08:a2:fc:cb:90:26:eb:e9:b5:b1:d4:c9:f9:d7:10:
ff:4e:3e:b5:90:a9:ac:16:56:0f:a0:d9:a3:91:dc:
8c:63:27:7a:e8:7b:e5:0c:39:f4:b9:51:f5:62:66:
be:5d:11:cb:52:9e:bc:d7:ee:98:f9:75:89:b6:f5:
7c:95:9e:bb:ce:9c:b5:2d:9b:7e:68:08:20:f9:0c:
5c:37:44:95:2f:1d:59:ba:31:74:d5:4f:54:71:ae:
67:8a:b7:79:4e:2c:48:87:79:c1:1c:c5:a4:bf:83:
19:91:d5:d8:b2:bc:1c:f4:24:ac:f7:18:6d:85:36:
65:c7:a7:a3:ff:1a:45:18:b0:dc:02:17:68:b6:db:
5c:94:2e:ef:83:f4:fa:cd:d5:bf:4e:02:db:c6:4d:
29:d7:97:fd:46:cf:76:32:90:30:30:91:2e:ad:fd:
77:9b:bb:85:eb:55:6f:f2:e3:53:2d:5d:9f:9f:22:
0c:4f:87:6e:e1:9d:ac:b1:b8:00:68:fb:03:b2:05:
64:8e:7c:4e:1d:5c:0a:7c:0c:49:b5:25:49:21:05:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:44:47:53:3D:F7:A3:A3:57:8E:CB:AA:1B:42:67:46:9B:48:C2
X509v3 Authority Key Identifier:
keyid:4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJr9dAtTSBGeURmuqianYQdzkDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/jKRER1M996OjV47LqhtCZ0abSMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/TJr9dAtTSBGeURmuqianYQdzkDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:85:96:72:96:a0:80:3f:0f:1d:2e:89:0c:d4:98:53:f3:3e:
b0:4a:16:84:cd:0a:65:a2:a7:b8:b4:2c:68:86:3c:53:1d:bd:
6a:2c:4b:15:3b:d3:d6:46:4a:1f:9b:2b:60:0c:4e:cb:25:10:
99:19:dc:a1:bb:c5:f6:5e:70:9c:72:ea:c9:ae:2f:f6:8a:d4:
65:10:f4:f4:5d:8f:a4:5f:d1:80:6a:92:8a:63:bf:28:5c:fc:
ee:99:7a:f8:05:35:04:91:dd:25:bd:5e:81:01:05:7c:ed:a9:
84:ab:3e:83:ff:79:81:a9:9a:4f:54:06:63:b4:6b:93:32:dc:
b1:08:4f:23:b3:fc:93:ae:e2:97:67:72:76:c6:f1:18:76:0e:
87:a3:ea:82:27:6f:6f:8c:e5:57:9d:88:89:26:db:a5:e5:6f:
7b:3b:ec:23:5a:d4:d4:25:d4:71:88:7f:51:de:59:da:bf:51:
40:64:50:da:db:64:67:40:d5:28:3f:94:0f:29:cc:c1:1c:a6:
c4:04:87:9d:50:fc:b7:ed:b5:15:9d:09:16:75:f3:d9:c5:14:
3e:4f:1d:0b:89:1c:54:bc:ab:8d:5a:ef:0e:7b:52:c7:98:21:
e5:d5:ca:d4:51:44:6f:08:ed:5f:06:f5:bf:d8:ac:fc:92:b4:
1d:a7:98:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFS8wh2ghz3WSypmYOZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWFmZDc0MGI1MzQ4MTE5ZTUxMTlhZWFhMjZhNzYxMDc3
MzkwMzIwHhcNMjMwNzE3MTY0NzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2E0NDQ0NzUzM2RmN2EzYTM1NzhlY2JhYTFiNDI2NzQ2OWI0OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEYncL2YOwUqX8EPFwNkSlofbIZd
2aC29iw8dRqj1tXDbAzNz5W88z9dTBAIovzLkCbr6bWx1Mn51xD/Tj61kKmsFlYP
oNmjkdyMYyd66HvlDDn0uVH1Yma+XRHLUp681+6Y+XWJtvV8lZ67zpy1LZt+aAgg
+QxcN0SVLx1ZujF01U9Uca5nird5TixIh3nBHMWkv4MZkdXYsrwc9CSs9xhthTZl
x6ej/xpFGLDcAhdotttclC7vg/T6zdW/TgLbxk0p15f9Rs92MpAwMJEurf13m7uF
61Vv8uNTLV2fnyIMT4du4Z2ssbgAaPsDsgVkjnxOHVwKfAxJtSVJIQWHGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIykREdTPfejo1eOy6obQmdGm0jCMB8GA1UdIwQY
MBaAFEya/XQLU0gRnlEZrqomp2EHc5AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpyOWRBdFRTQkdlVVJtdXFpYW5ZUWR6a0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmRhZDItNmM2Ni00ZDdkLWEyNWIt
NWI2MmIzNzBlNTVhLzEvaktSRVIxTTk5Nk9qVjQ3THFodENaMGFiU01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMmRhZDItNmM2Ni00ZDdkLWEyNWItNWI2MmIzNzBlNTVh
LzEvVEpyOWRBdFRTQkdlVVJtdXFpYW5ZUWR6a0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSraMA0G
CSqGSIb3DQEBCwUAA4IBAQBNhZZylqCAPw8dLokM1JhT8z6wShaEzQploqe4tCxo
hjxTHb1qLEsVO9PWRkofmytgDE7LJRCZGdyhu8X2XnCccurJri/2itRlEPT0XY+k
X9GAapKKY78oXPzumXr4BTUEkd0lvV6BAQV87amEqz6D/3mBqZpPVAZjtGuTMtyx
CE8js/yTruKXZ3J2xvEYdg6Ho+qCJ29vjOVXnYiJJtul5W97O+wjWtTUJdRxiH9R
3lnav1FAZFDa22RnQNUoP5QPKczBHKbEBIedUPy37bUVnQkWdfPZxRQ+Tx0LiRxU
vKuNWu8Oe1LHmCHl1crUUURvCO1fBvW/2Kz8krQdp5iu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:13 2024 by rpki-client on console-ams.rpki-client.org