Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/jkA5WNXo7An72DVQPnUdKTCBbDE.roa
File: jkA5WNXo7An72DVQPnUdKTCBbDE.roa (raw, json)
Hash identifier: 9Caek6HgnZWrnBr6UriYNe2v2S8oSTdeMSIyRPchHFM=
Subject key identifier: 8E:40:39:58:D5:E8:EC:09:FB:D8:35:50:3E:75:1D:29:30:81:6C:31
Certificate issuer: /CN=8fc18efa49c2768e31ff9073d35189b908c52077
Certificate serial: 0185F8415002B94910700F507CB007B1D0A0
Authority key identifier: 8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/jkA5WNXo7An72DVQPnUdKTCBbDE.roa
Signing time: Sat 28 Jan 2023 12:01:47 +0000
ROA not before: Sat 28 Jan 2023 12:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 91.246.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f8:41:50:02:b9:49:10:70:0f:50:7c:b0:07:b1:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc18efa49c2768e31ff9073d35189b908c52077
Validity
Not Before: Jan 28 12:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e403958d5e8ec09fbd835503e751d2930816c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:ac:25:fe:92:46:c7:7d:39:1d:ae:63:e0:
c9:57:6e:09:76:0d:08:6b:be:82:0b:cf:93:ca:fb:
07:c0:a8:34:b2:37:cd:f4:fc:be:06:e2:33:45:24:
9b:8a:6d:a9:92:40:ed:64:ed:9c:c7:58:8f:0f:1c:
3c:ec:48:1d:3d:43:38:a8:8f:81:25:b7:28:86:bf:
d4:ad:c8:e5:73:b9:0f:78:3e:be:fc:1b:70:b2:2d:
2c:a1:95:58:78:e1:f7:69:43:b1:30:4e:e3:17:5a:
dd:d5:e9:2e:4d:a9:03:bb:77:39:17:6c:37:fb:22:
95:6a:5b:0d:60:f2:c9:ca:54:43:1c:a5:33:34:63:
1e:2a:5a:b8:35:2e:f9:c2:ca:36:58:e5:9f:3b:cb:
1f:f8:16:9b:1d:0d:50:32:b7:12:e9:be:70:cb:fb:
e1:c2:bd:12:ba:f0:5f:2f:56:4e:f6:64:56:46:ef:
db:40:7a:73:b3:d6:c7:52:7f:12:8e:ec:00:cb:4e:
01:64:d0:28:ae:54:0b:c5:c3:9b:cd:10:39:a6:0e:
73:bf:1f:43:aa:8d:63:53:a4:3d:9c:87:f2:2e:c1:
ba:b4:56:5c:87:b0:25:6b:47:56:ae:05:e7:cc:2e:
15:56:e6:09:87:2d:36:f6:a3:b5:0b:6b:a4:5c:2b:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:39:58:D5:E8:EC:09:FB:D8:35:50:3E:75:1D:29:30:81:6C:31
X509v3 Authority Key Identifier:
keyid:8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/jkA5WNXo7An72DVQPnUdKTCBbDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/j8GO-knCdo4x_5Bz01GJuQjFIHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.49.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e3:2e:7f:0f:9b:3b:bb:51:6a:97:02:fc:1d:14:d1:77:1b:
ef:f2:05:5e:ee:52:55:83:d5:50:9a:ef:45:62:84:74:1a:79:
e5:42:ec:dd:fd:e1:32:b8:3d:1a:62:b6:69:52:f2:e1:f3:2f:
74:84:77:6d:18:7c:dd:6b:b3:8c:14:e5:37:4c:40:bd:bc:1d:
c1:6f:89:45:a5:a3:12:05:47:cd:8d:e9:24:d2:ee:3d:f2:5f:
41:6e:b2:19:bc:23:79:65:fc:10:d8:ed:d8:7a:e3:02:9c:68:
42:0e:86:6a:cd:d9:6f:8f:12:d5:50:0c:3f:86:47:1c:4d:ea:
cf:1a:a4:16:58:42:62:ba:a9:0b:0b:10:ce:9a:9f:e8:e1:50:
6d:a7:fa:84:98:e5:04:ce:68:0f:89:aa:7e:a1:a5:bf:f6:a7:
46:da:64:33:74:fb:d1:05:34:70:09:6f:de:a8:34:7c:6d:cc:
de:40:42:86:57:ba:a3:15:25:0d:d3:dd:56:f3:fd:d0:9a:82:
d1:2a:41:15:ba:45:0c:f8:44:11:0b:c3:86:bf:c5:73:50:3d:
9c:0a:f6:69:fc:1f:89:ec:3e:3e:8c:aa:e0:11:fe:35:df:c2:
03:04:97:11:72:24:10:88:4a:01:d9:7d:68:11:5e:ab:42:84:
5a:94:e2:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYX4QVACuUkQcA9QfLAHsdCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzE4ZWZhNDljMjc2OGUzMWZmOTA3M2QzNTE4OWI5MDhj
NTIwNzcwHhcNMjMwMTI4MTIwMTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTQwMzk1OGQ1ZThlYzA5ZmJkODM1NTAzZTc1MWQyOTMwODE2YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxSsJf6SRsd9OR2uY+DJV24Jdg0I
a76CC8+TyvsHwKg0sjfN9Py+BuIzRSSbim2pkkDtZO2cx1iPDxw87EgdPUM4qI+B
Jbcohr/Urcjlc7kPeD6+/Btwsi0soZVYeOH3aUOxME7jF1rd1ekuTakDu3c5F2w3
+yKValsNYPLJylRDHKUzNGMeKlq4NS75wso2WOWfO8sf+BabHQ1QMrcS6b5wy/vh
wr0SuvBfL1ZO9mRWRu/bQHpzs9bHUn8SjuwAy04BZNAorlQLxcObzRA5pg5zvx9D
qo1jU6Q9nIfyLsG6tFZch7Ala0dWrgXnzC4VVuYJhy029qO1C2ukXCvDwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI5AOVjV6OwJ+9g1UD51HSkwgWwxMB8GA1UdIwQY
MBaAFI/BjvpJwnaOMf+Qc9NRibkIxSB3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhHTy1rbkNkbzR4XzVCejAxR0p1UWpGSUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMDhjYTYtNmNhOC00YzVhLTliYjIt
YjY5ZDEzYjJlMzllLzEvamtBNVdOWG83QW43MkRWUVBuVWRLVENCYkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wMDhjYTYtNmNhOC00YzVhLTliYjItYjY5ZDEzYjJlMzll
LzEvajhHTy1rbkNkbzR4XzVCejAxR0p1UWpGSUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/YxMA0G
CSqGSIb3DQEBCwUAA4IBAQAD4y5/D5s7u1FqlwL8HRTRdxvv8gVe7lJVg9VQmu9F
YoR0GnnlQuzd/eEyuD0aYrZpUvLh8y90hHdtGHzda7OMFOU3TEC9vB3Bb4lFpaMS
BUfNjekk0u498l9BbrIZvCN5ZfwQ2O3YeuMCnGhCDoZqzdlvjxLVUAw/hkccTerP
GqQWWEJiuqkLCxDOmp/o4VBtp/qEmOUEzmgPiap+oaW/9qdG2mQzdPvRBTRwCW/e
qDR8bczeQEKGV7qjFSUN091W8/3QmoLRKkEVukUM+EQRC8OGv8VzUD2cCvZp/B+J
7D4+jKrgEf4138IDBJcRciQQiEoB2X1oEV6rQoRalOJ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:22 2024 by rpki-client on console-ams.rpki-client.org