Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/Vkrew5gbs5yZM1TFrh0VvJ29NiE.roa
File: Vkrew5gbs5yZM1TFrh0VvJ29NiE.roa (raw, json)
Hash identifier: Bt6XC7lk6YaZ3pIzs1m9GmkzkZ78QClZ5UekB/rYOq0=
Subject key identifier: 56:4A:DE:C3:98:1B:B3:9C:99:33:54:C5:AE:1D:15:BC:9D:BD:36:21
Certificate issuer: /CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Certificate serial: 21B1C9
Authority key identifier: 99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/Vkrew5gbs5yZM1TFrh0VvJ29NiE.roa
Signing time: Sat 01 Jan 2022 03:00:09 +0000
ROA not before: Sat 01 Jan 2022 03:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 46.253.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208201 (0x21b1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Validity
Not Before: Jan 1 03:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=564adec3981bb39c993354c5ae1d15bc9dbd3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:e6:24:bb:2c:76:2c:e0:54:24:de:2c:74:
51:45:09:e6:18:16:dc:a9:d4:05:1a:0f:2e:3c:b5:
f0:32:ed:ed:d9:be:00:eb:bb:dd:db:ad:df:c5:f7:
7f:13:3c:75:fd:41:0c:73:31:d6:d4:b4:ad:a7:b8:
d5:ba:a8:a0:25:98:8f:92:a6:08:0c:71:e4:18:3c:
f2:41:a6:6c:5a:45:8b:d1:a1:b6:88:b9:c6:7f:46:
f9:b0:07:02:0e:16:ff:6b:dc:6f:1c:98:c3:c8:0c:
67:2b:80:eb:a3:3b:1b:5b:43:81:ab:09:e0:39:d4:
f9:71:9a:18:55:52:bc:4b:45:1e:55:89:0b:80:d8:
68:14:a4:68:b2:9d:97:b2:9e:9a:b0:65:68:60:6f:
70:a6:86:a3:77:14:79:90:42:52:43:51:81:d9:b7:
c3:55:dc:5a:55:74:41:73:39:e8:9f:33:99:93:71:
6f:37:02:91:29:ca:7a:6a:c1:90:31:54:38:76:5d:
3b:62:c0:11:9a:eb:1e:7f:61:41:b2:61:6f:b1:d7:
a6:30:db:f4:ea:bd:31:b8:be:e2:1f:57:d8:cf:54:
5f:b4:53:92:ce:68:f9:89:e2:e9:d2:d0:2e:25:7a:
b0:1b:59:bc:0a:b0:ed:3d:fd:f5:cd:e2:75:af:8c:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:DE:C3:98:1B:B3:9C:99:33:54:C5:AE:1D:15:BC:9D:BD:36:21
X509v3 Authority Key Identifier:
keyid:99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/Vkrew5gbs5yZM1TFrh0VvJ29NiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.131.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2e:2f:34:9b:81:09:fb:ed:33:03:de:09:39:f2:e6:c9:f2:
53:ee:11:dd:b3:6b:2f:4d:7e:91:08:2a:11:c4:2c:3e:52:2f:
49:0b:d4:93:04:2d:38:e6:94:c4:e6:36:4a:64:39:dd:af:0f:
73:f3:34:6c:5e:9d:c9:b8:6e:09:d9:21:66:cf:a0:c6:f2:b9:
ce:35:a8:c1:67:d3:e1:94:f8:71:b7:28:b9:9d:0c:59:fe:ed:
f6:36:c5:09:a7:9b:fa:f0:be:83:c2:c0:9f:3f:31:87:bc:89:
5e:59:9c:2e:dc:67:06:4b:dc:58:e5:01:78:da:46:3e:8c:02:
81:50:30:6c:2d:98:77:f3:98:80:55:08:9c:d3:35:4b:93:ee:
6e:8b:c2:ae:ff:46:f9:b0:19:7c:0c:04:4b:f0:27:b4:37:8d:
b5:31:9b:2e:65:e3:be:6a:48:2b:16:18:62:22:f6:c0:a1:8f:
df:6e:d4:dd:d7:90:62:98:cb:4b:76:40:54:1e:ba:51:6e:88:
a5:22:8b:8b:32:83:20:e6:94:60:ce:04:d9:a8:f4:aa:dc:a1:
81:9a:f0:32:fc:e9:38:35:8c:c7:67:1c:86:29:79:5b:e1:d0:
b6:9d:95:84:ee:53:d2:c3:9e:66:3a:50:3f:f0:e8:81:fa:e8:
12:37:7d:0a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDIbHJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
ODlkZGY0ODliYTQ1Yzk4ZTI4OTE3MDE4YjU2NWRhYzFiMmVjMmMwHhcNMjIwMTAx
MDMwMDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NjRhZGVjMzk4MWJi
MzljOTkzMzU0YzVhZTFkMTViYzlkYmQzNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsqLmJLssdizgVCTeLHRRRQnmGBbcqdQFGg8uPLXwMu3t2b4A
67vd263fxfd/Ezx1/UEMczHW1LStp7jVuqigJZiPkqYIDHHkGDzyQaZsWkWL0aG2
iLnGf0b5sAcCDhb/a9xvHJjDyAxnK4DrozsbW0OBqwngOdT5cZoYVVK8S0UeVYkL
gNhoFKRosp2Xsp6asGVoYG9wpoajdxR5kEJSQ1GB2bfDVdxaVXRBcznonzOZk3Fv
NwKRKcp6asGQMVQ4dl07YsARmusef2FBsmFvsdemMNv06r0xuL7iH1fYz1RftFOS
zmj5ieLp0tAuJXqwG1m8CrDtPf31zeJ1r4w1yQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFZK3sOYG7OcmTNUxa4dFbydvTYhMB8GA1UdIwQYMBaAFJmJ3fSJukXJjiiR
cBi1ZdrBsuwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bVluZDlJbTZSY21PS0pGd0dMVmwyc0d5N0N3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mOC9hNWRkZmItZGIyMS00YWEwLTkyMDItZjEyZDI3YjZlZTc4LzEv
VmtyZXc1Z2JzNXlaTTFURnJoMFZ2SjI5TmlFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9h
NWRkZmItZGIyMS00YWEwLTkyMDItZjEyZDI3YjZlZTc4LzEvbVluZDlJbTZSY21P
S0pGd0dMVmwyc0d5N0N3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2DMA0GCSqGSIb3DQEBCwUAA4IB
AQB5Li80m4EJ++0zA94JOfLmyfJT7hHds2svTX6RCCoRxCw+Ui9JC9STBC045pTE
5jZKZDndrw9z8zRsXp3JuG4J2SFmz6DG8rnONajBZ9PhlPhxtyi5nQxZ/u32NsUJ
p5v68L6DwsCfPzGHvIleWZwu3GcGS9xY5QF42kY+jAKBUDBsLZh385iAVQic0zVL
k+5ui8Ku/0b5sBl8DARL8Ce0N421MZsuZeO+akgrFhhiIvbAoY/fbtTd15BimMtL
dkBUHrpRboilIouLMoMg5pRgzgTZqPSq3KGBmvAy/Ok4NYzHZxyGKXlb4dC2nZWE
7lPSw55mOlA/8OiB+ugSN30K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:27 2024 by rpki-client on console-ams.rpki-client.org