Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/2jYie6g3vQ7dBvp-ZSNqlnWSQ2U.roa
File: 2jYie6g3vQ7dBvp-ZSNqlnWSQ2U.roa (raw, json)
Hash identifier: bj4SbXDx6IqbPvZbnjOvGWfrk2TqCM8K6gt/QNnTuEY=
Subject key identifier: DA:36:22:7B:A8:37:BD:0E:DD:06:FA:7E:65:23:6A:96:75:92:43:65
Certificate issuer: /CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Certificate serial: 01856F94D2EE305CA18B02509295C0F6405C
Authority key identifier: AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/2jYie6g3vQ7dBvp-ZSNqlnWSQ2U.roa
Signing time: Sun 01 Jan 2023 23:05:02 +0000
ROA not before: Sun 01 Jan 2023 23:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 94.154.114.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d2:ee:30:5c:a1:8b:02:50:92:95:c0:f6:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Validity
Not Before: Jan 1 23:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da36227ba837bd0edd06fa7e65236a9675924365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:b7:0a:89:8e:80:13:00:c8:f5:ec:8e:c3:
15:3d:59:8b:53:8b:fb:7a:c5:1b:8a:2e:ce:ef:b0:
b3:ea:aa:9b:d2:62:52:08:cc:d7:e2:bd:b4:30:fb:
59:89:42:e2:de:5e:66:3e:fd:2d:4a:ce:5f:c9:09:
4a:55:e9:29:f2:64:7c:17:8e:02:92:8b:44:63:92:
32:da:2f:ab:b0:1c:33:ec:61:8a:d2:9a:45:d8:f1:
bc:f3:13:8a:d0:e3:0c:5f:ce:87:e5:07:e3:48:40:
c9:fa:5e:99:9e:13:cf:db:29:f3:b0:b4:9d:de:3e:
ea:b8:80:24:2d:83:11:75:32:3a:d5:a4:61:52:4f:
50:ef:96:78:6e:7d:a2:d5:7e:2a:90:c5:82:58:f3:
a2:0a:68:1d:ee:c9:02:94:e7:b1:70:01:2d:a9:f4:
f7:d3:bd:41:1c:ef:50:47:0d:f3:5a:89:a2:e6:fd:
e6:ef:f5:93:96:98:19:45:d4:78:8d:4a:2a:6a:37:
b7:92:b7:61:23:13:64:6b:66:4a:0a:22:2f:56:7e:
ea:31:f2:3e:ce:64:fc:e1:59:19:8c:55:4b:02:2d:
b3:c1:8b:c9:be:80:8f:d7:e2:7f:4f:0c:0a:f7:f8:
85:af:6d:47:79:3d:5e:f6:db:de:70:f1:9e:e9:10:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:22:7B:A8:37:BD:0E:DD:06:FA:7E:65:23:6A:96:75:92:43:65
X509v3 Authority Key Identifier:
keyid:AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/2jYie6g3vQ7dBvp-ZSNqlnWSQ2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.114.0/24
Signature Algorithm: sha256WithRSAEncryption
56:43:a0:fc:72:df:66:a6:2b:ae:9f:0f:d5:40:25:9f:2a:96:
40:fd:68:d7:bf:fa:06:78:13:bc:0d:82:31:bb:d8:2d:ed:20:
1a:09:bc:73:10:c4:bb:de:29:fa:b6:ad:db:a2:a0:cb:93:d1:
c3:2e:3b:96:70:26:db:e1:d8:97:86:18:4f:f1:83:9b:5e:ab:
bd:80:34:c5:c4:31:39:98:ad:55:1c:e7:38:b5:60:52:68:76:
f2:ac:bc:50:f5:42:46:47:04:a4:a4:66:a4:bb:34:f8:fa:6a:
d3:cb:1b:c2:d2:3b:47:d6:47:99:94:a5:b3:6e:4c:da:47:00:
23:74:ad:24:22:56:84:80:9c:7c:f5:95:6c:aa:31:a2:08:f3:
71:02:26:3c:5d:19:af:4a:a8:75:cb:ee:53:4b:70:72:13:25:
a0:62:58:31:4d:37:94:0d:ba:d2:30:dc:84:17:30:49:8f:5a:
3b:ad:b3:51:cf:09:8a:73:68:c6:76:77:18:49:90:5f:48:a6:
1e:df:00:66:b0:91:ef:0f:bf:7f:c1:5d:86:7a:83:73:fb:32:
a5:97:df:af:cb:29:e2:61:a4:6e:7b:e7:08:29:7e:55:47:f3:
3a:de:54:73:37:75:3e:be:97:74:94:94:17:67:11:d1:bf:2f:
52:b1:25:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlNLuMFyhiwJQkpXA9kBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZmYxZjc3ZjM5N2ExYTgwZmJhNzFiNGQyZDFkYjkxN2Iz
YmE2YTAwHhcNMjMwMTAxMjMwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTM2MjI3YmE4MzdiZDBlZGQwNmZhN2U2NTIzNmE5Njc1OTI0MzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt+3ComOgBMAyPXsjsMVPVmLU4v7
esUbii7O77Cz6qqb0mJSCMzX4r20MPtZiULi3l5mPv0tSs5fyQlKVekp8mR8F44C
kotEY5Iy2i+rsBwz7GGK0ppF2PG88xOK0OMMX86H5QfjSEDJ+l6ZnhPP2ynzsLSd
3j7quIAkLYMRdTI61aRhUk9Q75Z4bn2i1X4qkMWCWPOiCmgd7skClOexcAEtqfT3
071BHO9QRw3zWomi5v3m7/WTlpgZRdR4jUoqaje3krdhIxNka2ZKCiIvVn7qMfI+
zmT84VkZjFVLAi2zwYvJvoCP1+J/TwwK9/iFr21HeT1e9tvecPGe6RDAcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNo2InuoN70O3Qb6fmUjapZ1kkNlMB8GA1UdIwQY
MBaAFKv/H3fzl6GoD7pxtNLR25F7O6agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcV84ZmRfT1hvYWdQdW5HMDB0SGJrWHM3cHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yYjhlM2UtZTNiYy00NjM1LTkzOTct
N2Q1ZGZhN2QwM2QzLzEvMmpZaWU2ZzN2UTdkQnZwLVpTTnFsbldTUTJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yYjhlM2UtZTNiYy00NjM1LTkzOTctN2Q1ZGZhN2QwM2Qz
LzEvcV84ZmRfT1hvYWdQdW5HMDB0SGJrWHM3cHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXppyMA0G
CSqGSIb3DQEBCwUAA4IBAQBWQ6D8ct9mpiuunw/VQCWfKpZA/WjXv/oGeBO8DYIx
u9gt7SAaCbxzEMS73in6tq3boqDLk9HDLjuWcCbb4diXhhhP8YObXqu9gDTFxDE5
mK1VHOc4tWBSaHbyrLxQ9UJGRwSkpGakuzT4+mrTyxvC0jtH1keZlKWzbkzaRwAj
dK0kIlaEgJx89ZVsqjGiCPNxAiY8XRmvSqh1y+5TS3ByEyWgYlgxTTeUDbrSMNyE
FzBJj1o7rbNRzwmKc2jGdncYSZBfSKYe3wBmsJHvD79/wV2GeoNz+zKll9+vyyni
YaRue+cIKX5VR/M63lRzN3U+vpd0lJQXZxHRvy9SsSVL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:53 2024 by rpki-client on console-ams.rpki-client.org