Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/0kkD1rTzOSKmMsYvgfx4mj3-Abs.roa
File: 0kkD1rTzOSKmMsYvgfx4mj3-Abs.roa (raw, json)
Hash identifier: gPb7hVk8HjQG4Hs5FqyXDjeEzpUQUZ0558tyVeRvv1s=
Subject key identifier: D2:49:03:D6:B4:F3:39:22:A6:32:C6:2F:81:FC:78:9A:3D:FE:01:BB
Certificate issuer: /CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Certificate serial: 018CC3B7474EBEF775DB3347D4FC7E41F0E1
Authority key identifier: 3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/0kkD1rTzOSKmMsYvgfx4mj3-Abs.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50268
IP address blocks: 193.104.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:47:4e:be:f7:75:db:33:47:d4:fc:7e:41:f0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d24903d6b4f33922a632c62f81fc789a3dfe01bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:fe:a0:84:09:9f:81:78:5f:b7:6a:a2:f4:
06:6b:31:6e:08:a9:f7:f7:aa:42:b6:8d:09:1b:47:
ee:a6:0d:12:f0:cf:7c:39:7c:b8:8d:e0:d6:cb:67:
a2:ce:79:87:93:7b:de:95:d7:9c:93:32:3f:b6:b0:
a7:93:05:51:f4:44:63:cb:af:e5:8e:7c:a1:c5:9a:
85:8c:cd:6a:f0:72:bd:2a:e0:b8:74:a1:a1:90:2c:
3a:09:9f:df:b9:26:81:b3:ee:e1:f8:88:08:43:c2:
8e:ad:2c:3e:ba:0b:47:6f:59:5f:41:1e:dd:95:57:
12:17:4c:38:82:31:eb:9a:a3:0f:c0:10:58:58:35:
43:29:66:2d:53:dd:54:c6:7b:83:c0:a6:bc:e1:72:
71:20:89:6a:5b:80:72:d7:a3:2b:95:ea:ff:46:b1:
b4:a5:e0:54:97:f6:d9:ed:56:50:4b:69:5b:ae:3d:
8e:ac:0a:d1:39:af:09:ec:a4:25:e4:74:11:ee:e1:
89:83:b5:c2:a8:f2:7a:0a:61:06:4f:b3:ac:f7:15:
15:31:a0:53:15:45:cd:9b:37:6f:e5:56:eb:b6:02:
42:bb:aa:a8:18:ca:c7:cd:cf:2d:1e:5b:4a:08:39:
23:40:7e:2c:01:1c:75:f3:94:3c:0e:7a:1a:cd:f3:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:03:D6:B4:F3:39:22:A6:32:C6:2F:81:FC:78:9A:3D:FE:01:BB
X509v3 Authority Key Identifier:
keyid:3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/0kkD1rTzOSKmMsYvgfx4mj3-Abs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f2:11:22:31:b8:a5:89:68:e7:04:04:76:d0:53:ee:ce:95:
1b:10:95:8f:49:a3:ad:d4:46:3e:cf:9c:c1:4f:f2:23:38:2e:
c9:9c:fd:f2:f9:99:8e:f4:6b:1d:eb:69:c2:00:91:e9:8a:98:
0d:b0:39:b6:6c:64:44:0d:4a:11:fd:bd:bd:41:8b:f9:c1:58:
05:7b:5b:e2:e6:ae:c6:99:37:93:1e:90:fd:aa:aa:b1:25:8e:
f6:2d:c6:87:79:e3:01:6c:05:20:47:dc:7a:2d:e1:48:a6:af:
f3:22:3d:62:4e:05:fa:05:44:17:48:bf:a8:ca:1e:c0:cc:ec:
77:6f:cb:80:a9:b4:68:b0:1f:de:e5:25:9d:8c:52:b7:c1:b9:
f2:73:49:91:91:63:fd:c3:e4:40:74:d8:5f:19:b8:94:2b:5a:
e7:47:7f:c8:22:20:94:ef:18:8d:52:96:a3:31:bd:6c:29:0e:
8b:f3:5c:b0:a5:6c:0e:76:f9:e5:36:4c:b2:d4:9a:48:48:92:
d7:6b:61:9a:ae:e8:4d:1a:f3:4a:9f:37:42:c0:b3:95:19:8a:
dd:7a:ec:f4:97:ce:24:db:6b:0c:d7:4a:64:4a:86:18:48:39:
ac:0c:21:5e:91:59:53:1f:47:6a:b3:91:cf:1b:19:79:2a:d9:
13:e1:9c:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDt0dOvvd12zNH1Px+QfDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTFkOGIyZmQyNzYyNmY3YjQ5NjY0YmYwNWJiZGU2ZDU5
YmRhZDMwHhcNMjQwMTAxMDYzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjQ5MDNkNmI0ZjMzOTIyYTYzMmM2MmY4MWZjNzg5YTNkZmUwMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO7+oIQJn4F4X7dqovQGazFuCKn3
96pCto0JG0fupg0S8M98OXy4jeDWy2eiznmHk3veldeckzI/trCnkwVR9ERjy6/l
jnyhxZqFjM1q8HK9KuC4dKGhkCw6CZ/fuSaBs+7h+IgIQ8KOrSw+ugtHb1lfQR7d
lVcSF0w4gjHrmqMPwBBYWDVDKWYtU91UxnuDwKa84XJxIIlqW4By16Mrler/RrG0
peBUl/bZ7VZQS2lbrj2OrArROa8J7KQl5HQR7uGJg7XCqPJ6CmEGT7Os9xUVMaBT
FUXNmzdv5VbrtgJCu6qoGMrHzc8tHltKCDkjQH4sARx185Q8DnoazfN/hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJJA9a08zkipjLGL4H8eJo9/gG7MB8GA1UdIwQY
MBaAFD6h2LL9J2Jve0lmS/BbvebVm9rTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFIWXN2MG5ZbTk3U1daTDhGdTk1dFdiMnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NWJiYTgtNTdkOC00MmMyLThhYWYt
NDVlOTU0MjcxYWI4LzEvMGtrRDFyVHpPU0ttTXNZdmdmeDRtajMtQWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83NWJiYTgtNTdkOC00MmMyLThhYWYtNDVlOTU0MjcxYWI4
LzEvUHFIWXN2MG5ZbTk3U1daTDhGdTk1dFdiMnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWidMA0G
CSqGSIb3DQEBCwUAA4IBAQCq8hEiMbiliWjnBAR20FPuzpUbEJWPSaOt1EY+z5zB
T/IjOC7JnP3y+ZmO9Gsd62nCAJHpipgNsDm2bGREDUoR/b29QYv5wVgFe1vi5q7G
mTeTHpD9qqqxJY72LcaHeeMBbAUgR9x6LeFIpq/zIj1iTgX6BUQXSL+oyh7AzOx3
b8uAqbRosB/e5SWdjFK3wbnyc0mRkWP9w+RAdNhfGbiUK1rnR3/IIiCU7xiNUpaj
Mb1sKQ6L81ywpWwOdvnlNkyy1JpISJLXa2GaruhNGvNKnzdCwLOVGYrdeuz0l84k
22sM10pkSoYYSDmsDCFekVlTH0dqs5HPGxl5KtkT4Zya
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org