Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/CQfQUOjaElIle889gAjZ2gIxZKY.roa
File: CQfQUOjaElIle889gAjZ2gIxZKY.roa (raw, json)
Hash identifier: zzKvcVKcpsycSNRRXYrJKb0XTEnRaj6nbD1GAKV4k1w=
Subject key identifier: 09:07:D0:50:E8:DA:12:52:25:7B:CF:3D:80:08:D9:DA:02:31:64:A6
Certificate issuer: /CN=8f3878e6b0f3b10e5f30f44aeb9d4553ed80823c
Certificate serial: 0185724C6F41C8F051B0B35CE568E38C497C
Authority key identifier: 8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzh45rDzsQ5fMPRK651FU-2Agjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/CQfQUOjaElIle889gAjZ2gIxZKY.roa
Signing time: Mon 02 Jan 2023 11:44:49 +0000
ROA not before: Mon 02 Jan 2023 11:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 176.97.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6f:41:c8:f0:51:b0:b3:5c:e5:68:e3:8c:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3878e6b0f3b10e5f30f44aeb9d4553ed80823c
Validity
Not Before: Jan 2 11:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0907d050e8da1252257bcf3d8008d9da023164a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f8:81:be:31:24:7d:7c:e8:5d:49:91:fc:9c:
25:9c:b4:81:ce:35:97:ab:8b:bd:82:dc:59:33:b3:
84:49:fe:49:f6:b3:e0:b7:cf:27:7f:ed:cb:32:78:
4c:c9:6f:20:36:3c:23:52:f9:e0:b8:25:b8:aa:a8:
d8:c5:27:6d:73:ec:96:dd:10:e1:66:55:4c:99:df:
ee:d9:76:14:58:c7:1b:98:4b:1e:f2:14:90:b6:e3:
3c:40:28:cf:09:ed:d0:38:05:f0:2f:52:bc:c4:c8:
5d:07:64:a6:8a:27:e1:51:84:08:1c:77:f9:57:90:
bd:dc:66:cd:6e:ad:e5:6c:a7:b2:fe:bb:cc:5e:63:
b9:5f:6d:98:20:ce:85:b9:41:dc:98:da:ef:b8:a6:
87:54:50:a1:05:50:eb:cf:61:5e:e1:3f:d7:fd:2b:
0c:25:c2:09:2d:fa:9a:64:a0:ce:7f:cc:c6:41:f1:
90:2a:ea:8f:c3:e9:d6:dd:c5:c8:57:f0:79:d4:ef:
d4:e8:5f:80:55:95:e3:79:b8:db:30:6c:97:7c:fd:
9b:7e:2e:c1:20:ec:b2:af:cb:eb:ee:f8:7b:62:63:
a2:d9:0b:ac:16:ef:46:a7:ae:bd:3d:97:0e:b5:b4:
2c:73:b7:ad:d1:4e:b5:ab:41:be:e6:de:2f:7e:ce:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:D0:50:E8:DA:12:52:25:7B:CF:3D:80:08:D9:DA:02:31:64:A6
X509v3 Authority Key Identifier:
keyid:8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzh45rDzsQ5fMPRK651FU-2Agjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/CQfQUOjaElIle889gAjZ2gIxZKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/jzh45rDzsQ5fMPRK651FU-2Agjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
33:da:3c:d6:25:23:68:b3:4e:82:b6:0f:06:dc:9a:8b:04:d0:
29:51:16:f0:db:ae:22:c5:2b:7f:7a:b8:fc:3c:9d:dd:0a:bf:
1f:94:c2:2b:2c:3d:47:73:e7:74:35:ff:ca:5b:81:63:28:9b:
a7:2e:25:07:a6:22:1c:a9:4f:68:a3:8e:47:df:82:c2:2c:96:
06:9a:9e:a0:9c:04:96:23:fc:03:72:e2:85:dd:4e:68:ce:a1:
cd:9e:dc:aa:09:20:0c:f4:d6:7e:a8:a3:81:e3:c4:22:78:2d:
3d:cb:ed:dd:82:28:43:45:51:b0:88:30:65:52:e1:fe:23:74:
83:8a:dd:37:03:22:ea:57:50:f4:70:3f:5b:18:b5:9a:b4:f7:
8d:78:ac:1e:f6:d5:5a:8e:c7:b4:fa:73:67:67:a4:67:9f:92:
0d:e7:d1:54:e2:a9:af:cb:67:23:ce:cd:f2:0a:65:17:55:85:
ca:74:d7:12:36:3a:a7:da:9a:43:d6:28:98:1f:5a:29:01:a6:
33:b6:d8:ff:6c:6f:9b:33:de:c1:5a:10:34:3a:95:b5:dd:33:
76:19:ae:4f:5e:87:ce:61:ec:fb:5f:bd:0e:c1:2e:1d:a9:bd:
ba:5b:f7:45:7f:5a:d4:ab:cf:e9:fe:f2:45:6e:3d:34:60:4c:
be:ff:18:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyTG9ByPBRsLNc5WjjjEl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzg3OGU2YjBmM2IxMGU1ZjMwZjQ0YWViOWQ0NTUzZWQ4
MDgyM2MwHhcNMjMwMTAyMTE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTA3ZDA1MGU4ZGExMjUyMjU3YmNmM2Q4MDA4ZDlkYTAyMzE2NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPiBvjEkfXzoXUmR/JwlnLSBzjWX
q4u9gtxZM7OESf5J9rPgt88nf+3LMnhMyW8gNjwjUvnguCW4qqjYxSdtc+yW3RDh
ZlVMmd/u2XYUWMcbmEse8hSQtuM8QCjPCe3QOAXwL1K8xMhdB2SmiifhUYQIHHf5
V5C93GbNbq3lbKey/rvMXmO5X22YIM6FuUHcmNrvuKaHVFChBVDrz2Fe4T/X/SsM
JcIJLfqaZKDOf8zGQfGQKuqPw+nW3cXIV/B51O/U6F+AVZXjebjbMGyXfP2bfi7B
IOyyr8vr7vh7YmOi2QusFu9Gp669PZcOtbQsc7et0U61q0G+5t4vfs6LGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkH0FDo2hJSJXvPPYAI2doCMWSmMB8GA1UdIwQY
MBaAFI84eOaw87EOXzD0SuudRVPtgII8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpoNDVyRHpzUTVmTVBSSzY1MUZVLTJBZ2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iZTQ3YjktYmQ5Zi00MTY1LWE4NzEt
NGFmMGM0YmRiYTZjLzEvQ1FmUVVPamFFbElsZTg4OWdBaloyZ0l4WktZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iZTQ3YjktYmQ5Zi00MTY1LWE4NzEtNGFmMGM0YmRiYTZj
LzEvanpoNDVyRHpzUTVmTVBSSzY1MUZVLTJBZ2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHNMA0G
CSqGSIb3DQEBCwUAA4IBAQAz2jzWJSNos06Ctg8G3JqLBNApURbw264ixSt/erj8
PJ3dCr8flMIrLD1Hc+d0Nf/KW4FjKJunLiUHpiIcqU9oo45H34LCLJYGmp6gnASW
I/wDcuKF3U5ozqHNntyqCSAM9NZ+qKOB48QieC09y+3dgihDRVGwiDBlUuH+I3SD
it03AyLqV1D0cD9bGLWatPeNeKwe9tVajse0+nNnZ6Rnn5IN59FU4qmvy2cjzs3y
CmUXVYXKdNcSNjqn2ppD1iiYH1opAaYzttj/bG+bM97BWhA0OpW13TN2Ga5PXofO
Yez7X70OwS4dqb26W/dFf1rUq8/p/vJFbj00YEy+/xjL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:47 2024 by rpki-client on console-fra.rpki-client.org