Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/V9fS1aRBszBtjvV5O-9aL_35zRQ.roa
File: V9fS1aRBszBtjvV5O-9aL_35zRQ.roa (raw, json)
Hash identifier: kjEagyQKemXt2pHgeLmlurPxBl+iFbOqYVC2XJVqeIo=
Subject key identifier: 57:D7:D2:D5:A4:41:B3:30:6D:8E:F5:79:3B:EF:5A:2F:FD:F9:CD:14
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DA81B6D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/V9fS1aRBszBtjvV5O-9aL_35zRQ.roa
Signing time: Sat 01 Jan 2022 08:59:34 +0000
ROA not before: Sat 01 Jan 2022 08:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 213.198.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229120877 (0xda81b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57d7d2d5a441b3306d8ef5793bef5a2ffdf9cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:a9:a9:23:f2:d1:2a:48:8d:52:f9:3e:cd:
51:ca:c4:2c:28:b6:fb:82:e4:16:3c:f1:5e:73:bc:
c9:92:16:b4:7f:e1:6d:3d:36:c0:ed:2e:48:2c:eb:
56:ce:90:db:0f:e5:14:ec:38:c5:7a:35:08:2c:e3:
4a:d4:30:41:a9:29:5e:91:c1:92:1b:8f:5b:d5:ea:
15:9d:b9:03:9a:3d:5a:5b:a0:1f:fd:e4:d7:65:7e:
74:66:84:9f:e4:f2:fd:ae:5e:c3:e2:85:46:a7:a7:
e7:6f:1b:88:44:1b:28:9e:94:1e:4a:3a:4d:d1:b5:
af:91:e2:e2:dc:e4:89:bc:b3:06:7d:9f:67:72:cd:
52:2b:66:4e:42:6b:ed:ef:a5:3c:da:bf:a8:57:1d:
19:92:29:f6:0a:3f:44:96:18:af:4a:33:4b:bf:fb:
d5:a6:be:bf:bb:8b:ff:dd:55:87:7d:ae:16:fc:28:
10:5c:c3:77:8e:ac:30:9d:00:38:5f:52:c6:b4:3e:
af:a0:92:12:8b:2a:49:5f:d0:08:af:fc:4d:17:0f:
aa:cf:35:9a:04:06:3f:9f:09:b1:f9:50:0e:2b:54:
a2:7d:b0:16:c6:13:76:d1:fa:ee:8a:00:a0:1e:ce:
30:39:92:1d:09:cb:c6:be:94:27:4f:50:5b:aa:91:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D7:D2:D5:A4:41:B3:30:6D:8E:F5:79:3B:EF:5A:2F:FD:F9:CD:14
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/V9fS1aRBszBtjvV5O-9aL_35zRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5a:db:32:40:71:7a:88:86:a6:db:c2:e5:3b:4c:f5:c2:cb:
29:20:28:91:fd:99:82:f9:e6:cc:9d:90:58:d0:7a:80:0d:af:
85:77:91:1f:6f:9b:b3:38:88:4b:c0:d7:6e:f0:a1:6e:99:af:
f9:ba:df:a5:93:3e:7a:af:4c:3b:e0:bc:f2:6b:b2:27:9f:ec:
01:9a:ed:c3:b1:95:da:51:ce:fa:dd:90:95:ae:03:ed:57:47:
37:fe:75:fe:74:0e:78:69:7a:08:e3:ee:ae:ad:3d:44:5b:36:
9f:f6:c2:a0:f1:2e:e4:e1:f4:1a:02:0f:b9:fb:c1:32:e8:00:
a9:ca:cb:33:9c:c4:02:42:9a:91:0b:92:ce:26:bf:44:94:59:
95:ee:b8:d1:e3:6a:44:0c:f0:dd:1d:12:3b:3a:44:63:1f:07:
e8:7c:06:51:cb:7e:88:45:b6:41:14:88:8a:77:57:75:bb:6a:
94:e0:20:6e:dc:f8:4c:71:df:3f:06:1e:d6:90:26:54:63:de:
ca:a3:bb:14:42:b7:39:db:4a:1b:ae:8a:98:80:ce:f4:0f:1e:
b4:d2:e0:ee:96:f6:fe:db:58:31:78:47:24:34:52:53:60:2d:
e5:4f:2d:b2:3c:17:71:3e:e1:a4:5c:c7:7a:03:16:24:29:1c:
e2:a2:75:2f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDagbbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWRhYjUwN2MwODk3NmNjMjlkMTc3MzczZGU2MjdhMWNlODZlZmFlMB4XDTIyMDEw
MTA4NTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdkN2QyZDVhNDQx
YjMzMDZkOGVmNTc5M2JlZjVhMmZmZGY5Y2QxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDWqakj8tEqSI1S+T7NUcrELCi2+4LkFjzxXnO8yZIWtH/h
bT02wO0uSCzrVs6Q2w/lFOw4xXo1CCzjStQwQakpXpHBkhuPW9XqFZ25A5o9Wlug
H/3k12V+dGaEn+Ty/a5ew+KFRqen528biEQbKJ6UHko6TdG1r5Hi4tzkibyzBn2f
Z3LNUitmTkJr7e+lPNq/qFcdGZIp9go/RJYYr0ozS7/71aa+v7uL/91Vh32uFvwo
EFzDd46sMJ0AOF9SxrQ+r6CSEosqSV/QCK/8TRcPqs81mgQGP58JsflQDitUon2w
FsYTdtH67ooAoB7OMDmSHQnLxr6UJ09QW6qRDK0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRX19LVpEGzMG2O9Xk771ov/fnNFDAfBgNVHSMEGDAWgBRF2rUHwIl2zCnR
dzc95iehzobvrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JkcTFCOENKZHN3cDBYYzNQZVlub2M2Rzc2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8x
L1Y5ZlMxYVJCc3pCdGp2VjVPLTlhTF8zNXpSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8xL1JkcTFCOENKZHN3
cDBYYzNQZVlub2M2Rzc2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXGQzANBgkqhkiG9w0BAQsFAAOC
AQEAolrbMkBxeoiGptvC5TtM9cLLKSAokf2ZgvnmzJ2QWNB6gA2vhXeRH2+bsziI
S8DXbvChbpmv+brfpZM+eq9MO+C88muyJ5/sAZrtw7GV2lHO+t2Qla4D7VdHN/51
/nQOeGl6COPurq09RFs2n/bCoPEu5OH0GgIPufvBMugAqcrLM5zEAkKakQuSzia/
RJRZle640eNqRAzw3R0SOzpEYx8H6HwGUct+iEW2QRSIindXdbtqlOAgbtz4THHf
PwYe1pAmVGPeyqO7FEK3OdtKG66KmIDO9A8etNLg7pb2/ttYMXhHJDRSU2At5U8t
sjwXcT7hpFzHegMWJCkc4qJ1Lw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org