Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/NoE2a2CDpcloOg-aEudgxM16Bx0.roa
File: NoE2a2CDpcloOg-aEudgxM16Bx0.roa (raw, json)
Hash identifier: nL20xQ1cfYMdVtU9CMnLwIq4ioT9RmD6tZr+x3l6YxE=
Subject key identifier: 36:81:36:6B:60:83:A5:C9:68:3A:0F:9A:12:E7:60:C4:CD:7A:07:1D
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 07FF652E
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/NoE2a2CDpcloOg-aEudgxM16Bx0.roa
Signing time: Sat 01 Jan 2022 03:55:27 +0000
ROA not before: Sat 01 Jan 2022 03:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.254.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134178094 (0x7ff652e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3681366b6083a5c9683a0f9a12e760c4cd7a071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:ec:ef:20:5a:87:30:5b:40:66:8e:cf:d3:
ba:c9:ac:5a:e9:c0:77:c6:4b:63:59:b9:e7:7a:a1:
1c:21:5f:b7:19:f5:f5:44:f6:3d:f9:dc:29:a6:64:
69:50:d2:bb:9a:19:e7:ed:b6:99:72:18:a1:95:1e:
f3:b8:5b:1c:34:67:c0:a5:94:88:2a:84:3b:b7:4b:
64:ea:fb:1f:52:22:d6:7a:a4:c9:b4:fb:51:a8:29:
e7:79:69:79:c2:a9:83:e1:64:57:27:2e:1a:a0:fb:
b9:8b:0b:f4:be:ae:13:bd:5a:46:6a:e3:c3:88:5d:
1a:5b:f8:a8:a3:e2:3e:28:a6:ff:f7:bb:83:19:a7:
f3:a1:2e:90:4e:54:08:9a:45:d4:62:2e:e4:3a:c5:
f2:c5:87:0f:b5:2d:9c:05:d9:11:83:b4:45:5a:cf:
c7:b5:5c:bf:42:67:e1:84:59:30:47:38:ee:cf:e7:
db:84:96:03:f1:64:48:8f:db:77:e2:6f:64:eb:1f:
34:47:8a:48:44:e6:d7:d4:4f:17:60:d7:df:6e:05:
14:14:c8:fe:29:ef:38:ff:5a:0d:5e:2a:d2:a9:81:
13:9f:93:52:11:3f:73:4b:bd:b0:03:72:dc:02:6e:
25:2f:3e:1b:0a:45:7b:95:19:f5:8d:be:cf:1c:e6:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:36:6B:60:83:A5:C9:68:3A:0F:9A:12:E7:60:C4:CD:7A:07:1D
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/NoE2a2CDpcloOg-aEudgxM16Bx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:c2:fb:79:d6:65:4f:e5:25:8f:c7:57:46:f0:14:69:36:e7:
88:cf:eb:3f:8b:5f:76:bd:24:b0:7a:63:c3:39:07:10:43:26:
36:74:90:96:aa:1b:ab:e5:f1:cc:c2:f8:89:42:e7:05:0e:13:
ae:e7:fc:73:e9:ed:5f:db:7d:92:74:d7:1a:46:71:ab:6b:14:
ca:9c:0b:5f:bd:f2:d9:7f:49:b1:c8:86:1f:32:71:43:a7:88:
e2:92:1e:04:9d:af:d0:ca:25:4c:39:ca:8c:ad:23:99:0a:74:
53:01:73:7d:9c:ce:c0:55:04:ac:bd:25:a3:ee:01:f4:97:72:
c0:7a:47:8b:78:c4:ff:ad:b7:10:5c:a0:06:1d:97:4f:f3:d8:
24:df:05:13:11:3b:40:03:30:bb:8f:3b:b8:96:5a:46:89:8c:
03:dd:77:14:4b:67:e8:6d:fa:8c:da:fd:0e:34:d1:e8:bb:99:
de:56:aa:3e:60:be:fe:b2:f0:f3:54:d7:52:91:87:05:24:a3:
21:4d:d3:93:9e:4f:54:ad:05:a9:49:89:64:dc:54:36:6e:18:
65:1c:27:61:38:7e:6a:e2:2b:dd:1e:e0:75:7c:b0:09:6c:00:
ae:db:2c:e6:7c:c9:94:c4:bc:eb:ed:a9:bc:3a:6c:23:80:1c:
fe:87:68:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/9lLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzY5ZTIwNjFlOGM3Y2VlNDJlZmE0ZmVmOWYzMGY3YmY2ZjZkMDUzMB4XDTIyMDEw
MTAzNTUyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzY4MTM2NmI2MDgz
YTVjOTY4M2EwZjlhMTJlNzYwYzRjZDdhMDcxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeu7O8gWocwW0Bmjs/TusmsWunAd8ZLY1m553qhHCFftxn1
9UT2PfncKaZkaVDSu5oZ5+22mXIYoZUe87hbHDRnwKWUiCqEO7dLZOr7H1Ii1nqk
ybT7Uagp53lpecKpg+FkVycuGqD7uYsL9L6uE71aRmrjw4hdGlv4qKPiPiim//e7
gxmn86EukE5UCJpF1GIu5DrF8sWHD7UtnAXZEYO0RVrPx7Vcv0Jn4YRZMEc47s/n
24SWA/FkSI/bd+JvZOsfNEeKSETm19RPF2DX324FFBTI/invOP9aDV4q0qmBE5+T
UhE/c0u9sANy3AJuJS8+GwpFe5UZ9Y2+zxzmXzsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2gTZrYIOlyWg6D5oS52DEzXoHHTAfBgNVHSMEGDAWgBS8aeIGHox87kLv
pP758w979vbQUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZHbmlCaDZNZk81Qzc2VC0tZk1QZV9iMjBGTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvZmVmYzk3LTgxY2YtNGZlNC1hYzc1LWM0NGRlNWZkNzhiYS8x
L05vRTJhMkNEcGNsb09nLWFFdWRneE0xNkJ4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
ZmVmYzk3LTgxY2YtNGZlNC1hYzc1LWM0NGRlNWZkNzhiYS8xL3ZHbmlCaDZNZk81
Qzc2VC0tZk1QZV9iMjBGTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn+NDANBgkqhkiG9w0BAQsFAAOC
AQEAfML7edZlT+Ulj8dXRvAUaTbniM/rP4tfdr0ksHpjwzkHEEMmNnSQlqobq+Xx
zML4iULnBQ4Truf8c+ntX9t9knTXGkZxq2sUypwLX73y2X9JsciGHzJxQ6eI4pIe
BJ2v0MolTDnKjK0jmQp0UwFzfZzOwFUErL0lo+4B9JdywHpHi3jE/623EFygBh2X
T/PYJN8FExE7QAMwu487uJZaRomMA913FEtn6G36jNr9DjTR6LuZ3laqPmC+/rLw
81TXUpGHBSSjIU3Tk55PVK0FqUmJZNxUNm4YZRwnYTh+auIr3R7gdXywCWwArtss
5nzJlMS86+2pvDpsI4Ac/odoWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:24 2024 by rpki-client on console-fra.rpki-client.org