Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/H4ly-M6LbbeNU1JNWiVw5TTk17o.roa
File: H4ly-M6LbbeNU1JNWiVw5TTk17o.roa (raw, json)
Hash identifier: JwCTaYZ7qbedyjTTPl0KkpkCJc4QLvofZAO7ANQ06YQ=
Subject key identifier: 1F:89:72:F8:CE:8B:6D:B7:8D:53:52:4D:5A:25:70:E5:34:E4:D7:BA
Certificate issuer: /CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Certificate serial: 0181F465F5286272C106966F235C6C545996
Authority key identifier: 96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/H4ly-M6LbbeNU1JNWiVw5TTk17o.roa
Signing time: Tue 12 Jul 2022 21:52:11 +0000
ROA not before: Tue 12 Jul 2022 21:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.239.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:f5:28:62:72:c1:06:96:6f:23:5c:6c:54:59:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Validity
Not Before: Jul 12 21:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f8972f8ce8b6db78d53524d5a2570e534e4d7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:14:34:3b:40:4f:87:b4:2a:84:7e:77:0a:
bf:ab:c0:d1:72:b9:e2:36:97:8e:37:e0:c4:3d:f6:
87:2c:42:9e:fb:0b:c8:a4:f5:fd:ac:28:1b:b2:45:
49:d3:45:23:10:e3:a3:95:0a:94:36:32:4b:04:d1:
d8:d7:26:69:04:f1:70:ac:6d:f4:e7:74:94:bc:9f:
e9:8d:f8:31:d6:08:98:d3:35:c4:df:1e:f5:28:db:
a2:f2:46:6f:d9:6f:3f:43:ee:a7:8f:27:ef:ed:12:
ec:ec:c2:b7:41:2b:1e:31:ea:20:ae:a1:18:3f:7e:
fd:0e:e5:07:3c:38:22:03:c9:1b:5e:d8:02:5c:c9:
d4:e3:98:14:4b:a0:37:45:4f:89:0f:3f:7d:7f:4a:
fc:9d:97:77:6c:93:6c:d3:32:ec:e1:1a:59:af:4e:
9f:ca:dd:5b:8d:d8:88:2e:4c:11:8c:85:d2:26:ac:
80:37:a6:30:40:c6:fb:71:24:0b:41:c5:7b:90:ed:
69:ee:a4:51:a2:ab:40:8a:69:96:b6:c6:9c:24:11:
8b:f7:cf:c4:e1:30:70:4c:f4:84:a4:4e:76:37:30:
fb:93:f5:c6:ee:23:1e:79:e6:7c:e4:d2:ba:5a:6c:
29:c5:f5:98:a3:43:e5:49:3b:be:ca:6c:bd:b6:9f:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:72:F8:CE:8B:6D:B7:8D:53:52:4D:5A:25:70:E5:34:E4:D7:BA
X509v3 Authority Key Identifier:
keyid:96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/H4ly-M6LbbeNU1JNWiVw5TTk17o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:3e:65:30:01:ec:e1:19:16:f8:1a:71:c8:05:8a:49:1d:62:
59:f3:e7:3a:7d:ef:95:b8:c1:d9:9b:5d:b8:d2:15:3d:7b:63:
9b:ae:d6:44:15:f8:5c:57:06:53:da:2c:11:ce:d4:81:0b:d9:
24:4d:97:45:59:2d:30:6c:70:a0:ac:a3:c2:fa:6a:7a:1b:da:
dc:25:ad:3a:39:14:a3:0b:1f:34:52:b0:e3:f2:4a:37:87:70:
b4:d1:f1:e7:52:8c:50:f6:d8:3b:e7:6d:dc:e2:5a:f9:8c:36:
a9:c9:9d:85:57:38:2a:9b:5d:f6:12:11:3c:ae:88:20:fe:c1:
5d:3a:7d:6e:f3:b4:11:74:08:1a:9f:b9:50:fc:2f:bd:8c:71:
06:99:3e:c8:8e:22:e3:34:f4:a5:61:98:d9:03:be:fe:9f:4f:
9b:5b:74:4a:86:49:a3:bb:d0:01:62:0a:74:8c:e7:25:28:53:
5c:a0:5c:5e:5f:2a:c6:4b:1c:5c:e6:cc:00:80:8d:d8:3d:3f:
d4:79:16:4a:db:5b:9f:9e:e6:49:6e:7e:51:53:47:99:27:94:
96:b8:65:b7:98:6b:b2:60:1b:11:92:6f:be:d0:37:fd:e9:7e:
05:92:d1:d2:02:0a:0d:a6:15:4c:bf:6a:d7:9c:80:4f:7d:f5:
b1:51:f4:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH0ZfUoYnLBBpZvI1xsVFmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWZmYmVkZGZlNWRjZjc3ZjAyMDZlMGQ3M2YxNjRmMGNk
NTMyNjgwHhcNMjIwNzEyMjE1MjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjg5NzJmOGNlOGI2ZGI3OGQ1MzUyNGQ1YTI1NzBlNTM0ZTRkN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfAUNDtAT4e0KoR+dwq/q8DRcrni
NpeON+DEPfaHLEKe+wvIpPX9rCgbskVJ00UjEOOjlQqUNjJLBNHY1yZpBPFwrG30
53SUvJ/pjfgx1giY0zXE3x71KNui8kZv2W8/Q+6njyfv7RLs7MK3QSseMeogrqEY
P379DuUHPDgiA8kbXtgCXMnU45gUS6A3RU+JDz99f0r8nZd3bJNs0zLs4RpZr06f
yt1bjdiILkwRjIXSJqyAN6YwQMb7cSQLQcV7kO1p7qRRoqtAimmWtsacJBGL98/E
4TBwTPSEpE52NzD7k/XG7iMeeeZ85NK6WmwpxfWYo0PlSTu+ymy9tp9TOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+JcvjOi223jVNSTVolcOU05Ne6MB8GA1UdIwQY
MBaAFJYf++3f5dz3fwIG4Nc/Fk8M1TJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhfNzdkX2wzUGRfQWdiZzF6OFdUd3pWTW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lZDZjY2YtOTI5YS00ZTQ5LTk2ZmMt
YjVlYjAzZGJmNTU2LzEvSDRseS1NNkxiYmVOVTFKTldpVnc1VFRrMTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lZDZjY2YtOTI5YS00ZTQ5LTk2ZmMtYjVlYjAzZGJmNTU2
LzEvbGhfNzdkX2wzUGRfQWdiZzF6OFdUd3pWTW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/RMA0G
CSqGSIb3DQEBCwUAA4IBAQDuPmUwAezhGRb4GnHIBYpJHWJZ8+c6fe+VuMHZm124
0hU9e2ObrtZEFfhcVwZT2iwRztSBC9kkTZdFWS0wbHCgrKPC+mp6G9rcJa06ORSj
Cx80UrDj8ko3h3C00fHnUoxQ9tg7523c4lr5jDapyZ2FVzgqm132EhE8rogg/sFd
On1u87QRdAgan7lQ/C+9jHEGmT7IjiLjNPSlYZjZA77+n0+bW3RKhkmju9ABYgp0
jOclKFNcoFxeXyrGSxxc5swAgI3YPT/UeRZK21ufnuZJbn5RU0eZJ5SWuGW3mGuy
YBsRkm++0Df96X4FktHSAgoNphVMv2rXnIBPffWxUfQg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org