Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/xRoQpA_kUGHh09lBkwuUDW2Bn4g.roa
File: xRoQpA_kUGHh09lBkwuUDW2Bn4g.roa (raw, json)
Hash identifier: mZ0r/kyTbatxLFQAJrut48iJbP+QKg6v23fXADhu7R8=
Subject key identifier: C5:1A:10:A4:0F:E4:50:61:E1:D3:D9:41:93:0B:94:0D:6D:81:9F:88
Certificate issuer: /CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Certificate serial: 018CC26D0B286538B04E9E198E26B5778219
Authority key identifier: 9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/xRoQpA_kUGHh09lBkwuUDW2Bn4g.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44378
IP address blocks: 193.19.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0b:28:65:38:b0:4e:9e:19:8e:26:b5:77:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1902889bdffef9a3b2acd5b273928e163fb1c2
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c51a10a40fe45061e1d3d941930b940d6d819f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:87:3a:2c:56:09:0f:52:79:55:f6:59:f8:
a7:97:34:69:df:15:c8:8e:0a:38:ea:26:a9:47:13:
3b:43:0b:35:01:c7:f9:a3:44:0d:82:7e:9b:57:72:
54:a9:6f:0a:56:e9:e6:3b:fa:1c:45:cf:10:f4:dd:
3b:46:25:27:fd:99:d8:ac:5b:98:d7:4a:b6:97:2c:
69:4a:98:e5:0b:9b:90:97:98:76:2a:6a:92:1b:55:
4e:c1:c8:7e:b4:e4:95:7e:bf:d1:33:09:ed:97:7c:
85:c0:53:ee:54:48:b1:5b:51:9c:36:1e:2a:d5:2c:
8b:22:55:04:41:52:60:7c:14:a2:0e:f6:82:66:a9:
7e:7b:3b:44:e3:97:2b:df:54:12:d4:47:c3:75:cb:
20:3f:d7:6a:c6:04:39:54:e8:05:2e:0e:69:65:7c:
83:23:26:33:3d:e3:83:a0:d6:9f:6b:40:f9:6e:f0:
e4:1d:69:54:23:a3:d0:78:df:ea:4f:b0:48:ee:24:
d8:b5:8a:22:bd:ee:81:66:f0:d6:8f:68:bb:22:bc:
e3:a1:b4:96:82:9e:da:19:81:6b:24:20:32:e6:af:
b0:43:ca:ce:fe:0c:cc:0b:fb:3a:81:9d:39:b3:b1:
30:38:68:9a:b1:ff:49:b6:d0:89:e1:75:76:84:f4:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1A:10:A4:0F:E4:50:61:E1:D3:D9:41:93:0B:94:0D:6D:81:9F:88
X509v3 Authority Key Identifier:
keyid:9F:19:02:88:9B:DF:FE:F9:A3:B2:AC:D5:B2:73:92:8E:16:3F:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxkCiJvf_vmjsqzVsnOSjhY_scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/xRoQpA_kUGHh09lBkwuUDW2Bn4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/23131b-c203-4f45-ad7b-0e94a889ffda/1/nxkCiJvf_vmjsqzVsnOSjhY_scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:6a:c6:ee:71:7f:88:29:ad:77:e1:33:a5:e2:e9:25:2b:
74:ec:10:04:80:25:cc:fb:02:ff:fb:d1:13:9f:95:9a:12:e4:
e2:4d:21:fd:58:cb:5f:7f:16:e8:a8:0c:ce:4d:ed:7c:b0:bc:
ba:5b:11:6d:1a:21:bc:84:db:f3:3c:ca:ec:ee:bf:80:05:bb:
be:2c:79:e8:1c:e2:27:1a:0f:84:b3:fa:71:94:78:a0:95:1e:
99:85:a7:07:a5:81:a0:a3:55:43:1e:fa:e5:23:0a:4f:1f:8e:
3d:63:42:54:dc:03:14:a9:cc:32:ba:dc:f7:86:9b:93:62:59:
0a:f1:7c:4e:f6:48:4c:2c:dd:45:be:50:4f:0b:b4:ff:b9:3e:
a1:6b:0c:b3:7f:44:e8:31:b8:8e:52:9f:7d:9c:1b:a3:65:e9:
2d:f7:a7:dc:42:52:1c:00:23:5d:23:fb:ab:e4:b6:62:fe:3a:
d0:07:89:4e:c7:df:dc:17:dd:47:79:f9:12:99:99:1d:37:fa:
17:9f:45:52:93:42:b3:8c:21:0d:fc:6e:a6:cc:c0:8c:ca:51:
22:2b:2b:8a:29:5b:ba:5f:b9:09:1c:d2:68:29:af:22:57:be:
7f:0a:ef:ab:9c:bd:a4:7b:94:3e:a4:44:b0:4f:eb:98:8e:f0:
ce:0b:2b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbQsoZTiwTp4Zjia1d4IZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMTkwMjg4OWJkZmZlZjlhM2IyYWNkNWIyNzM5MjhlMTYz
ZmIxYzIwHhcNMjQwMTAxMDAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTFhMTBhNDBmZTQ1MDYxZTFkM2Q5NDE5MzBiOTQwZDZkODE5Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5mHOixWCQ9SeVX2WfinlzRp3xXI
jgo46iapRxM7Qws1Acf5o0QNgn6bV3JUqW8KVunmO/ocRc8Q9N07RiUn/ZnYrFuY
10q2lyxpSpjlC5uQl5h2KmqSG1VOwch+tOSVfr/RMwntl3yFwFPuVEixW1GcNh4q
1SyLIlUEQVJgfBSiDvaCZql+eztE45cr31QS1EfDdcsgP9dqxgQ5VOgFLg5pZXyD
IyYzPeODoNafa0D5bvDkHWlUI6PQeN/qT7BI7iTYtYoive6BZvDWj2i7IrzjobSW
gp7aGYFrJCAy5q+wQ8rO/gzMC/s6gZ05s7EwOGiasf9JttCJ4XV2hPT4xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUaEKQP5FBh4dPZQZMLlA1tgZ+IMB8GA1UdIwQY
MBaAFJ8ZAoib3/75o7Ks1bJzko4WP7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnhrQ2lKdmZfdm1qc3F6VnNuT1NqaFlfc2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yMzEzMWItYzIwMy00ZjQ1LWFkN2It
MGU5NGE4ODlmZmRhLzEveFJvUXBBX2tVR0hoMDlsQmt3dVVEVzJCbjRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yMzEzMWItYzIwMy00ZjQ1LWFkN2ItMGU5NGE4ODlmZmRh
LzEvbnhrQ2lKdmZfdm1qc3F6VnNuT1NqaFlfc2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRO9MA0G
CSqGSIb3DQEBCwUAA4IBAQAasWrG7nF/iCmtd+EzpeLpJSt07BAEgCXM+wL/+9ET
n5WaEuTiTSH9WMtffxboqAzOTe18sLy6WxFtGiG8hNvzPMrs7r+ABbu+LHnoHOIn
Gg+Es/pxlHiglR6ZhacHpYGgo1VDHvrlIwpPH449Y0JU3AMUqcwyutz3hpuTYlkK
8XxO9khMLN1FvlBPC7T/uT6hawyzf0ToMbiOUp99nBujZekt96fcQlIcACNdI/ur
5LZi/jrQB4lOx9/cF91HefkSmZkdN/oXn0VSk0KzjCEN/G6mzMCMylEiKyuKKVu6
X7kJHNJoKa8iV75/Cu+rnL2ke5Q+pESwT+uYjvDOCyth
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:47 2024 by rpki-client on console-fra.rpki-client.org