Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/1F_9mbg_0KEzN6AZrpp051LZna4.roa
File: 1F_9mbg_0KEzN6AZrpp051LZna4.roa (raw, json)
Hash identifier: behWCRbSugpDblfDfG5YSP/r5fDHBiZTO4yzL/XljmQ=
Subject key identifier: D4:5F:FD:99:B8:3F:D0:A1:33:37:A0:19:AE:9A:74:E7:52:D9:9D:AE
Certificate issuer: /CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Certificate serial: 01856E8B4AF79A9278EFF88964DCDB9B2864
Authority key identifier: 75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/1F_9mbg_0KEzN6AZrpp051LZna4.roa
Signing time: Sun 01 Jan 2023 18:15:00 +0000
ROA not before: Sun 01 Jan 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12778
IP address blocks: 212.72.96.0/19 maxlen: 24
77.234.128.0/19 maxlen: 24
2a02:d68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4a:f7:9a:92:78:ef:f8:89:64:dc:db:9b:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Validity
Not Before: Jan 1 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45ffd99b83fd0a13337a019ae9a74e752d99dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:ed:15:9f:f6:a1:2e:1b:9d:7d:c9:7a:05:
8a:3c:9a:0d:3d:36:e5:d9:66:5f:13:28:80:a1:6c:
c2:4e:7c:4d:54:b2:49:04:71:0b:d3:d2:a9:f6:16:
80:c9:0d:5b:ef:ef:71:9c:a6:f8:f1:55:28:5b:87:
84:f1:b1:80:d9:1f:c1:db:5e:40:77:74:26:13:74:
79:e7:51:a2:a5:8b:2c:d2:1f:86:4b:cd:4e:1d:16:
48:03:da:db:3f:f1:fc:7d:a6:7b:f2:e7:c8:28:0f:
fa:04:3b:8c:c4:0f:f0:46:d5:3a:fb:52:13:23:bc:
7e:5c:de:7d:57:87:94:18:e7:c8:e8:1e:d7:53:e2:
5b:08:93:b6:19:16:80:bc:03:14:6c:9d:6f:fc:28:
c9:1b:2f:04:7d:8a:e2:ab:11:b1:66:d2:f0:57:60:
0e:9c:33:8c:18:c1:57:b1:a0:69:6b:db:e5:94:c2:
9c:6d:f8:e6:16:3b:ba:c9:e2:da:c3:7c:bf:68:23:
67:46:9c:92:60:d1:4a:9a:eb:52:52:04:f0:54:39:
0e:aa:ac:82:2d:73:f1:62:e5:33:3d:bc:96:ef:0b:
2d:bb:42:d8:31:ed:01:95:f8:d1:4f:15:a4:f1:a2:
f7:ef:24:52:9b:68:a2:f5:0c:0f:d0:d4:b9:7f:e0:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:FD:99:B8:3F:D0:A1:33:37:A0:19:AE:9A:74:E7:52:D9:9D:AE
X509v3 Authority Key Identifier:
keyid:75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/1F_9mbg_0KEzN6AZrpp051LZna4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.128.0/19
212.72.96.0/19
IPv6:
2a02:d68::/32
Signature Algorithm: sha256WithRSAEncryption
15:6d:6c:d8:89:3b:51:52:4f:82:67:3e:8a:65:7f:21:f8:c0:
46:47:45:61:22:82:0f:cd:33:79:88:eb:68:5c:3b:bc:7e:8a:
5d:ac:5b:9a:72:c3:8b:bf:37:5d:5a:9b:0b:2c:62:fa:ce:51:
bb:0c:a7:79:ea:16:5b:1b:4b:d0:33:83:43:36:7e:65:8d:7e:
94:00:b6:6f:9f:e7:1d:b5:d4:8c:d9:01:d1:71:b5:ed:e6:79:
9e:e6:c5:1a:bd:a1:2b:5d:42:b0:0f:cf:48:fa:f0:44:94:5f:
77:03:18:c8:34:77:46:cd:e8:51:fe:ca:58:86:0e:d0:dd:40:
c0:92:36:e6:f7:ec:b1:d9:1b:53:50:7c:66:42:d0:47:29:c7:
c4:e9:9f:3b:ff:89:81:87:3f:e3:c0:aa:18:d5:0e:d2:38:c6:
5f:a4:41:45:b3:01:dc:2a:8a:23:6f:84:3f:4d:6f:92:3f:21:
ed:88:25:d2:e2:1e:34:1d:74:65:e9:d5:be:6a:36:89:2b:39:
30:a5:63:cd:2c:86:01:91:33:2d:96:48:1d:e9:cd:dd:6c:dd:
53:f0:20:2a:24:ab:de:c9:20:c9:63:f0:fe:6f:e8:e1:7e:49:
68:00:31:12:42:96:00:c0:83:1e:44:a7:08:23:e9:a8:fd:98:
b6:e1:c3:c7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVui0r3mpJ47/iJZNzbmyhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjgyODQ3ZjgzZGI4MjhlN2YwNGMyY2I1Y2ViNmQ4YzQy
MzdmYWIwHhcNMjMwMTAxMTgxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDVmZmQ5OWI4M2ZkMGExMzMzN2EwMTlhZTlhNzRlNzUyZDk5ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOjtFZ/2oS4bnX3JegWKPJoNPTbl
2WZfEyiAoWzCTnxNVLJJBHEL09Kp9haAyQ1b7+9xnKb48VUoW4eE8bGA2R/B215A
d3QmE3R551GipYss0h+GS81OHRZIA9rbP/H8faZ78ufIKA/6BDuMxA/wRtU6+1IT
I7x+XN59V4eUGOfI6B7XU+JbCJO2GRaAvAMUbJ1v/CjJGy8EfYriqxGxZtLwV2AO
nDOMGMFXsaBpa9vllMKcbfjmFju6yeLaw3y/aCNnRpySYNFKmutSUgTwVDkOqqyC
LXPxYuUzPbyW7wstu0LYMe0BlfjRTxWk8aL37yRSm2ii9QwP0NS5f+A+TwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNRf/Zm4P9ChMzegGa6adOdS2Z2uMB8GA1UdIwQY
MBaAFHVoKEf4Pbgo5/BMLLXOttjEI3+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMt
NWNjNzQxMWM2YWRhLzEvMUZfOW1iZ18wS0V6TjZBWnJwcDA1MUxabmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMtNWNjNzQxMWM2YWRh
LzEvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTeqAAwQF
1EhgMA0EAgACMAcDBQAqAg1oMA0GCSqGSIb3DQEBCwUAA4IBAQAVbWzYiTtRUk+C
Zz6KZX8h+MBGR0VhIoIPzTN5iOtoXDu8fopdrFuacsOLvzddWpsLLGL6zlG7DKd5
6hZbG0vQM4NDNn5ljX6UALZvn+cdtdSM2QHRcbXt5nme5sUavaErXUKwD89I+vBE
lF93AxjINHdGzehR/spYhg7Q3UDAkjbm9+yx2RtTUHxmQtBHKcfE6Z87/4mBhz/j
wKoY1Q7SOMZfpEFFswHcKoojb4Q/TW+SPyHtiCXS4h40HXRl6dW+ajaJKzkwpWPN
LIYBkTMtlkgd6c3dbN1T8CAqJKveySDJY/D+b+jhfkloADESQpYAwIMeRKcII+mo
/Zi24cPH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org