Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/biE60XlKsRdnMkY1lTV0mYkmDaw.roa
File: biE60XlKsRdnMkY1lTV0mYkmDaw.roa (raw, json)
Hash identifier: C63Q0slLOEY4wGLYSIZ8Os/TJpQcBjv/DCjlwmpmH44=
Subject key identifier: 6E:21:3A:D1:79:4A:B1:17:67:32:46:35:95:35:74:99:89:26:0D:AC
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D19E01E9A83EDB67DB53CFEEED91E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/biE60XlKsRdnMkY1lTV0mYkmDaw.roa
Signing time: Sun 01 Jan 2023 13:54:50 +0000
ROA not before: Sun 01 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 82.118.29.0/24 maxlen: 24
82.118.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:19:e0:1e:9a:83:ed:b6:7d:b5:3c:fe:ee:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e213ad1794ab117673246359535749989260dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:23:25:3b:3d:85:bb:5c:a0:c1:b6:7a:f5:
a4:12:78:d4:37:07:e3:08:b6:a8:49:67:f6:61:62:
44:dd:a0:1a:47:8f:35:81:41:e9:9a:f6:fa:67:67:
97:8f:29:ec:58:5e:a4:13:6d:d2:c9:58:98:b7:21:
7a:b5:05:9f:03:a7:75:7e:e6:33:77:76:3f:98:6b:
5c:e4:a0:dd:f2:03:11:cb:48:e1:f3:6c:db:d7:5f:
07:ed:c1:c6:19:e3:3a:4b:81:b2:3a:8c:4a:b6:d4:
69:07:d0:c7:b1:b0:1f:22:ad:e9:35:fe:b9:53:e0:
b8:6e:82:7b:31:ff:3c:e8:11:5a:60:f6:26:12:d3:
e3:47:1e:5b:ca:21:d3:03:c4:72:97:40:ad:12:b6:
ea:fa:da:ca:61:11:80:29:b0:8e:f3:b6:5b:26:bf:
24:96:ef:6f:87:7b:d7:cf:71:a0:b9:3a:13:d2:94:
ff:c3:31:f3:ff:aa:b5:1c:53:b5:f4:21:be:9d:27:
ff:01:65:5b:86:d0:80:f2:72:b1:c8:87:cd:bd:b9:
02:a6:73:cc:22:04:de:7a:72:02:d3:55:5f:af:b2:
38:7d:d6:cd:4f:4c:52:a1:2f:fe:24:bb:9c:cc:e5:
38:00:84:f4:33:28:f6:03:bb:fb:fb:da:ee:be:d3:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:3A:D1:79:4A:B1:17:67:32:46:35:95:35:74:99:89:26:0D:AC
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/biE60XlKsRdnMkY1lTV0mYkmDaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.29.0-82.118.30.255
Signature Algorithm: sha256WithRSAEncryption
99:85:65:ff:92:36:16:a0:6e:28:5d:54:c5:98:77:ba:71:99:
be:99:c5:6b:de:ef:e9:ba:5d:c6:f8:6a:5e:64:a1:cd:5e:72:
1a:c3:d4:d8:b9:4e:6a:a4:1b:b5:74:ab:7e:d7:42:e0:1a:21:
31:30:d8:e5:33:73:3a:19:22:f8:ac:5b:7f:4d:38:48:54:c8:
e2:04:b9:42:14:2a:79:07:9d:07:ba:7b:47:4d:f4:45:4f:55:
84:f9:0c:7c:bf:a1:b1:b1:b0:9f:f3:4c:5d:19:39:b8:ea:b2:
94:61:de:c5:1f:07:09:ed:9f:b6:77:fb:63:c7:b7:de:e7:7e:
12:a1:3a:eb:b0:0f:59:2c:b7:02:2a:99:08:a2:c4:d8:cb:88:
2d:a8:93:73:59:3f:54:fc:90:01:1e:dd:f4:80:e3:97:f0:93:
99:46:5b:a4:36:d9:d4:fe:e9:d3:18:74:c4:e3:0f:10:ab:26:
c8:d8:33:62:2d:a1:3e:19:24:82:ac:3d:51:d9:df:58:b9:e0:
12:41:f0:ca:92:25:07:82:17:5d:6e:31:8d:7c:c3:6f:84:17:
11:dc:b6:de:64:f1:2f:be:2c:14:a9:87:71:17:17:11:da:85:
0a:3b:d4:4d:e2:91:86:3f:10:1b:f1:b8:c7:c9:14:8c:71:b4:
2d:76:ac:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtnRngHpqD7bZ9tTz+7tkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTIxM2FkMTc5NGFiMTE3NjczMjQ2MzU5NTM1NzQ5OTg5MjYwZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL4jJTs9hbtcoMG2evWkEnjUNwfj
CLaoSWf2YWJE3aAaR481gUHpmvb6Z2eXjynsWF6kE23SyViYtyF6tQWfA6d1fuYz
d3Y/mGtc5KDd8gMRy0jh82zb118H7cHGGeM6S4GyOoxKttRpB9DHsbAfIq3pNf65
U+C4boJ7Mf886BFaYPYmEtPjRx5byiHTA8Ryl0CtErbq+trKYRGAKbCO87ZbJr8k
lu9vh3vXz3GguToT0pT/wzHz/6q1HFO19CG+nSf/AWVbhtCA8nKxyIfNvbkCpnPM
IgTeenIC01Vfr7I4fdbNT0xSoS/+JLuczOU4AIT0Myj2A7v7+9ruvtNYEQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG4hOtF5SrEXZzJGNZU1dJmJJg2sMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvYmlFNjBYbEtzUmRuTWtZMWxUVjBtWWttRGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABSdh0D
BABSdh4wDQYJKoZIhvcNAQELBQADggEBAJmFZf+SNhagbihdVMWYd7pxmb6ZxWve
7+m6Xcb4al5koc1echrD1Ni5TmqkG7V0q37XQuAaITEw2OUzczoZIvisW39NOEhU
yOIEuUIUKnkHnQe6e0dN9EVPVYT5DHy/obGxsJ/zTF0ZObjqspRh3sUfBwntn7Z3
+2PHt97nfhKhOuuwD1kstwIqmQiixNjLiC2ok3NZP1T8kAEe3fSA45fwk5lGW6Q2
2dT+6dMYdMTjDxCrJsjYM2ItoT4ZJIKsPVHZ31i54BJB8MqSJQeCF11uMY18w2+E
FxHctt5k8S++LBSph3EXFxHahQo71E3ikYY/EBvxuMfJFIxxtC12rLQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org