Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/Es5HpjKxiApaxElCzckQe8WPvf4.roa
File: Es5HpjKxiApaxElCzckQe8WPvf4.roa (raw, json)
Hash identifier: fbnYBr+5IvG5TIWhcfqUdMjIw3Dl8NR+g9Eyr4u9BVg=
Subject key identifier: 12:CE:47:A6:32:B1:88:0A:5A:C4:49:42:CD:C9:10:7B:C5:8F:BD:FE
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 052EBFE7
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/Es5HpjKxiApaxElCzckQe8WPvf4.roa
Signing time: Sat 01 Jan 2022 16:04:53 +0000
ROA not before: Sat 01 Jan 2022 16:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34907
IP address blocks: 193.134.253.0/24 maxlen: 24
2a07:9240::/29 maxlen: 29
2a07:1340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86949863 (0x52ebfe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: Jan 1 16:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12ce47a632b1880a5ac44942cdc9107bc58fbdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:31:28:59:db:43:f9:13:08:50:dc:fe:e0:
9c:aa:1a:89:13:2f:7c:bf:3c:04:34:0f:e0:da:f5:
65:19:0e:c3:2b:08:75:16:40:13:57:49:68:a5:d9:
d6:46:87:42:c8:fe:15:57:d9:fd:f4:f7:c1:06:88:
1d:6b:f8:93:e3:b4:f8:72:c9:61:cf:2c:28:22:79:
5b:6b:80:9e:bc:4b:c7:20:f1:83:e5:f3:58:89:8e:
4a:bd:0a:8b:09:92:72:d1:a2:5a:6a:3b:c9:68:05:
2c:92:74:28:e6:db:ec:e3:98:d5:7c:13:e8:41:01:
38:85:d5:15:4d:9b:e7:5d:aa:01:01:ac:71:ad:b6:
97:c5:54:96:b3:c9:d4:ee:73:49:a1:1b:44:3c:40:
db:ef:0b:7e:b4:bb:f9:7c:8c:35:25:6c:4c:c7:b0:
18:55:1d:cb:1c:c0:fe:9e:fa:04:58:ed:91:99:5d:
40:7b:c5:98:92:3e:e7:3b:68:ab:ce:35:92:d7:28:
28:3d:f0:4f:08:9c:af:2f:12:59:51:15:b9:78:72:
53:36:91:db:0b:35:12:e9:1f:b0:a2:9d:bb:ef:c8:
d7:42:22:fe:53:f3:bd:be:1d:c4:93:a1:01:38:84:
03:6f:89:fc:57:e1:7d:59:4f:fd:f3:bc:47:8c:b7:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:47:A6:32:B1:88:0A:5A:C4:49:42:CD:C9:10:7B:C5:8F:BD:FE
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/Es5HpjKxiApaxElCzckQe8WPvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
IPv6:
2a07:1340::/29
2a07:9240::/29
Signature Algorithm: sha256WithRSAEncryption
8b:3f:32:53:53:06:c5:b1:03:d6:33:cb:fc:70:3e:6c:6e:76:
a9:52:df:78:4a:8c:96:a9:ae:b9:4c:e8:c0:a3:14:ff:b4:82:
ef:98:73:ff:dd:5f:d2:7c:6c:20:8b:fc:35:30:56:fe:7b:a4:
21:6f:a7:e2:f5:37:fe:6a:df:af:d3:57:bf:52:1e:37:07:c4:
6a:b5:7a:a8:84:15:94:e5:12:f3:ec:67:3f:76:5d:8e:84:49:
f5:95:64:df:72:0a:50:10:d5:0d:8f:af:b7:47:f5:ba:34:b5:
11:df:b9:f0:27:c5:1d:7a:a9:50:12:7a:52:a7:14:cf:4c:16:
58:7e:5f:ca:1c:04:fb:4a:5d:df:f7:da:e3:96:c4:01:0f:7e:
9f:9c:8c:52:cd:b4:8d:4a:8e:4a:d7:71:8f:68:2b:b2:15:5e:
67:68:fe:f3:c0:fd:5a:46:6d:27:f6:3d:16:85:71:75:a8:99:
4f:d9:2f:82:40:58:61:4d:b2:d0:79:da:ad:f7:74:c3:e9:3d:
d9:07:4c:58:07:6f:45:e1:93:a3:54:3b:dc:bf:30:bc:33:89:
18:38:d6:94:2f:ef:1e:42:2f:29:ea:8b:79:f8:95:a7:a6:4f:
6a:2b:ac:95:2d:ff:72:33:be:16:e4:b1:60:fa:4e:c8:b3:76:
79:77:3b:34
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEBS6/5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NGMxN2MzZjQ1ZmM1OWVlNjY3NWYxMDkxNGVjM2E5ZTY4YjcyMzhmMB4XDTIyMDEw
MTE2MDQ1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJjZTQ3YTYzMmIx
ODgwYTVhYzQ0OTQyY2RjOTEwN2JjNThmYmRmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvdMShZ20P5EwhQ3P7gnKoaiRMvfL88BDQP4Nr1ZRkOwysI
dRZAE1dJaKXZ1kaHQsj+FVfZ/fT3wQaIHWv4k+O0+HLJYc8sKCJ5W2uAnrxLxyDx
g+XzWImOSr0KiwmSctGiWmo7yWgFLJJ0KObb7OOY1XwT6EEBOIXVFU2b512qAQGs
ca22l8VUlrPJ1O5zSaEbRDxA2+8LfrS7+XyMNSVsTMewGFUdyxzA/p76BFjtkZld
QHvFmJI+5ztoq841ktcoKD3wTwicry8SWVEVuXhyUzaR2ws1EukfsKKdu+/I10Ii
/lPzvb4dxJOhATiEA2+J/FfhfVlP/fO8R4y3U30CAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBQSzkemMrGIClrESULNyRB7xY+9/jAfBgNVHSMEGDAWgBR0wXw/RfxZ7mZ1
8QkU7DqeaLcjjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RNRjhQMFg4V2U1bWRmRUpGT3c2bm1pM0k0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWIvYzJjZmFmLWIxYWUtNDZkOC05MmE3LWQwMTc0YTcxMzhhNC8x
L0VzNUhwakt4aUFwYXhFbEN6Y2tRZThXUHZmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIv
YzJjZmFmLWIxYWUtNDZkOC05MmE3LWQwMTc0YTcxMzhhNC8xL2RNRjhQMFg4V2U1
bWRmRUpGT3c2bm1pM0k0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwDAQCAAEwBgMEAMGG/TAUBAIAAjAOAwUDKgcTQAMF
AyoHkkAwDQYJKoZIhvcNAQELBQADggEBAIs/MlNTBsWxA9Yzy/xwPmxudqlS33hK
jJaprrlM6MCjFP+0gu+Yc//dX9J8bCCL/DUwVv57pCFvp+L1N/5q36/TV79SHjcH
xGq1eqiEFZTlEvPsZz92XY6ESfWVZN9yClAQ1Q2Pr7dH9bo0tRHfufAnxR16qVAS
elKnFM9MFlh+X8ocBPtKXd/32uOWxAEPfp+cjFLNtI1KjkrXcY9oK7IVXmdo/vPA
/VpGbSf2PRaFcXWomU/ZL4JAWGFNstB52q33dMPpPdkHTFgHb0Xhk6NUO9y/MLwz
iRg41pQv7x5CLynqi3n4laemT2orrJUt/3IzvhbksWD6Tsizdnl3OzQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org