Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/N59OXK3pO1oy0Md41q4iZkkyzUo.roa
File: N59OXK3pO1oy0Md41q4iZkkyzUo.roa (raw, json)
Hash identifier: dQBJVeq3PVoZsanDI+GH8BrDfLpxLIZONEJ7jivYK40=
Subject key identifier: 37:9F:4E:5C:AD:E9:3B:5A:32:D0:C7:78:D6:AE:22:66:49:32:CD:4A
Certificate issuer: /CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Certificate serial: 0186B8CD7FA13023295814F05EC9DC4E7BB6
Authority key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/N59OXK3pO1oy0Md41q4iZkkyzUo.roa
Signing time: Mon 06 Mar 2023 21:22:00 +0000
ROA not before: Mon 06 Mar 2023 21:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 185.251.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:cd:7f:a1:30:23:29:58:14:f0:5e:c9:dc:4e:7b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Validity
Not Before: Mar 6 21:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379f4e5cade93b5a32d0c778d6ae22664932cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:f4:36:65:07:f4:eb:08:e3:bb:7a:41:68:
f2:b3:88:a2:d4:21:1c:1d:46:a8:81:07:5c:b1:7d:
27:70:68:03:2b:99:d6:95:ce:2e:fa:e0:5c:4e:8e:
b3:84:fc:5b:7c:49:83:1f:82:d8:29:38:88:fa:38:
ac:a4:cb:f7:93:89:0e:e2:30:ab:90:bb:bd:cd:96:
e9:8f:40:d6:e3:f1:e3:c0:07:ee:3a:a9:cc:9d:50:
04:bf:ad:da:a1:4c:7f:f7:1b:f8:59:0b:49:17:9b:
68:5a:16:c0:83:30:0c:46:df:60:27:20:54:96:ba:
53:6c:73:13:8c:0e:c4:b2:d0:ff:38:16:a3:7d:64:
fa:22:71:d7:c8:72:4a:29:8d:17:be:79:65:55:de:
bd:96:c7:59:48:ec:e3:89:e3:69:9f:6d:73:10:d0:
99:1c:90:b1:ca:20:43:74:22:cc:1a:57:d8:0a:35:
69:a1:c2:9f:b7:da:eb:5a:8f:3e:18:42:26:41:45:
b0:19:83:e1:9a:5d:14:5c:44:e7:b7:3c:d1:0d:dc:
74:a2:3a:6a:49:97:a9:b5:c7:20:0b:01:5e:05:8d:
35:f8:7d:2c:02:82:23:07:2b:ce:58:72:dd:01:b7:
7f:60:fe:6e:e9:56:70:f0:8b:b1:99:ec:22:1a:4d:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:4E:5C:AD:E9:3B:5A:32:D0:C7:78:D6:AE:22:66:49:32:CD:4A
X509v3 Authority Key Identifier:
keyid:B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/N59OXK3pO1oy0Md41q4iZkkyzUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
20:03:b6:fc:14:b0:1d:7d:a2:d4:85:84:76:30:e5:48:e9:c4:
08:d0:f6:22:ab:e7:2e:f3:d6:c2:d4:3e:30:b5:16:83:13:69:
de:17:50:4d:79:41:fb:a1:ad:5f:65:80:30:e1:4b:5d:2a:7f:
8a:f9:4a:1c:9e:88:8f:9c:35:92:73:ea:e1:c2:6f:e7:9e:1b:
f5:08:07:93:e3:8c:31:87:e2:aa:00:94:73:f1:7b:5a:84:19:
ea:f0:53:e1:e5:81:4a:66:d6:77:52:89:e8:20:4b:9e:93:7b:
fa:5e:da:b7:c4:ad:81:38:f1:6b:c8:89:1a:e8:d5:6d:81:d4:
fe:1f:d0:57:2c:80:83:f4:3f:fc:c0:06:6a:56:c2:e1:8b:fc:
97:08:26:f8:0e:fd:6a:0b:cd:b9:0d:2f:1f:ae:2b:57:70:c4:
9e:1b:ad:74:ff:a1:e4:75:d1:0d:ab:7c:aa:90:62:dc:05:68:
3d:c0:23:27:c7:11:65:76:17:ff:f2:87:fa:89:87:4b:97:e3:
0c:85:34:0d:85:0e:6d:ef:43:3d:15:3e:5d:3a:3b:0c:fa:d3:
1f:00:40:77:2e:b4:fc:71:81:ea:97:12:3c:a2:14:8d:47:65:
c0:92:79:49:0d:d1:25:e4:ad:bd:0f:97:59:7e:0d:89:47:72:
dc:b0:f8:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa4zX+hMCMpWBTwXsncTnu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2N2RkNmY1YmNlOThmN2JjMzE2OWIxZGI5ZmEwZTViOWNl
ZjJlYmIwHhcNMjMwMzA2MjEyMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzlmNGU1Y2FkZTkzYjVhMzJkMGM3NzhkNmFlMjI2NjQ5MzJjZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEv0NmUH9OsI47t6QWjys4ii1CEc
HUaogQdcsX0ncGgDK5nWlc4u+uBcTo6zhPxbfEmDH4LYKTiI+jispMv3k4kO4jCr
kLu9zZbpj0DW4/HjwAfuOqnMnVAEv63aoUx/9xv4WQtJF5toWhbAgzAMRt9gJyBU
lrpTbHMTjA7EstD/OBajfWT6InHXyHJKKY0XvnllVd69lsdZSOzjieNpn21zENCZ
HJCxyiBDdCLMGlfYCjVpocKft9rrWo8+GEImQUWwGYPhml0UXETntzzRDdx0ojpq
SZeptccgCwFeBY01+H0sAoIjByvOWHLdAbd/YP5u6VZw8IuxmewiGk0KzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDefTlyt6TtaMtDHeNauImZJMs1KMB8GA1UdIwQY
MBaAFLZ91vW86Y97wxabHbn6Dluc7y67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG4zVzlienBqM3ZERnBzZHVmb09XNXp2THJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85NDM1ODUtYzEyNC00YmFjLTg4OGEt
M2U1OWNmMWFlYzQ0LzEvTjU5T1hLM3BPMW95ME1kNDFxNGlaa2t5elVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85NDM1ODUtYzEyNC00YmFjLTg4OGEtM2U1OWNmMWFlYzQ0
LzEvdG4zVzlienBqM3ZERnBzZHVmb09XNXp2THJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufsXMA0G
CSqGSIb3DQEBCwUAA4IBAQAgA7b8FLAdfaLUhYR2MOVI6cQI0PYiq+cu89bC1D4w
tRaDE2neF1BNeUH7oa1fZYAw4UtdKn+K+UocnoiPnDWSc+rhwm/nnhv1CAeT44wx
h+KqAJRz8XtahBnq8FPh5YFKZtZ3UonoIEuek3v6Xtq3xK2BOPFryIka6NVtgdT+
H9BXLICD9D/8wAZqVsLhi/yXCCb4Dv1qC825DS8fritXcMSeG610/6HkddENq3yq
kGLcBWg9wCMnxxFldhf/8of6iYdLl+MMhTQNhQ5t70M9FT5dOjsM+tMfAEB3LrT8
cYHqlxI8ohSNR2XAknlJDdEl5K29D5dZfg2JR3LcsPjA
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:04 2025 by rpki-client