Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/c3hY9BsSAyOYRm2slCKeQk06qi0.roa
File: c3hY9BsSAyOYRm2slCKeQk06qi0.roa (raw, json)
Hash identifier: kZtcgZ7J6NcIHlrMSO2W253TKW6sbpH5Q7+nPqZRGn8=
Subject key identifier: 73:78:58:F4:1B:12:03:23:98:46:6D:AC:94:22:9E:42:4D:3A:AA:2D
Certificate issuer: /CN=9f970ea5f8892eb627ec6c897f08721db7b3e8f9
Certificate serial: 0382C3A5
Authority key identifier: 9F:97:0E:A5:F8:89:2E:B6:27:EC:6C:89:7F:08:72:1D:B7:B3:E8:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cOpfiJLrYn7GyJfwhyHbez6Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/c3hY9BsSAyOYRm2slCKeQk06qi0.roa
Signing time: Sat 01 Jan 2022 06:54:51 +0000
ROA not before: Sat 01 Jan 2022 06:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 185.221.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58901413 (0x382c3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f970ea5f8892eb627ec6c897f08721db7b3e8f9
Validity
Not Before: Jan 1 06:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=737858f41b12032398466dac94229e424d3aaa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:4c:91:9b:50:17:11:be:d0:70:ec:b7:ba:
4f:17:c3:a3:0d:cb:49:81:f0:75:8a:c7:23:9f:a0:
a4:df:32:80:80:d8:c7:84:10:e3:8e:8c:a0:12:69:
87:0c:21:c2:98:8c:5f:97:9a:cb:eb:21:c7:c3:52:
1d:51:52:5e:4d:fc:b5:c0:fc:3a:3b:18:2f:a5:ab:
59:d9:1e:63:82:f1:df:3e:b5:a3:a7:25:70:e8:b6:
c5:0f:77:04:ad:5e:22:89:92:dc:67:8e:d6:06:c1:
db:b4:80:06:ee:4c:62:af:75:65:05:e4:59:57:11:
ba:15:e1:b9:b0:d6:00:b6:13:5b:88:eb:88:0c:54:
fa:07:b5:32:fb:61:be:a7:7d:98:bb:02:be:45:2a:
fb:3b:68:90:88:fc:1a:f1:75:77:37:b3:8a:14:7f:
34:98:aa:80:63:f0:3a:e1:ec:52:aa:6b:82:71:52:
d5:91:7c:b0:fa:2e:06:ee:2a:ae:e1:9f:9a:9b:20:
4a:4a:d8:e0:27:4b:03:91:89:09:7e:05:38:f0:71:
42:b4:46:e7:f0:76:58:87:85:ae:5f:54:fb:d0:10:
67:b9:8e:68:1a:6f:18:de:a1:e3:c9:71:47:09:33:
25:23:d9:74:d4:11:56:2b:b7:c1:82:91:56:30:64:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:58:F4:1B:12:03:23:98:46:6D:AC:94:22:9E:42:4D:3A:AA:2D
X509v3 Authority Key Identifier:
keyid:9F:97:0E:A5:F8:89:2E:B6:27:EC:6C:89:7F:08:72:1D:B7:B3:E8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cOpfiJLrYn7GyJfwhyHbez6Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/c3hY9BsSAyOYRm2slCKeQk06qi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/n5cOpfiJLrYn7GyJfwhyHbez6Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9e:20:d9:46:a9:20:d0:d7:8f:77:1f:e0:c5:17:7d:80:ff:
20:c4:8d:54:1a:7a:8c:fa:46:ec:8d:33:12:a0:1c:7e:a6:31:
fe:a7:50:63:16:6c:94:a9:42:60:c7:15:ec:da:cf:a8:68:b5:
1e:66:f3:23:af:22:c0:b2:bd:b0:d7:ef:b6:d5:ed:82:8f:55:
c1:55:14:88:19:8e:84:e1:eb:f1:5e:1f:d7:df:90:b4:f3:fe:
db:ee:e6:0f:28:5f:fe:91:69:1f:81:39:0b:be:90:a3:6d:c4:
be:6a:e5:66:81:cf:92:c4:70:85:0b:ef:6c:9b:f2:51:6d:52:
fa:11:b7:6f:f6:83:32:6c:3d:2f:40:d8:95:5c:6b:7b:21:90:
73:af:99:db:ee:cf:1a:10:24:dd:0d:d1:3d:88:bc:26:c7:66:
9a:fd:47:76:e7:1a:a3:81:0b:27:35:1e:6a:52:d8:71:b4:fb:
de:f7:9b:dc:d7:b1:bc:5b:6a:e0:f3:35:75:be:92:75:18:dc:
b7:f9:7a:f7:cd:ac:90:f8:62:c6:20:5c:df:c4:45:b0:89:1d:
0f:47:23:bc:c8:2a:ab:21:a5:da:03:a7:ff:74:b7:52:07:89:
1d:15:a2:65:be:97:9c:6f:ad:ea:e9:39:28:40:82:e8:f5:82:
14:74:36:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA4LDpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Zjk3MGVhNWY4ODkyZWI2MjdlYzZjODk3ZjA4NzIxZGI3YjNlOGY5MB4XDTIyMDEw
MTA2NTQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM3ODU4ZjQxYjEy
MDMyMzk4NDY2ZGFjOTQyMjllNDI0ZDNhYWEyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWoTJGbUBcRvtBw7Le6TxfDow3LSYHwdYrHI5+gpN8ygIDY
x4QQ446MoBJphwwhwpiMX5eay+shx8NSHVFSXk38tcD8OjsYL6WrWdkeY4Lx3z61
o6clcOi2xQ93BK1eIomS3GeO1gbB27SABu5MYq91ZQXkWVcRuhXhubDWALYTW4jr
iAxU+ge1Mvthvqd9mLsCvkUq+ztokIj8GvF1dzezihR/NJiqgGPwOuHsUqprgnFS
1ZF8sPouBu4qruGfmpsgSkrY4CdLA5GJCX4FOPBxQrRG5/B2WIeFrl9U+9AQZ7mO
aBpvGN6h48lxRwkzJSPZdNQRViu3wYKRVjBkRMUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRzeFj0GxIDI5hGbayUIp5CTTqqLTAfBgNVHSMEGDAWgBSflw6l+Ikutifs
bIl/CHIdt7Po+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L241Y09wZmlKTHJZbjdHeUpmd2h5SGJlejZQay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWQvMGU3MjAwLTgxM2EtNGYyMS1iY2M0LWI3ZDM4NDliYjI2Zi8x
L2MzaFk5QnNTQXlPWVJtMnNsQ0tlUWswNnFpMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQv
MGU3MjAwLTgxM2EtNGYyMS1iY2M0LWI3ZDM4NDliYjI2Zi8xL241Y09wZmlKTHJZ
bjdHeUpmd2h5SGJlejZQay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnd7TANBgkqhkiG9w0BAQsFAAOC
AQEAbJ4g2UapINDXj3cf4MUXfYD/IMSNVBp6jPpG7I0zEqAcfqYx/qdQYxZslKlC
YMcV7NrPqGi1HmbzI68iwLK9sNfvttXtgo9VwVUUiBmOhOHr8V4f19+QtPP+2+7m
Dyhf/pFpH4E5C76Qo23EvmrlZoHPksRwhQvvbJvyUW1S+hG3b/aDMmw9L0DYlVxr
eyGQc6+Z2+7PGhAk3Q3RPYi8Jsdmmv1Hducao4ELJzUealLYcbT73veb3NexvFtq
4PM1db6SdRjct/l6982skPhixiBc38RFsIkdD0cjvMgqqyGl2gOn/3S3UgeJHRWi
Zb6XnG+t6uk5KECC6PWCFHQ2MA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:10 2024 by rpki-client on console-ams.rpki-client.org