Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/3b8JGRQxxs-gnGqetF1Ii6PhDps.roa
File: 3b8JGRQxxs-gnGqetF1Ii6PhDps.roa (raw, json)
Hash identifier: SC5hNilNCcT1yK2um6fmFJKRwswgohnYyn+FKfXQDps=
Subject key identifier: DD:BF:09:19:14:31:C6:CF:A0:9C:6A:9E:B4:5D:48:8B:A3:E1:0E:9B
Certificate issuer: /CN=a28815e43926af7eb961de7b703aed6328953e30
Certificate serial: 018CC3489BD90838B5256325AA8891CD7343
Authority key identifier: A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/3b8JGRQxxs-gnGqetF1Ii6PhDps.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24935
IP address blocks: 94.158.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9b:d9:08:38:b5:25:63:25:aa:88:91:cd:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a28815e43926af7eb961de7b703aed6328953e30
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddbf09191431c6cfa09c6a9eb45d488ba3e10e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:a5:b7:58:13:55:e7:c5:df:30:df:7f:43:
42:d7:f0:9d:d7:12:e5:92:8e:ac:8f:4e:59:70:6e:
82:d5:e2:16:31:e7:cf:76:cd:d3:0d:08:7e:c4:19:
5d:3f:ce:0b:be:09:25:5c:a2:21:af:93:a9:da:75:
86:66:be:ed:44:ae:f2:49:e9:24:88:07:19:ad:6d:
22:dd:80:1d:39:67:f3:2d:b7:1a:98:45:b5:06:f6:
1c:7d:67:17:2e:cb:04:da:20:4c:e1:e6:32:21:43:
de:ab:7a:b2:b9:ac:44:96:33:c3:89:29:6b:9c:c1:
d2:54:78:12:2b:4c:75:c6:98:40:1b:bb:db:f1:1e:
4a:14:7e:01:88:c1:b0:11:ff:8f:9f:d1:ea:37:bf:
68:c1:4e:81:3c:4c:13:23:8e:db:fa:5b:e2:4d:45:
9e:fb:e2:10:cf:3e:76:d0:86:4d:e0:7f:f7:25:6b:
bb:43:41:7b:7f:55:89:26:bb:5c:6f:03:97:18:e6:
0e:e1:23:07:1a:c0:75:0c:e6:9a:d5:90:0f:bf:5b:
ae:81:60:5f:fd:74:c9:e8:50:3e:fa:80:a4:0d:70:
32:3b:b1:fc:cd:c5:41:b4:c5:ee:29:13:be:85:ca:
94:77:9e:b1:19:72:a6:ec:ba:54:a8:f8:2a:8b:c6:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:09:19:14:31:C6:CF:A0:9C:6A:9E:B4:5D:48:8B:A3:E1:0E:9B
X509v3 Authority Key Identifier:
keyid:A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/3b8JGRQxxs-gnGqetF1Ii6PhDps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/oogV5Dkmr365Yd57cDrtYyiVPjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5d:d0:4f:c2:0b:bf:7c:f8:ac:8f:e4:57:8e:35:b8:e6:de:
76:1d:37:9f:68:90:ad:29:c2:c2:96:6c:d8:cd:ea:cc:62:cc:
5f:0c:2a:35:a2:8b:a9:8d:04:88:2e:3c:a6:e5:d1:57:10:8c:
01:f2:5b:a8:7e:4a:e7:c7:fb:8c:ed:0c:60:99:6f:51:72:a0:
8e:5a:0b:5f:1f:2a:6b:a4:a3:a5:b6:21:01:7f:22:d0:ac:a4:
a8:37:10:37:3b:14:4f:16:27:5b:0d:2f:dd:7d:04:cd:c8:26:
e5:0f:bd:1c:08:b7:8b:f8:7c:f5:e3:11:41:2b:80:7e:72:43:
1d:09:77:ca:34:36:5f:35:2f:9c:26:62:d9:b8:8c:09:7a:85:
3f:e8:42:bf:d0:2b:60:99:a3:7d:16:52:7e:20:eb:5c:80:c2:
45:7d:b7:75:a5:da:f3:a6:51:55:6b:ca:ed:b7:63:50:7d:60:
37:89:2e:c3:6d:ca:ef:7b:4e:78:45:4b:08:27:fe:9e:01:5c:
2e:9e:92:ec:f4:71:67:90:27:f2:24:0f:b7:53:24:66:96:91:
67:1e:e2:bc:5e:dc:5b:77:cb:57:02:a6:6d:53:c1:12:e6:d4:
11:6c:e7:84:0f:10:98:f6:6c:9f:00:46:ea:6a:d9:fb:10:0b:
20:14:27:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJvZCDi1JWMlqoiRzXNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODgxNWU0MzkyNmFmN2ViOTYxZGU3YjcwM2FlZDYzMjg5
NTNlMzAwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGJmMDkxOTE0MzFjNmNmYTA5YzZhOWViNDVkNDg4YmEzZTEwZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJOlt1gTVefF3zDff0NC1/Cd1xLl
ko6sj05ZcG6C1eIWMefPds3TDQh+xBldP84LvgklXKIhr5Op2nWGZr7tRK7ySekk
iAcZrW0i3YAdOWfzLbcamEW1BvYcfWcXLssE2iBM4eYyIUPeq3qyuaxEljPDiSlr
nMHSVHgSK0x1xphAG7vb8R5KFH4BiMGwEf+Pn9HqN79owU6BPEwTI47b+lviTUWe
++IQzz520IZN4H/3JWu7Q0F7f1WJJrtcbwOXGOYO4SMHGsB1DOaa1ZAPv1uugWBf
/XTJ6FA++oCkDXAyO7H8zcVBtMXuKRO+hcqUd56xGXKm7LpUqPgqi8Z1IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN2/CRkUMcbPoJxqnrRdSIuj4Q6bMB8GA1UdIwQY
MBaAFKKIFeQ5Jq9+uWHee3A67WMolT4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29nVjVEa21yMzY1WWQ1N2NEcnRZeWlWUGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NzcwM2MtMGVmOS00NjVlLThhNWEt
MzE0ZjcyOWZhNTk1LzEvM2I4SkdSUXh4cy1nbkdxZXRGMUlpNlBoRHBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82NzcwM2MtMGVmOS00NjVlLThhNWEtMzE0ZjcyOWZhNTk1
LzEvb29nVjVEa21yMzY1WWQ1N2NEcnRZeWlWUGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXp62MA0G
CSqGSIb3DQEBCwUAA4IBAQBeXdBPwgu/fPisj+RXjjW45t52HTefaJCtKcLClmzY
zerMYsxfDCo1ooupjQSILjym5dFXEIwB8luofkrnx/uM7QxgmW9RcqCOWgtfHypr
pKOltiEBfyLQrKSoNxA3OxRPFidbDS/dfQTNyCblD70cCLeL+Hz14xFBK4B+ckMd
CXfKNDZfNS+cJmLZuIwJeoU/6EK/0CtgmaN9FlJ+IOtcgMJFfbd1pdrzplFVa8rt
t2NQfWA3iS7Dbcrve054RUsIJ/6eAVwunpLs9HFnkCfyJA+3UyRmlpFnHuK8Xtxb
d8tXAqZtU8ES5tQRbOeEDxCY9myfAEbqatn7EAsgFCcU
-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:39 2024 by rpki-client on console-ams.rpki-client.org