Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/aTDJ49cH7opkvproZqNljJYdsaA.roa
File: aTDJ49cH7opkvproZqNljJYdsaA.roa (raw, json)
Hash identifier: tuXSNVR2Xq9eHjrpbcuwN6E1P25YXpsHReo6bdToRG8=
Subject key identifier: 69:30:C9:E3:D7:07:EE:8A:64:BE:9A:E8:66:A3:65:8C:96:1D:B1:A0
Certificate issuer: /CN=3793ec483285630f328404a9fb85f4c81b9aa458
Certificate serial: 018DBB9B1F24F1DD5F8800D7210331AC73B8
Authority key identifier: 37:93:EC:48:32:85:63:0F:32:84:04:A9:FB:85:F4:C8:1B:9A:A4:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5PsSDKFYw8yhASp-4X0yBuapFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/aTDJ49cH7opkvproZqNljJYdsaA.roa
Signing time: Sun 18 Feb 2024 09:45:21 +0000
ROA not before: Sun 18 Feb 2024 09:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 91.108.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:9b:1f:24:f1:dd:5f:88:00:d7:21:03:31:ac:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3793ec483285630f328404a9fb85f4c81b9aa458
Validity
Not Before: Feb 18 09:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6930c9e3d707ee8a64be9ae866a3658c961db1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:b4:b0:00:b3:8d:f5:0d:16:f1:a3:f0:27:
b2:38:95:6b:52:b2:de:44:c6:87:53:78:8a:a6:5a:
3d:4e:bc:2d:4c:98:9a:36:b0:66:f4:2a:1c:7b:05:
47:9c:35:ff:b3:aa:0b:3d:e8:59:ff:fa:f5:72:93:
00:31:e0:b6:81:aa:6a:ac:4d:ee:cc:1a:09:d1:b9:
6f:d3:9c:78:ff:f9:20:b6:6d:d1:10:65:c3:06:d1:
fa:3f:39:31:23:f6:fd:c8:9a:64:04:60:21:07:97:
c8:36:8e:05:90:3d:0a:c8:a4:bd:4b:ed:46:a6:c7:
91:0c:19:ef:db:3c:66:96:31:d6:60:24:4b:26:0a:
27:3d:f2:e4:7a:c9:63:2d:03:b6:32:c0:ab:d6:f1:
0d:28:94:29:a3:e8:f0:95:bc:6b:4c:93:3b:80:0c:
68:df:2c:8a:a5:0c:2f:5d:8f:a5:d1:81:da:8b:d2:
31:be:75:61:25:ed:ec:5e:fb:b3:7e:39:42:07:47:
ba:31:db:6a:60:9a:fa:2a:1c:2d:72:ae:bb:db:c1:
4e:dc:b7:6d:ab:d8:d6:7c:51:c2:3a:a6:fa:9b:8c:
f3:f2:13:c6:16:cd:bb:53:9e:aa:00:a4:e8:93:f7:
95:3e:ac:a2:e7:39:47:82:12:af:93:57:c1:ff:66:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:C9:E3:D7:07:EE:8A:64:BE:9A:E8:66:A3:65:8C:96:1D:B1:A0
X509v3 Authority Key Identifier:
keyid:37:93:EC:48:32:85:63:0F:32:84:04:A9:FB:85:F4:C8:1B:9A:A4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5PsSDKFYw8yhASp-4X0yBuapFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/aTDJ49cH7opkvproZqNljJYdsaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/N5PsSDKFYw8yhASp-4X0yBuapFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:af:5d:f6:c5:45:65:a0:f0:76:82:50:6e:78:32:12:99:fd:
cc:ce:7e:5c:0a:02:df:e8:7a:0f:d3:b0:52:44:24:20:1c:19:
c9:26:48:ca:98:21:fa:18:58:2c:e4:70:ed:80:ab:c2:5a:60:
b4:0d:ad:e8:ba:38:a5:d6:81:32:03:67:bb:33:b1:d1:52:b5:
d5:f5:96:d3:44:43:d0:22:f5:e9:c9:2c:36:b3:e8:2d:65:0f:
51:d4:27:91:63:e2:bf:01:76:c1:8d:7e:e4:76:af:82:c2:8b:
9d:fa:5a:ae:de:a6:c5:1a:2a:f5:f2:de:33:82:83:64:34:67:
f0:0a:54:07:ec:01:e0:fe:e0:cb:f6:20:4e:fa:7a:b4:bd:c5:
15:52:f3:6d:1e:f3:bf:78:e6:c0:6b:40:ac:2b:a2:f2:75:86:
da:b9:67:3b:60:a9:ae:6b:f7:23:dc:26:f7:e7:17:9a:a3:1d:
57:e0:d4:37:21:c0:d7:aa:f5:79:6d:99:45:bd:25:ef:73:2a:
69:1b:8f:ee:89:5e:7b:8d:0d:df:cd:34:d4:93:96:10:a5:0f:
f6:09:e1:f1:c5:45:9c:7b:01:4e:94:2c:89:00:48:6f:c4:32:
06:eb:8c:45:55:61:79:b7:b1:fc:26:ec:69:79:b9:91:fa:2b:
3f:05:e8:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY27mx8k8d1fiADXIQMxrHO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTNlYzQ4MzI4NTYzMGYzMjg0MDRhOWZiODVmNGM4MWI5
YWE0NTgwHhcNMjQwMjE4MDk0NTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTMwYzllM2Q3MDdlZThhNjRiZTlhZTg2NmEzNjU4Yzk2MWRiMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/C0sACzjfUNFvGj8CeyOJVrUrLe
RMaHU3iKplo9TrwtTJiaNrBm9CocewVHnDX/s6oLPehZ//r1cpMAMeC2gapqrE3u
zBoJ0blv05x4//kgtm3REGXDBtH6PzkxI/b9yJpkBGAhB5fINo4FkD0KyKS9S+1G
pseRDBnv2zxmljHWYCRLJgonPfLkesljLQO2MsCr1vENKJQpo+jwlbxrTJM7gAxo
3yyKpQwvXY+l0YHai9IxvnVhJe3sXvuzfjlCB0e6MdtqYJr6Khwtcq6728FO3Ldt
q9jWfFHCOqb6m4zz8hPGFs27U56qAKTok/eVPqyi5zlHghKvk1fB/2ZV2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkwyePXB+6KZL6a6GajZYyWHbGgMB8GA1UdIwQY
MBaAFDeT7EgyhWMPMoQEqfuF9MgbmqRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVQc1NES0ZZdzh5aEFTcC00WDB5QnVhcEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kMWIzOTItYTRiZC00ZmI3LWI1MmQt
OTNkZWVhYmEzMmI4LzEvYVRESjQ5Y0g3b3BrdnByb1pxTmxqSllkc2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kMWIzOTItYTRiZC00ZmI3LWI1MmQtOTNkZWVhYmEzMmI4
LzEvTjVQc1NES0ZZdzh5aEFTcC00WDB5QnVhcEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y6MA0G
CSqGSIb3DQEBCwUAA4IBAQAKr132xUVloPB2glBueDISmf3Mzn5cCgLf6HoP07BS
RCQgHBnJJkjKmCH6GFgs5HDtgKvCWmC0Da3oujil1oEyA2e7M7HRUrXV9ZbTREPQ
IvXpySw2s+gtZQ9R1CeRY+K/AXbBjX7kdq+Cwoud+lqu3qbFGir18t4zgoNkNGfw
ClQH7AHg/uDL9iBO+nq0vcUVUvNtHvO/eObAa0CsK6LydYbauWc7YKmua/cj3Cb3
5xeaox1X4NQ3IcDXqvV5bZlFvSXvcyppG4/uiV57jQ3fzTTUk5YQpQ/2CeHxxUWc
ewFOlCyJAEhvxDIG64xFVWF5t7H8JuxpebmR+is/Beh3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org