Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/hh7gM_OWC5ZRDUzBWa4XYCvFQ2o.roa
File: hh7gM_OWC5ZRDUzBWa4XYCvFQ2o.roa (raw, json)
Hash identifier: vbffvTH0l3+t/2ofEimIwQjrN5pgcMQY0gpyKbmyHzU=
Subject key identifier: 86:1E:E0:33:F3:96:0B:96:51:0D:4C:C1:59:AE:17:60:2B:C5:43:6A
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 0188BADC5B41EE66A6D46EBC72D499F70B6C
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/hh7gM_OWC5ZRDUzBWa4XYCvFQ2o.roa
Signing time: Wed 14 Jun 2023 17:03:03 +0000
ROA not before: Wed 14 Jun 2023 17:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 213.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:dc:5b:41:ee:66:a6:d4:6e:bc:72:d4:99:f7:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jun 14 17:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861ee033f3960b96510d4cc159ae17602bc5436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:35:2b:65:9e:af:50:c6:69:da:bd:90:41:
bf:60:80:e7:b9:a2:e9:3e:34:bd:26:b8:84:ea:59:
e6:ae:78:2e:a4:d0:03:a4:e1:55:dd:dc:aa:27:ad:
4a:e0:3f:3e:a4:d2:b2:70:76:0e:48:7b:c6:a5:c7:
b5:09:1a:a1:ff:46:2a:6c:ac:82:e5:b6:00:1c:84:
d3:0c:f7:1b:fe:1a:a4:38:38:69:5f:9e:a9:1b:29:
d7:ab:46:1b:04:91:b1:2f:b0:8a:cc:57:b6:e9:0f:
9b:99:90:13:1d:89:b9:1b:41:4a:bd:5f:8a:85:e5:
0a:e4:76:33:cc:f5:dd:6a:bf:e1:89:34:94:86:b1:
6b:4d:d4:07:26:0b:6b:ce:e9:91:e9:c8:8a:2c:b2:
9b:e4:2a:d5:2e:75:18:8e:c1:24:37:76:7a:a1:36:
95:93:73:a8:d2:5c:7f:45:84:b7:46:eb:d7:00:60:
1e:b9:03:b0:79:07:f6:09:b3:57:1f:48:f2:d1:2a:
8a:c9:11:7c:7c:6d:9a:cb:ef:ca:a6:62:a4:b0:e5:
69:82:2a:fc:6f:51:25:ad:2c:7e:13:42:55:62:2b:
8e:91:eb:b2:e8:69:59:12:bd:cf:c8:57:b4:99:34:
74:76:04:e7:ad:6a:66:33:19:ee:d0:34:61:86:a7:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:E0:33:F3:96:0B:96:51:0D:4C:C1:59:AE:17:60:2B:C5:43:6A
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/hh7gM_OWC5ZRDUzBWa4XYCvFQ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
90:eb:15:1a:12:f6:87:73:32:4d:d1:18:88:14:ad:e6:50:34:
f3:8b:c1:54:4c:a6:d5:a9:0e:9d:0a:ac:81:b4:74:c4:c5:3f:
08:cf:6d:f0:03:71:f4:36:10:66:ad:c4:87:53:4f:b3:f0:72:
d3:11:50:ab:71:62:08:d6:0e:a4:ae:9b:23:4e:73:e6:0e:7b:
6e:6c:57:20:e1:9b:1a:13:d7:ec:3f:ae:ca:82:f4:21:4e:ba:
7d:97:77:0c:6d:87:a9:8d:4d:3b:73:a0:75:f5:99:3f:4a:57:
18:49:98:11:e0:47:ac:dd:aa:66:a5:47:1f:7b:6e:da:87:f1:
b7:71:df:3e:10:62:9a:ad:f0:0d:6f:1f:ba:90:f4:a5:5d:f8:
ac:ca:b3:94:90:e4:9e:46:2c:bc:23:a7:9c:e9:9a:1b:c9:1e:
f2:b3:9f:67:64:b6:94:8a:bf:85:de:64:cc:e7:a9:b8:7e:8d:
a9:ef:84:85:12:29:32:0c:16:c5:ac:9a:ef:d4:a3:b1:15:45:
d2:a4:1d:7b:76:e1:41:3d:ac:82:6d:15:e0:a5:ea:73:22:cd:
6c:86:57:3c:b6:e9:14:af:d8:bb:35:8e:fe:12:c0:89:e3:76:
2e:85:ed:cf:23:83:5f:34:44:84:ee:1e:c6:2f:9f:9c:c2:35:
01:68:4c:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi63FtB7mam1G68ctSZ9wtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTQ0NDgxZDNiZTdmY2E1ZTgwYTU2NGFkOTNjMWI4YTJm
NjM2ZjgwHhcNMjMwNjE0MTcwMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjFlZTAzM2YzOTYwYjk2NTEwZDRjYzE1OWFlMTc2MDJiYzU0MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0E1K2Wer1DGadq9kEG/YIDnuaLp
PjS9JriE6lnmrngupNADpOFV3dyqJ61K4D8+pNKycHYOSHvGpce1CRqh/0YqbKyC
5bYAHITTDPcb/hqkODhpX56pGynXq0YbBJGxL7CKzFe26Q+bmZATHYm5G0FKvV+K
heUK5HYzzPXdar/hiTSUhrFrTdQHJgtrzumR6ciKLLKb5CrVLnUYjsEkN3Z6oTaV
k3Oo0lx/RYS3RuvXAGAeuQOweQf2CbNXH0jy0SqKyRF8fG2ay+/KpmKksOVpgir8
b1ElrSx+E0JVYiuOkeuy6GlZEr3PyFe0mTR0dgTnrWpmMxnu0DRhhqdmOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIYe4DPzlguWUQ1MwVmuF2ArxUNqMB8GA1UdIwQY
MBaAFGFURIHTvn/KXoClZK2Twbii9jb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjIt
ZjY3ZTE3NWQ0YmE3LzEvaGg3Z01fT1dDNVpSRFV6QldhNFhZQ3ZGUTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjItZjY3ZTE3NWQ0YmE3
LzEvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dkLMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ6xUaEvaHczJN0RiIFK3mUDTzi8FUTKbVqQ6dCqyB
tHTExT8Iz23wA3H0NhBmrcSHU0+z8HLTEVCrcWII1g6krpsjTnPmDntubFcg4Zsa
E9fsP67KgvQhTrp9l3cMbYepjU07c6B19Zk/SlcYSZgR4Ees3apmpUcfe27ah/G3
cd8+EGKarfANbx+6kPSlXfisyrOUkOSeRiy8I6ec6ZobyR7ys59nZLaUir+F3mTM
56m4fo2p74SFEikyDBbFrJrv1KOxFUXSpB17duFBPayCbRXgpepzIs1shlc8tukU
r9i7NY7+EsCJ43Yuhe3PI4NfNESE7h7GL5+cwjUBaEzh
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:22 2025 by rpki-client