Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/fo1pYxz9bZnU_OfLh-RsVSSivf8.roa
File: fo1pYxz9bZnU_OfLh-RsVSSivf8.roa (raw, json)
Hash identifier: NQxJ3GV2V08tvJVQO5MTC5tRiyiv8fr+BbrWc9DWMqc=
Subject key identifier: 7E:8D:69:63:1C:FD:6D:99:D4:FC:E7:CB:87:E4:6C:55:24:A2:BD:FF
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018A7D883325587639C08882011670F21A96
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/fo1pYxz9bZnU_OfLh-RsVSSivf8.roa
Signing time: Sun 10 Sep 2023 05:19:52 +0000
ROA not before: Sun 10 Sep 2023 05:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:88:33:25:58:76:39:c0:88:82:01:16:70:f2:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Sep 10 05:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8d69631cfd6d99d4fce7cb87e46c5524a2bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:a3:a6:ab:5d:d6:6a:1d:8d:13:17:95:a5:
b2:5a:6d:54:84:5e:70:96:56:5c:48:86:6f:3d:93:
7a:f2:d3:c7:bc:b3:5b:fe:c0:ab:1b:f0:ba:e8:cf:
55:24:17:aa:d3:8e:13:41:b5:b0:60:07:b1:ed:0f:
e7:39:81:19:52:35:9a:b8:36:fc:02:fe:43:85:96:
e0:df:b1:ca:fb:22:74:8b:45:fd:13:6b:6f:0b:6b:
ee:74:ee:93:a2:20:22:37:e5:6c:df:86:4a:b8:4e:
8b:d4:cd:b8:cc:f1:20:b1:46:14:a3:36:6f:7a:ca:
6a:f2:2f:61:2c:76:28:42:8f:1f:da:85:48:2d:a7:
a5:59:52:9d:d6:44:71:67:f0:19:f3:9a:af:88:b7:
2c:13:bc:9d:1c:6e:56:59:33:ff:1d:e2:90:69:de:
0c:0f:76:a6:c9:dc:2a:55:37:bd:4f:98:19:b7:b9:
35:85:67:22:92:f5:ab:e5:38:94:c2:2b:d3:b9:6b:
5d:0e:e1:22:7d:be:27:87:42:e2:f4:9e:db:da:18:
3d:a7:e6:4c:b8:fb:a2:6e:10:70:46:29:09:e4:85:
6f:17:1d:1e:74:7f:99:18:a6:f1:5e:b8:e0:e5:db:
60:7b:a2:91:23:da:05:08:d4:e6:8a:c2:2e:f6:41:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:69:63:1C:FD:6D:99:D4:FC:E7:CB:87:E4:6C:55:24:A2:BD:FF
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/fo1pYxz9bZnU_OfLh-RsVSSivf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b2:7e:cc:a1:af:46:08:25:f5:2d:76:e9:67:fa:34:34:f4:
09:3b:9d:8e:ae:14:7c:49:a8:41:88:fb:ea:98:69:e8:e1:fc:
ab:a8:66:d5:cc:e5:ed:2f:ed:64:e1:79:b1:19:07:af:fb:5c:
a4:7d:e0:06:2c:ab:25:65:76:5b:d3:7f:5c:68:8d:48:2d:4d:
ea:0f:2b:40:30:d2:d9:bf:a4:0f:04:68:53:59:7d:35:83:37:
7e:00:30:17:cd:dc:6f:66:bd:08:3b:c9:15:e9:ee:f5:9e:e3:
ff:26:a2:8b:b0:f2:ab:6d:a7:97:ab:4f:47:10:12:ad:f0:fe:
fe:5a:e8:70:68:50:a8:22:8d:9b:13:0e:64:4f:cd:75:27:33:
64:05:1b:39:94:01:7e:69:31:e0:1f:90:c0:6b:77:b7:ce:d7:
e3:82:ef:5d:35:ff:d3:cf:b1:95:f3:c6:0b:b3:51:b4:64:00:
b5:94:1b:ee:4b:a5:c9:bc:1c:82:16:56:4e:eb:92:14:80:84:
70:56:c8:06:0b:1e:b0:0a:72:b9:8d:db:ad:9a:2b:70:03:69:
76:80:1a:39:70:d5:73:82:67:df:8a:4e:3e:99:9c:cc:0c:d7:
1b:d6:91:54:49:e8:d7:5c:c3:b4:46:79:c7:3e:9b:d9:9a:fe:
24:a3:ff:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp9iDMlWHY5wIiCARZw8hqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwOTEwMDUxOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZThkNjk2MzFjZmQ2ZDk5ZDRmY2U3Y2I4N2U0NmM1NTI0YTJiZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uyjpqtd1modjRMXlaWyWm1UhF5w
llZcSIZvPZN68tPHvLNb/sCrG/C66M9VJBeq044TQbWwYAex7Q/nOYEZUjWauDb8
Av5DhZbg37HK+yJ0i0X9E2tvC2vudO6ToiAiN+Vs34ZKuE6L1M24zPEgsUYUozZv
espq8i9hLHYoQo8f2oVILaelWVKd1kRxZ/AZ85qviLcsE7ydHG5WWTP/HeKQad4M
D3amydwqVTe9T5gZt7k1hWcikvWr5TiUwivTuWtdDuEifb4nh0Li9J7b2hg9p+ZM
uPuibhBwRikJ5IVvFx0edH+ZGKbxXrjg5dtge6KRI9oFCNTmisIu9kGF8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6NaWMc/W2Z1Pzny4fkbFUkor3/MB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvZm8xcFl4ejliWm5VX09mTGgtUnNWU1NpdmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4lMA0G
CSqGSIb3DQEBCwUAA4IBAQBhsn7Moa9GCCX1LXbpZ/o0NPQJO52OrhR8SahBiPvq
mGno4fyrqGbVzOXtL+1k4XmxGQev+1ykfeAGLKslZXZb039caI1ILU3qDytAMNLZ
v6QPBGhTWX01gzd+ADAXzdxvZr0IO8kV6e71nuP/JqKLsPKrbaeXq09HEBKt8P7+
WuhwaFCoIo2bEw5kT811JzNkBRs5lAF+aTHgH5DAa3e3ztfjgu9dNf/Tz7GV88YL
s1G0ZAC1lBvuS6XJvByCFlZO65IUgIRwVsgGCx6wCnK5jdutmitwA2l2gBo5cNVz
gmffik4+mZzMDNcb1pFUSejXXMO0RnnHPpvZmv4ko/8z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org