Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/iK9NUJexzHbZTI_2s5ek07NHtDA.roa
File: iK9NUJexzHbZTI_2s5ek07NHtDA.roa (raw, json)
Hash identifier: TGdhes5IRJuY2Y6NxAJHLds24opCi1/5K3I3qYO84eM=
Subject key identifier: 88:AF:4D:50:97:B1:CC:76:D9:4C:8F:F6:B3:97:A4:D3:B3:47:B4:30
Certificate issuer: /CN=19f66db40158916a1da36d25b90fb1b4915b8116
Certificate serial: 0185711E6E00AEBCE96914C9E7A07283FCD6
Authority key identifier: 19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfZttAFYkWodo20luQ-xtJFbgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/iK9NUJexzHbZTI_2s5ek07NHtDA.roa
Signing time: Mon 02 Jan 2023 06:14:57 +0000
ROA not before: Mon 02 Jan 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 94.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6e:00:ae:bc:e9:69:14:c9:e7:a0:72:83:fc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f66db40158916a1da36d25b90fb1b4915b8116
Validity
Not Before: Jan 2 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88af4d5097b1cc76d94c8ff6b397a4d3b347b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:25:2c:7c:e4:f8:68:71:54:62:9c:55:24:
43:5d:2d:cc:5a:b0:1e:02:79:03:a5:a7:9c:b5:7b:
76:b5:2c:7c:83:60:cd:bf:45:77:1b:74:b9:89:89:
ee:91:db:90:cb:f5:13:8d:39:00:db:77:9d:3c:31:
86:dc:6b:92:38:f4:cd:98:a6:ae:24:0b:c2:cd:e1:
44:bf:8f:28:cf:6c:58:0d:32:1e:e3:f1:ba:79:ef:
25:cf:e2:b1:b6:85:f4:e6:d3:06:c7:ca:92:95:91:
68:c3:0a:92:fa:65:94:52:1f:6a:d8:e0:72:e1:75:
87:fc:46:a1:be:65:15:32:ca:b6:ec:3f:c4:71:87:
96:fe:56:a5:89:84:65:88:9f:47:cc:1b:53:89:ff:
74:df:93:ea:19:24:5b:92:01:8c:16:e6:e8:36:12:
83:6c:65:45:2c:9d:70:e2:22:51:3f:ab:89:91:da:
86:87:37:8f:74:6a:0d:b5:40:16:be:54:9a:f7:fb:
56:63:e1:6a:64:c2:a2:de:8f:eb:48:6d:0b:67:8a:
af:bc:db:e3:51:48:b0:c8:bd:98:5a:0b:be:65:55:
b9:94:cb:5b:a4:de:96:5a:05:cf:70:c4:75:86:9b:
ec:df:a5:72:d8:60:a5:fa:be:1c:3e:2e:76:41:f2:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:4D:50:97:B1:CC:76:D9:4C:8F:F6:B3:97:A4:D3:B3:47:B4:30
X509v3 Authority Key Identifier:
keyid:19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfZttAFYkWodo20luQ-xtJFbgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/iK9NUJexzHbZTI_2s5ek07NHtDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/GfZttAFYkWodo20luQ-xtJFbgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.124.0/24
Signature Algorithm: sha256WithRSAEncryption
08:29:39:5e:97:f2:81:93:af:a0:86:4f:38:34:56:6f:8c:06:
cd:3f:dc:76:6c:08:57:ad:1a:a4:9e:28:ea:e4:a3:51:8f:0d:
3b:4b:ba:a0:78:b9:87:03:62:b9:ae:46:27:79:e1:87:5a:88:
1d:de:a1:e4:c0:5e:a6:df:02:54:43:4a:85:a5:36:98:79:c0:
29:0d:2c:f6:34:49:62:78:e9:48:4a:1c:eb:eb:62:bb:f0:42:
97:b0:d3:f1:c8:79:6a:b0:6f:19:26:64:22:f6:c9:fa:b7:7b:
83:35:5b:86:05:d5:37:7f:2b:0b:59:cc:c1:d4:32:47:25:f4:
9c:ea:ff:d4:5e:51:2e:dd:49:6f:8c:94:b9:82:c0:ac:06:7a:
9d:1d:0d:e0:c3:af:32:88:d7:6c:0d:5b:9e:7a:fc:0e:b9:79:
1e:b0:2c:97:8a:00:a3:b4:92:b9:18:36:3c:89:70:6b:86:bc:
84:64:59:f8:e8:31:fd:fa:eb:3c:3d:1f:fb:0a:09:18:fe:84:
85:a1:18:10:f8:8b:25:e1:1d:95:2b:b3:91:96:cb:e4:77:ab:
bb:ef:93:32:df:85:e5:0b:31:10:08:2a:0c:c8:78:3a:0f:b0:
b5:a0:f1:b5:5b:3a:d0:6f:fd:24:84:8b:0b:26:30:17:dd:78:
93:28:24:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHm4ArrzpaRTJ56Byg/zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjY2ZGI0MDE1ODkxNmExZGEzNmQyNWI5MGZiMWI0OTE1
YjgxMTYwHhcNMjMwMTAyMDYxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGFmNGQ1MDk3YjFjYzc2ZDk0YzhmZjZiMzk3YTRkM2IzNDdiNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3slLHzk+GhxVGKcVSRDXS3MWrAe
AnkDpaectXt2tSx8g2DNv0V3G3S5iYnukduQy/UTjTkA23edPDGG3GuSOPTNmKau
JAvCzeFEv48oz2xYDTIe4/G6ee8lz+KxtoX05tMGx8qSlZFowwqS+mWUUh9q2OBy
4XWH/EahvmUVMsq27D/EcYeW/laliYRliJ9HzBtTif9035PqGSRbkgGMFuboNhKD
bGVFLJ1w4iJRP6uJkdqGhzePdGoNtUAWvlSa9/tWY+FqZMKi3o/rSG0LZ4qvvNvj
UUiwyL2YWgu+ZVW5lMtbpN6WWgXPcMR1hpvs36Vy2GCl+r4cPi52QfKgdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIivTVCXscx22UyP9rOXpNOzR7QwMB8GA1UdIwQY
MBaAFBn2bbQBWJFqHaNtJbkPsbSRW4EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZadHRBRllrV29kbzIwbHVRLXh0SkZiZ1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wNzU5NjEtYTJlOC00YWUwLWFjYjkt
NzliNTZmMWI1YjExLzEvaUs5TlVKZXh6SGJaVElfMnM1ZWswN05IdERBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wNzU5NjEtYTJlOC00YWUwLWFjYjktNzliNTZmMWI1YjEx
LzEvR2ZadHRBRllrV29kbzIwbHVRLXh0SkZiZ1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp8MA0G
CSqGSIb3DQEBCwUAA4IBAQAIKTlel/KBk6+ghk84NFZvjAbNP9x2bAhXrRqknijq
5KNRjw07S7qgeLmHA2K5rkYneeGHWogd3qHkwF6m3wJUQ0qFpTaYecApDSz2NEli
eOlIShzr62K78EKXsNPxyHlqsG8ZJmQi9sn6t3uDNVuGBdU3fysLWczB1DJHJfSc
6v/UXlEu3UlvjJS5gsCsBnqdHQ3gw68yiNdsDVueevwOuXkesCyXigCjtJK5GDY8
iXBrhryEZFn46DH9+us8PR/7CgkY/oSFoRgQ+Isl4R2VK7ORlsvkd6u775My34Xl
CzEQCCoMyHg6D7C1oPG1WzrQb/0khIsLJjAX3XiTKCQM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org