Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/c9RyMSqQKbzQYd4PiY3P-BNNmvI.roa
File: c9RyMSqQKbzQYd4PiY3P-BNNmvI.roa (raw, json)
Hash identifier: IcU5OlazJsD4RBi6TH34W5WPsqh32ogGIomdpzASWWs=
Subject key identifier: 73:D4:72:31:2A:90:29:BC:D0:61:DE:0F:89:8D:CF:F8:13:4D:9A:F2
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 0102F4EA
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/c9RyMSqQKbzQYd4PiY3P-BNNmvI.roa
Signing time: Sun 17 Apr 2022 09:51:56 +0000
ROA not before: Sun 17 Apr 2022 09:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16970986 (0x102f4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Apr 17 09:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73d472312a9029bcd061de0f898dcff8134d9af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:b8:99:f7:90:a4:1a:da:d1:17:a0:48:44:
22:23:ae:a3:8f:b5:fd:8f:95:e4:23:5c:2a:35:71:
10:bc:69:9c:b8:c9:12:49:ea:fb:19:eb:f4:a9:bd:
fc:c2:65:13:f4:ac:77:c4:b8:03:e2:a3:ea:96:70:
c3:6a:55:b7:86:6e:e2:43:35:94:02:f9:79:64:02:
6e:93:ab:75:4c:cb:fd:8f:f6:8e:b5:65:19:d4:84:
06:44:c8:8b:98:b2:16:2d:d1:53:6a:ae:06:ca:7f:
5e:58:99:7a:32:83:69:b7:a0:00:0d:b1:cf:26:4b:
cb:9b:4b:21:64:c9:fa:4e:ac:99:be:51:ff:5b:20:
9f:61:58:b2:27:9e:04:50:1a:eb:18:fb:34:56:39:
56:ce:9c:aa:b3:e1:32:36:03:e2:25:f6:21:37:37:
1f:57:c2:e1:23:76:c6:30:2a:b4:34:d8:d2:11:29:
40:e3:9c:99:b5:3e:a1:13:9a:cb:90:a7:9f:e9:34:
10:e2:22:f7:de:51:80:e2:00:6b:1e:95:df:fa:05:
ad:92:38:16:a4:85:c4:ba:66:97:9e:a6:4e:3a:ca:
d0:69:6d:f7:87:13:ca:2c:b1:c2:68:1e:5a:8f:d6:
12:84:7e:b5:b3:83:16:49:71:dd:2a:62:1e:ea:06:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:72:31:2A:90:29:BC:D0:61:DE:0F:89:8D:CF:F8:13:4D:9A:F2
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/c9RyMSqQKbzQYd4PiY3P-BNNmvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8f:10:16:8c:41:f0:c2:be:8b:67:ea:c0:ca:85:c6:0e:6a:
77:87:58:f8:3c:00:08:a1:42:a2:d3:ed:ed:1f:6f:2b:87:a0:
7f:5f:7b:37:ad:e4:a8:ef:86:45:ad:8a:83:90:c9:c3:2c:ac:
62:cd:f6:b4:20:17:fc:ea:b3:80:31:ce:28:4a:77:ef:68:07:
bd:87:10:30:06:0c:e0:03:da:cb:fb:cc:b2:26:37:69:7f:a8:
5d:38:ef:ee:c3:33:ae:16:52:3b:e6:f7:2c:60:5b:7e:82:83:
d5:34:bc:bf:ef:53:44:b2:7e:2a:f7:43:1f:8b:b5:5c:d5:c6:
3a:4b:7c:86:a8:fa:c1:73:9d:ff:8c:ba:37:6b:d3:39:2a:af:
ba:d2:71:f3:44:19:46:b4:bd:9b:d0:5f:f9:3b:98:3f:25:0a:
6a:c5:38:bf:73:35:e6:86:15:c5:49:13:fd:bb:2c:11:ed:67:
bf:93:46:ed:03:3b:ac:1b:a7:e2:9e:6d:a7:58:93:06:a5:7b:
b2:1a:54:f8:1a:7f:b0:f3:94:55:d1:10:59:4d:3e:67:5f:f9:
19:eb:da:c4:f0:0f:57:c7:5b:70:5f:8c:bf:20:ad:9c:bf:dd:
98:3f:93:00:37:46:23:d4:91:28:86:3b:58:b9:ba:19:ec:f9:
e4:93:4f:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQL06jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Y2YzOGZiM2M5YjM5MDhiZDZmZDQ5NzAyODhkMjFiODU1ODM2MTc0MB4XDTIyMDQx
NzA5NTE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzNkNDcyMzEyYTkw
MjliY2QwNjFkZTBmODk4ZGNmZjgxMzRkOWFmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI49uJn3kKQa2tEXoEhEIiOuo4+1/Y+V5CNcKjVxELxpnLjJ
Eknq+xnr9Km9/MJlE/Ssd8S4A+Kj6pZww2pVt4Zu4kM1lAL5eWQCbpOrdUzL/Y/2
jrVlGdSEBkTIi5iyFi3RU2quBsp/XliZejKDabegAA2xzyZLy5tLIWTJ+k6smb5R
/1sgn2FYsieeBFAa6xj7NFY5Vs6cqrPhMjYD4iX2ITc3H1fC4SN2xjAqtDTY0hEp
QOOcmbU+oROay5Cnn+k0EOIi995RgOIAax6V3/oFrZI4FqSFxLpml56mTjrK0Glt
94cTyiyxwmgeWo/WEoR+tbODFklx3SpiHuoG5hECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRz1HIxKpApvNBh3g+Jjc/4E02a8jAfBgNVHSMEGDAWgBS884+zybOQi9b9
SXAojSG4VYNhdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZQT1BzOG16a0l2V19VbHdLSTBodUZXRFlYUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvNDI2ODQ2LWM5ZWMtNDcyYi04YmZmLTNiNDkyZjQ2M2JmZi8x
L2M5UnlNU3FRS2J6UVlkNFBpWTNQLUJOTm12SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
NDI2ODQ2LWM5ZWMtNDcyYi04YmZmLTNiNDkyZjQ2M2JmZi8xL3ZQT1BzOG16a0l2
V19VbHdLSTBodUZXRFlYUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJogDANBgkqhkiG9w0BAQsFAAOC
AQEAO48QFoxB8MK+i2fqwMqFxg5qd4dY+DwACKFCotPt7R9vK4egf197N63kqO+G
Ra2Kg5DJwyysYs32tCAX/OqzgDHOKEp372gHvYcQMAYM4APay/vMsiY3aX+oXTjv
7sMzrhZSO+b3LGBbfoKD1TS8v+9TRLJ+KvdDH4u1XNXGOkt8hqj6wXOd/4y6N2vT
OSqvutJx80QZRrS9m9Bf+TuYPyUKasU4v3M15oYVxUkT/bssEe1nv5NG7QM7rBun
4p5tp1iTBqV7shpU+Bp/sPOUVdEQWU0+Z1/5GevaxPAPV8dbcF+MvyCtnL/dmD+T
ADdGI9SRKIY7WLm6Gez55JNPWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org