Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/it2DRMKpFaAeGr_NI_vhJwoRoeU.roa
File: it2DRMKpFaAeGr_NI_vhJwoRoeU.roa (raw, json)
Hash identifier: AS5Y7d2fPK1F5UeAXtOhxyCw6vNxrTvG8LBhgVBbbMQ=
Subject key identifier: 8A:DD:83:44:C2:A9:15:A0:1E:1A:BF:CD:23:FB:E1:27:0A:11:A1:E5
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 01835F56D7E988FF6C7B7F7CE3AEFFB2A398
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/it2DRMKpFaAeGr_NI_vhJwoRoeU.roa
Signing time: Wed 21 Sep 2022 09:17:50 +0000
ROA not before: Wed 21 Sep 2022 09:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:56:d7:e9:88:ff:6c:7b:7f:7c:e3:ae:ff:b2:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Sep 21 09:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8add8344c2a915a01e1abfcd23fbe1270a11a1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:2d:2a:81:f7:aa:d3:84:33:b8:f7:87:39:
ef:48:a6:bb:6c:fa:0c:ee:ef:6e:be:00:c4:a0:a4:
c2:7f:65:f9:57:64:1f:cb:e3:23:49:5b:d3:48:76:
f7:cb:ae:31:4a:6c:07:42:cb:b5:13:c5:a8:ee:b6:
92:a7:3b:f0:5f:09:e7:25:09:80:f2:e6:c5:27:69:
5c:40:10:b9:2d:52:23:d6:f9:4c:5e:35:5d:90:a9:
01:c8:7d:78:f9:07:ea:7a:73:71:3a:4d:ae:4f:ac:
5f:12:0c:2e:70:08:52:61:1a:30:f0:c2:9b:f9:c6:
90:f0:43:ba:96:44:eb:9c:ba:bd:76:02:b0:38:7a:
ba:b2:fc:0f:13:90:fd:4b:fb:10:39:05:f0:3d:76:
39:d7:55:ff:62:f1:4c:48:c8:58:26:9f:3f:bf:e4:
9c:4c:59:26:2a:b9:34:f9:5b:fb:e7:74:40:71:93:
43:00:cb:5c:71:f8:f4:00:41:46:fc:43:1e:75:3b:
27:db:90:f8:88:b9:1c:23:dc:64:0c:db:9f:1f:93:
8d:da:23:67:22:6c:2b:41:74:87:35:a3:f1:ce:f5:
a7:a2:91:b5:32:9f:24:c3:3b:91:99:17:da:78:69:
3c:0d:b0:71:7e:db:4f:af:cd:e7:0a:36:dc:16:fd:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:83:44:C2:A9:15:A0:1E:1A:BF:CD:23:FB:E1:27:0A:11:A1:E5
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/it2DRMKpFaAeGr_NI_vhJwoRoeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8c:29:b8:d2:4c:46:34:45:f6:18:b1:c4:84:7a:65:96:e8:
77:50:be:a8:22:f6:ab:c1:3a:fe:68:3e:8a:93:63:e3:13:f3:
fc:1a:77:27:5d:ae:c4:74:92:99:6c:7e:ea:a5:f1:65:63:97:
60:7f:92:07:9c:a8:0c:50:10:93:50:07:53:cf:92:42:88:3d:
cb:75:62:d1:9f:aa:a3:ea:19:ed:d4:ef:a0:e9:a7:33:a5:3a:
a7:3a:d9:b7:0d:be:e8:ac:81:7a:05:af:7c:17:47:ed:21:7c:
83:29:dc:49:2d:21:43:11:0d:fe:8f:ed:7b:19:55:73:53:17:
c5:8f:65:10:1f:6f:33:8b:71:13:ec:e5:ea:30:f2:90:2f:28:
c2:62:d7:7e:0e:4f:f2:46:35:1b:e2:bb:45:4f:60:d8:69:73:
6e:66:ee:0d:f7:ea:50:60:c2:0a:8e:b5:d7:8b:9b:e3:1a:5b:
ff:b4:ce:67:21:bb:e6:71:74:30:66:ad:d8:f4:3f:83:16:53:
e1:6f:82:15:c2:79:e9:3e:b3:f4:fc:3e:87:a0:e8:44:92:10:
40:65:d0:52:72:24:2e:14:e0:3e:85:89:07:63:4c:7d:2a:27:
de:e4:fb:d9:08:8d:9f:6a:40:a1:2a:a1:5c:2c:76:c7:53:ad:
83:92:2c:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNfVtfpiP9se398467/sqOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjM4ZmIzYzliMzkwOGJkNmZkNDk3MDI4OGQyMWI4NTU4
MzYxNzQwHhcNMjIwOTIxMDkxNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRkODM0NGMyYTkxNWEwMWUxYWJmY2QyM2ZiZTEyNzBhMTFhMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LItKoH3qtOEM7j3hznvSKa7bPoM
7u9uvgDEoKTCf2X5V2Qfy+MjSVvTSHb3y64xSmwHQsu1E8Wo7raSpzvwXwnnJQmA
8ubFJ2lcQBC5LVIj1vlMXjVdkKkByH14+QfqenNxOk2uT6xfEgwucAhSYRow8MKb
+caQ8EO6lkTrnLq9dgKwOHq6svwPE5D9S/sQOQXwPXY511X/YvFMSMhYJp8/v+Sc
TFkmKrk0+Vv753RAcZNDAMtccfj0AEFG/EMedTsn25D4iLkcI9xkDNufH5ON2iNn
ImwrQXSHNaPxzvWnopG1Mp8kwzuRmRfaeGk8DbBxfttPr83nCjbcFv08nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrdg0TCqRWgHhq/zSP74ScKEaHlMB8GA1UdIwQY
MBaAFLzzj7PJs5CL1v1JcCiNIbhVg2F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBPUHM4bXprSXZXX1Vsd0tJMGh1RldEWVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MjY4NDYtYzllYy00NzJiLThiZmYt
M2I0OTJmNDYzYmZmLzEvaXQyRFJNS3BGYUFlR3JfTklfdmhKd29Sb2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80MjY4NDYtYzllYy00NzJiLThiZmYtM2I0OTJmNDYzYmZm
LzEvdlBPUHM4bXprSXZXX1Vsd0tJMGh1RldEWVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiAMA0G
CSqGSIb3DQEBCwUAA4IBAQB3jCm40kxGNEX2GLHEhHplluh3UL6oIvarwTr+aD6K
k2PjE/P8GncnXa7EdJKZbH7qpfFlY5dgf5IHnKgMUBCTUAdTz5JCiD3LdWLRn6qj
6hnt1O+g6aczpTqnOtm3Db7orIF6Ba98F0ftIXyDKdxJLSFDEQ3+j+17GVVzUxfF
j2UQH28zi3ET7OXqMPKQLyjCYtd+Dk/yRjUb4rtFT2DYaXNuZu4N9+pQYMIKjrXX
i5vjGlv/tM5nIbvmcXQwZq3Y9D+DFlPhb4IVwnnpPrP0/D6HoOhEkhBAZdBSciQu
FOA+hYkHY0x9Kife5PvZCI2fakChKqFcLHbHU62DkiwZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org