Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/9Et1EARpjcgpvFlm-AlRw4wyJWs.roa
File: 9Et1EARpjcgpvFlm-AlRw4wyJWs.roa (raw, json)
Hash identifier: s1NTqRTBSn2/QgMlJvLoPiuVhXV37+rled3qKQ+UrJ0=
Subject key identifier: F4:4B:75:10:04:69:8D:C8:29:BC:59:66:F8:09:51:C3:8C:32:25:6B
Certificate issuer: /CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Certificate serial: 018572BA3F1EE0E62034E0E242473094FFF9
Authority key identifier: 4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/9Et1EARpjcgpvFlm-AlRw4wyJWs.roa
Signing time: Mon 02 Jan 2023 13:44:46 +0000
ROA not before: Mon 02 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 185.39.8.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:3f:1e:e0:e6:20:34:e0:e2:42:47:30:94:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Validity
Not Before: Jan 2 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f44b751004698dc829bc5966f80951c38c32256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:7e:49:b2:f3:da:ec:6f:92:ab:72:38:54:
34:44:6d:db:bf:c1:f4:45:29:01:e8:a4:1b:8b:3d:
60:86:b2:6d:e1:6c:72:bc:e8:7c:c9:ac:5e:6c:99:
dd:e0:74:80:e4:25:8b:b0:e3:76:38:c7:3c:a9:a1:
87:dd:69:a2:68:e0:fc:fc:c2:e8:5f:98:3e:a8:1e:
0d:f1:25:f8:0e:e0:06:64:d9:8c:2c:88:dc:db:7e:
5b:5d:31:d1:17:0e:8c:94:47:6a:4d:9b:49:68:bb:
37:fd:8a:82:53:67:2b:99:2c:12:27:8c:24:7c:ad:
33:a3:b0:a6:5d:95:3e:8d:77:91:84:2c:86:8d:b4:
83:27:ef:51:53:17:9e:40:e3:34:83:b4:79:16:40:
38:9d:28:e6:ac:2c:0d:bb:98:b3:6c:b5:e3:60:54:
92:f1:56:12:51:a1:80:cb:01:83:33:bc:e4:3e:08:
a5:7c:82:91:5b:2d:e9:18:6c:37:dc:ef:fa:3e:f8:
0a:1e:3d:56:b5:8e:cd:7a:f4:18:ba:39:5d:4b:13:
3f:ff:c6:21:af:a5:1a:cc:13:b9:d9:e7:49:37:78:
5f:44:5b:5c:d1:9c:c7:a4:b6:e8:b3:87:a8:5d:74:
18:ab:49:66:88:68:fb:a8:ff:0c:45:e0:e7:4e:47:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:75:10:04:69:8D:C8:29:BC:59:66:F8:09:51:C3:8C:32:25:6B
X509v3 Authority Key Identifier:
keyid:4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/9Et1EARpjcgpvFlm-AlRw4wyJWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.8.0/24
Signature Algorithm: sha256WithRSAEncryption
79:21:88:ba:a5:d5:e6:43:96:79:33:13:b5:07:8f:e8:57:14:
16:a0:c6:fc:e5:53:45:8a:5e:4d:74:ea:f6:a9:0a:d0:e2:6e:
c5:ea:cc:5e:3e:f0:a6:44:db:49:47:5c:9e:cb:4a:b5:14:57:
f2:05:53:d0:d4:d5:dd:b8:e8:7c:a2:be:3e:06:98:44:84:81:
15:7e:ef:66:a5:68:48:55:30:61:64:82:0f:00:bb:dd:92:7c:
5e:7b:11:3c:c1:ac:9f:93:5c:88:6a:43:b3:a7:2d:ee:9a:61:
25:c6:c8:cf:16:9b:7d:09:b6:e7:45:6c:d7:88:da:10:d9:a7:
e0:e6:2b:97:d1:b2:c9:74:d0:7d:bb:11:bd:56:5c:de:d0:ea:
c0:13:66:f9:8d:af:70:dd:39:27:ac:90:fe:52:a8:39:84:eb:
55:93:b7:97:4e:e8:f4:d2:76:34:7a:41:5a:18:12:39:b5:6d:
6f:ec:7f:fb:27:18:d5:ac:6e:c7:36:a1:2e:e4:49:83:7f:5f:
6f:ea:37:1a:6a:51:09:27:00:e6:3d:92:12:05:f8:85:2b:4d:
9e:ec:77:cb:ad:94:91:5a:1e:1a:cf:dd:db:1e:80:7d:9a:4a:
9a:81:df:4c:ce:41:89:83:aa:8e:ac:2b:81:4e:2a:13:97:45:
73:dd:09:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyuj8e4OYgNODiQkcwlP/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWRmODA5OWE0YzFjNDIyMDFkYTA1Njc4YTNlZGYyYmUz
M2ZmMjQwHhcNMjMwMTAyMTM0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDRiNzUxMDA0Njk4ZGM4MjliYzU5NjZmODA5NTFjMzhjMzIyNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1+SbLz2uxvkqtyOFQ0RG3bv8H0
RSkB6KQbiz1ghrJt4WxyvOh8yaxebJnd4HSA5CWLsON2OMc8qaGH3WmiaOD8/MLo
X5g+qB4N8SX4DuAGZNmMLIjc235bXTHRFw6MlEdqTZtJaLs3/YqCU2crmSwSJ4wk
fK0zo7CmXZU+jXeRhCyGjbSDJ+9RUxeeQOM0g7R5FkA4nSjmrCwNu5izbLXjYFSS
8VYSUaGAywGDM7zkPgilfIKRWy3pGGw33O/6PvgKHj1WtY7NevQYujldSxM//8Yh
r6UazBO52edJN3hfRFtc0ZzHpLbos4eoXXQYq0lmiGj7qP8MReDnTkfFKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRLdRAEaY3IKbxZZvgJUcOMMiVrMB8GA1UdIwQY
MBaAFEqd+AmaTBxCIB2gVnij7fK+M/8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3AzNENacE1IRUlnSGFCV2VLUHQ4cjR6X3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84OWQ0NGQtNGY0My00NjgwLWEwYjIt
OTQ5ODQ4Mzc1YWRhLzEvOUV0MUVBUnBqY2dwdkZsbS1BbFJ3NHd5SldzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84OWQ0NGQtNGY0My00NjgwLWEwYjItOTQ5ODQ4Mzc1YWRh
LzEvU3AzNENacE1IRUlnSGFCV2VLUHQ4cjR6X3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScIMA0G
CSqGSIb3DQEBCwUAA4IBAQB5IYi6pdXmQ5Z5MxO1B4/oVxQWoMb85VNFil5NdOr2
qQrQ4m7F6sxePvCmRNtJR1yey0q1FFfyBVPQ1NXduOh8or4+BphEhIEVfu9mpWhI
VTBhZIIPALvdknxeexE8wayfk1yIakOzpy3ummElxsjPFpt9CbbnRWzXiNoQ2afg
5iuX0bLJdNB9uxG9Vlze0OrAE2b5ja9w3TknrJD+Uqg5hOtVk7eXTuj00nY0ekFa
GBI5tW1v7H/7JxjVrG7HNqEu5EmDf19v6jcaalEJJwDmPZISBfiFK02e7HfLrZSR
Wh4az93bHoB9mkqagd9MzkGJg6qOrCuBTioTl0Vz3Qnc
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org