Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/_CkCnQAiULvb0nT-ojMQdYG2Z14.roa
File: _CkCnQAiULvb0nT-ojMQdYG2Z14.roa (raw, json)
Hash identifier: nDh6Rc4ZBLv8D+HMavdX2KT+gEdZOXUtQRTDpfphOoU=
Subject key identifier: FC:29:02:9D:00:22:50:BB:DB:D2:74:FE:A2:33:10:75:81:B6:67:5E
Certificate issuer: /CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Certificate serial: 3C3B
Authority key identifier: 4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/_CkCnQAiULvb0nT-ojMQdYG2Z14.roa
Signing time: Mon 03 Jan 2022 10:33:24 +0000
ROA not before: Mon 03 Jan 2022 10:33:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 185.39.8.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15419 (0x3c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Validity
Not Before: Jan 3 10:33:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc29029d002250bbdbd274fea233107581b6675e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:d1:47:4f:55:5d:f1:96:0b:b7:46:09:1f:
4b:3c:79:5b:98:7b:bb:7c:21:f0:07:ef:ae:a3:85:
e8:3f:19:3a:22:52:27:26:f5:8f:6f:c6:74:2d:60:
94:8c:8f:9f:8e:3f:f8:82:0e:92:cf:3a:a9:c6:01:
42:dc:1a:22:21:d1:39:07:43:7f:4e:52:09:c3:9f:
97:53:24:d8:63:95:38:a4:4f:d6:3f:2e:7a:62:16:
d2:61:a5:1c:45:b1:2a:e4:1d:b3:c8:dd:60:7e:16:
70:52:9c:15:aa:78:ad:b3:ca:ef:f5:09:43:6c:99:
93:c3:3a:58:8d:da:dc:cb:be:50:ca:d9:b4:fa:f4:
ed:b8:55:d9:a0:ad:83:c3:20:53:2f:12:44:67:8a:
d0:eb:a1:02:3a:5c:7f:20:0e:34:3a:83:03:90:ca:
6c:9a:f0:40:21:4a:4e:a9:30:a0:92:d6:01:e1:51:
15:55:19:58:d0:12:b2:dc:21:46:8f:0d:6e:b4:3b:
dd:15:d6:cf:7c:a4:eb:70:ba:47:6f:f3:48:36:d5:
69:e4:47:20:0d:16:c3:20:f6:5d:6d:ea:6a:e7:62:
86:d7:8d:f7:69:04:88:e5:f3:9d:6d:51:f4:5a:c1:
39:55:a8:dd:23:6c:f4:4c:9d:59:ca:7a:8e:a3:36:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:02:9D:00:22:50:BB:DB:D2:74:FE:A2:33:10:75:81:B6:67:5E
X509v3 Authority Key Identifier:
keyid:4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/_CkCnQAiULvb0nT-ojMQdYG2Z14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9b:5f:a6:b0:e9:32:a2:f7:9f:48:8a:6d:ed:5a:4b:1f:bc:
21:dc:22:52:6a:99:34:37:8d:da:6c:b6:d9:fc:de:99:f0:c8:
db:9b:c7:ff:03:68:d4:46:9d:8d:20:6d:19:09:8d:55:66:a7:
4e:bc:1d:e4:b9:f2:b1:74:a4:0c:8f:2f:9f:69:7f:df:af:a8:
a6:2d:f2:e1:29:02:3d:21:af:c2:2a:85:d6:1f:69:fc:76:1c:
c6:6e:51:a2:9f:e3:5e:8c:b2:72:ea:cb:35:98:c0:65:3c:e2:
75:ca:c6:e0:1f:33:c4:a8:49:1a:e4:ae:43:a3:61:db:b3:ff:
46:bb:32:ba:88:4c:7f:21:cc:8c:23:65:21:8d:6d:74:42:da:
c0:b5:d1:2b:01:41:c9:a1:27:4a:dc:ec:d4:28:3f:f9:84:4b:
ac:76:e1:25:2d:d8:38:cb:e8:22:8f:d0:be:3a:ae:84:73:e6:
f4:ff:d1:12:90:c8:d7:bf:65:17:e5:60:05:7c:28:93:f6:ad:
8f:4e:e5:6c:47:81:03:fd:c2:4d:e5:84:8e:77:7f:f9:3a:ed:
44:d8:fd:e9:bc:5d:3b:37:6a:f4:39:aa:ec:f8:6a:7d:bb:c7:
2a:d7:cf:41:a4:7b:01:9d:34:dd:4a:d5:fe:f2:b5:6d:e4:ce:
f5:05:83:1a
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICPDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNGE5
ZGY4MDk5YTRjMWM0MjIwMWRhMDU2NzhhM2VkZjJiZTMzZmYyNDAeFw0yMjAxMDMx
MDMzMjRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGZjMjkwMjlkMDAyMjUw
YmJkYmQyNzRmZWEyMzMxMDc1ODFiNjY3NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLZNFHT1Vd8ZYLt0YJH0s8eVuYe7t8IfAH766jheg/GToiUicm
9Y9vxnQtYJSMj5+OP/iCDpLPOqnGAULcGiIh0TkHQ39OUgnDn5dTJNhjlTikT9Y/
LnpiFtJhpRxFsSrkHbPI3WB+FnBSnBWqeK2zyu/1CUNsmZPDOliN2tzLvlDK2bT6
9O24VdmgrYPDIFMvEkRnitDroQI6XH8gDjQ6gwOQymya8EAhSk6pMKCS1gHhURVV
GVjQErLcIUaPDW60O90V1s98pOtwukdv80g21WnkRyANFsMg9l1t6mrnYobXjfdp
BIjl851tUfRawTlVqN0jbPRMnVnKeo6jNmhZAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU/CkCnQAiULvb0nT+ojMQdYG2Z14wHwYDVR0jBBgwFoAUSp34CZpMHEIgHaBW
eKPt8r4z/yQwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9T
cDM0Q1pwTUhFSWdIYUJXZUtQdDhyNHpfeVEuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzI3Lzg5ZDQ0ZC00ZjQzLTQ2ODAtYTBiMi05NDk4NDgzNzVhZGEvMS9f
Q2tDblFBaVVMdmIwblQtb2pNUWRZRzJaMTQucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3Lzg5
ZDQ0ZC00ZjQzLTQ2ODAtYTBiMi05NDk4NDgzNzVhZGEvMS9TcDM0Q1pwTUhFSWdI
YUJXZUtQdDhyNHpfeVEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5JwgwDQYJKoZIhvcNAQELBQADggEB
AG+bX6aw6TKi959Iim3tWksfvCHcIlJqmTQ3jdpsttn83pnwyNubx/8DaNRGnY0g
bRkJjVVmp068HeS58rF0pAyPL59pf9+vqKYt8uEpAj0hr8IqhdYfafx2HMZuUaKf
416MsnLqyzWYwGU84nXKxuAfM8SoSRrkrkOjYduz/0a7MrqITH8hzIwjZSGNbXRC
2sC10SsBQcmhJ0rc7NQoP/mES6x24SUt2DjL6CKP0L46roRz5vT/0RKQyNe/ZRfl
YAV8KJP2rY9O5WxHgQP9wk3lhI53f/k67UTY/em8XTs3avQ5quz4an27xyrXz0Gk
ewGdNN1K1f7ytW3kzvUFgxo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:59 2024 by rpki-client on console-fra.rpki-client.org