Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/ez5gWT41gCgUTRj5vAZiZUWv-nE.roa
File: ez5gWT41gCgUTRj5vAZiZUWv-nE.roa (raw, json)
Hash identifier: +4vo85NnBEd44gf6CZdNAA+dONjgIev2X7LvfOTJBe4=
Subject key identifier: 7B:3E:60:59:3E:35:80:28:14:4D:18:F9:BC:06:62:65:45:AF:FA:71
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 01843EDE0DBA03CB59A26E6425B08622FA42
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/ez5gWT41gCgUTRj5vAZiZUWv-nE.roa
Signing time: Thu 03 Nov 2022 19:00:50 +0000
ROA not before: Thu 03 Nov 2022 19:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:de:0d:ba:03:cb:59:a2:6e:64:25:b0:86:22:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Nov 3 19:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b3e60593e358028144d18f9bc06626545affa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:97:c4:47:33:68:63:8f:1d:89:83:02:43:
d4:80:9a:4f:11:b0:21:bf:99:c7:55:60:70:99:e8:
6b:1d:4f:5d:a8:ff:a7:08:18:6f:29:19:6f:95:e2:
0d:d1:51:f1:2e:40:4d:61:05:6b:8b:91:3f:65:83:
d8:c9:cd:6d:a2:96:03:01:b4:23:5a:c3:92:50:89:
c6:97:48:c2:59:ed:d2:f4:21:45:e4:ee:a0:66:bf:
fb:f5:56:4d:16:63:29:19:35:5e:13:cc:13:02:f1:
e8:5d:8e:6c:30:43:2b:0a:86:3d:6d:37:98:2f:7f:
2e:f9:50:a7:d6:9b:03:a8:d7:f2:00:7a:8b:d2:74:
10:00:72:0e:ba:7d:5a:74:ad:07:a6:12:0f:d8:65:
3d:51:1f:8d:da:4a:9b:55:18:35:39:d7:26:f8:f9:
c5:14:9e:fe:b6:b5:37:84:a5:4d:74:af:9c:7c:61:
5d:b6:00:9b:37:4a:39:fe:74:14:82:c5:fb:72:7f:
fb:72:1e:3d:2d:fe:bc:18:d9:09:ec:c1:76:b4:ee:
cc:4c:e4:57:ef:87:a4:86:39:be:78:50:10:d2:c3:
69:80:62:f6:a2:ca:20:a5:54:93:06:c1:88:08:5b:
05:b1:ec:ae:7e:07:a7:84:e5:20:e7:02:8e:c7:6a:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:60:59:3E:35:80:28:14:4D:18:F9:BC:06:62:65:45:AF:FA:71
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/ez5gWT41gCgUTRj5vAZiZUWv-nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7e:e8:93:8f:fb:9c:fc:44:57:24:a8:6a:22:11:eb:57:f0:
60:bf:d6:ad:23:4e:ce:95:13:6d:ed:c2:4f:3b:c8:18:24:c7:
b3:f7:35:00:a7:9b:ef:40:7b:49:6e:c2:1a:d5:13:e0:fa:6f:
14:f0:fb:56:02:5d:3f:41:39:14:3d:0d:4b:f8:bd:a6:8c:08:
81:a9:f8:b4:81:f5:d4:00:32:1d:27:7c:b5:44:a8:48:d8:3e:
c3:3a:b3:01:59:b9:c5:63:11:95:9e:4e:03:33:f2:45:9c:91:
62:16:0e:8e:a6:21:84:a2:69:7e:fb:e6:f7:83:2b:af:08:63:
09:d6:44:46:9d:d1:cb:a0:23:d0:c7:42:33:40:60:ef:6b:3c:
4f:59:8a:b5:79:10:df:44:98:66:33:fa:c9:16:16:02:02:d6:
e2:2c:86:d9:fa:29:05:ac:f7:94:a3:d6:cc:7f:71:4c:9a:da:
9e:be:c2:47:75:92:b2:f4:3a:17:b3:ea:2a:cd:f2:36:8b:18:
09:8f:66:24:b1:44:29:50:d8:4f:aa:c0:bd:d7:cc:2a:a4:ac:
1b:b0:50:42:af:d0:eb:2d:eb:8f:57:c7:0a:91:90:2f:27:2a:
06:e3:a2:e0:f2:7c:91:e1:d2:79:87:7f:0d:57:4b:67:41:a4:
22:2c:c4:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ+3g26A8tZom5kJbCGIvpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYmYwZDRmMjVlYzExOTcyOGYxNGE5YzUxYWVlODAzNGZm
ZjNmZjYwHhcNMjIxMTAzMTkwMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjNlNjA1OTNlMzU4MDI4MTQ0ZDE4ZjliYzA2NjI2NTQ1YWZmYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe+XxEczaGOPHYmDAkPUgJpPEbAh
v5nHVWBwmehrHU9dqP+nCBhvKRlvleIN0VHxLkBNYQVri5E/ZYPYyc1topYDAbQj
WsOSUInGl0jCWe3S9CFF5O6gZr/79VZNFmMpGTVeE8wTAvHoXY5sMEMrCoY9bTeY
L38u+VCn1psDqNfyAHqL0nQQAHIOun1adK0HphIP2GU9UR+N2kqbVRg1Odcm+PnF
FJ7+trU3hKVNdK+cfGFdtgCbN0o5/nQUgsX7cn/7ch49Lf68GNkJ7MF2tO7MTORX
74ekhjm+eFAQ0sNpgGL2osogpVSTBsGICFsFseyufgenhOUg5wKOx2o7ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHs+YFk+NYAoFE0Y+bwGYmVFr/pxMB8GA1UdIwQY
MBaAFD+/DU8l7BGXKPFKnFGu6ANP/z/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDc4TlR5WHNFWmNvOFVxY1VhN29BMF9fUF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hOGU4MDgtOTVmMy00YWIzLTk3OGIt
MjNjZDdjY2VhYzQ1LzEvZXo1Z1dUNDFnQ2dVVFJqNXZBWmlaVVd2LW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hOGU4MDgtOTVmMy00YWIzLTk3OGItMjNjZDdjY2VhYzQ1
LzEvUDc4TlR5WHNFWmNvOFVxY1VhN29BMF9fUF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHYhMA0G
CSqGSIb3DQEBCwUAA4IBAQCWfuiTj/uc/ERXJKhqIhHrV/Bgv9atI07OlRNt7cJP
O8gYJMez9zUAp5vvQHtJbsIa1RPg+m8U8PtWAl0/QTkUPQ1L+L2mjAiBqfi0gfXU
ADIdJ3y1RKhI2D7DOrMBWbnFYxGVnk4DM/JFnJFiFg6OpiGEoml+++b3gyuvCGMJ
1kRGndHLoCPQx0IzQGDvazxPWYq1eRDfRJhmM/rJFhYCAtbiLIbZ+ikFrPeUo9bM
f3FMmtqevsJHdZKy9DoXs+oqzfI2ixgJj2YksUQpUNhPqsC918wqpKwbsFBCr9Dr
LeuPV8cKkZAvJyoG46Lg8nyR4dJ5h38NV0tnQaQiLMSs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org