Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/AbD8r1fW1Z5FkvC7psCgE3Qinb8.roa
File: AbD8r1fW1Z5FkvC7psCgE3Qinb8.roa (raw, json)
Hash identifier: RydbaqtuP/fWXWV75WQMdTgTkfK5piCx9nwOW+oDgbI=
Subject key identifier: 01:B0:FC:AF:57:D6:D5:9E:45:92:F0:BB:A6:C0:A0:13:74:22:9D:BF
Certificate issuer: /CN=1f5a551d52a15f67a586e0efb62a0af2896909e8
Certificate serial: 0188F65B9B040EE3354AC244E23684996AFE
Authority key identifier: 1F:5A:55:1D:52:A1:5F:67:A5:86:E0:EF:B6:2A:0A:F2:89:69:09:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1pVHVKhX2elhuDvtioK8olpCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/AbD8r1fW1Z5FkvC7psCgE3Qinb8.roa
Signing time: Mon 26 Jun 2023 06:19:38 +0000
ROA not before: Mon 26 Jun 2023 06:19:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20723
IP address blocks: 185.111.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:5b:9b:04:0e:e3:35:4a:c2:44:e2:36:84:99:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5a551d52a15f67a586e0efb62a0af2896909e8
Validity
Not Before: Jun 26 06:19:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b0fcaf57d6d59e4592f0bba6c0a01374229dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:9f:a3:9c:6c:d3:75:f5:ca:58:79:99:37:
5b:fc:5e:3e:4f:84:94:07:ec:8b:27:75:92:9a:8f:
99:02:19:93:a3:90:2e:7c:52:ad:9e:ca:7b:27:3a:
da:c7:6d:bc:3d:bf:95:22:03:f6:54:e4:f4:0f:00:
50:37:0f:ad:8f:05:ac:0e:b4:69:1b:2c:34:80:98:
6e:41:1d:70:82:f8:80:3a:fb:25:2e:09:d8:21:a1:
d2:d3:04:80:c1:49:c4:41:0a:b1:da:78:1a:11:8d:
d6:a7:06:b4:a2:56:a9:da:9a:b3:c9:c6:66:8c:0a:
37:a8:49:e2:a4:aa:05:2f:a4:f8:a3:17:c1:76:9f:
0f:d8:c3:93:9e:97:e3:36:c3:e9:45:1e:ae:4a:7f:
df:79:7d:d5:5e:d1:aa:48:bc:22:a0:4b:e8:4d:6a:
e3:29:1f:0c:30:c6:39:14:be:57:b8:de:b0:8e:38:
04:46:45:45:c8:e9:9c:d5:e9:4f:3b:9a:6e:c4:a7:
83:84:5f:77:46:f4:54:b0:c9:ab:ff:b0:b6:62:50:
fb:ed:ef:12:c3:16:b6:cb:c2:4b:11:e8:0e:f3:ff:
7a:f6:cc:29:9e:88:de:04:d4:44:73:65:47:11:d7:
ad:3e:68:94:65:3b:51:da:4b:44:46:fa:7f:65:25:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:FC:AF:57:D6:D5:9E:45:92:F0:BB:A6:C0:A0:13:74:22:9D:BF
X509v3 Authority Key Identifier:
keyid:1F:5A:55:1D:52:A1:5F:67:A5:86:E0:EF:B6:2A:0A:F2:89:69:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1pVHVKhX2elhuDvtioK8olpCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/AbD8r1fW1Z5FkvC7psCgE3Qinb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/H1pVHVKhX2elhuDvtioK8olpCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.96.0/22
Signature Algorithm: sha256WithRSAEncryption
78:97:21:ac:c1:26:82:49:62:b8:48:f4:31:a9:fa:b4:bf:20:
76:73:5c:a9:f3:ca:d8:e9:ab:82:3b:dc:aa:b2:b4:f7:e1:3d:
1b:f0:c6:96:a5:de:0a:eb:f9:c5:4e:4e:a6:c3:dc:ea:d9:5d:
41:8a:dd:94:48:69:11:c0:be:4f:fd:d2:bb:7e:70:35:ac:ca:
32:79:65:47:53:af:1d:dd:e2:d1:bd:e0:be:31:c7:48:80:bb:
72:1a:dd:0d:dc:0d:7f:7d:a6:74:a2:6f:0f:0e:61:56:0f:eb:
c5:3f:8a:65:be:5c:4e:fd:82:65:06:53:fb:5b:6c:e6:5e:46:
dd:1c:41:30:67:ea:9a:88:c7:a6:b4:d4:b9:a8:fb:b2:52:c5:
45:13:30:a4:c8:09:30:c6:cd:0a:14:48:5d:95:16:fe:3d:a9:
62:52:10:8d:89:21:81:d8:dd:14:7e:73:4d:55:f8:1b:48:4c:
ad:e6:55:bb:fd:9b:b8:13:08:9f:39:ca:b6:42:70:f6:15:df:
58:ce:59:47:0c:bb:1b:92:15:b0:a4:8b:e2:78:90:de:a2:7a:
00:63:e5:46:ce:d3:12:c3:5c:15:83:e0:56:c1:f6:1d:46:d8:
09:c6:47:49:e7:a8:e7:77:bf:38:2e:c6:e4:5d:13:3a:27:0a:
77:e2:63:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj2W5sEDuM1SsJE4jaEmWr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNWE1NTFkNTJhMTVmNjdhNTg2ZTBlZmI2MmEwYWYyODk2
OTA5ZTgwHhcNMjMwNjI2MDYxOTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWIwZmNhZjU3ZDZkNTllNDU5MmYwYmJhNmMwYTAxMzc0MjI5ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x6fo5xs03X1ylh5mTdb/F4+T4SU
B+yLJ3WSmo+ZAhmTo5AufFKtnsp7Jzrax228Pb+VIgP2VOT0DwBQNw+tjwWsDrRp
Gyw0gJhuQR1wgviAOvslLgnYIaHS0wSAwUnEQQqx2ngaEY3Wpwa0olap2pqzycZm
jAo3qEnipKoFL6T4oxfBdp8P2MOTnpfjNsPpRR6uSn/feX3VXtGqSLwioEvoTWrj
KR8MMMY5FL5XuN6wjjgERkVFyOmc1elPO5puxKeDhF93RvRUsMmr/7C2YlD77e8S
wxa2y8JLEegO8/969swpnojeBNREc2VHEdetPmiUZTtR2ktERvp/ZSXaHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGw/K9X1tWeRZLwu6bAoBN0Ip2/MB8GA1UdIwQY
MBaAFB9aVR1SoV9npYbg77YqCvKJaQnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFwVkhWS2hYMmVsaHVEdnRpb0s4b2xwQ2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lZWI2N2ItYWRiNC00NThhLTkzYmUt
N2U5ZDczMzA0ZDdjLzEvQWJEOHIxZlcxWjVGa3ZDN3BzQ2dFM1FpbmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lZWI2N2ItYWRiNC00NThhLTkzYmUtN2U5ZDczMzA0ZDdj
LzEvSDFwVkhWS2hYMmVsaHVEdnRpb0s4b2xwQ2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW9gMA0G
CSqGSIb3DQEBCwUAA4IBAQB4lyGswSaCSWK4SPQxqfq0vyB2c1yp88rY6auCO9yq
srT34T0b8MaWpd4K6/nFTk6mw9zq2V1Bit2USGkRwL5P/dK7fnA1rMoyeWVHU68d
3eLRveC+McdIgLtyGt0N3A1/faZ0om8PDmFWD+vFP4plvlxO/YJlBlP7W2zmXkbd
HEEwZ+qaiMemtNS5qPuyUsVFEzCkyAkwxs0KFEhdlRb+PaliUhCNiSGB2N0UfnNN
VfgbSEyt5lW7/Zu4EwifOcq2QnD2Fd9YzllHDLsbkhWwpIvieJDeonoAY+VGztMS
w1wVg+BWwfYdRtgJxkdJ56jnd784LsbkXRM6Jwp34mM9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org