Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1U11slBX938Fufw88TH0YSraG3g.roa
File: 1U11slBX938Fufw88TH0YSraG3g.roa (raw, json)
Hash identifier: z0FfByAvgXOjXfODPxLjd22iWzOkYRkP4Ds4QZTguBM=
Subject key identifier: D5:4D:75:B2:50:57:F7:7F:05:B9:FC:3C:F1:31:F4:61:2A:DA:1B:78
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B125745B9083501E7C655FDBEA910
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1U11slBX938Fufw88TH0YSraG3g.roa
Signing time: Sun 01 Jan 2023 13:35:08 +0000
ROA not before: Sun 01 Jan 2023 13:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204783
IP address blocks: 212.243.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:12:57:45:b9:08:35:01:e7:c6:55:fd:be:a9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54d75b25057f77f05b9fc3cf131f4612ada1b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:d1:d1:58:75:9b:4b:a5:34:9c:fe:1f:fc:
a3:09:d0:37:0b:b6:89:b8:b7:ac:66:15:c9:b9:06:
6c:9b:44:35:df:df:aa:46:90:d9:80:2b:a9:32:07:
a0:2c:0e:7c:c6:1c:46:f6:34:c2:85:64:82:35:cc:
a3:d8:4a:48:ad:c1:31:69:73:2a:aa:bd:10:38:45:
cd:93:1a:66:5c:e9:1d:21:0e:c6:ef:4c:b3:7f:62:
50:c1:74:1f:86:99:2e:51:f1:ee:58:d5:b4:50:e0:
a8:4d:4f:43:d7:52:8b:f2:f2:25:3e:d5:a1:58:fe:
f5:1b:80:0d:0a:15:29:6c:9e:bb:2f:18:fd:80:f9:
03:c9:d5:af:f9:45:72:45:48:57:51:7c:de:02:f6:
e9:45:b9:ab:75:8d:ff:81:df:cb:62:23:50:9d:a8:
59:bb:6a:5b:35:61:ed:9e:b9:ee:3b:e0:ef:a4:48:
f7:c6:9a:d7:6c:d2:5c:e9:be:55:62:5f:3e:76:60:
df:2e:7c:fe:c8:a7:46:0d:e6:05:fd:02:44:b7:45:
ac:20:6d:ec:7e:bc:d4:2b:5c:8a:0d:4f:8d:a3:63:
e8:09:66:26:16:43:aa:e8:f2:2b:9d:4e:1c:40:e6:
e4:97:7a:7d:27:bd:83:27:ab:d5:de:de:47:e1:f4:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:75:B2:50:57:F7:7F:05:B9:FC:3C:F1:31:F4:61:2A:DA:1B:78
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1U11slBX938Fufw88TH0YSraG3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.115.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:8c:d0:e1:df:d3:9e:49:bb:cb:e9:e8:67:24:f5:ad:ae:
a9:48:5a:92:3b:1b:aa:10:8b:68:5b:67:fb:24:3e:c6:61:e4:
23:d5:1b:b6:5b:59:e6:39:42:5e:aa:d8:31:43:64:83:af:97:
b2:c5:87:26:9a:85:9c:a8:29:d8:f6:08:4f:c2:28:0f:fc:af:
b2:6c:54:86:97:2c:69:8b:45:26:3e:be:a5:bf:7d:4b:be:8b:
0e:cf:4d:f9:ef:6e:90:30:fb:82:47:fd:dd:81:d6:69:d0:cf:
10:c8:b4:a3:0b:95:61:46:f9:40:49:6c:88:8b:30:56:a0:e1:
21:52:e3:1c:14:18:3e:43:a9:7d:87:5f:8f:d1:da:5e:ff:f5:
24:35:10:13:5b:5a:30:9d:57:08:ce:4b:b7:47:bf:99:af:74:
fe:56:c7:f9:db:b0:3d:27:dd:ff:29:7c:b7:79:42:d4:5d:40:
8c:7b:57:e9:2e:d7:4b:93:32:88:84:5b:4f:73:6d:22:56:3e:
9b:82:45:32:84:c1:88:bc:9f:11:a9:d2:bd:ad:90:a8:75:e5:
b3:a0:91:f4:6e:f8:d1:5b:da:81:50:03:8b:b8:dd:71:62:3d:
d9:c0:dc:ac:5a:d0:e3:08:ee:94:f1:35:8b:85:8f:44:34:ac:
28:1b:0c:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtixJXRbkINQHnxlX9vqkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTRkNzViMjUwNTdmNzdmMDViOWZjM2NmMTMxZjQ2MTJhZGExYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlnR0Vh1m0ulNJz+H/yjCdA3C7aJ
uLesZhXJuQZsm0Q139+qRpDZgCupMgegLA58xhxG9jTChWSCNcyj2EpIrcExaXMq
qr0QOEXNkxpmXOkdIQ7G70yzf2JQwXQfhpkuUfHuWNW0UOCoTU9D11KL8vIlPtWh
WP71G4ANChUpbJ67Lxj9gPkDydWv+UVyRUhXUXzeAvbpRbmrdY3/gd/LYiNQnahZ
u2pbNWHtnrnuO+DvpEj3xprXbNJc6b5VYl8+dmDfLnz+yKdGDeYF/QJEt0WsIG3s
frzUK1yKDU+No2PoCWYmFkOq6PIrnU4cQObkl3p9J72DJ6vV3t5H4fQg4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVNdbJQV/d/Bbn8PPEx9GEq2ht4MB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvMVUxMXNsQlg5MzhGdWZ3ODhUSDBZU3JhRzNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PNzMA0G
CSqGSIb3DQEBCwUAA4IBAQAyNozQ4d/Tnkm7y+noZyT1ra6pSFqSOxuqEItoW2f7
JD7GYeQj1Ru2W1nmOUJeqtgxQ2SDr5eyxYcmmoWcqCnY9ghPwigP/K+ybFSGlyxp
i0UmPr6lv31LvosOz035726QMPuCR/3dgdZp0M8QyLSjC5VhRvlASWyIizBWoOEh
UuMcFBg+Q6l9h1+P0dpe//UkNRATW1ownVcIzku3R7+Zr3T+Vsf527A9J93/KXy3
eULUXUCMe1fpLtdLkzKIhFtPc20iVj6bgkUyhMGIvJ8RqdK9rZCodeWzoJH0bvjR
W9qBUAOLuN1xYj3ZwNysWtDjCO6U8TWLhY9ENKwoGwx7
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:23 2025 by rpki-client