Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s59WFhxWc98DxaxNERnidmwUo9E.roa
File: s59WFhxWc98DxaxNERnidmwUo9E.roa (raw, json)
Hash identifier: y5JIjkL/OTSWeT3eMZR5i6ysdJNsF+2PLBTzF1YMlaY=
Subject key identifier: B3:9F:56:16:1C:56:73:DF:03:C5:AC:4D:11:19:E2:76:6C:14:A3:D1
Certificate issuer: /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial: 08EC6148
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s59WFhxWc98DxaxNERnidmwUo9E.roa
Signing time: Sat 01 Jan 2022 14:06:17 +0000
ROA not before: Sat 01 Jan 2022 14:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51248
IP address blocks: 138.124.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149709128 (0x8ec6148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Validity
Not Before: Jan 1 14:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b39f56161c5673df03c5ac4d1119e2766c14a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:92:70:86:eb:7d:ca:2e:53:9d:23:aa:47:
6b:42:f2:cf:fd:41:29:84:68:c6:af:b4:72:f9:0a:
6b:d9:2d:8a:de:00:1b:b4:16:c0:53:05:97:04:f1:
b4:7a:b4:9a:66:3a:8d:87:20:fa:66:23:4f:50:29:
20:0d:4a:c0:d4:e6:77:23:81:aa:2e:d6:50:25:19:
93:09:4e:5b:90:e0:b9:99:54:1d:70:84:a7:33:c3:
2a:b5:df:30:04:97:cc:3a:8a:53:22:cc:c6:97:d6:
31:85:6e:17:54:d1:9f:06:02:00:75:66:57:2c:6e:
7a:6d:96:ec:0f:b1:e2:6f:d4:35:a2:58:b9:7a:ad:
ab:4a:5b:36:78:26:5d:c7:e6:01:45:0d:e0:90:16:
39:14:04:02:a3:00:1e:b4:23:1a:9e:57:48:f1:77:
2b:2f:3f:dd:d0:41:45:3b:04:89:fe:31:7b:d7:00:
7e:0e:af:99:df:d2:36:cc:31:bb:ed:7c:d7:54:c2:
07:fe:eb:e5:44:46:d2:ec:18:dd:74:92:55:48:33:
99:07:9d:f4:ad:1e:8f:80:6b:94:2f:c6:22:c7:71:
3c:58:91:85:87:c4:6e:ac:96:10:c6:f6:9d:db:ae:
e9:23:df:e0:87:c8:5b:01:de:d4:c4:e5:79:9c:98:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:56:16:1C:56:73:DF:03:C5:AC:4D:11:19:E2:76:6C:14:A3:D1
X509v3 Authority Key Identifier:
keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s59WFhxWc98DxaxNERnidmwUo9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7d:07:eb:9b:a8:66:d5:bf:74:1c:d0:8e:c3:19:c5:9a:1b:
16:54:7c:18:2b:a5:9f:60:ad:7f:5d:35:ba:93:a8:a1:c8:9d:
07:e7:a0:bf:25:cb:91:af:79:20:f3:17:55:f6:51:97:4e:4c:
1f:22:d9:11:a5:df:62:4d:b0:45:c9:7c:d6:5a:78:d5:ee:fa:
a7:79:a4:98:a2:1c:6b:72:1c:34:14:f2:ea:e2:c0:a1:92:85:
07:0b:1c:60:1d:e7:c0:8f:d6:b4:68:da:77:a1:27:de:89:f1:
dd:23:c5:21:bf:54:c5:64:01:f1:de:57:78:cd:0c:f9:81:67:
00:42:c7:bf:f3:57:fb:c2:0d:a0:05:95:04:b5:64:d8:d3:4b:
df:ce:94:d1:e7:66:17:27:d7:25:b5:21:7f:0c:f7:8f:bb:e4:
85:98:27:a9:e7:dd:69:7b:6b:e3:7c:13:de:fe:0f:c6:9b:e4:
cd:1b:7e:40:7a:97:fc:36:26:b4:82:4e:4d:d9:db:57:2b:e3:
64:db:03:c3:35:a7:54:26:8c:b4:88:ae:73:a3:2a:72:4e:a5:
22:da:6e:82:00:51:23:16:6f:50:f8:22:42:e7:0c:1d:32:eb:
63:0c:7c:e4:0e:15:b8:31:01:4c:33:c3:f7:d2:71:b9:22:f4:
a6:17:9b:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOxhSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzY4MzY4YzVkMjk0MTYwZjRkMmQwY2VhZjc1MzFlNDQ3NWZhNTMzMB4XDTIyMDEw
MTE0MDYxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM5ZjU2MTYxYzU2
NzNkZjAzYzVhYzRkMTExOWUyNzY2YzE0YTNkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6cknCG633KLlOdI6pHa0Lyz/1BKYRoxq+0cvkKa9ktit4A
G7QWwFMFlwTxtHq0mmY6jYcg+mYjT1ApIA1KwNTmdyOBqi7WUCUZkwlOW5DguZlU
HXCEpzPDKrXfMASXzDqKUyLMxpfWMYVuF1TRnwYCAHVmVyxuem2W7A+x4m/UNaJY
uXqtq0pbNngmXcfmAUUN4JAWORQEAqMAHrQjGp5XSPF3Ky8/3dBBRTsEif4xe9cA
fg6vmd/SNswxu+1811TCB/7r5URG0uwY3XSSVUgzmQed9K0ej4BrlC/GIsdxPFiR
hYfEbqyWEMb2nduu6SPf4IfIWwHe1MTleZyYPzcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzn1YWHFZz3wPFrE0RGeJ2bBSj0TAfBgNVHSMEGDAWgBTsaDaMXSlBYPTS
0M6vdTHkR1+lMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdHZzJqRjBwUVdEMDB0RE9yM1V4NUVkZnBUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvN2ZiYjY0LWZmNzUtNDA4Mi05ZDFjLTUwZjU5NzA0MzY1NS8x
L3M1OVdGaHhXYzk4RHhheE5FUm5pZG13VW85RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
N2ZiYjY0LWZmNzUtNDA4Mi05ZDFjLTUwZjU5NzA0MzY1NS8xLzdHZzJqRjBwUVdE
MDB0RE9yM1V4NUVkZnBUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp8tjANBgkqhkiG9w0BAQsFAAOC
AQEAs30H65uoZtW/dBzQjsMZxZobFlR8GCuln2Ctf101upOoocidB+egvyXLka95
IPMXVfZRl05MHyLZEaXfYk2wRcl81lp41e76p3mkmKIca3IcNBTy6uLAoZKFBwsc
YB3nwI/WtGjad6En3onx3SPFIb9UxWQB8d5XeM0M+YFnAELHv/NX+8INoAWVBLVk
2NNL386U0edmFyfXJbUhfwz3j7vkhZgnqefdaXtr43wT3v4PxpvkzRt+QHqX/DYm
tIJOTdnbVyvjZNsDwzWnVCaMtIiuc6Mqck6lItpuggBRIxZvUPgiQucMHTLrYwx8
5A4VuDEBTDPD99JxuSL0pheb6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org