Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/td8hoTuyO07I_eEa2kZ9AMYSkCg.roa
File: td8hoTuyO07I_eEa2kZ9AMYSkCg.roa (raw, json)
Hash identifier: GGF+x4SPeAkw3HrlmwL2c8Y8yUdRPZy1fHafdKNvnEY=
Subject key identifier: B5:DF:21:A1:3B:B2:3B:4E:C8:FD:E1:1A:DA:46:7D:00:C6:12:90:28
Certificate issuer: /CN=141d5e31a8cf4f6288be82ff6d00eb3f7e3f0643
Certificate serial: 01857315DFD9B1FF338D7F2F1821D1975ABB
Authority key identifier: 14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FB1eMajPT2KIvoL_bQDrP34_BkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/td8hoTuyO07I_eEa2kZ9AMYSkCg.roa
Signing time: Mon 02 Jan 2023 15:24:51 +0000
ROA not before: Mon 02 Jan 2023 15:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21245
IP address blocks: 185.235.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:df:d9:b1:ff:33:8d:7f:2f:18:21:d1:97:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=141d5e31a8cf4f6288be82ff6d00eb3f7e3f0643
Validity
Not Before: Jan 2 15:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5df21a13bb23b4ec8fde11ada467d00c6129028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:50:05:a4:8c:97:a1:43:da:bb:45:98:f7:8c:
04:23:3a:da:2f:74:e5:4a:d2:37:07:93:56:06:71:
bc:73:26:63:74:79:6d:b2:31:94:08:3a:bf:7e:a2:
87:36:12:ec:ca:f9:88:fd:4c:ff:82:86:c5:7c:24:
cc:61:eb:cb:f2:e9:2f:36:85:49:92:8b:40:c6:34:
fd:f3:3e:1f:15:85:a0:32:47:b1:48:a6:e8:2d:91:
42:f9:69:4a:ad:45:7f:02:ec:a8:bd:5f:08:4c:0e:
64:ea:46:b8:7a:6c:08:56:ff:0e:12:3d:95:7b:b4:
02:84:35:43:c5:7c:b7:a9:28:24:4b:9e:f8:d1:df:
21:87:a7:08:7c:92:00:2e:86:ea:45:df:e7:7a:c5:
86:bc:df:b3:fc:99:73:01:4d:3b:ed:97:7a:bb:2a:
34:52:f7:0c:36:6b:66:15:9b:60:e8:2f:f2:b6:42:
1a:fd:bb:3a:68:d4:cc:8f:a5:25:49:5c:54:7b:07:
e7:8f:40:66:11:e1:9e:f9:3b:51:5f:22:53:73:7c:
62:6b:f9:c8:f6:a3:c6:ba:19:4a:72:32:e9:49:6a:
fa:42:60:ee:4c:f9:45:36:58:19:14:6e:69:7d:62:
74:18:a0:23:7b:89:f2:45:00:80:3f:d7:7f:43:90:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:21:A1:3B:B2:3B:4E:C8:FD:E1:1A:DA:46:7D:00:C6:12:90:28
X509v3 Authority Key Identifier:
keyid:14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FB1eMajPT2KIvoL_bQDrP34_BkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/td8hoTuyO07I_eEa2kZ9AMYSkCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.10.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b9:20:5b:d7:b5:24:9e:49:f9:ad:ec:a6:7f:61:07:58:37:
a2:68:65:28:d9:fa:6c:0b:ed:c0:b2:a7:64:3d:64:29:31:2c:
78:f0:86:a2:16:91:cf:63:d1:0b:fc:e3:fd:4d:65:69:fc:d0:
dc:97:bd:22:32:2f:93:ea:7b:03:a0:be:9e:6c:f0:b5:61:65:
14:07:16:f2:ba:c7:61:f4:04:4d:62:32:e6:9e:99:e7:4b:44:
69:16:3b:0f:16:fc:2e:20:0e:1d:86:94:20:bd:39:87:ff:ed:
cf:9a:e4:ad:81:80:53:a8:6d:0f:90:9c:7d:67:bc:16:ee:9e:
26:b3:1f:7e:9b:e6:f6:e2:a1:9b:a8:61:d5:45:31:1e:e2:98:
51:84:63:c9:5c:3c:4f:0f:13:aa:02:90:ec:92:fc:5e:34:55:
6c:d0:7d:b1:de:b5:09:12:61:9f:a6:98:dd:20:f6:18:ed:31:
5e:2f:db:11:6c:7e:f9:80:20:78:ac:39:51:26:33:88:6d:fa:
08:56:23:98:37:33:49:67:e3:64:34:04:4a:25:db:63:c5:24:
25:f8:69:00:54:2a:c1:1e:54:67:73:56:2d:7e:c4:a2:8d:3a:
9d:cd:64:a2:55:b5:d0:e6:96:91:1f:9a:68:37:fc:cd:c1:1f:
67:55:df:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFd/Zsf8zjX8vGCHRl1q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MWQ1ZTMxYThjZjRmNjI4OGJlODJmZjZkMDBlYjNmN2Uz
ZjA2NDMwHhcNMjMwMTAyMTUyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWRmMjFhMTNiYjIzYjRlYzhmZGUxMWFkYTQ2N2QwMGM2MTI5MDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVAFpIyXoUPau0WY94wEIzraL3Tl
StI3B5NWBnG8cyZjdHltsjGUCDq/fqKHNhLsyvmI/Uz/gobFfCTMYevL8ukvNoVJ
kotAxjT98z4fFYWgMkexSKboLZFC+WlKrUV/AuyovV8ITA5k6ka4emwIVv8OEj2V
e7QChDVDxXy3qSgkS5740d8hh6cIfJIALobqRd/nesWGvN+z/JlzAU077Zd6uyo0
UvcMNmtmFZtg6C/ytkIa/bs6aNTMj6UlSVxUewfnj0BmEeGe+TtRXyJTc3xia/nI
9qPGuhlKcjLpSWr6QmDuTPlFNlgZFG5pfWJ0GKAje4nyRQCAP9d/Q5DYfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXfIaE7sjtOyP3hGtpGfQDGEpAoMB8GA1UdIwQY
MBaAFBQdXjGoz09iiL6C/20A6z9+PwZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkIxZU1halBUMktJdm9MX2JRRHJQMzRfQmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jN2U4ZjItMmZjNC00YWVjLTk5YjAt
NDAzMjVmZjc5YmVhLzEvdGQ4aG9UdXlPMDdJX2VFYTJrWjlBTVlTa0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jN2U4ZjItMmZjNC00YWVjLTk5YjAtNDAzMjVmZjc5YmVh
LzEvRkIxZU1halBUMktJdm9MX2JRRHJQMzRfQmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuesKMA0G
CSqGSIb3DQEBCwUAA4IBAQCVuSBb17Uknkn5reymf2EHWDeiaGUo2fpsC+3Asqdk
PWQpMSx48IaiFpHPY9EL/OP9TWVp/NDcl70iMi+T6nsDoL6ebPC1YWUUBxbyusdh
9ARNYjLmnpnnS0RpFjsPFvwuIA4dhpQgvTmH/+3PmuStgYBTqG0PkJx9Z7wW7p4m
sx9+m+b24qGbqGHVRTEe4phRhGPJXDxPDxOqApDskvxeNFVs0H2x3rUJEmGfppjd
IPYY7TFeL9sRbH75gCB4rDlRJjOIbfoIViOYNzNJZ+NkNARKJdtjxSQl+GkAVCrB
HlRnc1YtfsSijTqdzWSiVbXQ5paRH5poN/zNwR9nVd+Q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-fra.rpki-client.org