Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/11CDPLLz43Tx8nky_oR_gSWE-NI.roa
File: 11CDPLLz43Tx8nky_oR_gSWE-NI.roa (raw, json)
Hash identifier: eFOH0+C62UVUJ6GOOT+4fNJLWlm4YetTNt83uOhlC4s=
Subject key identifier: D7:50:83:3C:B2:F3:E3:74:F1:F2:79:32:FE:84:7F:81:25:84:F8:D2
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184523DDB2322120FD459F8809F94BB2E1B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/11CDPLLz43Tx8nky_oR_gSWE-NI.roa
Signing time: Mon 07 Nov 2022 13:18:16 +0000
ROA not before: Mon 07 Nov 2022 13:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 91.199.168.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:3d:db:23:22:12:0f:d4:59:f8:80:9f:94:bb:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 7 13:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d750833cb2f3e374f1f27932fe847f812584f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:4d:71:b6:0d:58:25:95:ac:d7:2a:14:00:
94:4f:f3:3d:eb:a6:ea:79:11:b3:5b:76:06:df:59:
0e:ba:4d:96:8c:3d:46:b4:0a:9e:e6:6b:1f:28:98:
07:6d:51:3a:cc:a5:26:c9:05:08:5a:9f:aa:b8:33:
2f:1e:d2:d7:62:a3:a3:bc:ac:9d:e8:3e:9f:0a:e3:
a0:f4:9d:c7:83:7a:ba:b6:f9:f2:75:a1:e5:ef:ad:
43:2c:39:df:4c:4d:b1:6a:de:73:3e:f7:20:7a:8e:
7b:c2:55:64:22:31:50:c9:f6:79:16:37:82:4c:70:
c0:b3:ac:72:c5:37:d0:13:a8:aa:64:98:c4:d0:2c:
6a:17:4a:7c:7e:01:84:a8:f2:b4:e3:29:13:b2:3d:
da:13:ea:90:d8:91:78:f6:12:fd:6a:a8:09:31:35:
af:af:d3:66:dc:55:da:49:01:9f:d7:b0:dd:51:d2:
a9:f8:1f:8e:3f:1d:0f:68:6c:f6:f0:5f:84:c1:b7:
8e:5e:5e:14:a2:e4:65:ae:8d:40:97:81:50:71:7d:
c6:70:30:a3:16:0f:1f:5d:be:a1:83:56:d8:96:77:
1c:8c:60:5d:84:a0:4d:4e:8f:1a:8c:1a:84:2f:7a:
82:7f:79:30:c6:8c:58:6e:88:0c:03:9a:c9:0c:88:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:83:3C:B2:F3:E3:74:F1:F2:79:32:FE:84:7F:81:25:84:F8:D2
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/11CDPLLz43Tx8nky_oR_gSWE-NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
176.105.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:43:63:60:57:01:d5:28:a0:3f:08:c2:1e:44:eb:69:71:f5:
80:f5:b9:75:4f:7c:b1:18:99:df:87:51:9e:e0:a2:9f:de:18:
4f:f0:fb:5b:b7:e6:c7:aa:8f:49:df:5c:1b:f4:c2:92:db:de:
e2:f2:fe:7d:45:65:b2:2b:78:1e:fe:98:2c:f9:1d:83:4c:36:
da:8e:42:81:f8:af:6c:57:c4:f3:66:8d:07:63:64:4d:66:6a:
63:7e:e6:c9:e1:1e:b2:9a:3f:9d:1a:4e:ef:36:e3:63:47:ff:
ba:a4:e6:c9:2e:83:95:b4:09:41:fc:7b:d5:1a:60:fd:63:a0:
a2:31:48:2e:41:d9:71:57:e6:e3:6b:d1:1a:fe:84:44:9e:df:
51:af:ef:c5:40:1e:ff:5f:f1:5d:d2:f1:8e:fa:97:d3:f6:fb:
ca:43:70:38:cf:e7:f4:9a:47:28:84:d2:81:28:e3:04:a1:e8:
ac:c9:a5:44:11:45:8f:1b:b1:80:3a:ab:46:27:b1:19:51:2e:
1e:26:44:82:82:37:24:a3:9f:8b:6e:93:b0:ae:17:d7:f7:00:
5d:c6:5f:d6:ad:a2:56:b9:9d:f8:57:aa:8f:0a:bb:83:f0:c3:
55:23:8a:bc:24:e4:20:d7:31:cd:05:eb:dd:98:96:e1:2f:a9:
6c:82:e7:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRSPdsjIhIP1Fn4gJ+Uuy4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTA3MTMxODE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzUwODMzY2IyZjNlMzc0ZjFmMjc5MzJmZTg0N2Y4MTI1ODRmOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwRNcbYNWCWVrNcqFACUT/M966bq
eRGzW3YG31kOuk2WjD1GtAqe5msfKJgHbVE6zKUmyQUIWp+quDMvHtLXYqOjvKyd
6D6fCuOg9J3Hg3q6tvnydaHl761DLDnfTE2xat5zPvcgeo57wlVkIjFQyfZ5FjeC
THDAs6xyxTfQE6iqZJjE0CxqF0p8fgGEqPK04ykTsj3aE+qQ2JF49hL9aqgJMTWv
r9Nm3FXaSQGf17DdUdKp+B+OPx0PaGz28F+EwbeOXl4UouRlro1Al4FQcX3GcDCj
Fg8fXb6hg1bYlnccjGBdhKBNTo8ajBqEL3qCf3kwxoxYbogMA5rJDIg30wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNdQgzyy8+N08fJ5Mv6Ef4ElhPjSMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvMTFDRFBMTHo0M1R4OG5reV9vUl9nU1dFLU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8eoAwQA
sGnhMA0GCSqGSIb3DQEBCwUAA4IBAQAMQ2NgVwHVKKA/CMIeROtpcfWA9bl1T3yx
GJnfh1Ge4KKf3hhP8Ptbt+bHqo9J31wb9MKS297i8v59RWWyK3ge/pgs+R2DTDba
jkKB+K9sV8TzZo0HY2RNZmpjfubJ4R6ymj+dGk7vNuNjR/+6pObJLoOVtAlB/HvV
GmD9Y6CiMUguQdlxV+bja9Ea/oREnt9Rr+/FQB7/X/Fd0vGO+pfT9vvKQ3A4z+f0
mkcohNKBKOMEoeisyaVEEUWPG7GAOqtGJ7EZUS4eJkSCgjcko5+LbpOwrhfX9wBd
xl/WraJWuZ34V6qPCruD8MNVI4q8JOQg1zHNBevdmJbhL6lsgude
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org