Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ebfe1a-1258-4cd9-93e1-d21ab2f65625/1/fLLdoLfR3c8aEcqdjT0NO7MqAgI.roa
File: fLLdoLfR3c8aEcqdjT0NO7MqAgI.roa (raw, json)
Hash identifier: NIK088OTLT+lPan3Lz/hD07IigK2Cezwx4NFbU2g4g0=
Subject key identifier: 7C:B2:DD:A0:B7:D1:DD:CF:1A:11:CA:9D:8D:3D:0D:3B:B3:2A:02:02
Certificate issuer: /CN=a92cc80cdccec196009c0a56b13cf205152bab33
Certificate serial: 0181F299FDC70E31D5A064A515FCEF64EA16
Authority key identifier: A9:2C:C8:0C:DC:CE:C1:96:00:9C:0A:56:B1:3C:F2:05:15:2B:AB:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSzIDNzOwZYAnApWsTzyBRUrqzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ebfe1a-1258-4cd9-93e1-d21ab2f65625/1/fLLdoLfR3c8aEcqdjT0NO7MqAgI.roa
Signing time: Tue 12 Jul 2022 13:29:47 +0000
ROA not before: Tue 12 Jul 2022 13:29:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197883
IP address blocks: 91.208.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:99:fd:c7:0e:31:d5:a0:64:a5:15:fc:ef:64:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92cc80cdccec196009c0a56b13cf205152bab33
Validity
Not Before: Jul 12 13:29:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb2dda0b7d1ddcf1a11ca9d8d3d0d3bb32a0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:5c:c4:bc:66:c5:dc:29:fd:fd:e9:e0:35:
8b:18:b6:1e:52:5c:59:c8:1f:e4:ea:40:0d:bc:4b:
2e:11:6c:f0:cf:e6:75:77:ab:6c:ee:72:b6:07:62:
86:3a:f4:bf:db:b4:ab:e4:1c:0f:af:37:a3:89:54:
59:e0:92:15:ea:df:c7:c7:81:f8:96:65:3b:8f:e1:
42:78:d6:b0:6a:b9:bf:a9:cf:04:5e:11:09:1c:ca:
da:53:4b:4e:ee:56:e3:8c:41:e7:16:01:5f:41:28:
65:0f:46:0d:db:41:17:b3:2a:02:9c:a8:ba:50:bc:
73:9d:c5:c1:93:6f:ee:6e:f0:48:5f:60:07:66:3a:
f7:ad:3e:41:67:45:f8:65:1e:30:11:40:e7:ee:90:
ed:14:ee:14:7a:bd:2a:20:30:1e:92:57:31:ce:6f:
d9:86:0d:48:ed:9a:18:85:16:47:d3:ec:5b:5a:a7:
c1:c9:a1:67:c8:8f:79:a8:cd:49:4d:1d:14:08:70:
02:1f:03:12:62:81:e5:40:c0:da:57:f6:c7:b7:71:
e9:86:c2:48:9d:46:51:a8:4a:af:c5:3f:33:36:ec:
49:58:94:84:b8:bc:89:24:7f:f3:7b:79:00:17:27:
d1:c9:04:bd:ff:24:be:f8:60:a8:a1:10:58:b0:2e:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:DD:A0:B7:D1:DD:CF:1A:11:CA:9D:8D:3D:0D:3B:B3:2A:02:02
X509v3 Authority Key Identifier:
keyid:A9:2C:C8:0C:DC:CE:C1:96:00:9C:0A:56:B1:3C:F2:05:15:2B:AB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSzIDNzOwZYAnApWsTzyBRUrqzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ebfe1a-1258-4cd9-93e1-d21ab2f65625/1/fLLdoLfR3c8aEcqdjT0NO7MqAgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ebfe1a-1258-4cd9-93e1-d21ab2f65625/1/qSzIDNzOwZYAnApWsTzyBRUrqzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:3a:d9:65:21:80:f7:c5:5c:17:4e:a7:fb:84:46:51:37:70:
b1:2a:20:9a:2d:d9:7c:17:e3:90:c8:2d:32:7b:00:8a:14:04:
a2:4b:21:10:87:39:a2:b3:2b:34:e4:45:97:54:33:ee:83:36:
96:de:ab:da:c9:81:d3:ca:39:54:57:0f:37:be:a4:1e:61:e2:
f2:3a:99:7c:2c:db:f8:df:fa:d0:b7:a9:aa:14:ad:f3:a2:8b:
b6:83:43:5e:c4:a3:21:7a:89:14:94:a5:47:ae:c0:5c:13:54:
30:a5:c0:d3:9f:33:10:b8:91:77:d7:bf:c1:09:e8:28:ad:0d:
a9:fd:1f:b0:4a:76:af:72:c0:b4:3b:b9:8e:94:21:6e:7b:45:
0b:6b:aa:f5:99:13:66:a1:42:1f:8b:e2:71:8e:0a:af:74:5b:
72:87:bc:3a:9d:a2:25:08:7c:31:a7:25:84:90:ac:68:e4:5d:
63:b3:bb:c4:2d:05:61:a0:72:69:98:9a:92:d4:3a:68:5e:ba:
04:ff:52:b4:d6:4d:b7:cf:ec:63:2d:1b:7f:b9:8e:e3:c5:39:
30:87:e7:5e:c9:06:f3:ca:d8:1a:9f:01:6d:7d:1f:80:04:df:
4e:cd:4e:5f:d2:b8:1b:df:4a:6c:cd:19:95:c7:0c:a8:f7:5c:
95:c2:61:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHymf3HDjHVoGSlFfzvZOoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmNjODBjZGNjZWMxOTYwMDljMGE1NmIxM2NmMjA1MTUy
YmFiMzMwHhcNMjIwNzEyMTMyOTQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2IyZGRhMGI3ZDFkZGNmMWExMWNhOWQ4ZDNkMGQzYmIzMmEwMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBdcxLxmxdwp/f3p4DWLGLYeUlxZ
yB/k6kANvEsuEWzwz+Z1d6ts7nK2B2KGOvS/27Sr5BwPrzejiVRZ4JIV6t/Hx4H4
lmU7j+FCeNawarm/qc8EXhEJHMraU0tO7lbjjEHnFgFfQShlD0YN20EXsyoCnKi6
ULxzncXBk2/ubvBIX2AHZjr3rT5BZ0X4ZR4wEUDn7pDtFO4Uer0qIDAeklcxzm/Z
hg1I7ZoYhRZH0+xbWqfByaFnyI95qM1JTR0UCHACHwMSYoHlQMDaV/bHt3HphsJI
nUZRqEqvxT8zNuxJWJSEuLyJJH/ze3kAFyfRyQS9/yS++GCooRBYsC6R4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyy3aC30d3PGhHKnY09DTuzKgICMB8GA1UdIwQY
MBaAFKksyAzczsGWAJwKVrE88gUVK6szMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVN6SUROek93WllBbkFwV3NUenlCUlVycXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lYmZlMWEtMTI1OC00Y2Q5LTkzZTEt
ZDIxYWIyZjY1NjI1LzEvZkxMZG9MZlIzYzhhRWNxZGpUME5PN01xQWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lYmZlMWEtMTI1OC00Y2Q5LTkzZTEtZDIxYWIyZjY1NjI1
LzEvcVN6SUROek93WllBbkFwV3NUenlCUlVycXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BVMA0G
CSqGSIb3DQEBCwUAA4IBAQCxOtllIYD3xVwXTqf7hEZRN3CxKiCaLdl8F+OQyC0y
ewCKFASiSyEQhzmisys05EWXVDPugzaW3qvayYHTyjlUVw83vqQeYeLyOpl8LNv4
3/rQt6mqFK3zoou2g0NexKMheokUlKVHrsBcE1QwpcDTnzMQuJF317/BCegorQ2p
/R+wSnavcsC0O7mOlCFue0ULa6r1mRNmoUIfi+JxjgqvdFtyh7w6naIlCHwxpyWE
kKxo5F1js7vELQVhoHJpmJqS1DpoXroE/1K01k23z+xjLRt/uY7jxTkwh+deyQbz
ytganwFtfR+ABN9OzU5f0rgb30pszRmVxwyo91yVwmGs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:00 2024 by rpki-client on console-ams.rpki-client.org