Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/yLgCUj53M8mOAwlMhf_hj_HXtR8.roa
File: yLgCUj53M8mOAwlMhf_hj_HXtR8.roa (raw, json)
Hash identifier: NUWlGJcCTJvhXk2QTu2HThkkZn2MVjwoPIXKchh/KqM=
Subject key identifier: C8:B8:02:52:3E:77:33:C9:8E:03:09:4C:85:FF:E1:8F:F1:D7:B5:1F
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: CD88E9
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/yLgCUj53M8mOAwlMhf_hj_HXtR8.roa
Signing time: Sat 01 Jan 2022 05:53:47 +0000
ROA not before: Sat 01 Jan 2022 05:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13469929 (0xcd88e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 05:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b802523e7733c98e03094c85ffe18ff1d7b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:f9:61:a3:75:a9:1e:e0:c9:81:70:b6:91:
95:3c:6b:23:08:a5:7c:58:d8:e7:40:e7:fb:2e:10:
37:09:bf:87:06:3a:60:d3:67:12:b2:69:04:48:9e:
42:70:76:b4:f4:fb:13:b7:7b:8b:82:7b:16:79:d2:
a2:b1:e3:e2:46:27:ca:58:0f:50:15:99:95:17:04:
4c:d5:1c:4f:cf:5c:d1:c5:b2:59:02:65:b8:8f:86:
df:0b:32:40:2c:82:0b:2e:09:8a:29:e5:8c:f8:94:
b8:29:1a:30:e4:94:59:75:8f:b1:c1:0c:c8:e2:d5:
f9:28:c6:3d:f2:d0:11:df:fd:d6:36:1f:c2:23:db:
18:47:d1:4b:36:57:a3:38:b9:63:9e:d6:39:54:03:
33:d9:37:ce:67:78:f7:e6:1e:26:1d:56:00:b0:a0:
47:16:04:1d:b6:be:0b:30:64:59:ea:8e:d8:e8:b3:
19:78:72:99:e1:e5:88:e8:88:8e:8d:52:1d:41:e4:
00:06:47:68:c1:87:17:ae:37:d8:9c:1f:ed:de:6c:
bb:43:35:a2:d7:72:5d:4e:22:fe:a3:cd:88:2d:b4:
6a:28:3c:25:2a:cf:ce:50:4f:45:cc:7f:14:7f:e6:
52:f3:2a:07:28:14:af:09:9a:ae:74:45:6b:e2:e6:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:02:52:3E:77:33:C9:8E:03:09:4C:85:FF:E1:8F:F1:D7:B5:1F
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/yLgCUj53M8mOAwlMhf_hj_HXtR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:09:90:9a:8b:25:bf:21:ed:11:69:ca:9f:95:d5:31:04:b4:
49:83:e1:ef:89:dc:9c:5e:3f:ea:fe:fd:73:87:34:1e:cd:d7:
12:f9:d3:61:9e:2f:4b:eb:f2:c2:9f:05:0c:17:9f:89:91:45:
e9:32:a7:a1:62:54:0b:59:1b:37:1d:70:07:cb:ba:50:e4:44:
d9:dd:0b:10:85:d3:e8:f2:ea:3e:6c:d0:e6:30:1c:05:7a:f0:
d7:29:43:95:ba:b6:9e:c1:9a:45:ac:e7:e5:a8:c4:6b:7f:e3:
5f:71:18:ba:c0:25:2a:75:b2:36:e5:f1:15:1c:d4:8c:4d:71:
1a:c8:23:39:46:e3:47:d9:06:74:00:71:45:eb:a7:2d:27:8b:
23:6f:fd:4d:e1:bf:8a:d7:ef:02:b7:d1:8d:1c:fb:22:07:b1:
a8:0e:25:cf:f6:b7:43:08:cd:38:22:91:62:d0:fc:a9:05:bb:
46:8c:bb:91:40:fe:4d:eb:2f:fd:68:42:fa:e7:77:9c:84:78:
55:fc:fa:ac:4c:b8:0f:b7:8b:37:de:14:f0:c3:9d:72:64:ac:
37:c6:cd:2a:b9:7e:80:e2:c9:5d:2a:d6:34:5e:5c:f4:2e:eb:
9b:41:a3:9f:82:6c:69:b8:be:f2:01:b3:4b:f2:bb:c1:a0:e4:
8f:db:70:32
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAM2I6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjY0MWQxNjIwNzllZmQzYzU2MGE1ZGU5ZTkyMjZiMmYyZjBiMDk3MB4XDTIyMDEw
MTA1NTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzhiODAyNTIzZTc3
MzNjOThlMDMwOTRjODVmZmUxOGZmMWQ3YjUxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNN+WGjdake4MmBcLaRlTxrIwilfFjY50Dn+y4QNwm/hwY6
YNNnErJpBEieQnB2tPT7E7d7i4J7FnnSorHj4kYnylgPUBWZlRcETNUcT89c0cWy
WQJluI+G3wsyQCyCCy4JiinljPiUuCkaMOSUWXWPscEMyOLV+SjGPfLQEd/91jYf
wiPbGEfRSzZXozi5Y57WOVQDM9k3zmd49+YeJh1WALCgRxYEHba+CzBkWeqO2Oiz
GXhymeHliOiIjo1SHUHkAAZHaMGHF6432Jwf7d5su0M1otdyXU4i/qPNiC20aig8
JSrPzlBPRcx/FH/mUvMqBygUrwmarnRFa+LmfYMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTIuAJSPnczyY4DCUyF/+GP8de1HzAfBgNVHSMEGDAWgBRWZB0WIHnv08Vg
pd6ekiay8vCwlzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZtUWRGaUI1NzlQRllLWGVucEltc3ZMd3NKYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvNmU0NGI3LWJhZmYtNDVmMy1hNGU5LTE3Zjg4MWY3NzFjYi8x
L3lMZ0NVajUzTThtT0F3bE1oZl9oal9IWHRSOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
NmU0NGI3LWJhZmYtNDVmMy1hNGU5LTE3Zjg4MWY3NzFjYi8xL1ZtUWRGaUI1NzlQ
RllLWGVucEltc3ZMd3NKYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFZptgMEALzWnTANBgkqhkiG9w0B
AQsFAAOCAQEAtAmQmoslvyHtEWnKn5XVMQS0SYPh74ncnF4/6v79c4c0Hs3XEvnT
YZ4vS+vywp8FDBefiZFF6TKnoWJUC1kbNx1wB8u6UORE2d0LEIXT6PLqPmzQ5jAc
BXrw1ylDlbq2nsGaRazn5ajEa3/jX3EYusAlKnWyNuXxFRzUjE1xGsgjOUbjR9kG
dABxReunLSeLI2/9TeG/itfvArfRjRz7IgexqA4lz/a3QwjNOCKRYtD8qQW7Roy7
kUD+Tesv/WhC+ud3nIR4Vfz6rEy4D7eLN94U8MOdcmSsN8bNKrl+gOLJXSrWNF5c
9C7rm0Gjn4Jsabi+8gGzS/K7waDkj9twMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org