Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/sLec9S99vv9HgfULzKWwc9avPQQ.roa
File: sLec9S99vv9HgfULzKWwc9avPQQ.roa (raw, json)
Hash identifier: 7wgix64imnNeMK8+UMSHeSFKVzu+LeJXClZ+fY1eF1M=
Subject key identifier: B0:B7:9C:F5:2F:7D:BE:FF:47:81:F5:0B:CC:A5:B0:73:D6:AF:3D:04
Certificate issuer: /CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Certificate serial: 8D4E3C
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/sLec9S99vv9HgfULzKWwc9avPQQ.roa
Signing time: Sat 01 Jan 2022 01:55:53 +0000
ROA not before: Sat 01 Jan 2022 01:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8987
IP address blocks: 185.188.28.0/22 maxlen: 24
2a0b:b480::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9260604 (0x8d4e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Validity
Not Before: Jan 1 01:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b79cf52f7dbeff4781f50bcca5b073d6af3d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:65:75:fe:be:fa:9a:d4:48:50:c0:30:5f:
e8:0a:21:ef:7d:59:aa:78:ca:e6:de:cd:a1:b3:7b:
b2:01:20:db:f6:4c:b8:88:ba:b8:b4:58:1b:d4:7a:
b2:d9:25:3d:93:ae:e1:9b:48:bc:1d:8f:04:23:9c:
9a:25:06:94:67:a5:d1:d4:09:50:d3:82:6d:fb:81:
2b:d6:62:25:9c:c4:c4:67:59:35:87:df:31:08:88:
85:e0:7b:5c:8e:12:88:12:07:72:ad:ac:c6:f8:f1:
e0:b5:7b:33:4c:54:9b:c2:cb:e3:85:c9:a9:3d:42:
f2:a7:84:cf:b6:13:fe:94:1b:2c:af:78:d6:31:cb:
cf:2a:df:52:b2:0b:88:e8:ec:ea:9e:50:b0:9e:67:
21:30:85:72:01:f1:5a:23:41:c0:80:53:49:0a:72:
87:8a:9a:5f:69:f9:40:36:02:79:8d:3d:f6:b1:79:
9c:35:9e:f4:76:c0:0f:86:c4:2d:ab:24:8e:7d:f2:
3c:cd:71:07:64:ce:01:dd:65:da:eb:79:c9:ae:ce:
3f:60:04:ae:21:55:42:b5:cc:48:7c:cd:61:d6:e4:
a8:8c:82:f2:59:fb:87:cf:7d:38:45:19:19:0e:ae:
a3:56:54:a8:2a:e0:a8:25:ff:f5:7c:96:84:fd:59:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:9C:F5:2F:7D:BE:FF:47:81:F5:0B:CC:A5:B0:73:D6:AF:3D:04
X509v3 Authority Key Identifier:
keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/sLec9S99vv9HgfULzKWwc9avPQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/22
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
71:cf:d1:56:48:93:0c:35:c8:05:c6:96:37:a8:0f:12:c4:6c:
18:1c:bc:cb:49:ba:fd:5b:22:26:e6:ff:66:8a:1f:27:b6:64:
fc:da:d7:83:52:90:f0:3a:fc:43:cb:3c:bf:ea:bf:ee:74:81:
4f:f9:f1:77:8f:0c:77:6a:29:0e:31:09:67:96:24:86:eb:e9:
d9:84:c7:01:98:df:af:81:57:e7:31:d1:f3:83:99:16:83:e1:
88:28:a6:59:5a:39:a9:d5:f5:e2:ca:f5:ed:e2:21:15:59:e1:
58:4b:27:f3:43:47:3e:72:32:dc:cc:88:7d:8c:42:75:13:8c:
37:21:63:35:8a:8a:12:45:40:1f:e8:70:f3:2f:4d:6b:cb:b9:
35:92:17:e4:97:c1:1c:07:5f:4f:de:29:88:99:4c:a9:d9:e1:
2d:e9:eb:72:6f:19:ba:0c:36:2f:d3:c2:eb:6e:b3:34:7e:68:
86:6a:bb:dd:77:12:6a:66:ea:96:38:ae:6f:85:db:b4:1c:3d:
2e:06:b3:31:a1:36:83:d0:b4:b0:11:06:56:32:b5:c9:80:6b:
ae:80:9a:6f:2a:7c:d6:b3:cf:8e:e4:ab:95:48:f2:b5:f0:2a:
ba:62:44:78:ca:99:b6:13:fd:31:6c:af:de:75:c2:f3:1b:01:
78:e4:15:72
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAI1OPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Mzc5ZDgzZDIyYTBiZWViODZjODdlMTVhNmNiNmM2OWJkNDI5MDNmMB4XDTIyMDEw
MTAxNTU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjBiNzljZjUyZjdk
YmVmZjQ3ODFmNTBiY2NhNWIwNzNkNmFmM2QwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyTZXX+vvqa1EhQwDBf6Aoh731ZqnjK5t7NobN7sgEg2/ZM
uIi6uLRYG9R6stklPZOu4ZtIvB2PBCOcmiUGlGel0dQJUNOCbfuBK9ZiJZzExGdZ
NYffMQiIheB7XI4SiBIHcq2sxvjx4LV7M0xUm8LL44XJqT1C8qeEz7YT/pQbLK94
1jHLzyrfUrILiOjs6p5QsJ5nITCFcgHxWiNBwIBTSQpyh4qaX2n5QDYCeY099rF5
nDWe9HbAD4bELaskjn3yPM1xB2TOAd1l2ut5ya7OP2AEriFVQrXMSHzNYdbkqIyC
8ln7h899OEUZGQ6uo1ZUqCrgqCX/9XyWhP1ZC3kCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSwt5z1L32+/0eB9QvMpbBz1q89BDAfBgNVHSMEGDAWgBTjedg9IqC+64bI
fhWmy2xpvUKQPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQzbllQU0tndnV1R3lINFZwc3RzYWIxQ2tEOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvZGY1MjA5LTJjOWYtNDJlOS1iMGRmLTM4MTI4MTRjOTNhYS8x
L3NMZWM5Uzk5dnY5SGdmVUx6S1d3YzlhdlBRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
ZGY1MjA5LTJjOWYtNDJlOS1iMGRmLTM4MTI4MTRjOTNhYS8xLzQzbllQU0tndnV1
R3lINFZwc3RzYWIxQ2tEOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArm8HDANBAIAAjAHAwUDKgu0gDAN
BgkqhkiG9w0BAQsFAAOCAQEAcc/RVkiTDDXIBcaWN6gPEsRsGBy8y0m6/VsiJub/
ZoofJ7Zk/NrXg1KQ8Dr8Q8s8v+q/7nSBT/nxd48Md2opDjEJZ5Ykhuvp2YTHAZjf
r4FX5zHR84OZFoPhiCimWVo5qdX14sr17eIhFVnhWEsn80NHPnIy3MyIfYxCdROM
NyFjNYqKEkVAH+hw8y9Na8u5NZIX5JfBHAdfT94piJlMqdnhLenrcm8Zugw2L9PC
626zNH5ohmq73XcSambqljiub4XbtBw9LgazMaE2g9C0sBEGVjK1yYBrroCabyp8
1rPPjuSrlUjytfAqumJEeMqZthP9MWyv3nXC8xsBeOQVcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org