Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/CImEAvCq583mNAcQT9LN1oItwpU.roa
File: CImEAvCq583mNAcQT9LN1oItwpU.roa (raw, json)
Hash identifier: Tm20zwVmU/HjLszWaLKp38a1Ecmsc2bhFntgsjTdiS0=
Subject key identifier: 08:89:84:02:F0:AA:E7:CD:E6:34:07:10:4F:D2:CD:D6:82:2D:C2:95
Certificate issuer: /CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Certificate serial: 01AE4C8B
Authority key identifier: 4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/CImEAvCq583mNAcQT9LN1oItwpU.roa
Signing time: Sat 01 Jan 2022 00:51:32 +0000
ROA not before: Sat 01 Jan 2022 00:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35782
IP address blocks: 195.10.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28200075 (0x1ae4c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Validity
Not Before: Jan 1 00:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08898402f0aae7cde63407104fd2cdd6822dc295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:a1:e7:95:b2:0d:fa:c4:b3:ff:1b:78:66:
6c:89:7d:57:b2:51:49:a6:55:4d:0b:23:ab:d1:c4:
f5:15:07:17:b8:c3:b4:c6:5e:69:b6:97:1d:65:01:
aa:f3:22:6e:9b:bf:17:98:5c:36:73:6b:5f:59:4c:
6d:ef:0f:66:72:1a:44:03:d8:e7:84:d6:b0:bb:12:
28:38:4b:14:48:4e:90:eb:0a:c4:ee:29:fb:51:27:
83:c4:63:31:f3:3f:f5:61:c1:7c:6e:a6:e9:55:3c:
17:d2:b7:3a:99:2f:59:37:6d:3f:e5:a9:5e:dd:20:
82:26:cc:05:bd:23:87:a5:71:2b:e5:7b:e8:ac:ea:
89:b0:65:92:64:78:d0:38:a8:02:46:63:8b:8f:2c:
0a:40:9d:97:9f:f2:19:bf:56:89:03:eb:4a:e6:18:
7c:0f:09:d0:7a:39:65:2d:71:16:04:d5:15:37:67:
98:aa:45:a1:10:4f:a5:25:e5:0a:af:94:b9:94:69:
f9:07:a6:19:da:b4:98:88:5e:4b:7d:25:8f:bc:dc:
15:48:31:36:a7:3d:94:5f:2b:22:16:72:ef:79:7d:
1e:a3:f4:ae:79:2c:3d:da:19:74:a9:b7:b9:01:38:
47:f3:f3:10:39:fe:19:3d:75:f0:25:89:bd:ad:2b:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:84:02:F0:AA:E7:CD:E6:34:07:10:4F:D2:CD:D6:82:2D:C2:95
X509v3 Authority Key Identifier:
keyid:4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/CImEAvCq583mNAcQT9LN1oItwpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5a:ae:c0:d5:38:a0:8f:f1:e3:f1:60:08:96:cc:0b:20:27:
db:9f:ee:55:2b:70:55:2c:6d:28:dc:8d:1b:92:7a:1f:3e:50:
08:55:5c:6c:92:d8:da:12:58:c2:0d:5f:f1:ac:10:f0:87:82:
9d:64:1c:4b:61:d1:9c:dc:31:28:92:f2:b5:51:d4:5a:9c:7f:
b5:e1:38:1b:5e:f8:d7:9d:12:7a:92:c3:82:33:d7:21:18:d8:
44:a1:41:1c:84:be:d9:cf:0c:8c:cf:d5:83:a8:33:da:f8:65:
bb:60:be:00:94:2d:e1:01:62:87:df:a9:67:4c:ec:30:3d:45:
8a:20:6f:55:16:97:a6:ba:e4:21:fd:78:ea:f8:d6:c0:16:55:
df:95:59:ee:7f:74:d7:20:8a:30:52:81:58:af:3f:04:96:3b:
04:9b:7d:18:d1:2b:c6:97:03:2c:6d:00:0b:23:f6:1c:4d:4f:
94:5d:c8:65:9e:07:f3:90:54:4e:86:40:b2:2f:77:a4:4a:6a:
8f:12:b2:18:63:05:e0:06:e3:f2:c6:14:a7:8b:e5:52:8d:ae:
d7:89:15:6f:93:ac:fc:0b:a9:9e:c3:4d:21:55:dd:14:74:69:
75:60:54:e7:80:46:53:97:83:0f:2c:89:5f:a8:f2:64:56:e5:
6a:0c:5e:1e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAa5MizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjlkMWVkNjZkZjAxYTFlNDk5MmE3NDVmZmRiYmNkNWE5ZTYwOGNiMB4XDTIyMDEw
MTAwNTEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDg4OTg0MDJmMGFh
ZTdjZGU2MzQwNzEwNGZkMmNkZDY4MjJkYzI5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIIoeeVsg36xLP/G3hmbIl9V7JRSaZVTQsjq9HE9RUHF7jD
tMZeabaXHWUBqvMibpu/F5hcNnNrX1lMbe8PZnIaRAPY54TWsLsSKDhLFEhOkOsK
xO4p+1Eng8RjMfM/9WHBfG6m6VU8F9K3OpkvWTdtP+WpXt0ggibMBb0jh6VxK+V7
6KzqibBlkmR40DioAkZji48sCkCdl5/yGb9WiQPrSuYYfA8J0Ho5ZS1xFgTVFTdn
mKpFoRBPpSXlCq+UuZRp+QemGdq0mIheS30lj7zcFUgxNqc9lF8rIhZy73l9HqP0
rnksPdoZdKm3uQE4R/PzEDn+GT118CWJva0ru78CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIiYQC8KrnzeY0BxBP0s3Wgi3ClTAfBgNVHSMEGDAWgBRLnR7WbfAaHkmS
p0X/27zVqeYIyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1M1MGUxbTN3R2g1SmtxZEZfOXU4MWFubUNNcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvMWNkNjgzLTMxMDUtNGIzMS05MjdlLWYzNTg0NWJhYzkxNS8x
L0NJbUVBdkNxNTgzbU5BY1FUOUxOMW9JdHdwVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
MWNkNjgzLTMxMDUtNGIzMS05MjdlLWYzNTg0NWJhYzkxNS8xL1M1MGUxbTN3R2g1
SmtxZEZfOXU4MWFubUNNcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMKyjANBgkqhkiG9w0BAQsFAAOC
AQEAXVquwNU4oI/x4/FgCJbMCyAn25/uVStwVSxtKNyNG5J6Hz5QCFVcbJLY2hJY
wg1f8awQ8IeCnWQcS2HRnNwxKJLytVHUWpx/teE4G174150SepLDgjPXIRjYRKFB
HIS+2c8MjM/Vg6gz2vhlu2C+AJQt4QFih9+pZ0zsMD1FiiBvVRaXprrkIf146vjW
wBZV35VZ7n901yCKMFKBWK8/BJY7BJt9GNErxpcDLG0ACyP2HE1PlF3IZZ4H85BU
ToZAsi93pEpqjxKyGGMF4Abj8sYUp4vlUo2u14kVb5Os/AupnsNNIVXdFHRpdWBU
54BGU5eDDyyJX6jyZFblagxeHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:43 2024 by rpki-client on console-fra.rpki-client.org