Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/gfP9b-oO_fySJek1gRyyUlyz3zM.roa
File: gfP9b-oO_fySJek1gRyyUlyz3zM.roa (raw, json)
Hash identifier: T8+fLec6UpKNqh01L5/NFoYt+AplFHqI87RYDXktwgY=
Subject key identifier: 81:F3:FD:6F:EA:0E:FD:FC:92:25:E9:35:81:1C:B2:52:5C:B3:DF:33
Certificate issuer: /CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Certificate serial: 0189654A8E08D086AB90B919F20279429981
Authority key identifier: FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/gfP9b-oO_fySJek1gRyyUlyz3zM.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 176.116.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8e:08:d0:86:ab:90:b9:19:f2:02:79:42:99:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f3fd6fea0efdfc9225e935811cb2525cb3df33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:7c:5f:cc:4c:99:cc:97:53:f3:54:cb:9d:
54:56:ee:6d:f4:61:65:68:0c:f1:10:7b:65:31:95:
ca:ed:89:db:d7:52:26:11:14:4d:3c:a4:fb:c3:c9:
fa:a0:63:79:cc:9b:c9:fd:a2:56:c3:f1:32:9e:05:
c2:9c:f8:63:bc:7b:47:6f:07:9b:84:7b:ef:c3:53:
83:7c:7e:14:ea:61:cf:ec:d5:a3:60:18:00:98:16:
04:3e:4c:50:50:06:3f:ad:8f:32:25:fc:3a:0d:14:
c6:46:e7:ae:ed:ab:6a:d8:54:2e:62:ee:d7:f9:79:
45:39:e6:86:a0:a0:a0:2d:d2:f6:71:7f:d7:43:5c:
62:34:4a:2b:d0:ac:9c:ef:84:f3:3f:eb:0d:a4:b4:
3b:e3:15:d9:0b:e9:14:33:b0:53:5d:e9:c3:5e:c9:
1e:cd:80:c8:15:6b:f8:6e:47:49:5c:f0:5d:a5:b7:
5c:8c:1d:f0:51:90:14:ea:c7:b8:5b:1f:68:bb:0e:
4f:ae:da:fe:db:56:95:fd:36:2d:0b:c6:05:f6:e1:
7e:c3:ff:18:c6:73:0d:5d:86:34:52:07:8a:d6:bc:
2d:b2:3d:f1:ca:4a:6c:a3:4e:97:d5:0f:03:80:4c:
fd:ed:0c:b7:33:30:9c:e3:09:9b:28:9b:53:4f:98:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:FD:6F:EA:0E:FD:FC:92:25:E9:35:81:1C:B2:52:5C:B3:DF:33
X509v3 Authority Key Identifier:
keyid:FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/gfP9b-oO_fySJek1gRyyUlyz3zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.8.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:48:f6:14:01:fe:23:fd:4f:e7:24:08:fc:ad:9b:62:e7:
67:82:c5:68:12:12:be:9f:04:7c:2e:64:43:fe:d7:be:67:2d:
09:77:3e:e9:10:65:e2:03:fa:9c:4d:c2:4f:38:b2:28:c5:84:
49:50:41:e3:1b:74:1a:7e:76:41:93:9c:b5:b8:15:bf:90:9e:
87:cd:46:da:b0:92:d2:d3:18:42:62:ea:78:0a:bf:8a:d8:6f:
27:ba:f8:78:bb:ae:15:84:7a:23:20:f5:ae:e6:b0:e1:39:25:
d5:b2:fa:91:02:4e:d9:8d:44:e8:e6:c4:b5:86:ac:87:ad:13:
c0:b9:70:03:9f:d8:79:d5:fc:f3:92:fe:b2:88:67:17:34:aa:
a9:d4:5e:23:b6:7a:ee:20:71:53:f6:b6:04:6c:40:55:59:ad:
31:63:31:4a:b9:3e:32:64:71:95:66:95:df:c0:3e:94:b2:97:
71:67:a4:f7:12:ee:30:fb:80:57:50:d9:cb:14:d8:db:83:df:
dd:c9:8b:05:74:d1:d8:d7:76:18:59:81:92:7d:ad:4c:21:6f:
58:ac:ba:46:28:18:f1:4a:61:67:83:8e:4d:3f:69:0f:2b:7c:
0e:ff:01:7a:2b:20:d5:36:c9:cb:22:aa:08:e9:09:5e:2d:ab:
43:0a:da:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSo4I0IarkLkZ8gJ5QpmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWVmNGIwZjI2OGQxZWMyNGNjZjU0MmI0ODExZDMwN2Fl
ZjAwMzQwHhcNMjMwNzE3MTkxODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWYzZmQ2ZmVhMGVmZGZjOTIyNWU5MzU4MTFjYjI1MjVjYjNkZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU18X8xMmcyXU/NUy51UVu5t9GFl
aAzxEHtlMZXK7Ynb11ImERRNPKT7w8n6oGN5zJvJ/aJWw/EyngXCnPhjvHtHbweb
hHvvw1ODfH4U6mHP7NWjYBgAmBYEPkxQUAY/rY8yJfw6DRTGRueu7atq2FQuYu7X
+XlFOeaGoKCgLdL2cX/XQ1xiNEor0Kyc74TzP+sNpLQ74xXZC+kUM7BTXenDXske
zYDIFWv4bkdJXPBdpbdcjB3wUZAU6se4Wx9ouw5Prtr+21aV/TYtC8YF9uF+w/8Y
xnMNXYY0UgeK1rwtsj3xykpso06X1Q8DgEz97Qy3MzCc4wmbKJtTT5g+yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHz/W/qDv38kiXpNYEcslJcs98zMB8GA1UdIwQY
MBaAFP5e9LDyaNHsJMz1QrSBHTB67wA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2w3MHNQSm8wZXdrelBWQ3RJRWRNSHJ2QURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MDI2OWYtNDZiNC00ZTAzLTliNjEt
YmQ5ZjQ0NGEwZDcwLzEvZ2ZQOWItb09fZnlTSmVrMWdSeXlVbHl6M3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MDI2OWYtNDZiNC00ZTAzLTliNjEtYmQ5ZjQ0NGEwZDcw
LzEvX2w3MHNQSm8wZXdrelBWQ3RJRWRNSHJ2QURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQIMA0G
CSqGSIb3DQEBCwUAA4IBAQB39kj2FAH+I/1P5yQI/K2bYudngsVoEhK+nwR8LmRD
/te+Zy0Jdz7pEGXiA/qcTcJPOLIoxYRJUEHjG3QafnZBk5y1uBW/kJ6HzUbasJLS
0xhCYup4Cr+K2G8nuvh4u64VhHojIPWu5rDhOSXVsvqRAk7ZjUTo5sS1hqyHrRPA
uXADn9h51fzzkv6yiGcXNKqp1F4jtnruIHFT9rYEbEBVWa0xYzFKuT4yZHGVZpXf
wD6UspdxZ6T3Eu4w+4BXUNnLFNjbg9/dyYsFdNHY13YYWYGSfa1MIW9YrLpGKBjx
SmFng45NP2kPK3wO/wF6KyDVNsnLIqoI6QleLatDCtrm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:56 2024 by rpki-client on console-ams.rpki-client.org