Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/N9miT8xUfyY5TULlNb07Y_Mdxwo.roa
File: N9miT8xUfyY5TULlNb07Y_Mdxwo.roa (raw, json)
Hash identifier: c+I3hSLh+dQc2L2cyOqYBDGpfyesFNgoHle2dt53a54=
Subject key identifier: 37:D9:A2:4F:CC:54:7F:26:39:4D:42:E5:35:BD:3B:63:F3:1D:C7:0A
Certificate issuer: /CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Certificate serial: 76AF7A
Authority key identifier: 4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/N9miT8xUfyY5TULlNb07Y_Mdxwo.roa
Signing time: Tue 25 Jan 2022 22:24:49 +0000
ROA not before: Tue 25 Jan 2022 22:24:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209097
IP address blocks: 185.115.204.0/24 maxlen: 24
2a12:f280::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7778170 (0x76af7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Validity
Not Before: Jan 25 22:24:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d9a24fcc547f26394d42e535bd3b63f31dc70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:b8:9a:bc:29:4a:9b:a1:85:ce:6f:14:3b:
fa:9c:23:4d:d4:9b:6f:da:cc:09:6e:87:d9:6f:18:
d4:e7:b0:2f:9c:44:49:b8:44:9d:c2:05:ff:6d:42:
ca:00:7e:83:07:f5:2e:41:14:8a:35:86:89:d8:a7:
2c:da:a6:96:7d:6d:c9:cf:0f:53:7b:55:10:e4:53:
9c:28:4d:f9:d7:c7:79:b6:9d:dc:8b:d7:51:ef:42:
f4:6c:f9:46:79:79:49:cb:4a:6d:b9:e2:c3:62:71:
65:b4:55:b6:62:1b:2c:c8:55:d0:4f:95:ae:1b:7b:
86:16:92:25:be:cc:34:52:82:bc:a1:36:5a:4c:89:
b1:22:61:de:f9:2e:89:96:2b:be:7f:eb:bb:7a:31:
9f:52:21:8d:8d:d2:4f:39:cc:8d:4f:3b:ed:ad:2b:
5c:ad:24:00:3a:86:c9:49:aa:13:2d:8b:5d:71:c3:
04:92:8b:d4:55:f0:e7:fb:4d:73:be:cb:95:e5:01:
d3:83:ab:99:5d:0a:ca:c8:76:da:97:34:eb:3b:70:
42:85:ac:4b:c4:25:99:45:1a:2d:5a:fc:3e:81:e7:
c2:cf:04:56:8d:60:b1:d2:56:06:ba:1e:5d:7f:63:
f1:d2:c8:4b:df:b9:74:6d:4b:77:41:c7:2a:4f:e6:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:A2:4F:CC:54:7F:26:39:4D:42:E5:35:BD:3B:63:F3:1D:C7:0A
X509v3 Authority Key Identifier:
keyid:4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/N9miT8xUfyY5TULlNb07Y_Mdxwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/TA2tG_GCFaL6gIaRp7xfnnAvmeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.204.0/24
IPv6:
2a12:f280::/29
Signature Algorithm: sha256WithRSAEncryption
8a:83:2b:e6:e4:7e:14:ed:ed:04:f5:30:dc:5f:a9:e5:d6:2f:
bd:3c:ce:ba:e5:20:a5:29:a5:4d:6a:01:a0:7d:b8:2e:ff:ab:
a3:75:57:d8:c7:1a:3a:82:79:e4:c0:07:f8:d1:50:00:d6:d1:
7e:cf:b9:c2:23:f6:0d:2a:ca:4f:4f:de:85:4e:c5:83:b9:98:
2b:df:6c:dc:0f:89:dc:c1:c1:ba:3a:d8:89:ec:39:d3:ae:47:
f5:63:b5:d9:a8:b6:8a:fe:5a:59:41:71:f5:70:ad:68:d6:fb:
7e:8c:91:06:01:be:ea:5d:4a:15:1d:77:e4:e8:6a:bd:ba:db:
ce:0b:b1:21:71:27:d7:5a:7c:3d:e3:db:16:60:9e:82:0e:b8:
60:b1:54:9b:f6:71:45:f0:28:83:f2:b9:12:f7:a9:8c:5b:96:
85:38:cf:ff:36:07:1e:d4:ba:b6:1c:61:7b:77:e5:03:0d:df:
4b:83:8c:03:d5:38:7b:13:b6:e6:5b:f2:d9:bc:7c:06:1f:12:
66:a3:81:37:72:70:2c:aa:af:78:c4:ef:b5:4b:7d:d5:86:9a:
dc:2d:45:2a:58:f9:cf:2a:0e:e3:35:9d:d2:14:5a:4a:76:2d:
f3:a4:9e:70:3e:84:81:7c:92:f5:d2:be:84:8f:88:1f:9c:24:
7c:ce:20:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDdq96MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRj
MGRhZDFiZjE4MjE1YTJmYTgwODY5MWE3YmM1ZjllNzAyZjk5ZTIwHhcNMjIwMTI1
MjIyNDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzN2Q5YTI0ZmNjNTQ3
ZjI2Mzk0ZDQyZTUzNWJkM2I2M2YzMWRjNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtpy4mrwpSpuhhc5vFDv6nCNN1Jtv2swJbofZbxjU57AvnERJ
uESdwgX/bULKAH6DB/UuQRSKNYaJ2Kcs2qaWfW3Jzw9Te1UQ5FOcKE3518d5tp3c
i9dR70L0bPlGeXlJy0ptueLDYnFltFW2YhssyFXQT5WuG3uGFpIlvsw0UoK8oTZa
TImxImHe+S6Jliu+f+u7ejGfUiGNjdJPOcyNTzvtrStcrSQAOobJSaoTLYtdccME
kovUVfDn+01zvsuV5QHTg6uZXQrKyHbalzTrO3BChaxLxCWZRRotWvw+gefCzwRW
jWCx0lYGuh5df2Px0shL37l0bUt3QccqT+ZyBQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFDfZok/MVH8mOU1C5TW9O2PzHccKMB8GA1UdIwQYMBaAFEwNrRvxghWi+oCG
kae8X55wL5niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VEEydEdfR0NGYUw2Z0lhUnA3eGZubkF2bWVJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zYi84ZjdhZTMtOGU1ZS00ZjA2LTk4MjQtYzg2OWQ3NjkxYjMyLzEv
TjltaVQ4eFVmeVk1VFVMbE5iMDdZX01keHdvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84
ZjdhZTMtOGU1ZS00ZjA2LTk4MjQtYzg2OWQ3NjkxYjMyLzEvVEEydEdfR0NGYUw2
Z0lhUnA3eGZubkF2bWVJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXPMMA0EAgACMAcDBQMqEvKAMA0G
CSqGSIb3DQEBCwUAA4IBAQCKgyvm5H4U7e0E9TDcX6nl1i+9PM665SClKaVNagGg
fbgu/6ujdVfYxxo6gnnkwAf40VAA1tF+z7nCI/YNKspPT96FTsWDuZgr32zcD4nc
wcG6OtiJ7DnTrkf1Y7XZqLaK/lpZQXH1cK1o1vt+jJEGAb7qXUoVHXfk6Gq9utvO
C7EhcSfXWnw949sWYJ6CDrhgsVSb9nFF8CiD8rkS96mMW5aFOM//Ngce1Lq2HGF7
d+UDDd9Lg4wD1Th7E7bmW/LZvHwGHxJmo4E3cnAsqq94xO+1S33VhprcLUUqWPnP
Kg7jNZ3SFFpKdi3zpJ5wPoSBfJL10r6Ej4gfnCR8ziBX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org