Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/botwZxhA1k6yWrUinzSuZhlRVRU.roa
File: botwZxhA1k6yWrUinzSuZhlRVRU.roa (raw, json)
Hash identifier: FBLkPE4Nn0BE7vp0COiR1UYyQ7meC5j/OQZB7tuUvoU=
Subject key identifier: 6E:8B:70:67:18:40:D6:4E:B2:5A:B5:22:9F:34:AE:66:19:51:55:15
Certificate issuer: /CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Certificate serial: 9F2261
Authority key identifier: A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/botwZxhA1k6yWrUinzSuZhlRVRU.roa
Signing time: Tue 11 Jan 2022 09:13:41 +0000
ROA not before: Tue 11 Jan 2022 09:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.23.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10429025 (0x9f2261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Validity
Not Before: Jan 11 09:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e8b70671840d64eb25ab5229f34ae6619515515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:cd:08:75:80:fa:ee:49:28:dd:a5:06:69:
bc:63:d0:2f:e2:a9:27:3d:66:be:97:7a:46:c4:91:
fb:cc:42:97:5e:c1:f2:2e:49:51:30:83:bf:a2:a8:
b2:e7:7e:57:c3:42:2b:f7:ee:c1:cc:77:18:87:4e:
e2:9b:71:22:a7:ce:51:25:73:c3:24:45:43:d0:12:
f3:ad:11:3e:87:33:ef:26:00:5f:d0:77:37:e0:97:
b6:03:48:d9:ff:97:0d:af:ac:88:3a:b6:ed:a5:9d:
dc:b0:f8:58:e8:c6:e8:c9:fe:2e:06:85:0a:a7:3e:
b8:da:84:14:04:14:fb:b8:1f:c7:d5:2f:a1:86:4d:
ec:62:3d:cd:7e:12:e0:6b:dd:46:e2:58:76:14:1b:
9d:fb:64:f6:6a:f2:25:b8:79:d8:2f:fa:77:35:de:
4f:4b:fd:db:86:58:d4:0d:da:cc:d0:17:93:18:da:
b3:f4:af:7b:d3:38:87:b8:80:d2:fc:eb:86:36:d6:
30:b4:35:57:02:25:26:6f:68:fd:e7:eb:dc:06:8a:
8f:0b:69:c7:15:00:51:40:3e:c3:a7:81:a9:b0:17:
09:73:33:43:fe:14:ba:7e:8b:bf:99:e4:c2:1b:26:
68:ca:44:aa:7c:bd:5d:22:11:54:21:4a:f2:f6:ce:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:70:67:18:40:D6:4E:B2:5A:B5:22:9F:34:AE:66:19:51:55:15
X509v3 Authority Key Identifier:
keyid:A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/botwZxhA1k6yWrUinzSuZhlRVRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:42:5b:01:d3:dd:4f:17:84:5c:5f:39:99:fe:0c:f9:a7:55:
bf:a2:84:e7:d5:a2:6b:76:ab:47:11:84:9e:8d:fa:83:33:c8:
09:0e:06:c8:f6:fd:a0:81:c7:9e:58:12:19:1d:df:93:cd:38:
de:52:e2:b0:09:8b:25:da:1f:09:93:15:83:7b:ad:df:c6:ac:
3a:74:96:6f:c4:65:1e:bf:1f:4f:d6:48:a8:60:c0:48:b5:80:
87:75:0e:98:04:eb:6f:e8:5e:46:f3:84:3c:b2:50:32:df:7a:
aa:30:94:34:0c:21:1a:c2:ac:f9:4d:01:51:90:7a:6e:04:82:
2c:47:d5:4b:c2:b3:4f:e3:f7:b1:e9:25:a7:0c:80:97:bf:2c:
a0:18:04:17:ae:81:af:41:df:66:03:71:8b:b4:59:a1:55:01:
63:8d:58:54:dc:bc:61:ec:66:a2:0a:1f:f6:33:ca:67:e5:5a:
b3:eb:4e:00:08:85:83:58:23:66:de:26:87:8a:cb:ff:8b:56:
a8:f6:d9:96:4d:88:2a:cc:92:27:20:bb:d7:91:34:53:94:e7:
c2:1c:98:d5:7e:ab:48:e3:00:8c:c7:e1:3a:63:1a:5b:41:4d:
44:56:b5:01:b6:e2:f1:01:64:11:d2:15:f6:aa:1e:f1:9f:0a:
6b:34:4e:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJ8iYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NWM2NmVkODgwZTRlMjhlOGE2ZTRhMWI1ZjllMDkyMjIzNTAyYmI2MB4XDTIyMDEx
MTA5MTM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmU4YjcwNjcxODQw
ZDY0ZWIyNWFiNTIyOWYzNGFlNjYxOTUxNTUxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJr0zQh1gPruSSjdpQZpvGPQL+KpJz1mvpd6RsSR+8xCl17B
8i5JUTCDv6Kosud+V8NCK/fuwcx3GIdO4ptxIqfOUSVzwyRFQ9AS860RPocz7yYA
X9B3N+CXtgNI2f+XDa+siDq27aWd3LD4WOjG6Mn+LgaFCqc+uNqEFAQU+7gfx9Uv
oYZN7GI9zX4S4GvdRuJYdhQbnftk9mryJbh52C/6dzXeT0v924ZY1A3azNAXkxja
s/Sve9M4h7iA0vzrhjbWMLQ1VwIlJm9o/efr3AaKjwtpxxUAUUA+w6eBqbAXCXMz
Q/4Uun6Lv5nkwhsmaMpEqny9XSIRVCFK8vbONXUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRui3BnGEDWTrJatSKfNK5mGVFVFTAfBgNVHSMEGDAWgBSlxm7YgOTijopu
ShtfngkiI1ArtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BjWnUySURrNG82S2Jrb2JYNTRKSWlOUUs3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2IvZDI4N2VjLTA5YWItNDBkYS04ZTY3LTRmZTgwZDFjNDM0OS8x
L2JvdHdaeGhBMWs2eVdyVWluelN1WmhsUlZSVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Iv
ZDI4N2VjLTA5YWItNDBkYS04ZTY3LTRmZTgwZDFjNDM0OS8xL3BjWnUySURrNG82
S2Jrb2JYNTRKSWlOUUs3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQX1DANBgkqhkiG9w0BAQsFAAOC
AQEAXEJbAdPdTxeEXF85mf4M+adVv6KE59Wia3arRxGEno36gzPICQ4GyPb9oIHH
nlgSGR3fk8043lLisAmLJdofCZMVg3ut38asOnSWb8RlHr8fT9ZIqGDASLWAh3UO
mATrb+heRvOEPLJQMt96qjCUNAwhGsKs+U0BUZB6bgSCLEfVS8KzT+P3seklpwyA
l78soBgEF66Br0HfZgNxi7RZoVUBY41YVNy8Yexmogof9jPKZ+Vas+tOAAiFg1gj
Zt4mh4rL/4tWqPbZlk2IKsySJyC715E0U5TnwhyY1X6rSOMAjMfhOmMaW0FNRFa1
Abbi8QFkEdIV9qoe8Z8KazROdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:10 2024 by rpki-client on console-fra.rpki-client.org