Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/7h3Gu9vGrXgYlHOVtuQtd5DRvTA.roa
File: 7h3Gu9vGrXgYlHOVtuQtd5DRvTA.roa (raw, json)
Hash identifier: 7YQFX83qhXOyTFubS9MnM1f5cTivLedYQHq+8p/GjpE=
Subject key identifier: EE:1D:C6:BB:DB:C6:AD:78:18:94:73:95:B6:E4:2D:77:90:D1:BD:30
Certificate issuer: /CN=52cf8fe30ee0388070eebc71c4400a3222400d1b
Certificate serial: D3804E
Authority key identifier: 52:CF:8F:E3:0E:E0:38:80:70:EE:BC:71:C4:40:0A:32:22:40:0D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us-P4w7gOIBw7rxxxEAKMiJADRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/7h3Gu9vGrXgYlHOVtuQtd5DRvTA.roa
Signing time: Sat 01 Jan 2022 05:53:08 +0000
ROA not before: Sat 01 Jan 2022 05:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13860942 (0xd3804e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cf8fe30ee0388070eebc71c4400a3222400d1b
Validity
Not Before: Jan 1 05:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee1dc6bbdbc6ad7818947395b6e42d7790d1bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:d5:82:05:64:29:13:9f:d2:92:a9:78:39:
b1:c2:42:97:c7:ad:76:b1:ca:d9:98:52:c6:19:13:
09:7d:53:49:1a:f2:89:4e:1b:1a:fd:cd:c5:6b:82:
f9:dc:ed:2f:3c:7f:96:21:62:88:d0:ef:a9:8e:fa:
c4:b4:47:29:8e:63:b9:3c:9d:e6:d3:a9:af:8f:36:
6a:3c:7f:e4:09:2d:cc:a5:07:c5:dd:0f:23:7a:48:
56:23:5c:1e:47:fc:2e:0c:e4:a0:f9:d0:bf:f9:0a:
d2:14:f9:a2:2a:6d:5d:35:73:53:17:13:1a:01:b8:
0b:c5:8f:c7:b0:3a:3f:aa:56:a9:08:7f:03:e3:ae:
29:d5:a9:01:59:ee:77:d5:30:a2:ad:c1:27:e6:e9:
99:2f:fa:f7:15:3a:23:71:20:ae:1a:14:11:d1:de:
0d:0e:e6:28:2d:1c:d7:e7:39:6c:98:f3:16:2d:a2:
79:23:60:89:83:fd:db:c6:b7:b9:dc:f7:c7:5d:c1:
39:75:47:34:f1:99:41:04:39:b2:a3:66:66:95:cf:
b0:7a:e4:46:9a:c0:f3:28:82:fc:2a:09:d4:0e:fc:
0e:dc:16:5a:b7:c5:38:75:56:1c:76:61:7b:7a:8a:
c4:1d:b5:85:a8:03:1b:8c:62:79:b1:7a:a1:f4:a7:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:C6:BB:DB:C6:AD:78:18:94:73:95:B6:E4:2D:77:90:D1:BD:30
X509v3 Authority Key Identifier:
keyid:52:CF:8F:E3:0E:E0:38:80:70:EE:BC:71:C4:40:0A:32:22:40:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us-P4w7gOIBw7rxxxEAKMiJADRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/7h3Gu9vGrXgYlHOVtuQtd5DRvTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef340b-513e-4582-801d-a7328a476c7e/1/Us-P4w7gOIBw7rxxxEAKMiJADRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:73:07:fc:83:0d:f6:09:c4:30:d7:87:27:ef:54:8b:59:75:
c1:4a:9e:72:ef:75:16:e5:2f:fd:39:67:c7:79:cb:e7:9a:e0:
0f:74:9f:37:dc:87:46:71:8e:bb:6f:8b:b6:83:93:f5:16:0b:
bd:e0:8c:dc:0f:59:f3:2c:91:7b:2f:37:58:2e:84:92:b8:f7:
4a:7f:43:60:40:e2:a7:61:f1:de:e4:cb:c7:4d:87:60:89:11:
2c:49:82:40:ad:10:10:4e:7b:ab:09:d6:86:b5:18:59:47:86:
21:e8:dd:e2:1a:c0:5f:f0:ee:a9:72:57:b8:aa:87:23:ac:a1:
6f:0e:29:30:b1:22:a5:b2:79:ae:b0:9f:7e:d3:17:d4:f3:eb:
e5:f0:b1:e8:cd:5e:af:3f:1c:0f:3e:25:6d:7f:14:06:73:f7:
b8:c5:ca:c2:14:e0:0a:ba:c8:1c:05:ce:f7:68:27:0a:84:dd:
ea:25:a0:8e:d2:35:1d:2f:ad:10:8c:96:67:5c:0c:74:5a:6c:
d4:65:31:41:ce:b9:f1:2c:b5:af:58:41:a0:84:52:67:67:e6:
5c:d3:7e:80:8b:3d:de:ff:d9:d1:20:89:b7:6a:de:3e:33:8b:
2f:39:fd:2f:27:2d:cb:73:81:94:c1:c9:19:77:75:62:e0:91:
27:da:dd:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANOATjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MmNmOGZlMzBlZTAzODgwNzBlZWJjNzFjNDQwMGEzMjIyNDAwZDFiMB4XDTIyMDEw
MTA1NTMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWUxZGM2YmJkYmM2
YWQ3ODE4OTQ3Mzk1YjZlNDJkNzc5MGQxYmQzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEA1YIFZCkTn9KSqXg5scJCl8etdrHK2ZhSxhkTCX1TSRry
iU4bGv3NxWuC+dztLzx/liFiiNDvqY76xLRHKY5juTyd5tOpr482ajx/5AktzKUH
xd0PI3pIViNcHkf8LgzkoPnQv/kK0hT5oiptXTVzUxcTGgG4C8WPx7A6P6pWqQh/
A+OuKdWpAVnud9Uwoq3BJ+bpmS/69xU6I3EgrhoUEdHeDQ7mKC0c1+c5bJjzFi2i
eSNgiYP928a3udz3x13BOXVHNPGZQQQ5sqNmZpXPsHrkRprA8yiC/CoJ1A78DtwW
WrfFOHVWHHZhe3qKxB21hagDG4xiebF6ofSnYG0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTuHca728ateBiUc5W25C13kNG9MDAfBgNVHSMEGDAWgBRSz4/jDuA4gHDu
vHHEQAoyIkANGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VzLVA0dzdnT0lCdzdyeHh4RUFLTWlKQURScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2QvZWYzNDBiLTUxM2UtNDU4Mi04MDFkLWE3MzI4YTQ3NmM3ZS8x
LzdoM0d1OXZHclhnWWxIT1Z0dVF0ZDVEUnZUQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Qv
ZWYzNDBiLTUxM2UtNDU4Mi04MDFkLWE3MzI4YTQ3NmM3ZS8xL1VzLVA0dzdnT0lC
dzdyeHh4RUFLTWlKQURScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJo7TANBgkqhkiG9w0BAQsFAAOC
AQEApHMH/IMN9gnEMNeHJ+9Ui1l1wUqecu91FuUv/Tlnx3nL55rgD3SfN9yHRnGO
u2+LtoOT9RYLveCM3A9Z8yyRey83WC6Ekrj3Sn9DYEDip2Hx3uTLx02HYIkRLEmC
QK0QEE57qwnWhrUYWUeGIejd4hrAX/DuqXJXuKqHI6yhbw4pMLEipbJ5rrCfftMX
1PPr5fCx6M1erz8cDz4lbX8UBnP3uMXKwhTgCrrIHAXO92gnCoTd6iWgjtI1HS+t
EIyWZ1wMdFps1GUxQc658Sy1r1hBoIRSZ2fmXNN+gIs93v/Z0SCJt2rePjOLLzn9
Lycty3OBlMHJGXd1YuCRJ9rdag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org