Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/2S9g7pDpVZvL4IapXDoPscy-LqM.roa
File: 2S9g7pDpVZvL4IapXDoPscy-LqM.roa (raw, json)
Hash identifier: UlJBb/J0nCKgq1Rz1vo+fF7OzBCX/C7bF0OyWFRFRz0=
Subject key identifier: D9:2F:60:EE:90:E9:55:9B:CB:E0:86:A9:5C:3A:0F:B1:CC:BE:2E:A3
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 0323E1E9
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/2S9g7pDpVZvL4IapXDoPscy-LqM.roa
Signing time: Sat 01 Jan 2022 12:01:17 +0000
ROA not before: Sat 01 Jan 2022 12:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134512
IP address blocks: 193.228.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52683241 (0x323e1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Jan 1 12:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d92f60ee90e9559bcbe086a95c3a0fb1ccbe2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:11:f2:39:6b:8b:13:6c:42:8c:fd:dd:1d:
cb:c2:7a:e8:2a:c0:94:61:d3:d9:41:7c:e5:53:57:
b3:dc:06:f5:46:ca:a0:97:8b:01:f0:10:81:fb:37:
51:9c:5f:34:f0:fa:89:7d:37:2e:f6:e4:59:9a:be:
5f:e6:9d:26:94:16:91:7d:6a:be:76:e1:e6:34:ab:
70:2a:f1:de:70:bf:42:c1:8c:16:44:4a:cf:14:70:
28:b4:8d:8f:9b:72:cc:e5:00:d9:3a:7a:84:d3:8a:
d3:a2:ac:19:d9:d7:c4:8e:0f:df:82:0f:de:66:2c:
ea:77:6e:7f:dc:6d:23:ce:e6:57:6f:3d:56:03:9a:
52:25:f1:55:90:87:b4:2c:45:0a:76:60:66:1c:7b:
c5:a4:a3:b0:46:a2:31:c3:09:8b:32:6b:7c:eb:de:
cf:f9:ab:6b:31:7c:ab:67:7b:50:e3:1a:71:c5:d4:
61:f0:e2:ec:1c:b8:69:6a:ed:a1:e9:43:b1:fd:ed:
04:d3:9a:dc:c8:88:c3:25:ee:ec:9e:71:19:c2:4e:
4f:6d:1e:61:f9:0d:38:81:a4:a1:d5:63:21:80:92:
ed:fa:06:07:e9:d2:5b:4b:af:ef:af:74:c5:5d:2a:
54:ac:43:c0:3b:12:63:ac:b3:ee:a4:1d:f8:e0:fb:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:60:EE:90:E9:55:9B:CB:E0:86:A9:5C:3A:0F:B1:CC:BE:2E:A3
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/2S9g7pDpVZvL4IapXDoPscy-LqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.224.0/24
Signature Algorithm: sha256WithRSAEncryption
67:54:b1:a2:77:b6:82:07:6a:37:09:51:a6:a2:16:9e:ae:4f:
82:7f:16:53:60:04:c5:bf:98:b6:90:c5:34:b9:84:63:37:fe:
c4:e6:fd:a2:0d:84:2a:65:dd:8d:67:ff:eb:3f:a6:32:5b:1f:
c9:b0:14:1c:a9:d8:1c:32:bc:14:a8:ab:98:d6:57:e5:23:f1:
f8:7f:30:fa:37:1d:d6:b8:d5:81:62:c4:97:08:0e:08:ee:63:
5a:97:a7:57:17:7e:88:02:02:df:32:49:44:4d:aa:d3:a4:45:
71:29:b6:2e:94:4e:4e:97:4f:4e:5a:b0:be:ed:79:0e:b0:af:
3f:2e:f8:c7:cf:56:a1:d3:b7:7e:e3:90:ab:5c:3c:d9:5f:1c:
07:fd:99:30:a3:2d:3d:7c:f0:ec:e2:f6:2b:77:c1:55:5c:44:
94:c5:5d:11:76:1a:87:b3:7b:20:d1:a9:40:2f:e3:ce:c8:9f:
57:e9:a4:b6:bd:be:23:6a:0c:e2:77:ce:53:05:b8:99:d0:ec:
d8:ef:2e:1a:a7:b3:e2:e9:60:ab:4c:2a:4a:c0:50:29:9d:c1:
8c:f6:07:d7:7e:e3:2a:13:a0:c1:db:39:22:0e:98:83:60:2c:
11:8a:45:f2:96:39:ae:00:01:e8:eb:dd:57:0d:86:ba:44:fc:
90:46:9a:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyPh6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDMyNTZhODE5MTFkMTNjZDgwYzUzNjczZTA1MTdmZjIyNWM2ZDA4MB4XDTIyMDEw
MTEyMDExN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkyZjYwZWU5MGU5
NTU5YmNiZTA4NmE5NWMzYTBmYjFjY2JlMmVhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJknEfI5a4sTbEKM/d0dy8J66CrAlGHT2UF85VNXs9wG9UbK
oJeLAfAQgfs3UZxfNPD6iX03LvbkWZq+X+adJpQWkX1qvnbh5jSrcCrx3nC/QsGM
FkRKzxRwKLSNj5tyzOUA2Tp6hNOK06KsGdnXxI4P34IP3mYs6nduf9xtI87mV289
VgOaUiXxVZCHtCxFCnZgZhx7xaSjsEaiMcMJizJrfOvez/mrazF8q2d7UOMaccXU
YfDi7By4aWrtoelDsf3tBNOa3MiIwyXu7J5xGcJOT20eYfkNOIGkodVjIYCS7foG
B+nSW0uv7690xV0qVKxDwDsSY6yz7qQd+OD7ToECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZL2DukOlVm8vghqlcOg+xzL4uozAfBgNVHSMEGDAWgBTEMlaoGRHRPNgM
U2c+BRf/IlxtCDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hESldxQmtSMFR6WURGTm5QZ1VYX3lKY2JRZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvZjVkM2ZiLWM4YzctNDJlNC05ZmY4LTYwMThmYWY0NjRmYi8x
LzJTOWc3cERwVlp2TDRJYXBYRG9Qc2N5LUxxTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
ZjVkM2ZiLWM4YzctNDJlNC05ZmY4LTYwMThmYWY0NjRmYi8xL3hESldxQmtSMFR6
WURGTm5QZ1VYX3lKY2JRZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHk4DANBgkqhkiG9w0BAQsFAAOC
AQEAZ1Sxone2ggdqNwlRpqIWnq5Pgn8WU2AExb+YtpDFNLmEYzf+xOb9og2EKmXd
jWf/6z+mMlsfybAUHKnYHDK8FKirmNZX5SPx+H8w+jcd1rjVgWLElwgOCO5jWpen
Vxd+iAIC3zJJRE2q06RFcSm2LpROTpdPTlqwvu15DrCvPy74x89WodO3fuOQq1w8
2V8cB/2ZMKMtPXzw7OL2K3fBVVxElMVdEXYah7N7INGpQC/jzsifV+mktr2+I2oM
4nfOUwW4mdDs2O8uGqez4ulgq0wqSsBQKZ3BjPYH137jKhOgwds5Ig6Yg2AsEYpF
8pY5rgAB6OvdVw2GukT8kEaaHw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org