Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/L9RGsKc53NDxCmT67GkFlUxbXQA.roa
File: L9RGsKc53NDxCmT67GkFlUxbXQA.roa (raw, json)
Hash identifier: PXVPq4aCBJ+vwrgNyGBJOucU8krqNAYgGPT9wrM0Res=
Subject key identifier: 2F:D4:46:B0:A7:39:DC:D0:F1:0A:64:FA:EC:69:05:95:4C:5B:5D:00
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 06747B6E
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/L9RGsKc53NDxCmT67GkFlUxbXQA.roa
Signing time: Sat 01 Jan 2022 03:57:24 +0000
ROA not before: Sat 01 Jan 2022 03:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207906
IP address blocks: 195.189.184.0/23 maxlen: 24
195.189.190.0/23 maxlen: 24
2a0f:54c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108297070 (0x6747b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Jan 1 03:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fd446b0a739dcd0f10a64faec6905954c5b5d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:bb:75:ee:71:22:fb:be:04:36:1d:42:f8:
45:db:21:c6:39:a2:a1:c9:5b:79:fb:fe:43:43:8a:
fd:ca:a5:2b:74:f8:4d:99:4e:02:a6:d4:ca:36:92:
df:3a:79:a5:b8:2e:2b:ea:d2:1d:00:0f:a1:cc:9f:
0e:46:5e:4b:cd:f1:50:c6:1c:16:3f:36:19:27:96:
fa:d1:a4:2f:f4:14:0f:b8:fc:43:8c:6d:2a:14:bb:
31:f3:cd:a8:a7:43:63:b3:dc:09:68:81:d4:a9:71:
5d:d7:27:5e:60:6c:fd:a4:22:15:60:e4:82:89:2e:
67:6a:42:ae:35:16:6c:46:54:dc:54:2e:42:2d:23:
45:84:fa:27:1f:b6:9f:bb:6c:14:d7:3f:5d:e3:0b:
a9:66:51:22:88:2c:e2:7d:de:03:06:21:06:a9:1a:
97:c3:5e:17:5d:0a:54:4f:1e:36:65:c2:de:5b:51:
23:37:ac:6e:86:13:85:bc:1f:dc:a4:b3:7d:1b:f7:
fd:3f:20:98:04:2e:da:ba:09:55:df:74:df:aa:f1:
4f:e1:71:c6:a2:e3:e8:7d:79:6e:58:e4:2d:9b:ea:
19:6c:72:ab:01:90:eb:c9:b1:b5:a3:20:6f:37:88:
43:a6:ea:e8:ec:b9:36:2a:fa:97:f7:cc:b3:8f:5c:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:46:B0:A7:39:DC:D0:F1:0A:64:FA:EC:69:05:95:4C:5B:5D:00
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/L9RGsKc53NDxCmT67GkFlUxbXQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.184.0/23
195.189.190.0/23
IPv6:
2a0f:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:f3:e5:e1:58:f8:50:36:26:ed:b1:48:ec:5d:32:62:39:cb:
6a:c3:59:cc:00:ee:23:3f:da:4c:36:b0:24:70:ba:23:13:32:
5a:a9:a8:6a:ab:e6:b9:b4:68:97:98:f1:ca:61:0f:ba:d5:42:
6a:31:da:8f:0e:b5:f9:2f:1d:c8:3a:cf:03:c5:d7:d6:33:7f:
c5:d1:83:05:55:35:52:31:dc:74:00:0f:68:1b:46:62:71:35:
70:80:29:ef:fa:43:7b:fa:ec:13:fe:32:01:2f:fc:97:99:de:
a2:59:e2:d8:14:13:6b:ca:d0:e8:f3:94:4a:de:db:02:f3:74:
c6:9c:86:87:9b:ae:ec:8b:cb:6d:07:a0:84:1e:19:d0:77:e0:
04:67:1d:c8:ae:c5:3c:57:94:73:5e:5f:07:c9:f8:e0:d4:ac:
43:87:6e:89:1d:65:96:aa:ba:23:53:df:89:d4:76:dd:ea:a5:
35:0b:0f:4e:55:7c:6b:53:a3:f3:5a:55:d1:9c:d4:e5:25:5e:
12:3b:40:63:27:45:e5:bd:7a:28:14:99:a9:d2:ca:a2:2c:4f:
8d:ef:07:67:f5:a0:6d:57:6b:36:b0:8c:a5:f0:4c:b7:21:92:
30:e2:54:13:2d:9d:58:ba:da:77:8b:25:fe:f9:5d:49:9d:06:
db:b1:c8:80
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBnR7bjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWJlOTA3Mzc5ZjA2YmViNGNiMzUxMmNjNGFhZWUwNDgxMzRhM2M2MB4XDTIyMDEw
MTAzNTcyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZkNDQ2YjBhNzM5
ZGNkMGYxMGE2NGZhZWM2OTA1OTU0YzViNWQwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBCu3XucSL7vgQ2HUL4Rdshxjmioclbefv+Q0OK/cqlK3T4
TZlOAqbUyjaS3zp5pbguK+rSHQAPocyfDkZeS83xUMYcFj82GSeW+tGkL/QUD7j8
Q4xtKhS7MfPNqKdDY7PcCWiB1KlxXdcnXmBs/aQiFWDkgokuZ2pCrjUWbEZU3FQu
Qi0jRYT6Jx+2n7tsFNc/XeMLqWZRIogs4n3eAwYhBqkal8NeF10KVE8eNmXC3ltR
IzesboYThbwf3KSzfRv3/T8gmAQu2roJVd9036rxT+FxxqLj6H15bljkLZvqGWxy
qwGQ68mxtaMgbzeIQ6bq6Oy5Nir6l/fMs49cW6UCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQv1Eawpznc0PEKZPrsaQWVTFtdADAfBgNVHSMEGDAWgBShvpBzefBr60yz
USzEqu4EgTSjxjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29iNlFjM253YS10TXMxRXN4S3J1QklFMG84WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvMjU5YWQ5LTM2NzgtNDMxOC04YTA5LWZhYWY5NGZjYzgzNC8x
L0w5UkdzS2M1M05EeENtVDY3R2tGbFV4YlhRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
MjU5YWQ5LTM2NzgtNDMxOC04YTA5LWZhYWY5NGZjYzgzNC8xL29iNlFjM253YS10
TXMxRXN4S3J1QklFMG84WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAcO9uAMEAcO9vjANBAIAAjAHAwUD
Kg9UwDANBgkqhkiG9w0BAQsFAAOCAQEALfPl4Vj4UDYm7bFI7F0yYjnLasNZzADu
Iz/aTDawJHC6IxMyWqmoaqvmubRol5jxymEPutVCajHajw61+S8dyDrPA8XX1jN/
xdGDBVU1UjHcdAAPaBtGYnE1cIAp7/pDe/rsE/4yAS/8l5neolni2BQTa8rQ6POU
St7bAvN0xpyGh5uu7IvLbQeghB4Z0HfgBGcdyK7FPFeUc15fB8n44NSsQ4duiR1l
lqq6I1PfidR23eqlNQsPTlV8a1Oj81pV0ZzU5SVeEjtAYydF5b16KBSZqdLKoixP
je8HZ/WgbVdrNrCMpfBMtyGSMOJUEy2dWLrad4sl/vldSZ0G27HIgA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:04 2025 by rpki-client