Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/POPJtPrgOKkCS7VOdjf6PDpFFYo.roa
File: POPJtPrgOKkCS7VOdjf6PDpFFYo.roa (raw, json)
Hash identifier: hi789ZS4E9Tvz9nU4CBSfztMHC4McLb651I9tK42FCU=
Subject key identifier: 3C:E3:C9:B4:FA:E0:38:A9:02:4B:B5:4E:76:37:FA:3C:3A:45:15:8A
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0185431499EF912633CB998D9706DD6674E6
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/POPJtPrgOKkCS7VOdjf6PDpFFYo.roa
Signing time: Sat 24 Dec 2022 07:41:41 +0000
ROA not before: Sat 24 Dec 2022 07:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 193.31.127.0/24 maxlen: 24
193.56.20.0/24 maxlen: 24
194.99.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:14:99:ef:91:26:33:cb:99:8d:97:06:dd:66:74:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Dec 24 07:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ce3c9b4fae038a9024bb54e7637fa3c3a45158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:d4:00:a6:30:25:ff:b9:37:52:fa:8a:7a:
45:2f:71:09:22:1a:90:5a:6c:91:d2:d3:c9:e5:5e:
a6:d1:e6:09:c6:63:74:72:89:47:39:6f:c2:1a:f5:
16:eb:f3:0d:e4:24:4b:0b:19:50:5e:44:0c:63:fe:
75:22:ea:b4:9f:f2:a9:ad:32:b6:d8:4d:4b:47:a0:
c0:39:dc:4a:d2:9c:13:48:24:6c:c6:e3:fc:ff:0d:
7a:81:a5:55:13:a9:da:0d:2c:d2:b0:ca:29:75:37:
40:74:f3:1c:83:ce:29:8a:1e:60:a8:41:a9:0f:26:
5f:d7:4d:d3:5c:bc:f8:e9:ff:69:88:da:fe:0e:27:
7c:64:34:ef:1e:17:3c:78:71:4e:cc:30:6c:b2:b7:
9c:19:88:2c:db:4b:e9:04:45:8d:c1:04:70:fb:74:
52:ba:19:fe:fb:df:37:73:e0:7f:8c:2d:d7:f4:23:
72:e3:e0:88:f3:e6:a3:e6:be:c3:52:2f:b3:cb:f9:
eb:e3:aa:a3:93:1d:75:15:e9:ff:cc:49:34:c7:ca:
65:b7:87:ff:c6:54:09:3e:4f:82:03:d3:9c:c2:2e:
a6:e9:90:10:07:87:2b:0d:0f:56:10:6c:fa:fb:31:
a7:d6:46:92:8b:e4:b1:f3:ce:d5:cd:ae:bb:89:93:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:C9:B4:FA:E0:38:A9:02:4B:B5:4E:76:37:FA:3C:3A:45:15:8A
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/POPJtPrgOKkCS7VOdjf6PDpFFYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.127.0/24
193.56.20.0/24
194.99.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f0:93:c2:9a:3e:f6:49:21:9b:e4:40:00:41:7d:c4:9b:5d:
c5:e5:e3:cf:08:d4:b6:79:f1:d0:c9:e8:69:08:7b:9c:e5:0c:
74:9a:71:b4:ef:74:0f:b9:be:1f:9c:21:b5:1e:c9:79:54:64:
68:56:af:91:e3:ca:bb:1d:e0:aa:c7:20:04:76:c7:03:7b:0f:
54:89:d7:8c:5c:94:96:60:e9:74:fe:6c:bf:36:de:05:b6:02:
b4:65:0f:5e:6c:cc:8d:1d:18:b5:9d:88:84:d6:85:e7:bd:7b:
68:d6:13:3b:77:d2:77:41:aa:0a:22:fc:2e:76:68:78:ca:66:
64:5c:08:63:4c:2f:dd:f6:ca:07:a3:91:a6:7e:30:16:ab:30:
3e:c7:4e:68:18:e9:52:43:d4:67:0a:38:59:3c:04:a2:5a:40:
dc:c1:91:04:82:ef:18:5e:b3:dc:46:6c:8b:e4:3a:0d:ab:72:
ef:05:96:cd:fb:7e:4a:c3:14:07:97:ae:33:04:c9:e0:8a:89:
7b:59:97:c1:8c:08:24:10:85:0c:a4:0c:23:1c:eb:66:67:cf:
ba:1e:54:80:7f:2c:5e:0d:12:81:a4:6a:80:4b:59:4d:45:cc:
9d:26:c1:96:9a:de:d2:f9:c1:25:e9:30:21:6c:04:e3:61:7f:
1d:1b:67:81
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVDFJnvkSYzy5mNlwbdZnTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzQ3NDgxZjJjOThmYmI3MGRjYThkNjVjMjNkZTRmY2Ez
NzU4M2QwHhcNMjIxMjI0MDc0MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2UzYzliNGZhZTAzOGE5MDI0YmI1NGU3NjM3ZmEzYzNhNDUxNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxDUAKYwJf+5N1L6inpFL3EJIhqQ
WmyR0tPJ5V6m0eYJxmN0colHOW/CGvUW6/MN5CRLCxlQXkQMY/51Iuq0n/KprTK2
2E1LR6DAOdxK0pwTSCRsxuP8/w16gaVVE6naDSzSsMopdTdAdPMcg84pih5gqEGp
DyZf103TXLz46f9piNr+Did8ZDTvHhc8eHFOzDBssrecGYgs20vpBEWNwQRw+3RS
uhn++983c+B/jC3X9CNy4+CI8+aj5r7DUi+zy/nr46qjkx11Fen/zEk0x8plt4f/
xlQJPk+CA9Ocwi6m6ZAQB4crDQ9WEGz6+zGn1kaSi+Sx887Vza67iZPydQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDzjybT64DipAku1TnY3+jw6RRWKMB8GA1UdIwQY
MBaAFI50dIHyyY+7cNyo1lwj3k/KN1g9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgt
NjUyMWQzOTVmMTMyLzEvUE9QSnRQcmdPS2tDUzdWT2RqZjZQRHBGRllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgtNjUyMWQzOTVmMTMy
LzEvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwR9/AwQA
wTgUAwQAwmMZMA0GCSqGSIb3DQEBCwUAA4IBAQAL8JPCmj72SSGb5EAAQX3Em13F
5ePPCNS2efHQyehpCHuc5Qx0mnG073QPub4fnCG1Hsl5VGRoVq+R48q7HeCqxyAE
dscDew9UideMXJSWYOl0/my/Nt4FtgK0ZQ9ebMyNHRi1nYiE1oXnvXto1hM7d9J3
QaoKIvwudmh4ymZkXAhjTC/d9soHo5GmfjAWqzA+x05oGOlSQ9RnCjhZPASiWkDc
wZEEgu8YXrPcRmyL5DoNq3LvBZbN+35KwxQHl64zBMngiol7WZfBjAgkEIUMpAwj
HOtmZ8+6HlSAfyxeDRKBpGqAS1lNRcydJsGWmt7S+cEl6TAhbATjYX8dG2eB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:44 2024 by rpki-client on console-ams.rpki-client.org