Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/m0-8O1wLGndMZ4M74YvvQJXf6Ho.roa
File: m0-8O1wLGndMZ4M74YvvQJXf6Ho.roa (raw, json)
Hash identifier: s2nx2/OQvdmWGllJvUSlMFsphNJAbcrh1aK+TDv4AUI=
Subject key identifier: 9B:4F:BC:3B:5C:0B:1A:77:4C:67:83:3B:E1:8B:EF:40:95:DF:E8:7A
Certificate issuer: /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial: 0185727A273860E9D4D2131FFF694C455879
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/m0-8O1wLGndMZ4M74YvvQJXf6Ho.roa
Signing time: Mon 02 Jan 2023 12:34:45 +0000
ROA not before: Mon 02 Jan 2023 12:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.243.1.0/24 maxlen: 24
2a0d:3c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:27:38:60:e9:d4:d2:13:1f:ff:69:4c:45:58:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Validity
Not Before: Jan 2 12:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4fbc3b5c0b1a774c67833be18bef4095dfe87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:ed:95:eb:7f:f5:71:c9:92:02:5d:8b:c1:
b1:74:76:5a:2f:d0:88:d3:e5:da:8d:63:72:47:a8:
a9:20:2d:33:1d:b3:c1:c1:d0:41:54:bd:5f:ad:16:
e1:69:ee:ac:79:7e:f9:55:fe:6a:13:ef:09:ce:ea:
46:10:82:2e:5e:6d:33:ff:6e:9b:f6:c1:a9:fb:67:
f6:8f:3a:40:48:b1:be:b6:71:8a:6d:16:48:27:00:
c3:04:01:f5:ef:df:71:b1:ba:b0:f8:08:a0:9d:1b:
68:8f:53:5d:a1:4c:ef:72:b6:d6:00:de:51:11:5e:
56:41:70:00:b0:a6:28:74:80:16:2b:56:83:6f:d6:
6f:7d:d1:14:ae:0a:46:fb:40:91:6b:4d:38:a5:c5:
49:3a:b8:fc:91:cd:33:d7:1b:e8:a3:29:de:7d:ed:
f5:ca:b2:1d:1d:03:8c:2f:7d:e1:34:06:90:d6:3d:
e2:56:09:78:f9:ec:d4:d3:76:f4:d4:06:6d:6e:a5:
18:38:3f:d1:2f:d9:56:5c:5c:98:69:5f:c5:26:1b:
65:01:d7:f4:be:fc:ef:ef:6b:70:d3:85:13:51:af:
06:69:98:4b:aa:77:9d:61:23:89:f8:88:65:72:a5:
9c:92:a2:09:b4:55:9b:83:15:c7:fc:b2:e8:62:3f:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:BC:3B:5C:0B:1A:77:4C:67:83:3B:E1:8B:EF:40:95:DF:E8:7A
X509v3 Authority Key Identifier:
keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/m0-8O1wLGndMZ4M74YvvQJXf6Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.1.0/24
IPv6:
2a0d:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0b:bd:fc:1d:d1:00:47:21:33:4d:3d:d7:23:eb:d6:2a:1c:
1d:bb:4e:fc:17:7a:ed:2e:e6:5f:23:5b:25:d5:aa:27:43:89:
fc:a6:e5:30:a7:9d:fe:2e:80:4b:08:2b:f4:db:6e:4e:62:c6:
de:28:04:14:16:9a:3a:88:a8:fc:f1:98:bc:a0:a2:73:4a:05:
97:0c:53:71:93:e8:a1:c1:ff:58:b9:24:6f:97:91:92:42:09:
43:53:26:75:a6:ea:db:b9:c7:35:cb:c5:23:91:dd:c1:dd:95:
31:55:15:ed:8d:11:47:22:29:54:6c:a0:41:c5:53:ae:1d:c6:
44:8e:9e:2a:f0:c7:57:8c:3a:ad:16:f0:96:db:d8:8e:97:40:
f5:4e:4c:9e:0f:d0:70:b4:33:16:32:a7:76:b1:0f:8d:68:3b:
35:f9:f2:ec:d3:ff:88:f5:b3:13:7e:33:eb:79:4e:20:64:c7:
c5:ad:bc:93:95:07:5e:33:00:01:21:63:e0:64:72:9c:9c:a4:
5f:13:9d:64:b7:a9:7f:73:f8:16:0e:4b:5f:29:5b:a1:89:1c:
a7:4f:cd:bf:3c:c6:05:10:23:17:d9:c2:c2:64:1f:ed:90:32:
fa:58:ce:bd:a1:ae:70:47:43:fa:28:3b:0b:b0:b9:19:35:e5:
d5:6d:43:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVyeic4YOnU0hMf/2lMRVh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGExZjhjZjNiODAxNmJlODgzMmY3OGIxMDFiMzY0ZTEx
MTQwMjUwHhcNMjMwMTAyMTIzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRmYmMzYjVjMGIxYTc3NGM2NzgzM2JlMThiZWY0MDk1ZGZlODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDHtlet/9XHJkgJdi8GxdHZaL9CI
0+XajWNyR6ipIC0zHbPBwdBBVL1frRbhae6seX75Vf5qE+8JzupGEIIuXm0z/26b
9sGp+2f2jzpASLG+tnGKbRZIJwDDBAH1799xsbqw+AignRtoj1NdoUzvcrbWAN5R
EV5WQXAAsKYodIAWK1aDb9ZvfdEUrgpG+0CRa004pcVJOrj8kc0z1xvooynefe31
yrIdHQOML33hNAaQ1j3iVgl4+ezU03b01AZtbqUYOD/RL9lWXFyYaV/FJhtlAdf0
vvzv72tw04UTUa8GaZhLqnedYSOJ+IhlcqWckqIJtFWbgxXH/LLoYj+5PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJtPvDtcCxp3TGeDO+GL70CV3+h6MB8GA1UdIwQY
MBaAFMoKH4zzuAFr6IMveLEBs2ThEUAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDct
YjU5NDc0MGE0MGE3LzEvbTAtOE8xd0xHbmRNWjRNNzRZdnZRSlhmNkhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDctYjU5NDc0MGE0MGE3
LzEveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAufMBMA8E
AgACMAkDBwAqDTyAAAAwDQYJKoZIhvcNAQELBQADggEBAI4Lvfwd0QBHITNNPdcj
69YqHB27TvwXeu0u5l8jWyXVqidDifym5TCnnf4ugEsIK/Tbbk5ixt4oBBQWmjqI
qPzxmLygonNKBZcMU3GT6KHB/1i5JG+XkZJCCUNTJnWm6tu5xzXLxSOR3cHdlTFV
Fe2NEUciKVRsoEHFU64dxkSOnirwx1eMOq0W8Jbb2I6XQPVOTJ4P0HC0MxYyp3ax
D41oOzX58uzT/4j1sxN+M+t5TiBkx8WtvJOVB14zAAEhY+BkcpycpF8TnWS3qX9z
+BYOS18pW6GJHKdPzb88xgUQIxfZwsJkH+2QMvpYzr2hrnBHQ/ooOwuwuRk15dVt
Q6E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org