Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/ltZ1B4wyp4lcDmrWiJ7c5rZQwio.roa
File: ltZ1B4wyp4lcDmrWiJ7c5rZQwio.roa (raw, json)
Hash identifier: doln3uIXfxce9efTgCTrZzjjtzGGoMyxZK5dZnWqlrg=
Subject key identifier: 96:D6:75:07:8C:32:A7:89:5C:0E:6A:D6:88:9E:DC:E6:B6:50:C2:2A
Certificate issuer: /CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
Certificate serial: 01856F1DBA8ABF0CAA233101FF4B97656092
Authority key identifier: 8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/ltZ1B4wyp4lcDmrWiJ7c5rZQwio.roa
Signing time: Sun 01 Jan 2023 20:54:57 +0000
ROA not before: Sun 01 Jan 2023 20:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.249.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ba:8a:bf:0c:aa:23:31:01:ff:4b:97:65:60:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
Validity
Not Before: Jan 1 20:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96d675078c32a7895c0e6ad6889edce6b650c22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:c8:cb:73:86:7d:ee:dc:f4:3a:ee:0e:7a:
90:91:9b:f4:cf:5f:8b:a3:84:e0:d9:70:da:5c:9a:
63:b9:c4:bd:6e:bd:63:f6:15:bf:a7:4d:6e:92:82:
f6:69:cd:bd:eb:46:20:84:25:f8:99:5f:a0:54:ca:
5a:fb:a0:d9:f8:25:1f:11:ff:56:a0:9c:62:fe:01:
c1:74:cd:c9:7a:1b:23:6d:6c:cf:5f:66:f5:d5:ee:
9f:b1:7f:4c:49:02:71:a7:50:60:d9:7d:90:87:30:
ed:0a:ed:d4:29:4c:11:61:6b:ad:eb:5a:92:ef:75:
5e:5d:c9:a5:d2:5e:ea:2f:d1:6e:61:8f:27:5d:7c:
83:26:cd:b2:6f:77:7d:1a:45:bc:c8:48:28:b7:ff:
53:eb:00:9c:a3:43:67:7b:25:6c:3c:49:e6:33:14:
cd:51:d5:78:e8:37:5e:a2:54:af:a5:e3:3c:17:59:
02:d6:4f:6b:a4:73:d0:b0:3f:7d:b4:42:03:7f:7c:
3b:32:66:78:ee:be:4b:66:55:c2:b6:18:2b:6f:11:
56:40:2d:8d:53:ab:fc:87:0e:70:3b:a8:10:e1:74:
4b:86:49:28:d0:24:f1:b0:c4:8d:31:96:64:64:6a:
b0:fb:f0:3a:06:da:4b:e1:52:b8:7a:2c:1b:8e:82:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D6:75:07:8C:32:A7:89:5C:0E:6A:D6:88:9E:DC:E6:B6:50:C2:2A
X509v3 Authority Key Identifier:
keyid:8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/ltZ1B4wyp4lcDmrWiJ7c5rZQwio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1a:bb:ba:e9:56:cb:d0:49:91:b5:f8:7a:69:10:d5:97:46:
7c:81:5c:17:a2:ed:25:19:60:e1:56:7c:79:6c:2e:b6:11:3f:
4f:91:bd:bc:c5:07:f0:22:67:3a:c1:5b:fd:a0:a6:93:30:08:
de:8a:94:4a:0a:6a:fa:45:cb:0d:1e:9b:6b:ef:8b:11:c7:7f:
49:b9:4f:d3:9c:41:be:1b:72:35:0f:02:ae:a1:94:8c:23:92:
98:5f:42:4f:4f:a2:56:af:7b:16:8c:5a:24:f4:6e:58:37:fd:
e2:c4:3a:77:f5:8e:c0:0f:1f:49:2d:b7:3f:c2:6e:fd:04:16:
96:65:be:46:b4:4e:80:3d:ba:3f:85:cd:5c:3e:72:55:bd:0b:
fb:ff:32:3a:6f:4e:73:c0:70:bc:72:13:69:41:6e:fd:ec:ab:
01:a2:4e:29:42:2b:51:e9:12:99:e7:ef:e2:d8:e8:aa:c9:d1:
af:4c:15:1b:91:4a:d5:79:2a:91:f8:e0:14:78:57:b2:4a:0f:
b0:5e:ce:6d:48:ca:fc:71:52:95:c3:c2:93:03:8b:e5:b2:3c:
20:6c:e7:0b:06:54:a5:77:e5:bd:f8:53:97:6d:44:64:f7:62:
f1:e4:30:b5:54:9c:bd:95:3e:72:72:a9:f1:19:a6:94:bc:56:
fc:80:4c:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHbqKvwyqIzEB/0uXZWCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGIxNWQzNGMwOGI1ZjFmY2ZmNGY5ZTc0Yzk1YmM3NmEw
YjZhYmUwHhcNMjMwMTAxMjA1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ2NzUwNzhjMzJhNzg5NWMwZTZhZDY4ODllZGNlNmI2NTBjMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf3Iy3OGfe7c9DruDnqQkZv0z1+L
o4Tg2XDaXJpjucS9br1j9hW/p01ukoL2ac2960YghCX4mV+gVMpa+6DZ+CUfEf9W
oJxi/gHBdM3JehsjbWzPX2b11e6fsX9MSQJxp1Bg2X2QhzDtCu3UKUwRYWut61qS
73VeXcml0l7qL9FuYY8nXXyDJs2yb3d9GkW8yEgot/9T6wCco0NneyVsPEnmMxTN
UdV46DdeolSvpeM8F1kC1k9rpHPQsD99tEIDf3w7MmZ47r5LZlXCthgrbxFWQC2N
U6v8hw5wO6gQ4XRLhkko0CTxsMSNMZZkZGqw+/A6BtpL4VK4eiwbjoLVmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbWdQeMMqeJXA5q1oie3Oa2UMIqMB8GA1UdIwQY
MBaAFI+LFdNMCLXx/P9PnnTJW8dqC2q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRzVjAwd0l0Zkg4XzAtZWRNbGJ4Mm9MYXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83OGMxMDMtODlkYS00Yjg0LThmMzQt
YWViNmQyY2YyZGUyLzEvbHRaMUI0d3lwNGxjRG1yV2lKN2M1clpRd2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83OGMxMDMtODlkYS00Yjg0LThmMzQtYWViNmQyY2YyZGUy
LzEvajRzVjAwd0l0Zkg4XzAtZWRNbGJ4Mm9MYXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufk2MA0G
CSqGSIb3DQEBCwUAA4IBAQBKGru66VbL0EmRtfh6aRDVl0Z8gVwXou0lGWDhVnx5
bC62ET9Pkb28xQfwImc6wVv9oKaTMAjeipRKCmr6RcsNHptr74sRx39JuU/TnEG+
G3I1DwKuoZSMI5KYX0JPT6JWr3sWjFok9G5YN/3ixDp39Y7ADx9JLbc/wm79BBaW
Zb5GtE6APbo/hc1cPnJVvQv7/zI6b05zwHC8chNpQW797KsBok4pQitR6RKZ5+/i
2OiqydGvTBUbkUrVeSqR+OAUeFeySg+wXs5tSMr8cVKVw8KTA4vlsjwgbOcLBlSl
d+W9+FOXbURk92Lx5DC1VJy9lT5ycqnxGaaUvFb8gExR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:18 2024 by rpki-client on console-ams.rpki-client.org