Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3407b2-aee4-4b4b-9f60-1a3780026ddb/1/OEaff9U2r76GheSp-SUdBgidpQM.roa
File: OEaff9U2r76GheSp-SUdBgidpQM.roa (raw, json)
Hash identifier: kX0SzLKHP5FJBEWEUIT01yPEBDMyADH/dKAOwJvYKus=
Subject key identifier: 38:46:9F:7F:D5:36:AF:BE:86:85:E4:A9:F9:25:1D:06:08:9D:A5:03
Certificate issuer: /CN=494404eedc92a7a952319451fff27b87e7cdb024
Certificate serial: 01856F1DD35958D238858BA6E8E716FDD70C
Authority key identifier: 49:44:04:EE:DC:92:A7:A9:52:31:94:51:FF:F2:7B:87:E7:CD:B0:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUQE7tySp6lSMZRR__J7h-fNsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3407b2-aee4-4b4b-9f60-1a3780026ddb/1/OEaff9U2r76GheSp-SUdBgidpQM.roa
Signing time: Sun 01 Jan 2023 20:55:03 +0000
ROA not before: Sun 01 Jan 2023 20:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199146
IP address blocks: 195.114.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d3:59:58:d2:38:85:8b:a6:e8:e7:16:fd:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494404eedc92a7a952319451fff27b87e7cdb024
Validity
Not Before: Jan 1 20:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38469f7fd536afbe8685e4a9f9251d06089da503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:68:98:70:d1:ff:2f:11:dc:17:38:31:2a:
73:82:b8:76:71:1a:cc:a2:83:13:17:43:28:03:fb:
4a:a6:91:b9:49:10:05:cb:cb:14:d2:1d:fb:a2:03:
93:cd:fe:ed:83:cf:7a:a7:39:8a:15:88:b9:de:6b:
ee:90:e2:70:aa:42:e9:f8:90:66:4a:f4:a9:fa:fd:
80:5b:ea:96:c8:1a:29:c6:b6:78:f9:fc:08:dd:18:
85:2a:de:65:fe:19:9b:b1:db:47:60:ff:b9:f4:9f:
ed:68:74:43:70:21:c6:74:59:94:ac:61:c8:e5:d8:
f5:65:30:92:2f:73:0f:ac:42:26:f7:ee:4a:f0:d2:
8c:3a:e1:0b:45:91:2c:56:e8:b8:12:87:fb:66:22:
cd:29:94:f5:de:6a:83:64:02:33:63:b6:92:0b:b6:
2a:13:12:36:e5:fd:13:07:0c:94:0c:4b:ae:cf:01:
20:14:fe:31:5d:8e:99:f4:87:2c:e9:e0:fc:f1:b2:
de:26:56:84:bc:bb:19:a8:ce:17:95:f2:22:76:a8:
5e:79:d7:c5:1c:07:e4:e9:8c:fa:08:f7:77:10:7d:
4d:df:7c:5b:b6:1a:30:31:63:bf:14:2e:b2:51:76:
38:e8:bc:68:be:64:3d:95:f9:4a:93:6d:4c:c6:86:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:9F:7F:D5:36:AF:BE:86:85:E4:A9:F9:25:1D:06:08:9D:A5:03
X509v3 Authority Key Identifier:
keyid:49:44:04:EE:DC:92:A7:A9:52:31:94:51:FF:F2:7B:87:E7:CD:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUQE7tySp6lSMZRR__J7h-fNsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3407b2-aee4-4b4b-9f60-1a3780026ddb/1/OEaff9U2r76GheSp-SUdBgidpQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3407b2-aee4-4b4b-9f60-1a3780026ddb/1/SUQE7tySp6lSMZRR__J7h-fNsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.112.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6e:15:ce:5f:f0:6a:5f:5a:c2:96:97:6e:c1:32:54:e2:83:
7e:9a:de:41:39:38:2e:04:11:73:90:02:36:a1:00:51:32:0e:
83:60:9d:bd:1e:96:35:a1:eb:c7:65:a5:f1:2e:c8:60:ee:e1:
82:4c:eb:19:bc:70:ac:05:2e:90:8f:cd:e5:b4:f1:7f:65:2a:
f3:33:41:39:d4:1b:f5:be:37:c9:5c:90:60:19:bc:8a:ee:09:
cd:43:a9:f1:c9:42:97:55:cc:8f:28:3b:6f:cc:a5:53:e6:9d:
35:52:4f:62:ce:cc:5a:8d:8c:67:c8:dc:b1:e8:f5:89:7c:3f:
89:20:83:6e:e0:18:01:4a:ea:77:b4:b7:09:c4:70:9d:03:8a:
38:92:08:8a:d9:04:4f:33:95:a9:fe:36:44:d7:c3:8d:6b:44:
cf:8f:df:b5:ec:93:c3:54:67:1e:ef:67:a7:b8:bf:36:18:b9:
7a:a1:3d:44:d7:70:a3:2c:cc:c8:b7:59:22:1f:e0:50:e1:dc:
6f:e9:b1:55:9b:80:91:67:b0:57:18:62:fd:72:09:35:6e:24:
82:56:70:bc:b9:72:cd:e3:b4:fc:7f:69:9a:b5:36:77:bb:6d:
9a:38:e3:66:ef:22:da:0c:e2:a3:14:56:da:8e:3c:0e:c6:27:
7e:b4:0d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHdNZWNI4hYum6OcW/dcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQwNGVlZGM5MmE3YTk1MjMxOTQ1MWZmZjI3Yjg3ZTdj
ZGIwMjQwHhcNMjMwMTAxMjA1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQ2OWY3ZmQ1MzZhZmJlODY4NWU0YTlmOTI1MWQwNjA4OWRhNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy59omHDR/y8R3Bc4MSpzgrh2cRrM
ooMTF0MoA/tKppG5SRAFy8sU0h37ogOTzf7tg896pzmKFYi53mvukOJwqkLp+JBm
SvSp+v2AW+qWyBopxrZ4+fwI3RiFKt5l/hmbsdtHYP+59J/taHRDcCHGdFmUrGHI
5dj1ZTCSL3MPrEIm9+5K8NKMOuELRZEsVui4Eof7ZiLNKZT13mqDZAIzY7aSC7Yq
ExI25f0TBwyUDEuuzwEgFP4xXY6Z9Ics6eD88bLeJlaEvLsZqM4XlfIidqheedfF
HAfk6Yz6CPd3EH1N33xbthowMWO/FC6yUXY46LxovmQ9lflKk21MxoY5LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhGn3/VNq++hoXkqfklHQYInaUDMB8GA1UdIwQY
MBaAFElEBO7ckqepUjGUUf/ye4fnzbAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VRRTd0eVNwNmxTTVpSUl9fSjdoLWZOc0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNDA3YjItYWVlNC00YjRiLTlmNjAt
MWEzNzgwMDI2ZGRiLzEvT0VhZmY5VTJyNzZHaGVTcC1TVWRCZ2lkcFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNDA3YjItYWVlNC00YjRiLTlmNjAtMWEzNzgwMDI2ZGRi
LzEvU1VRRTd0eVNwNmxTTVpSUl9fSjdoLWZOc0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3JwMA0G
CSqGSIb3DQEBCwUAA4IBAQB0bhXOX/BqX1rClpduwTJU4oN+mt5BOTguBBFzkAI2
oQBRMg6DYJ29HpY1oevHZaXxLshg7uGCTOsZvHCsBS6Qj83ltPF/ZSrzM0E51Bv1
vjfJXJBgGbyK7gnNQ6nxyUKXVcyPKDtvzKVT5p01Uk9izsxajYxnyNyx6PWJfD+J
IINu4BgBSup3tLcJxHCdA4o4kgiK2QRPM5Wp/jZE18ONa0TPj9+17JPDVGce72en
uL82GLl6oT1E13CjLMzIt1kiH+BQ4dxv6bFVm4CRZ7BXGGL9cgk1biSCVnC8uXLN
47T8f2matTZ3u22aOONm7yLaDOKjFFbajjwOxid+tA0A
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:53 2024 by rpki-client on console-ams.rpki-client.org