Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1-ju2pex9J2XeCSxq3-ENjcsO8K8.roa
File: 1-ju2pex9J2XeCSxq3-ENjcsO8K8.roa (raw, json)
Hash identifier: NMNS4G/dEEqOVVhGMvYbVMfK/2R4SYfEpBlnD+vJ5Kg=
Subject key identifier: FA:3B:B6:A5:EC:7D:27:65:DE:09:2C:6A:DF:E1:0D:8D:CB:0E:F0:AF
Certificate issuer: /CN=e7159d07b5f6372c86e396a0aa6400a8faa6d531
Certificate serial: 018CC6B7867FB3429BA8C6BC65B1A95A0A6A
Authority key identifier: E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xWdB7X2NyyG45agqmQAqPqm1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1-ju2pex9J2XeCSxq3-ENjcsO8K8.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41547
IP address blocks: 195.138.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:86:7f:b3:42:9b:a8:c6:bc:65:b1:a9:5a:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7159d07b5f6372c86e396a0aa6400a8faa6d531
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa3bb6a5ec7d2765de092c6adfe10d8dcb0ef0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:7b:14:f5:98:f5:c8:85:40:62:df:10:c0:
9e:79:d6:67:12:32:5e:77:de:68:79:d7:63:db:ca:
fb:43:cf:40:0f:30:35:18:7d:55:56:cb:a7:0b:d5:
30:40:a1:e8:d6:71:74:55:ae:2b:87:2d:b1:27:05:
3e:c7:11:20:6f:44:38:af:28:61:0e:e4:ca:9c:cd:
93:1d:95:96:28:2f:42:51:f8:bb:53:26:4a:55:23:
4f:df:37:17:14:30:13:06:b4:1e:74:d4:b7:54:be:
f5:4a:ea:54:e6:83:b8:25:e0:fc:ce:59:6f:9b:32:
df:a6:7e:16:8c:4b:b6:bf:c4:f8:fb:9a:ab:5d:0c:
3a:e6:02:4a:ad:86:62:af:24:f6:15:dc:dc:59:c6:
49:97:bc:6f:3a:94:3c:8e:fa:dc:a4:eb:52:3a:39:
d2:af:ae:39:7c:b7:a8:f9:60:e6:8e:84:45:13:ef:
5c:7b:42:d4:df:3c:87:fd:9d:82:f1:22:f7:87:58:
bf:98:99:15:40:32:55:8e:db:f1:bf:d3:71:e6:1c:
25:43:a2:44:4a:72:56:6d:3f:ee:eb:f8:c8:a7:e3:
50:3d:a5:67:05:8f:a3:a4:6c:fb:b4:67:ad:5f:94:
1a:23:40:25:04:56:32:0d:c6:c2:37:f0:88:c9:96:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:B6:A5:EC:7D:27:65:DE:09:2C:6A:DF:E1:0D:8D:CB:0E:F0:AF
X509v3 Authority Key Identifier:
keyid:E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xWdB7X2NyyG45agqmQAqPqm1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/1-ju2pex9J2XeCSxq3-ENjcsO8K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/5xWdB7X2NyyG45agqmQAqPqm1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.203.0/24
Signature Algorithm: sha256WithRSAEncryption
01:07:50:21:97:4b:3b:45:40:af:f5:6c:f0:9c:56:ae:37:cb:
f3:d2:19:e3:6d:34:44:fc:a9:45:8b:94:ef:a9:c1:c7:6d:dc:
02:4d:55:75:31:84:ac:f5:c7:46:f1:33:4e:93:a1:c3:75:ee:
11:f2:de:27:ef:53:a7:c6:c9:8e:35:91:99:e7:ca:f7:13:79:
4a:09:db:a0:9e:90:4b:03:12:c1:4b:00:87:9e:f3:24:e2:ba:
27:8d:98:95:31:15:dc:bc:dd:a4:8c:2d:d2:22:18:48:87:f2:
4b:d7:75:a6:50:53:91:f4:39:cc:07:06:1b:00:d5:38:46:ea:
d8:c1:be:46:29:7e:af:38:5f:6f:ea:d1:58:6a:b1:c1:ce:a4:
2c:6c:54:13:2c:4a:35:af:6c:fa:ce:39:56:56:ee:f8:d6:aa:
4a:fa:e6:97:80:ba:a1:c0:d0:5a:a8:29:e7:3a:38:a3:7f:7c:
c9:9d:8b:de:a5:12:71:f0:18:9f:6b:d7:a5:5f:c1:2f:99:92:
c9:39:8d:ee:d7:ea:21:92:71:ce:25:7a:f1:2c:39:a9:ec:1e:
44:c3:26:96:29:93:5e:ff:f2:f1:4c:a8:98:ec:7f:04:d2:f1:
4d:83:6c:5c:41:5b:02:15:e9:3b:a7:73:78:3c:b7:21:4f:45:
a8:ab:3a:01
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGt4Z/s0KbqMa8ZbGpWgpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTU5ZDA3YjVmNjM3MmM4NmUzOTZhMGFhNjQwMGE4ZmFh
NmQ1MzEwHhcNMjQwMTAxMjAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTNiYjZhNWVjN2QyNzY1ZGUwOTJjNmFkZmUxMGQ4ZGNiMGVmMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSZ7FPWY9ciFQGLfEMCeedZnEjJe
d95oeddj28r7Q89ADzA1GH1VVsunC9UwQKHo1nF0Va4rhy2xJwU+xxEgb0Q4ryhh
DuTKnM2THZWWKC9CUfi7UyZKVSNP3zcXFDATBrQedNS3VL71SupU5oO4JeD8zllv
mzLfpn4WjEu2v8T4+5qrXQw65gJKrYZiryT2FdzcWcZJl7xvOpQ8jvrcpOtSOjnS
r645fLeo+WDmjoRFE+9ce0LU3zyH/Z2C8SL3h1i/mJkVQDJVjtvxv9Nx5hwlQ6JE
SnJWbT/u6/jIp+NQPaVnBY+jpGz7tGetX5QaI0AlBFYyDcbCN/CIyZYPzQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPo7tqXsfSdl3gksat/hDY3LDvCvMB8GA1UdIwQY
MBaAFOcVnQe19jcshuOWoKpkAKj6ptUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhXZEI3WDJOeXlHNDVhZ3FtUUFxUHFtMVRFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jNzFjMTItN2NhZS00NGQ2LWI5YjAt
Mjc3MWZiYTc5YTA3LzEvMS1qdTJwZXg5SjJYZUNTeHEzLUVOamNzTzhLOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWMvYzcxYzEyLTdjYWUtNDRkNi1iOWIwLTI3NzFmYmE3OWEw
Ny8xLzV4V2RCN1gyTnl5RzQ1YWdxbVFBcVBxbTFURS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOKyzAN
BgkqhkiG9w0BAQsFAAOCAQEAAQdQIZdLO0VAr/Vs8JxWrjfL89IZ4200RPypRYuU
76nBx23cAk1VdTGErPXHRvEzTpOhw3XuEfLeJ+9Tp8bJjjWRmefK9xN5SgnboJ6Q
SwMSwUsAh57zJOK6J42YlTEV3LzdpIwt0iIYSIfyS9d1plBTkfQ5zAcGGwDVOEbq
2MG+Ril+rzhfb+rRWGqxwc6kLGxUEyxKNa9s+s45Vlbu+NaqSvrml4C6ocDQWqgp
5zo4o398yZ2L3qUScfAYn2vXpV/BL5mSyTmN7tfqIZJxziV68Sw5qeweRMMmlimT
Xv/y8UyomOx/BNLxTYNsXEFbAhXpO6dzeDy3IU9FqKs6AQ==
-----END CERTIFICATE-----
Generated at Thu Mar 21 18:08:36 2024 by rpki-client on console-fra.rpki-client.org