Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/C842n2WJtF8auzfKIxw34QCwh6o.roa
File: C842n2WJtF8auzfKIxw34QCwh6o.roa (raw, json)
Hash identifier: nJDNYO8fZ6P/YX9kW4hUg9NHr3LN7D/0DFWeWluASCw=
Subject key identifier: 0B:CE:36:9F:65:89:B4:5F:1A:BB:37:CA:23:1C:37:E1:00:B0:87:AA
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 01843CA669F156317CA98573792C60CD9278
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/C842n2WJtF8auzfKIxw34QCwh6o.roa
Signing time: Thu 03 Nov 2022 08:40:49 +0000
ROA not before: Thu 03 Nov 2022 08:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:a6:69:f1:56:31:7c:a9:85:73:79:2c:60:cd:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Nov 3 08:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bce369f6589b45f1abb37ca231c37e100b087aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:6b:66:ee:d8:38:2a:f0:80:cc:9e:c3:55:
05:c0:8d:e9:7c:c6:50:32:57:2b:53:c1:ba:0e:76:
88:43:a1:93:85:3d:2d:1f:18:ad:a1:03:23:f1:be:
ce:64:45:80:ba:f2:4c:50:b4:a9:14:3c:6b:a8:9a:
95:98:b2:0d:3a:97:70:7f:bf:2e:23:98:e0:41:67:
d5:03:1b:df:1d:f1:03:27:13:56:b3:55:a3:81:f1:
f0:df:d3:41:05:9e:4d:8a:15:4d:b1:76:9a:c6:22:
da:c0:36:8d:f9:e4:33:3f:e3:9e:10:05:1c:de:2d:
8f:c1:08:1f:a3:f4:8a:da:e0:74:1c:e5:b9:b1:26:
c7:21:a3:97:e7:f6:ee:33:fe:0e:5d:11:60:75:41:
bd:42:55:c0:e5:bd:82:38:1b:5d:15:85:d9:d2:c4:
d6:dd:d4:4c:3b:fb:8c:70:be:18:7c:88:19:35:6d:
80:9d:9d:87:9b:b9:b4:40:52:89:9a:fc:d7:f3:27:
21:57:ff:0a:ba:8b:59:cf:09:d0:ca:4d:90:a8:1f:
2b:98:86:b7:84:9f:7b:fc:d0:ef:a0:67:c0:8b:bd:
21:53:f1:3b:83:af:30:de:9e:b8:68:da:20:e8:89:
cc:8a:52:82:1c:f4:1d:3b:01:ef:4e:b3:b2:1b:85:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:36:9F:65:89:B4:5F:1A:BB:37:CA:23:1C:37:E1:00:B0:87:AA
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/C842n2WJtF8auzfKIxw34QCwh6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7d:17:8b:f1:69:58:b7:67:66:62:18:64:16:58:0b:3d:23:
73:31:d5:ed:cd:18:4f:6a:22:28:26:a6:d7:e1:93:8e:dc:f3:
bb:ce:7d:fe:d8:86:46:ca:aa:09:fb:6f:70:a3:a4:01:d3:09:
89:d7:ad:7f:34:78:05:76:a7:fc:7c:ab:bb:c7:e2:5d:42:8d:
6f:fb:36:b3:02:1c:ba:f1:24:2c:ee:4f:8c:ab:c6:23:8d:29:
e9:55:79:2f:bc:e1:27:71:21:6f:3c:17:f7:e2:cf:39:59:4c:
f8:87:fe:2a:25:b2:12:4b:c9:44:f6:fb:7a:da:77:50:eb:e9:
cb:04:e5:9d:d4:4b:15:bd:44:69:83:ab:2c:50:1d:27:c2:d6:
da:25:74:73:70:df:48:2a:2f:e4:ee:c3:24:f7:78:c9:fb:66:
21:c8:ae:10:90:df:da:fe:a4:4a:c5:28:44:66:e5:98:b5:5d:
99:49:51:a9:a8:7c:58:85:55:11:85:04:c7:d8:b3:81:e0:20:
16:66:3c:ff:ae:16:12:33:a3:5a:cd:c8:b4:10:c8:e2:5e:d4:
dc:2a:6d:3a:df:c8:85:53:ce:03:63:17:c4:db:7b:5e:8f:46:
1f:63:08:65:bb:4a:70:0d:93:ed:51:1d:70:7c:ba:f6:5f:d1:
13:ed:b2:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ8pmnxVjF8qYVzeSxgzZJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTg1NGE5YmJmZjEzOTE0ZDA1MTY0OGMxMWQ2NjdjNjQz
OGIxMzMwHhcNMjIxMTAzMDg0MDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmNlMzY5ZjY1ODliNDVmMWFiYjM3Y2EyMzFjMzdlMTAwYjA4N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6RrZu7YOCrwgMyew1UFwI3pfMZQ
MlcrU8G6DnaIQ6GThT0tHxitoQMj8b7OZEWAuvJMULSpFDxrqJqVmLINOpdwf78u
I5jgQWfVAxvfHfEDJxNWs1WjgfHw39NBBZ5NihVNsXaaxiLawDaN+eQzP+OeEAUc
3i2PwQgfo/SK2uB0HOW5sSbHIaOX5/buM/4OXRFgdUG9QlXA5b2COBtdFYXZ0sTW
3dRMO/uMcL4YfIgZNW2AnZ2Hm7m0QFKJmvzX8ychV/8KuotZzwnQyk2QqB8rmIa3
hJ97/NDvoGfAi70hU/E7g68w3p64aNog6InMilKCHPQdOwHvTrOyG4W4jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvONp9libRfGrs3yiMcN+EAsIeqMB8GA1UdIwQY
MBaAFGWoVKm7/xORTQUWSMEdZnxkOLEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUt
NjI2ODRkMzA1NTdiLzEvQzg0Mm4yV0p0RjhhdXpmS0l4dzM0UUN3aDZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUtNjI2ODRkMzA1NTdi
LzEvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeBMA0G
CSqGSIb3DQEBCwUAA4IBAQBNfReL8WlYt2dmYhhkFlgLPSNzMdXtzRhPaiIoJqbX
4ZOO3PO7zn3+2IZGyqoJ+29wo6QB0wmJ161/NHgFdqf8fKu7x+JdQo1v+zazAhy6
8SQs7k+Mq8YjjSnpVXkvvOEncSFvPBf34s85WUz4h/4qJbISS8lE9vt62ndQ6+nL
BOWd1EsVvURpg6ssUB0nwtbaJXRzcN9IKi/k7sMk93jJ+2YhyK4QkN/a/qRKxShE
ZuWYtV2ZSVGpqHxYhVURhQTH2LOB4CAWZjz/rhYSM6Nazci0EMjiXtTcKm0638iF
U84DYxfE23tej0YfYwhlu0pwDZPtUR1wfLr2X9ET7bLv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:55 2024 by rpki-client on console-fra.rpki-client.org