Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/1COTyKQo3hdhvLiMU4WcrbCNaAw.roa
File: 1COTyKQo3hdhvLiMU4WcrbCNaAw.roa (raw, json)
Hash identifier: GQRxnMIDQNWvybE0RqU/hS3HSz689Ao7kjlT7htki+0=
Subject key identifier: D4:23:93:C8:A4:28:DE:17:61:BC:B8:8C:53:85:9C:AD:B0:8D:68:0C
Certificate issuer: /CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Certificate serial: 018CC3B6D6D91A42C94A05A6291BC3D35128
Authority key identifier: DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/1COTyKQo3hdhvLiMU4WcrbCNaAw.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52438
IP address blocks: 185.180.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d6:d9:1a:42:c9:4a:05:a6:29:1b:c3:d3:51:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d42393c8a428de1761bcb88c53859cadb08d680c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:bd:90:7e:ed:0d:9b:e8:34:52:c0:3d:ec:
f4:e2:a0:b6:f3:ab:d7:92:dc:58:97:11:b5:db:f5:
83:7e:9b:61:5e:aa:b7:a1:8f:31:cd:24:32:15:a8:
04:55:98:b4:45:c1:24:68:0b:10:f7:f9:6a:f9:41:
a9:2d:48:bb:78:cd:c0:c2:7f:9d:df:e7:1d:d4:00:
43:b2:af:9f:93:dd:0e:42:38:7d:62:d0:73:2a:cf:
f5:59:1b:87:4c:ad:23:fc:99:47:a0:6e:64:07:76:
18:45:d1:d4:d0:4a:0d:1c:63:e1:06:c0:1d:6b:14:
25:93:55:60:eb:30:dc:a9:31:a0:25:df:1c:24:64:
fc:15:a8:6f:90:ce:d9:5e:14:cf:eb:d5:9d:4b:20:
95:9b:31:26:dc:66:cf:b8:c4:f1:2f:f4:8a:6f:fb:
13:1a:5b:76:e1:db:86:21:7f:65:3a:3c:d3:90:ec:
2b:18:f6:1b:37:45:26:a3:74:7d:cb:99:b2:b4:72:
e1:3b:08:14:ae:07:b5:40:a2:38:a5:59:d7:a1:20:
ba:d9:c6:20:d2:cc:63:29:c0:fc:ed:6e:cd:b6:9f:
f7:a9:e4:0c:7b:a1:3b:be:f8:02:de:c6:49:7c:1d:
6d:3d:a1:26:fa:5c:e2:a7:3c:05:1e:08:2e:05:dd:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:93:C8:A4:28:DE:17:61:BC:B8:8C:53:85:9C:AD:B0:8D:68:0C
X509v3 Authority Key Identifier:
keyid:DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/1COTyKQo3hdhvLiMU4WcrbCNaAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:3a:47:54:3f:a0:3b:4e:a3:5a:cd:1f:72:a3:a8:1b:35:5b:
8b:d2:55:67:b4:b0:6c:a4:04:4a:68:9b:f3:b2:c9:fe:37:be:
ba:11:de:a2:b0:ce:48:05:0f:5e:b4:b4:d7:c0:53:3d:7e:59:
df:82:04:3c:9f:45:dc:65:75:85:57:86:f6:82:07:b0:13:cb:
e4:df:21:0f:41:cd:78:2f:cf:8f:f0:b2:57:fa:58:20:83:0d:
44:0c:f7:dd:f6:f5:c0:f9:98:bd:0d:50:8f:75:44:23:f4:f7:
99:4d:93:c7:8f:a0:b4:3a:6d:dd:14:a0:bd:1b:a6:61:75:b4:
6c:bd:b9:66:99:f5:f6:9f:c1:ac:ab:6f:e6:a4:ea:c8:1e:87:
46:c0:df:6a:43:48:3f:46:91:70:f3:09:1a:7b:33:94:3e:46:
71:38:00:b6:95:3d:b6:fe:a2:c2:b2:d7:71:5f:26:eb:e1:ae:
6e:24:ca:d0:50:f2:aa:1f:b3:bc:d2:22:d1:9c:8d:fd:b6:3a:
bc:a9:99:47:ce:8c:0c:2e:e6:c0:8c:84:1e:e7:98:ba:06:d2:
eb:57:33:0d:62:03:95:17:52:33:ae:b8:c7:ae:7e:62:67:92:
79:49:2a:e2:79:8c:32:3b:98:9c:38:c2:b6:81:72:58:61:f0:
16:8d:d6:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDttbZGkLJSgWmKRvD01EoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGJhMDdiOWY3MGJkNWVjZTFiMDIzNWVhMmNjOGNhZDYx
MmVkYzIwHhcNMjQwMTAxMDYyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDIzOTNjOGE0MjhkZTE3NjFiY2I4OGM1Mzg1OWNhZGIwOGQ2ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KO9kH7tDZvoNFLAPez04qC286vX
ktxYlxG12/WDfpthXqq3oY8xzSQyFagEVZi0RcEkaAsQ9/lq+UGpLUi7eM3Awn+d
3+cd1ABDsq+fk90OQjh9YtBzKs/1WRuHTK0j/JlHoG5kB3YYRdHU0EoNHGPhBsAd
axQlk1Vg6zDcqTGgJd8cJGT8FahvkM7ZXhTP69WdSyCVmzEm3GbPuMTxL/SKb/sT
Glt24duGIX9lOjzTkOwrGPYbN0Umo3R9y5mytHLhOwgUrge1QKI4pVnXoSC62cYg
0sxjKcD87W7Ntp/3qeQMe6E7vvgC3sZJfB1tPaEm+lzipzwFHgguBd2dkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQjk8ikKN4XYby4jFOFnK2wjWgMMB8GA1UdIwQY
MBaAFNzboHufcL1ezhsCNeosyMrWEu3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM051Z2U1OXd2VjdPR3dJMTZpekl5dFlTN2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xM2FiYzQtZDEzNy00ODkwLTljM2Mt
YTRiN2UzNDgzOTE5LzEvMUNPVHlLUW8zaGRodkxpTVU0V2NyYkNOYUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xM2FiYzQtZDEzNy00ODkwLTljM2MtYTRiN2UzNDgzOTE5
LzEvM051Z2U1OXd2VjdPR3dJMTZpekl5dFlTN2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubQIMA0G
CSqGSIb3DQEBCwUAA4IBAQAdOkdUP6A7TqNazR9yo6gbNVuL0lVntLBspARKaJvz
ssn+N766Ed6isM5IBQ9etLTXwFM9flnfggQ8n0XcZXWFV4b2ggewE8vk3yEPQc14
L8+P8LJX+lgggw1EDPfd9vXA+Zi9DVCPdUQj9PeZTZPHj6C0Om3dFKC9G6ZhdbRs
vblmmfX2n8Gsq2/mpOrIHodGwN9qQ0g/RpFw8wkaezOUPkZxOAC2lT22/qLCstdx
Xybr4a5uJMrQUPKqH7O80iLRnI39tjq8qZlHzowMLubAjIQe55i6BtLrVzMNYgOV
F1IzrrjHrn5iZ5J5SSrieYwyO5icOMK2gXJYYfAWjda0
-----END CERTIFICATE-----
Generated at Tue Apr 30 18:14:23 2024 by rpki-client on console-fra.rpki-client.org