Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/PnFlvNXjNTUTYEQJK7TjFUsMZfA.roa
File: PnFlvNXjNTUTYEQJK7TjFUsMZfA.roa (raw, json)
Hash identifier: q8K8JseVcbq75jCoOs0IWwqfL7z+6o/59+2giLk0dWc=
Subject key identifier: 3E:71:65:BC:D5:E3:35:35:13:60:44:09:2B:B4:E3:15:4B:0C:65:F0
Certificate issuer: /CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
Certificate serial: 01856BEECF59BD79427950355251D34CFFB1
Authority key identifier: E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/PnFlvNXjNTUTYEQJK7TjFUsMZfA.roa
Signing time: Sun 01 Jan 2023 06:04:50 +0000
ROA not before: Sun 01 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.104.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:cf:59:bd:79:42:79:50:35:52:51:d3:4c:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
Validity
Not Before: Jan 1 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e7165bcd5e33535136044092bb4e3154b0c65f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:1b:26:83:84:85:9c:52:c2:81:2c:c8:df:
7e:3d:27:cf:70:a0:47:f1:80:62:d6:e9:25:23:f0:
79:71:1c:3a:5b:a8:7c:98:0a:3d:ef:48:fe:8a:c0:
26:16:a6:3b:8f:da:a5:75:28:21:e7:07:59:3b:e7:
84:97:74:8e:94:aa:1d:ea:69:88:ce:a9:3c:77:4f:
29:5c:2c:c6:7d:8e:15:e6:1a:46:ac:12:28:99:a2:
8f:59:83:ec:7d:fa:9b:b1:b8:62:bd:bd:20:5a:08:
9e:8e:34:8d:89:d7:89:cc:cc:b9:bb:f3:1f:bd:f9:
fc:dc:21:40:8b:09:fa:87:2f:5b:47:1a:1c:12:a3:
a2:33:b0:5c:1b:55:34:42:7c:07:d4:1b:50:71:18:
d3:1b:2c:5b:9d:56:c3:72:fb:d2:ea:4d:7f:3c:28:
1a:a6:77:9c:cc:36:87:99:9f:66:a6:ad:b3:4e:c5:
6a:d4:98:13:35:81:37:77:a1:ab:0b:f5:b1:9a:08:
84:20:f8:53:f8:7e:53:05:d4:7f:2e:81:19:6e:0a:
c2:ff:bc:94:da:94:97:5c:de:ba:50:bb:f6:eb:1f:
6a:cf:70:61:ac:5f:eb:f8:3d:0b:88:d8:44:b0:1d:
97:0a:8e:84:01:54:44:39:99:a8:d5:a1:b5:1f:e4:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:65:BC:D5:E3:35:35:13:60:44:09:2B:B4:E3:15:4B:0C:65:F0
X509v3 Authority Key Identifier:
keyid:E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/PnFlvNXjNTUTYEQJK7TjFUsMZfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/56JpiWCXHLq9DRwMkg90CNcWSaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.239.0/24
Signature Algorithm: sha256WithRSAEncryption
13:98:6f:60:2c:0d:72:74:61:08:2c:8e:e3:c3:85:e8:33:05:
dc:48:56:ab:63:b9:c9:b1:61:7d:27:c9:18:dc:e3:b6:24:0b:
94:90:7a:b0:ef:03:24:d1:f3:2a:dd:42:57:9a:4e:15:38:50:
46:9f:16:96:d1:18:4e:f5:8d:dc:d0:ad:b1:a2:9a:8d:98:51:
46:38:9a:61:fc:bd:57:bd:5b:1c:2b:76:77:90:5f:81:0d:9e:
fc:f1:83:c0:06:26:1d:c5:10:d2:4f:05:62:d5:0b:9b:34:69:
0e:d2:b1:f0:30:56:00:a7:4b:b3:7c:1e:18:66:55:cb:99:0c:
7f:9f:3c:9a:1b:4a:93:64:a0:42:3b:aa:2a:ed:08:94:6c:8d:
d7:80:fa:ca:c3:64:06:e6:26:34:67:75:2d:fc:ac:85:2e:ea:
91:54:6e:f8:99:6c:04:c4:98:65:73:09:60:8c:bf:76:b1:6f:
fd:13:e7:7c:68:84:75:4c:b4:5d:6d:ef:35:b9:73:e2:b0:bc:
14:83:0c:ff:32:e8:fe:ec:0a:39:9d:8c:2a:fe:65:ad:a5:0e:
96:33:2f:7e:30:0b:59:b8:3e:9f:5c:6b:0b:97:ff:4e:60:c9:
9d:05:bb:f3:be:46:cf:4e:98:8f:6b:cc:30:05:f9:33:13:16:
c3:80:12:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7s9ZvXlCeVA1UlHTTP+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YTI2OTg5NjA5NzFjYmFiZDBkMWMwYzkyMGY3NDA4ZDcx
NjQ5YTMwHhcNMjMwMTAxMDYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTcxNjViY2Q1ZTMzNTM1MTM2MDQ0MDkyYmI0ZTMxNTRiMGM2NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmkbJoOEhZxSwoEsyN9+PSfPcKBH
8YBi1uklI/B5cRw6W6h8mAo970j+isAmFqY7j9qldSgh5wdZO+eEl3SOlKod6mmI
zqk8d08pXCzGfY4V5hpGrBIomaKPWYPsffqbsbhivb0gWgiejjSNideJzMy5u/Mf
vfn83CFAiwn6hy9bRxocEqOiM7BcG1U0QnwH1BtQcRjTGyxbnVbDcvvS6k1/PCga
pneczDaHmZ9mpq2zTsVq1JgTNYE3d6GrC/WxmgiEIPhT+H5TBdR/LoEZbgrC/7yU
2pSXXN66ULv26x9qz3BhrF/r+D0LiNhEsB2XCo6EAVREOZmo1aG1H+TX7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5xZbzV4zU1E2BECSu04xVLDGXwMB8GA1UdIwQY
MBaAFOeiaYlglxy6vQ0cDJIPdAjXFkmjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZKcGlXQ1hITHE5RFJ3TWtnOTBDTmNXU2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80YWYwZTktYTdjNS00NjRlLWIxMGUt
MTY4Y2NhNGE4N2NiLzEvUG5GbHZOWGpOVFVUWUVRSks3VGpGVXNNWmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80YWYwZTktYTdjNS00NjRlLWIxMGUtMTY4Y2NhNGE4N2Ni
LzEvNTZKcGlXQ1hITHE5RFJ3TWtnOTBDTmNXU2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjvMA0G
CSqGSIb3DQEBCwUAA4IBAQATmG9gLA1ydGEILI7jw4XoMwXcSFarY7nJsWF9J8kY
3OO2JAuUkHqw7wMk0fMq3UJXmk4VOFBGnxaW0RhO9Y3c0K2xopqNmFFGOJph/L1X
vVscK3Z3kF+BDZ788YPABiYdxRDSTwVi1QubNGkO0rHwMFYAp0uzfB4YZlXLmQx/
nzyaG0qTZKBCO6oq7QiUbI3XgPrKw2QG5iY0Z3Ut/KyFLuqRVG74mWwExJhlcwlg
jL92sW/9E+d8aIR1TLRdbe81uXPisLwUgwz/Muj+7Ao5nYwq/mWtpQ6WMy9+MAtZ
uD6fXGsLl/9OYMmdBbvzvkbPTpiPa8wwBfkzExbDgBID
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:58 2024 by rpki-client on console-fra.rpki-client.org