Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/V2DrHsg_1co8O5IwJG3yoDueJhM.roa
File: V2DrHsg_1co8O5IwJG3yoDueJhM.roa (raw, json)
Hash identifier: x5bRvDYAPzGVNO+m09M5SzYJdQizHZhCqcNBumSvDdo=
Subject key identifier: 57:60:EB:1E:C8:3F:D5:CA:3C:3B:92:30:24:6D:F2:A0:3B:9E:26:13
Certificate issuer: /CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Certificate serial: 018CC64B850974B07191D7A25CB8CDA5C5EA
Authority key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/V2DrHsg_1co8O5IwJG3yoDueJhM.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.209.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:85:09:74:b0:71:91:d7:a2:5c:b8:cd:a5:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5760eb1ec83fd5ca3c3b9230246df2a03b9e2613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:c4:c7:07:f3:97:1b:2c:87:53:00:1b:9a:
38:52:12:ed:e2:37:68:af:57:0d:70:93:0d:f3:3d:
71:f0:5c:25:63:0b:d5:ef:32:53:d4:62:f6:8d:2d:
b3:10:df:0e:a0:01:ed:de:86:d3:cb:48:38:60:50:
55:cd:9e:bf:63:9c:57:2c:10:d2:48:54:29:7c:81:
af:54:da:87:ae:4b:4f:ad:ad:7f:8e:b7:d1:a9:76:
cf:e1:c2:bf:6d:86:bb:fa:98:fc:81:fe:13:7b:fe:
42:a8:b6:03:2a:81:78:c3:f1:1a:35:1c:de:13:01:
71:25:70:bd:4d:00:01:49:8c:bd:fc:fe:9e:48:c6:
19:b9:86:42:5f:36:6f:ec:64:bd:2f:65:33:55:8f:
9b:cf:49:d8:3b:97:c6:60:ca:3b:46:16:d8:55:d2:
ef:13:34:ae:7c:45:86:01:e7:ca:b3:cb:7f:b1:b3:
2f:c0:61:8f:f1:38:d0:c3:5f:e1:7f:b3:c6:77:14:
dc:81:07:63:ff:6a:43:d1:f6:61:15:e1:7f:99:8c:
d4:d9:d1:45:fe:ce:62:57:a8:54:68:1a:58:bf:68:
42:46:f5:41:0c:38:2c:78:ba:00:7a:bf:85:6f:1f:
7f:c5:45:9f:bd:07:e7:8c:9d:13:11:c6:37:b3:f1:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:EB:1E:C8:3F:D5:CA:3C:3B:92:30:24:6D:F2:A0:3B:9E:26:13
X509v3 Authority Key Identifier:
keyid:42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/V2DrHsg_1co8O5IwJG3yoDueJhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
84:46:20:f2:6b:90:10:e5:93:d2:1f:a5:eb:23:3d:0c:da:89:
ef:83:be:04:a1:fc:37:be:a0:cc:4b:49:0d:93:d9:0e:bb:77:
b7:ec:dd:3a:fd:f6:8e:5a:23:77:31:de:3d:48:f7:7c:9b:54:
90:20:37:8a:9e:68:9e:14:02:69:a2:a0:55:81:36:a7:62:b7:
37:89:37:4b:65:f7:74:45:12:f5:1c:b6:8d:64:38:5e:b1:51:
ec:23:50:2f:9e:f8:39:34:b7:48:87:cd:16:1b:34:08:51:20:
86:ed:1e:e8:24:b2:5d:d0:25:31:b1:51:1d:9a:57:ac:93:85:
1a:f5:53:58:13:c0:04:8d:7b:bf:62:01:c1:ab:ef:06:0d:42:
38:30:e5:d1:28:ac:96:84:c5:6a:66:f8:f2:b9:95:f2:9a:b5:
75:5b:05:e3:0a:25:60:d3:b2:a4:45:06:bd:cb:5d:a6:12:f9:
85:69:be:82:5d:44:92:9c:83:b7:83:17:b4:ee:a9:4c:5f:e8:
a7:9b:ac:af:56:6a:63:11:70:76:b6:61:43:e5:6e:63:63:e0:
c7:2a:27:48:c8:07:9d:5a:27:7b:8a:bc:78:de:c6:e7:70:e1:
f6:0c:bd:fd:ad:56:01:d8:77:25:f0:52:6b:ee:5e:39:47:23:
c7:97:c8:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS4UJdLBxkdeiXLjNpcXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2RjYTYzMTc0YzZmN2NlZDJiYTRmMzE5ZGNjMjlhNDg5
Mjg5ODUwHhcNMjQwMTAxMTgzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzYwZWIxZWM4M2ZkNWNhM2MzYjkyMzAyNDZkZjJhMDNiOWUyNjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCjExwfzlxssh1MAG5o4UhLt4jdo
r1cNcJMN8z1x8FwlYwvV7zJT1GL2jS2zEN8OoAHt3obTy0g4YFBVzZ6/Y5xXLBDS
SFQpfIGvVNqHrktPra1/jrfRqXbP4cK/bYa7+pj8gf4Te/5CqLYDKoF4w/EaNRze
EwFxJXC9TQABSYy9/P6eSMYZuYZCXzZv7GS9L2UzVY+bz0nYO5fGYMo7RhbYVdLv
EzSufEWGAefKs8t/sbMvwGGP8TjQw1/hf7PGdxTcgQdj/2pD0fZhFeF/mYzU2dFF
/s5iV6hUaBpYv2hCRvVBDDgseLoAer+Fbx9/xUWfvQfnjJ0TEcY3s/GiWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdg6x7IP9XKPDuSMCRt8qA7niYTMB8GA1UdIwQY
MBaAFEJ9ymMXTG987Suk8xncwppIkomFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW4zS1l4ZE1iM3p0SzZUekdkekNta2lTaVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83MDc5OTItZDZkNi00NmVmLTlmN2Ut
NmViNWI2NGQ0NmM3LzEvVjJEckhzZ18xY284TzVJd0pHM3lvRHVlSmhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83MDc5OTItZDZkNi00NmVmLTlmN2UtNmViNWI2NGQ0NmM3
LzEvUW4zS1l4ZE1iM3p0SzZUekdkekNta2lTaVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudEyMA0G
CSqGSIb3DQEBCwUAA4IBAQCERiDya5AQ5ZPSH6XrIz0M2onvg74Eofw3vqDMS0kN
k9kOu3e37N06/faOWiN3Md49SPd8m1SQIDeKnmieFAJpoqBVgTanYrc3iTdLZfd0
RRL1HLaNZDhesVHsI1Avnvg5NLdIh80WGzQIUSCG7R7oJLJd0CUxsVEdmlesk4Ua
9VNYE8AEjXu/YgHBq+8GDUI4MOXRKKyWhMVqZvjyuZXymrV1WwXjCiVg07KkRQa9
y12mEvmFab6CXUSSnIO3gxe07qlMX+inm6yvVmpjEXB2tmFD5W5jY+DHKidIyAed
Wid7irx43sbncOH2DL39rVYB2Hcl8FJr7l45RyPHl8iQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:12 2024 by rpki-client on console-fra.rpki-client.org