Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/1-tVX11ifBud4QYvdKiEm7Jwd7AM.roa
File: 1-tVX11ifBud4QYvdKiEm7Jwd7AM.roa (raw, json)
Hash identifier: vowVMEUXLXrirRttNoPmVCT8cHvJwYd3diRo0fQ2QfM=
Subject key identifier: FA:D5:57:D7:58:9F:06:E7:78:41:8B:DD:2A:21:26:EC:9C:1D:EC:03
Certificate issuer: /CN=92c51555a81fd209ff79abed14369ec7917ced62
Certificate serial: 01856F30242AC49EE2D7E6068957184B0626
Authority key identifier: 92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/1-tVX11ifBud4QYvdKiEm7Jwd7AM.roa
Signing time: Sun 01 Jan 2023 21:15:04 +0000
ROA not before: Sun 01 Jan 2023 21:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.252.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:24:2a:c4:9e:e2:d7:e6:06:89:57:18:4b:06:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c51555a81fd209ff79abed14369ec7917ced62
Validity
Not Before: Jan 1 21:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad557d7589f06e778418bdd2a2126ec9c1dec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:0d:40:6e:75:5b:44:c5:f8:e9:8b:f8:9c:
d3:6d:fe:3b:84:16:ad:3f:a1:4c:86:39:e9:07:20:
56:31:70:10:a4:31:b5:8c:72:e0:09:14:04:ca:ce:
bc:fb:5b:27:fb:da:4b:15:a6:24:1f:5e:73:75:8a:
61:6a:e9:1b:7d:e6:0f:3e:8e:11:1c:e7:ab:f0:08:
30:ae:e3:56:b4:a4:f5:9e:af:43:89:dc:55:71:49:
dc:24:93:3c:ad:92:3d:24:38:6f:ab:70:84:1c:79:
1d:02:e6:57:92:9a:dd:b1:d7:1d:ac:ec:ae:5e:2a:
57:3d:4d:41:ae:ef:36:82:5c:63:5e:ef:9d:ca:c6:
18:b4:ca:20:c3:0f:38:04:e4:d0:cb:ca:2e:34:1a:
d3:12:9a:7b:74:50:ac:36:7c:dd:04:08:05:eb:0e:
4e:ea:d5:82:4a:7f:dd:5a:70:94:12:86:70:72:05:
d8:73:c3:fe:66:8f:3a:56:c0:83:88:83:ea:0c:1f:
11:7d:d4:ec:cd:38:4e:7e:c4:fc:f3:9d:fc:93:ca:
23:9f:73:26:a5:b6:81:9d:e5:0d:f6:d2:a8:3f:d0:
ea:ff:17:d5:06:a5:41:96:43:48:0c:ca:49:0a:4c:
d5:aa:37:8a:df:fe:2b:b8:02:07:3a:81:15:9a:fa:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:57:D7:58:9F:06:E7:78:41:8B:DD:2A:21:26:EC:9C:1D:EC:03
X509v3 Authority Key Identifier:
keyid:92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/1-tVX11ifBud4QYvdKiEm7Jwd7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/ksUVVagf0gn_eavtFDaex5F87WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:90:0a:5c:65:71:69:a0:b4:8f:e4:32:0b:8a:ea:0e:a3:fb:
18:d2:4d:8b:bf:74:55:e3:e2:58:68:5f:fa:d3:34:7d:b3:cc:
7c:66:8d:b5:f2:4f:cf:1c:cf:04:46:62:2d:2d:b2:0e:c4:41:
3f:56:18:1b:5d:49:4c:a8:31:8f:85:8f:26:26:cd:6a:93:aa:
d6:0e:55:4d:33:b1:e7:f8:28:db:b0:d6:5b:8a:a4:ac:f7:53:
38:e9:e3:87:36:cd:2c:d2:46:ef:e4:fc:19:e9:02:30:e8:48:
11:d5:a0:ce:f8:68:78:11:76:bb:c9:bb:d8:4d:74:c1:6c:fb:
d6:49:14:21:db:bf:61:47:21:09:91:db:34:3e:38:1f:b2:8b:
68:41:b7:31:e6:bd:90:9f:ce:d1:02:42:c5:8c:64:02:18:40:
23:9e:e0:3b:21:d6:a0:13:1c:a8:e4:4a:c4:8c:60:2f:4f:33:
c0:f4:85:90:4b:94:de:9a:f8:53:e6:8e:8f:58:31:04:3e:09:
0b:e1:ea:01:45:51:f7:52:e4:32:dc:bd:0b:12:75:04:5f:d1:
18:f0:d6:45:a8:12:81:4b:05:42:fe:3d:e1:fa:00:5e:23:fd:
b1:31:80:cf:1d:e6:8c:4f:73:a6:41:72:ff:20:e0:b0:c4:bc:
2c:78:a8:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvMCQqxJ7i1+YGiVcYSwYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzUxNTU1YTgxZmQyMDlmZjc5YWJlZDE0MzY5ZWM3OTE3
Y2VkNjIwHhcNMjMwMTAxMjExNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWQ1NTdkNzU4OWYwNmU3Nzg0MThiZGQyYTIxMjZlYzljMWRlYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW4NQG51W0TF+OmL+JzTbf47hBat
P6FMhjnpByBWMXAQpDG1jHLgCRQEys68+1sn+9pLFaYkH15zdYphaukbfeYPPo4R
HOer8AgwruNWtKT1nq9DidxVcUncJJM8rZI9JDhvq3CEHHkdAuZXkprdsdcdrOyu
XipXPU1Bru82glxjXu+dysYYtMogww84BOTQy8ouNBrTEpp7dFCsNnzdBAgF6w5O
6tWCSn/dWnCUEoZwcgXYc8P+Zo86VsCDiIPqDB8RfdTszThOfsT88538k8ojn3Mm
pbaBneUN9tKoP9Dq/xfVBqVBlkNIDMpJCkzVqjeK3/4ruAIHOoEVmvrjOwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrVV9dYnwbneEGL3SohJuycHewDMB8GA1UdIwQY
MBaAFJLFFVWoH9IJ/3mr7RQ2nseRfO1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NVVlZhZ2YwZ25fZWF2dEZEYWV4NUY4N1dJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzhjNzYtMGMyYi00ZWRmLThjNzIt
NjVkNzRhNjJhYjIyLzEvMS10VlgxMWlmQnVkNFFZdmRLaUVtN0p3ZDdBTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmMvZjc4Yzc2LTBjMmItNGVkZi04YzcyLTY1ZDc0YTYyYWIy
Mi8xL2tzVVZWYWdmMGduX2VhdnRGRGFleDVGODdXSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn80TAN
BgkqhkiG9w0BAQsFAAOCAQEAG5AKXGVxaaC0j+QyC4rqDqP7GNJNi790VePiWGhf
+tM0fbPMfGaNtfJPzxzPBEZiLS2yDsRBP1YYG11JTKgxj4WPJibNapOq1g5VTTOx
5/go27DWW4qkrPdTOOnjhzbNLNJG7+T8GekCMOhIEdWgzvhoeBF2u8m72E10wWz7
1kkUIdu/YUchCZHbND44H7KLaEG3Mea9kJ/O0QJCxYxkAhhAI57gOyHWoBMcqORK
xIxgL08zwPSFkEuU3pr4U+aOj1gxBD4JC+HqAUVR91LkMty9CxJ1BF/RGPDWRagS
gUsFQv494foAXiP9sTGAzx3mjE9zpkFy/yDgsMS8LHio3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org