Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/m1xJp0OmN-z5auUb0PrYME9kxx0.roa
File: m1xJp0OmN-z5auUb0PrYME9kxx0.roa (raw, json)
Hash identifier: BiGFc2/cTX7e3gmJvM+9Sc/gLl+GxX2IPrV+SHjaLhc=
Subject key identifier: 9B:5C:49:A7:43:A6:37:EC:F9:6A:E5:1B:D0:FA:D8:30:4F:64:C7:1D
Certificate issuer: /CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Certificate serial: 018644F4054CCE8431ED4C2E39CB6A759B42
Authority key identifier: 40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/m1xJp0OmN-z5auUb0PrYME9kxx0.roa
Signing time: Sun 12 Feb 2023 09:28:08 +0000
ROA not before: Sun 12 Feb 2023 09:28:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57193
IP address blocks: 185.11.244.0/24 maxlen: 24
185.11.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:f4:05:4c:ce:84:31:ed:4c:2e:39:cb:6a:75:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Validity
Not Before: Feb 12 09:28:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5c49a743a637ecf96ae51bd0fad8304f64c71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6c:ad:4f:2a:a7:3d:de:51:db:4e:16:fb:c8:
a8:81:a2:ec:e9:9a:d2:cc:85:21:90:39:3e:45:75:
91:20:30:a4:33:4b:68:8f:bd:3f:06:7a:c4:49:48:
c9:61:bc:1d:9f:a6:64:18:19:4d:00:33:18:4c:fc:
a8:ce:fd:7b:50:f4:b3:df:cf:df:df:52:23:7d:c7:
89:5c:10:d5:d0:2b:84:b8:67:12:ce:26:f9:4d:47:
30:f8:01:23:07:e6:a5:88:73:0a:46:47:d3:39:9c:
65:95:4a:5a:01:2f:c4:81:ec:48:e2:d0:7f:aa:ee:
13:6e:08:01:96:e8:f4:31:a8:42:09:d8:28:ab:64:
75:90:04:b8:0d:3d:97:37:eb:01:17:75:ae:1c:bf:
e5:7a:d6:f2:c2:53:ec:29:a7:05:17:7d:99:3a:34:
b6:b7:1c:35:0c:16:ab:45:e1:f1:06:31:cf:e7:b2:
b6:0a:1b:d6:42:20:82:91:39:40:02:9e:1d:e4:a3:
0d:c2:8e:a0:e4:49:0e:bb:74:e4:69:a9:08:95:38:
65:4f:2d:ac:4c:29:a6:e6:38:23:f2:a3:b3:b0:bd:
72:08:4b:53:2e:28:c8:63:ca:4c:d9:08:29:b7:4b:
02:ec:fb:f3:17:d0:45:e4:03:e6:26:44:83:33:2e:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:49:A7:43:A6:37:EC:F9:6A:E5:1B:D0:FA:D8:30:4F:64:C7:1D
X509v3 Authority Key Identifier:
keyid:40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/m1xJp0OmN-z5auUb0PrYME9kxx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.244.0/23
Signature Algorithm: sha256WithRSAEncryption
05:9d:c3:df:88:bd:6a:12:e2:6f:25:b5:65:b8:a5:a8:d3:30:
29:f6:79:e1:32:24:7b:8e:f1:39:f7:89:63:90:4e:0d:c5:66:
f3:9c:c8:be:78:5c:6f:cb:8c:57:ac:51:68:85:a3:05:ea:4f:
ad:25:4c:86:d1:70:e9:b9:ad:11:86:c2:08:7d:0a:2f:2d:ad:
17:17:9b:20:7a:6c:b2:4f:41:8c:8d:29:95:7d:25:84:89:8d:
cd:8e:51:2e:7e:1d:28:7b:5e:59:f4:27:d2:6f:00:b6:6b:ed:
a9:ab:3b:1b:cb:1b:c8:a7:99:4a:c9:c5:75:30:6e:05:36:7d:
0d:4b:8a:17:3c:c4:63:e0:1b:e9:1e:21:76:da:e2:6d:61:a4:
ab:e0:4e:d2:b8:6f:e4:8d:77:ae:81:74:e6:0f:e7:bc:d1:2f:
6b:7a:d1:d3:07:c9:28:00:ce:65:0e:53:9d:4d:a0:18:81:09:
17:ef:3c:ce:4e:df:f3:cc:e3:ea:65:bb:58:ee:47:b8:e6:b5:
68:84:0a:af:b7:9c:b5:29:48:1f:3c:7e:8a:94:5c:33:80:3e:
b6:1e:0c:91:23:3f:dc:5f:b7:d4:e5:bc:99:fc:12:cf:53:5b:
56:96:ff:47:11:7d:f4:1d:0c:86:64:b0:f3:b4:a8:ab:ee:17:
90:f2:a8:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZE9AVMzoQx7UwuOctqdZtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNzRhNmUyYWJjNzM2YjlmZmYwM2I1MmM0ZDdiMTc5YzQx
NmJhZGYwHhcNMjMwMjEyMDkyODA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjVjNDlhNzQzYTYzN2VjZjk2YWU1MWJkMGZhZDgzMDRmNjRjNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GytTyqnPd5R204W+8iogaLs6ZrS
zIUhkDk+RXWRIDCkM0toj70/BnrESUjJYbwdn6ZkGBlNADMYTPyozv17UPSz38/f
31IjfceJXBDV0CuEuGcSzib5TUcw+AEjB+aliHMKRkfTOZxllUpaAS/EgexI4tB/
qu4TbggBluj0MahCCdgoq2R1kAS4DT2XN+sBF3WuHL/letbywlPsKacFF32ZOjS2
txw1DBarReHxBjHP57K2ChvWQiCCkTlAAp4d5KMNwo6g5EkOu3TkaakIlThlTy2s
TCmm5jgj8qOzsL1yCEtTLijIY8pM2Qgpt0sC7PvzF9BF5APmJkSDMy7EqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtcSadDpjfs+WrlG9D62DBPZMcdMB8GA1UdIwQY
MBaAFEB0puKrxza5//A7UsTXsXnEFrrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUhTbTRxdkhOcm5fOER0U3hOZXhlY1FXdXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNTM1Y2MtODQyNS00YTdmLWE2YWUt
ZDQ2ZDc3MWRkMWNiLzEvbTF4SnAwT21OLXo1YXVVYjBQcllNRTlreHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lNTM1Y2MtODQyNS00YTdmLWE2YWUtZDQ2ZDc3MWRkMWNi
LzEvUUhTbTRxdkhOcm5fOER0U3hOZXhlY1FXdXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQv0MA0G
CSqGSIb3DQEBCwUAA4IBAQAFncPfiL1qEuJvJbVluKWo0zAp9nnhMiR7jvE594lj
kE4NxWbznMi+eFxvy4xXrFFohaMF6k+tJUyG0XDpua0RhsIIfQovLa0XF5sgemyy
T0GMjSmVfSWEiY3NjlEufh0oe15Z9CfSbwC2a+2pqzsbyxvIp5lKycV1MG4FNn0N
S4oXPMRj4BvpHiF22uJtYaSr4E7SuG/kjXeugXTmD+e80S9retHTB8koAM5lDlOd
TaAYgQkX7zzOTt/zzOPqZbtY7ke45rVohAqvt5y1KUgfPH6KlFwzgD62HgyRIz/c
X7fU5byZ/BLPU1tWlv9HEX30HQyGZLDztKir7heQ8qio
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:47 2024 by rpki-client on console-fra.rpki-client.org