Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3cbd92-75e1-42db-9682-d5f687300b59/1/sKSEqffVaXnpbIIMW8VUc5gAnhg.roa
File: sKSEqffVaXnpbIIMW8VUc5gAnhg.roa (raw, json)
Hash identifier: imv8cqqBBJc/FCHr9tkjiaU1fB0x/D0+VUjtdm0errU=
Subject key identifier: B0:A4:84:A9:F7:D5:69:79:E9:6C:82:0C:5B:C5:54:73:98:00:9E:18
Certificate issuer: /CN=be54d4f10bfc4ebcaba353a9dfe7c67d2472b94e
Certificate serial: 0186B60364FB2515FA607403519A488A0B2D
Authority key identifier: BE:54:D4:F1:0B:FC:4E:BC:AB:A3:53:A9:DF:E7:C6:7D:24:72:B9:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlTU8Qv8Tryro1Op3-fGfSRyuU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3cbd92-75e1-42db-9682-d5f687300b59/1/sKSEqffVaXnpbIIMW8VUc5gAnhg.roa
Signing time: Mon 06 Mar 2023 08:22:01 +0000
ROA not before: Mon 06 Mar 2023 08:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 185.223.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:03:64:fb:25:15:fa:60:74:03:51:9a:48:8a:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be54d4f10bfc4ebcaba353a9dfe7c67d2472b94e
Validity
Not Before: Mar 6 08:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a484a9f7d56979e96c820c5bc5547398009e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:6b:b0:dd:7b:8a:4c:68:a3:c1:c5:23:1a:
5d:f4:64:36:7c:ea:4a:89:1f:90:e1:87:6c:62:66:
88:3a:a3:6b:66:d5:6e:0f:ff:27:fa:1d:92:3d:ca:
17:4e:4e:0d:15:25:fb:54:e4:c6:f4:68:2b:d5:5c:
77:a9:36:86:6c:ee:eb:4c:bd:28:61:9f:ef:db:9b:
41:18:0c:39:4f:c8:98:7e:9f:80:61:80:1d:12:49:
ab:33:e4:5e:92:9f:3e:8e:45:40:3a:92:5e:33:7a:
4a:e1:45:ac:ea:82:36:79:c2:5e:16:cd:36:30:6a:
01:bd:02:46:6d:7b:22:48:4d:c4:5d:6b:a3:e2:f6:
3d:d1:66:e5:2a:51:b5:1a:75:e2:8c:90:2d:63:b5:
94:52:dc:61:d9:74:1b:75:1c:09:e7:59:ec:2c:80:
4a:3d:cd:44:9b:dc:01:74:b5:41:ff:67:9a:82:c6:
23:a0:4a:5c:dd:95:0e:be:1f:b7:d5:bb:9d:3e:5b:
ab:0f:43:95:77:1a:54:37:90:b4:b5:59:f0:81:6e:
b0:9a:fb:46:72:12:aa:87:2c:ac:8e:57:b8:17:3d:
dc:8e:ab:8b:79:b5:9e:82:ca:65:ed:fc:22:a1:b2:
f3:7d:64:db:8d:5a:19:0d:eb:5a:39:59:d0:8f:75:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:84:A9:F7:D5:69:79:E9:6C:82:0C:5B:C5:54:73:98:00:9E:18
X509v3 Authority Key Identifier:
keyid:BE:54:D4:F1:0B:FC:4E:BC:AB:A3:53:A9:DF:E7:C6:7D:24:72:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlTU8Qv8Tryro1Op3-fGfSRyuU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3cbd92-75e1-42db-9682-d5f687300b59/1/sKSEqffVaXnpbIIMW8VUc5gAnhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3cbd92-75e1-42db-9682-d5f687300b59/1/vlTU8Qv8Tryro1Op3-fGfSRyuU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.214.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:4f:ce:94:a6:62:ee:6d:bd:61:57:f8:eb:86:6e:2f:d9:4c:
b4:e9:36:26:2e:a8:e8:ff:8c:5a:0a:da:a3:06:4b:e4:0f:26:
0f:a0:ec:0e:3b:ee:b3:b4:f7:2e:7b:a1:32:a8:de:51:0c:0e:
f5:eb:9b:2e:50:0c:d6:64:82:4e:3f:36:6d:2d:6a:8f:bb:3b:
07:ce:11:7b:5c:ad:cc:56:5b:a5:c7:b1:2b:16:9d:d1:ed:a7:
5d:1f:b7:8b:e3:23:d3:ae:d8:3c:4c:aa:20:00:a5:f5:69:62:
56:82:36:67:fb:c1:50:32:52:b3:f9:fe:d9:2a:0a:d9:68:43:
42:78:eb:e2:cd:8f:7d:1e:6f:55:76:8a:f6:be:60:bc:0d:cf:
56:6d:de:89:51:c0:97:48:ec:4f:f9:19:97:7e:94:38:45:61:
2e:2b:da:bc:0a:60:0f:be:15:b6:d6:c6:15:ef:ec:d8:a2:99:
5f:08:a2:35:1f:56:46:b1:88:9c:1e:7a:74:f5:f6:b0:96:ee:
c2:94:89:86:cd:4f:88:8b:cd:a4:8d:b4:6b:0a:79:89:92:2a:
f7:93:a6:cd:25:39:f9:48:28:d2:cf:21:bd:60:b5:ee:2a:4d:
c2:9a:57:5d:ff:1c:d4:8d:c4:70:19:96:fc:4c:e9:b2:0e:dc:
8e:d5:49:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa2A2T7JRX6YHQDUZpIigstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTRkNGYxMGJmYzRlYmNhYmEzNTNhOWRmZTdjNjdkMjQ3
MmI5NGUwHhcNMjMwMzA2MDgyMjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGE0ODRhOWY3ZDU2OTc5ZTk2YzgyMGM1YmM1NTQ3Mzk4MDA5ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd5rsN17ikxoo8HFIxpd9GQ2fOpK
iR+Q4YdsYmaIOqNrZtVuD/8n+h2SPcoXTk4NFSX7VOTG9Ggr1Vx3qTaGbO7rTL0o
YZ/v25tBGAw5T8iYfp+AYYAdEkmrM+Rekp8+jkVAOpJeM3pK4UWs6oI2ecJeFs02
MGoBvQJGbXsiSE3EXWuj4vY90WblKlG1GnXijJAtY7WUUtxh2XQbdRwJ51nsLIBK
Pc1Em9wBdLVB/2eagsYjoEpc3ZUOvh+31budPlurD0OVdxpUN5C0tVnwgW6wmvtG
chKqhyysjle4Fz3cjquLebWegspl7fwiobLzfWTbjVoZDetaOVnQj3XJuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCkhKn31Wl56WyCDFvFVHOYAJ4YMB8GA1UdIwQY
MBaAFL5U1PEL/E68q6NTqd/nxn0kcrlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxUVThRdjhUcnlybzFPcDMtZkdmU1J5dVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zY2JkOTItNzVlMS00MmRiLTk2ODIt
ZDVmNjg3MzAwYjU5LzEvc0tTRXFmZlZhWG5wYklJTVc4VlVjNWdBbmhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zY2JkOTItNzVlMS00MmRiLTk2ODItZDVmNjg3MzAwYjU5
LzEvdmxUVThRdjhUcnlybzFPcDMtZkdmU1J5dVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud/WMA0G
CSqGSIb3DQEBCwUAA4IBAQC7T86UpmLubb1hV/jrhm4v2Uy06TYmLqjo/4xaCtqj
BkvkDyYPoOwOO+6ztPcue6EyqN5RDA7165suUAzWZIJOPzZtLWqPuzsHzhF7XK3M
Vlulx7ErFp3R7addH7eL4yPTrtg8TKogAKX1aWJWgjZn+8FQMlKz+f7ZKgrZaENC
eOvizY99Hm9Vdor2vmC8Dc9Wbd6JUcCXSOxP+RmXfpQ4RWEuK9q8CmAPvhW21sYV
7+zYoplfCKI1H1ZGsYicHnp09fawlu7ClImGzU+Ii82kjbRrCnmJkir3k6bNJTn5
SCjSzyG9YLXuKk3Cmldd/xzUjcRwGZb8TOmyDtyO1UnD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:26 2024 by rpki-client on console-fra.rpki-client.org