Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/CNB2eHXWZ2gYZc_eK6i7qifNLQo.roa
File: CNB2eHXWZ2gYZc_eK6i7qifNLQo.roa (raw, json)
Hash identifier: CZMa7EjC1lwaX1afjS0UMfkeo/C/WGOoYjPwvhC5NOk=
Subject key identifier: 08:D0:76:78:75:D6:67:68:18:65:CF:DE:2B:A8:BB:AA:27:CD:2D:0A
Certificate issuer: /CN=cc76201a5e51665e8057d26c456debb032730cb7
Certificate serial: 01B32EFE
Authority key identifier: CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/CNB2eHXWZ2gYZc_eK6i7qifNLQo.roa
Signing time: Sat 01 Jan 2022 13:07:41 +0000
ROA not before: Sat 01 Jan 2022 13:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 185.173.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28520190 (0x1b32efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc76201a5e51665e8057d26c456debb032730cb7
Validity
Not Before: Jan 1 13:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d0767875d667681865cfde2ba8bbaa27cd2d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:79:26:a9:f8:74:d8:3c:1f:d7:67:88:bb:
04:40:31:5a:12:6a:25:08:3c:be:46:3d:a0:9f:c6:
9e:1e:7c:f3:84:46:f6:9e:84:d1:92:b0:71:73:cc:
ec:35:53:d8:de:d3:cd:fc:29:fa:d4:2e:ff:09:2a:
2e:27:2e:67:ee:17:84:5d:8c:f3:6c:77:f5:6f:8f:
36:62:0c:ac:5f:d0:47:1f:49:a0:3c:a2:7a:ad:d0:
ec:11:ec:ba:26:07:44:42:57:cb:05:c8:a4:b2:8f:
14:e0:af:88:34:5d:83:57:79:27:dd:dd:63:e3:2c:
c4:6e:57:a8:60:c9:eb:75:e6:13:27:c9:03:7c:88:
9f:46:17:32:b7:a4:96:b1:57:2c:c2:14:41:ae:c2:
4c:57:61:e1:18:26:33:73:5d:e3:17:16:b6:68:9f:
af:ec:21:9d:52:d4:d1:2e:01:4e:ce:2e:c0:f7:18:
23:f1:f4:5d:eb:d7:c3:db:93:c5:a5:a8:b2:74:bb:
9c:63:ad:13:7e:80:3a:e2:87:2b:54:d8:27:aa:28:
8c:04:af:64:35:61:4a:58:cd:91:c6:f2:8a:96:5f:
a7:9f:06:ab:70:a1:15:a0:91:98:a9:77:97:03:a7:
94:54:d1:70:fd:25:6e:f3:21:a6:cb:72:47:1b:11:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:76:78:75:D6:67:68:18:65:CF:DE:2B:A8:BB:AA:27:CD:2D:0A
X509v3 Authority Key Identifier:
keyid:CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/CNB2eHXWZ2gYZc_eK6i7qifNLQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/zHYgGl5RZl6AV9JsRW3rsDJzDLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.130.0/24
Signature Algorithm: sha256WithRSAEncryption
13:12:c3:7a:43:c1:b3:fd:00:04:79:98:1f:a0:56:ca:32:71:
0e:30:a9:67:5e:cd:5d:06:01:c6:15:ad:58:72:24:c4:8c:f5:
18:b0:cd:06:a1:c1:5e:2d:df:20:50:e1:c6:a7:db:cc:1c:f2:
9d:d7:48:02:94:83:5c:ef:4d:cf:be:28:3e:f4:93:c0:01:46:
21:dd:fa:24:a7:42:f8:97:a3:32:66:e5:16:e0:7c:05:ea:c7:
8f:91:90:99:49:8f:e7:00:53:a9:d3:90:71:f7:a8:1f:83:23:
57:8e:72:15:b4:d0:8d:ca:54:b4:0e:51:e2:d9:57:36:93:bf:
14:b5:e8:3a:76:c1:48:6f:ae:d2:f4:84:3d:1a:02:0c:b2:9f:
c0:53:df:34:25:9a:ae:b6:b6:dd:0a:d3:76:a5:09:97:b9:31:
ef:e4:10:77:b4:7f:59:19:38:9e:e5:d5:24:79:ce:9d:fe:e4:
c2:e8:9e:09:b8:a5:85:f4:43:10:72:83:6e:5a:86:1d:ee:ac:
87:a2:16:90:6d:ca:dc:cf:26:8d:96:ef:18:95:60:ba:29:06:
77:dc:ca:97:e2:7d:2f:7c:57:1d:a2:8d:36:35:1f:fb:79:df:
23:7c:8c:c8:45:a1:a0:ea:d2:91:06:74:83:25:68:93:4d:bc:
6f:a5:c9:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbMu/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Yzc2MjAxYTVlNTE2NjVlODA1N2QyNmM0NTZkZWJiMDMyNzMwY2I3MB4XDTIyMDEw
MTEzMDc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhkMDc2Nzg3NWQ2
Njc2ODE4NjVjZmRlMmJhOGJiYWEyN2NkMmQwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKt1eSap+HTYPB/XZ4i7BEAxWhJqJQg8vkY9oJ/Gnh5884RG
9p6E0ZKwcXPM7DVT2N7Tzfwp+tQu/wkqLicuZ+4XhF2M82x39W+PNmIMrF/QRx9J
oDyieq3Q7BHsuiYHREJXywXIpLKPFOCviDRdg1d5J93dY+MsxG5XqGDJ63XmEyfJ
A3yIn0YXMreklrFXLMIUQa7CTFdh4RgmM3Nd4xcWtmifr+whnVLU0S4BTs4uwPcY
I/H0XevXw9uTxaWosnS7nGOtE36AOuKHK1TYJ6oojASvZDVhSljNkcbyipZfp58G
q3ChFaCRmKl3lwOnlFTRcP0lbvMhpstyRxsRImUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQI0HZ4ddZnaBhlz94rqLuqJ80tCjAfBgNVHSMEGDAWgBTMdiAaXlFmXoBX
0mxFbeuwMnMMtzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pIWWdHbDVSWmw2QVY5SnNSVzNyc0RKekRMYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvMDRmMDJkLTJlZjQtNGI2Mi04YzFjLTNlMzMxMWIyN2QyZi8x
L0NOQjJlSFhXWjJnWVpjX2VLNmk3cWlmTkxRby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
MDRmMDJkLTJlZjQtNGI2Mi04YzFjLTNlMzMxMWIyN2QyZi8xL3pIWWdHbDVSWmw2
QVY5SnNSVzNyc0RKekRMYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmtgjANBgkqhkiG9w0BAQsFAAOC
AQEAExLDekPBs/0ABHmYH6BWyjJxDjCpZ17NXQYBxhWtWHIkxIz1GLDNBqHBXi3f
IFDhxqfbzBzynddIApSDXO9Nz74oPvSTwAFGId36JKdC+JejMmblFuB8BerHj5GQ
mUmP5wBTqdOQcfeoH4MjV45yFbTQjcpUtA5R4tlXNpO/FLXoOnbBSG+u0vSEPRoC
DLKfwFPfNCWarra23QrTdqUJl7kx7+QQd7R/WRk4nuXVJHnOnf7kwuieCbilhfRD
EHKDblqGHe6sh6IWkG3K3M8mjZbvGJVguikGd9zKl+J9L3xXHaKNNjUf+3nfI3yM
yEWhoOrSkQZ0gyVok028b6XJbg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:13 2023 by rpki-client on console-fra.rpki-client.org