Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/PDtmx7mEoAW9Vgj-7NmUK6v9kvM.roa
File: PDtmx7mEoAW9Vgj-7NmUK6v9kvM.roa (raw, json)
Hash identifier: SwdS2iffAUYM/XDNcSKHg1I2G55U7hyvBeTblc0YmPc=
Subject key identifier: 3C:3B:66:C7:B9:84:A0:05:BD:56:08:FE:EC:D9:94:2B:AB:FD:92:F3
Certificate issuer: /CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Certificate serial: 01882086B0B69DA26802610E5D5B2B6C9B20
Authority key identifier: 42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/PDtmx7mEoAW9Vgj-7NmUK6v9kvM.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 212.18.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b0:b6:9d:a2:68:02:61:0e:5d:5b:2b:6c:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3b66c7b984a005bd5608feecd9942babfd92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:1e:92:4f:fa:c9:02:b4:99:69:d3:93:c5:
24:3b:e8:da:14:68:da:24:71:03:7f:06:f6:3a:af:
97:e7:a9:9a:9b:b4:95:81:06:ca:65:5a:d2:95:19:
db:1b:62:97:67:1a:68:2b:03:cf:de:17:b0:88:22:
8e:a7:53:c4:22:20:33:6c:86:6c:f2:01:cf:13:a4:
10:ec:d9:83:f8:a0:ba:b3:16:76:1e:b7:75:0d:99:
9f:f5:b3:a2:69:0b:eb:29:d4:ca:45:b2:c1:75:65:
84:5d:cd:ac:4a:0f:e5:4b:df:76:98:2e:b1:4e:4b:
9c:a5:bd:b4:4b:35:34:36:bb:a4:09:40:58:3f:5e:
79:21:2f:7a:0b:7e:da:de:09:c8:fb:28:ba:af:af:
0d:af:14:98:3e:bf:61:52:3a:88:8b:1c:8c:08:d2:
46:c7:cf:c7:38:9d:b6:44:25:86:18:00:1d:d2:08:
35:b4:95:b7:f6:61:f9:50:a9:5c:e9:c9:d1:f1:94:
06:2f:91:b1:83:77:3c:13:2d:50:fb:d5:43:95:d0:
c9:ab:70:e4:e8:ad:dc:72:b4:9c:80:fb:ed:f2:4b:
d5:0d:c8:60:37:05:f5:2c:53:bc:3a:24:92:88:e7:
c5:af:b9:64:3f:e2:9d:6d:46:ca:61:87:18:0f:73:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:66:C7:B9:84:A0:05:BD:56:08:FE:EC:D9:94:2B:AB:FD:92:F3
X509v3 Authority Key Identifier:
keyid:42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/PDtmx7mEoAW9Vgj-7NmUK6v9kvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/QqHbokIK9pWGpH90JutXwk1ih6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.119.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f7:6a:be:cd:3d:ac:7b:f6:76:89:e8:93:c3:c4:66:de:46:
54:ae:50:60:9b:ac:cf:27:01:5f:6a:77:dd:98:30:41:0f:b8:
4f:62:74:f3:c7:a0:f4:f5:7f:af:23:24:83:1a:46:90:79:d1:
ac:12:e2:69:89:7f:a0:7a:d3:ae:f0:61:30:d0:f0:da:ca:72:
28:9f:42:6a:5c:cd:63:e7:c2:cd:5f:df:f8:e3:08:e0:78:ba:
e9:bc:c4:30:b1:e7:34:4f:16:4b:5b:f8:b3:1a:84:1e:fc:44:
9e:91:c2:23:81:47:c7:15:b1:21:e1:68:27:6c:eb:59:38:f5:
4f:1a:61:c8:c8:0f:66:7f:5d:15:bd:73:c3:93:02:77:b3:e7:
d5:70:c9:6e:49:4a:14:eb:69:fc:98:4a:6e:22:1c:35:25:f7:
6e:ba:73:39:6e:2f:16:e5:d8:87:19:27:8c:7c:ea:eb:f4:db:
34:55:30:69:fe:09:f3:20:cc:d3:2e:b8:f3:04:98:78:12:5d:
42:90:bb:00:a6:d3:75:e7:12:1d:17:56:eb:b0:23:c1:be:dc:
24:9b:e4:ae:eb:7a:b2:df:0b:e8:cf:a4:2b:13:ca:4e:76:10:
e6:aa:17:97:05:f6:61:3e:f7:b9:72:83:36:91:f5:22:2f:98:
ce:2e:54:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrC2naJoAmEOXVsrbJsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTFkYmEyNDIwYWY2OTU4NmE0N2Y3NDI2ZWI1N2MyNGQ2
Mjg3YTIwHhcNMjMwNTE1MTc0NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzNiNjZjN2I5ODRhMDA1YmQ1NjA4ZmVlY2Q5OTQyYmFiZmQ5MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgsekk/6yQK0mWnTk8UkO+jaFGja
JHEDfwb2Oq+X56mam7SVgQbKZVrSlRnbG2KXZxpoKwPP3hewiCKOp1PEIiAzbIZs
8gHPE6QQ7NmD+KC6sxZ2Hrd1DZmf9bOiaQvrKdTKRbLBdWWEXc2sSg/lS992mC6x
Tkucpb20SzU0NrukCUBYP155IS96C37a3gnI+yi6r68NrxSYPr9hUjqIixyMCNJG
x8/HOJ22RCWGGAAd0gg1tJW39mH5UKlc6cnR8ZQGL5Gxg3c8Ey1Q+9VDldDJq3Dk
6K3ccrScgPvt8kvVDchgNwX1LFO8OiSSiOfFr7lkP+KdbUbKYYcYD3OFGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDw7Zse5hKAFvVYI/uzZlCur/ZLzMB8GA1UdIwQY
MBaAFEKh26JCCvaVhqR/dCbrV8JNYoeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFIYm9rSUs5cFdHcEg5MEp1dFh3azFpaDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lOTA2MTktMWZkOC00YjBlLWE4OWMt
MGNkZDljYjI2NzM1LzEvUER0bXg3bUVvQVc5VmdqLTdObVVLNnY5a3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lOTA2MTktMWZkOC00YjBlLWE4OWMtMGNkZDljYjI2NzM1
LzEvUXFIYm9rSUs5cFdHcEg5MEp1dFh3azFpaDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJ3MA0G
CSqGSIb3DQEBCwUAA4IBAQAn92q+zT2se/Z2ieiTw8Rm3kZUrlBgm6zPJwFfanfd
mDBBD7hPYnTzx6D09X+vIySDGkaQedGsEuJpiX+getOu8GEw0PDaynIon0JqXM1j
58LNX9/44wjgeLrpvMQwsec0TxZLW/izGoQe/ESekcIjgUfHFbEh4WgnbOtZOPVP
GmHIyA9mf10VvXPDkwJ3s+fVcMluSUoU62n8mEpuIhw1JfduunM5bi8W5diHGSeM
fOrr9Ns0VTBp/gnzIMzTLrjzBJh4El1CkLsAptN15xIdF1brsCPBvtwkm+Su63qy
3wvoz6QrE8pOdhDmqheXBfZhPve5coM2kfUiL5jOLlTd
-----END CERTIFICATE-----
Generated at Wed Nov 15 14:49:24 2023 by rpki-client on console-fra.rpki-client.org