Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/0el-h-_Rh4n081Sksl1M1JqHEk4.roa
File: 0el-h-_Rh4n081Sksl1M1JqHEk4.roa (raw, json)
Hash identifier: TYtLYFPqY9nTVA7KhP5h4879al0HM1cKWr7zRfm+9oc=
Subject key identifier: D1:E9:7E:87:EF:D1:87:89:F4:F3:54:A4:B2:5D:4C:D4:9A:87:12:4E
Certificate issuer: /CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
Certificate serial: 01856E78BC5E63A44A3847DF1DB9F56C455B
Authority key identifier: 52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/0el-h-_Rh4n081Sksl1M1JqHEk4.roa
Signing time: Sun 01 Jan 2023 17:54:44 +0000
ROA not before: Sun 01 Jan 2023 17:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50964
IP address blocks: 194.76.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:bc:5e:63:a4:4a:38:47:df:1d:b9:f5:6c:45:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
Validity
Not Before: Jan 1 17:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e97e87efd18789f4f354a4b25d4cd49a87124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:95:0d:cb:fd:07:fb:d4:fe:e5:ac:ca:85:
84:aa:a3:9a:12:b3:cb:44:48:1d:5f:af:64:09:2b:
ae:72:9f:ff:c4:a5:24:59:13:0b:65:c2:2b:c8:59:
6a:e7:7c:ac:b7:3c:03:64:f3:31:18:87:1c:c5:af:
b0:a8:be:8c:4f:d4:58:54:28:ec:ae:9e:7e:af:fe:
c8:f0:7d:8f:d6:15:c3:f5:42:0e:b2:a0:4c:04:16:
f6:4e:8b:7a:3b:78:89:53:97:a0:32:36:40:f1:95:
ff:b1:cc:65:dc:66:9e:2c:61:53:93:3b:fa:3c:01:
2f:06:aa:f3:02:61:19:34:57:9c:5a:de:b9:a9:7f:
21:f1:21:5c:13:59:ce:d5:18:72:ec:fb:39:87:a6:
9d:aa:7e:86:62:fd:45:46:70:d9:f8:ba:c8:4a:a4:
78:fc:7a:7f:61:9c:89:79:41:22:55:2b:eb:a4:a3:
98:8b:9f:cc:f2:bf:b1:bd:3a:84:32:c8:a1:a9:53:
87:03:94:2b:a6:07:45:dd:16:3c:09:e2:bc:03:af:
40:c7:d6:79:ae:d3:5f:67:18:99:bd:c7:c9:a1:b2:
f2:33:8a:b4:40:2f:2d:f3:0c:11:1a:cb:fb:cf:ce:
e1:97:8f:48:dd:7f:41:d2:dc:cd:52:31:7a:05:e1:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:7E:87:EF:D1:87:89:F4:F3:54:A4:B2:5D:4C:D4:9A:87:12:4E
X509v3 Authority Key Identifier:
keyid:52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/0el-h-_Rh4n081Sksl1M1JqHEk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/UogigO-MblLcZKlKzoTT3I8mHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:5f:e8:61:0c:d0:5c:1f:ed:dd:bc:dc:6a:69:c5:77:c1:f8:
ff:ca:d1:3e:f5:ad:c5:19:0a:75:80:fc:18:3d:dc:ee:e5:c1:
b6:ac:de:97:bc:27:4b:ca:c6:b8:9d:62:e1:22:96:df:86:d3:
e1:29:fb:6c:6b:63:36:79:5b:45:17:8c:fc:4f:3c:63:55:41:
a0:5a:03:a9:45:34:42:97:10:bc:28:eb:dd:db:f7:4e:cb:09:
e2:95:c9:2a:79:7f:a0:16:57:57:a2:5e:4a:4f:16:8d:97:a2:
55:ad:bc:ba:ec:1a:b4:61:eb:00:dc:69:e5:78:af:27:a2:bf:
90:29:1a:bc:f9:8f:5d:e3:a7:25:76:0a:7d:c7:f0:2b:ab:27:
0a:9c:dc:de:00:cd:6f:5b:fd:3a:4d:f4:c5:9b:14:28:82:e4:
fb:27:6d:7f:fb:47:f3:d5:23:4c:1c:ad:ec:a2:4b:64:8d:54:
60:c4:e9:ae:d4:8c:2f:86:e5:5a:0c:f9:51:f3:62:68:05:9b:
94:4a:fa:c2:5c:80:dc:68:0e:6d:93:f0:a7:d2:41:3a:4d:b9:
95:f7:8f:d2:8c:a9:9a:f3:eb:8c:c9:e3:b9:e1:77:db:60:b0:
7d:21:15:6f:fd:62:13:3a:9c:8b:8a:e2:e3:ba:99:e1:13:a8:
93:5f:7e:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVueLxeY6RKOEffHbn1bEVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODgyMjgwZWY4YzZlNTJkYzY0YTk0YWNlODRkM2RjOGYy
NjFkZWQwHhcNMjMwMTAxMTc1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWU5N2U4N2VmZDE4Nzg5ZjRmMzU0YTRiMjVkNGNkNDlhODcxMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2CVDcv9B/vU/uWsyoWEqqOaErPL
REgdX69kCSuucp//xKUkWRMLZcIryFlq53ystzwDZPMxGIccxa+wqL6MT9RYVCjs
rp5+r/7I8H2P1hXD9UIOsqBMBBb2Tot6O3iJU5egMjZA8ZX/scxl3GaeLGFTkzv6
PAEvBqrzAmEZNFecWt65qX8h8SFcE1nO1Rhy7Ps5h6adqn6GYv1FRnDZ+LrISqR4
/Hp/YZyJeUEiVSvrpKOYi5/M8r+xvTqEMsihqVOHA5QrpgdF3RY8CeK8A69Ax9Z5
rtNfZxiZvcfJobLyM4q0QC8t8wwRGsv7z87hl49I3X9B0tzNUjF6BeES8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHpfofv0YeJ9PNUpLJdTNSahxJOMB8GA1UdIwQY
MBaAFFKIIoDvjG5S3GSpSs6E09yPJh3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9naWdPLU1ibExjWktsS3pvVFQzSThtSGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDdlYTctZTRlMi00OWUyLTllMTMt
MWVmYzM1NTlkNzA2LzEvMGVsLWgtX1JoNG4wODFTa3NsMU0xSnFIRWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDdlYTctZTRlMi00OWUyLTllMTMtMWVmYzM1NTlkNzA2
LzEvVW9naWdPLU1ibExjWktsS3pvVFQzSThtSGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkwmMA0G
CSqGSIb3DQEBCwUAA4IBAQCKX+hhDNBcH+3dvNxqacV3wfj/ytE+9a3FGQp1gPwY
Pdzu5cG2rN6XvCdLysa4nWLhIpbfhtPhKftsa2M2eVtFF4z8TzxjVUGgWgOpRTRC
lxC8KOvd2/dOywnilckqeX+gFldXol5KTxaNl6JVrby67Bq0YesA3GnleK8nor+Q
KRq8+Y9d46cldgp9x/ArqycKnNzeAM1vW/06TfTFmxQoguT7J21/+0fz1SNMHK3s
oktkjVRgxOmu1IwvhuVaDPlR82JoBZuUSvrCXIDcaA5tk/Cn0kE6TbmV94/SjKma
8+uMyeO54XfbYLB9IRVv/WITOpyLiuLjupnhE6iTX36b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:12 2024 by rpki-client on console-fra.rpki-client.org