Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/trxKzRiOlTWE3dLj5Rv3_9o1MVQ.roa
File: trxKzRiOlTWE3dLj5Rv3_9o1MVQ.roa (raw, json)
Hash identifier: LO8/VmQS0NPoLmznh3F8dYF2hacpDmEY7KZw2DJ/Aos=
Subject key identifier: B6:BC:4A:CD:18:8E:95:35:84:DD:D2:E3:E5:1B:F7:FF:DA:35:31:54
Certificate issuer: /CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Certificate serial: 018D842F18D0344B48B2DF9F5EF7EBBF8E5D
Authority key identifier: 33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/trxKzRiOlTWE3dLj5Rv3_9o1MVQ.roa
Signing time: Wed 07 Feb 2024 15:28:15 +0000
ROA not before: Wed 07 Feb 2024 15:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43606
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:2f:18:d0:34:4b:48:b2:df:9f:5e:f7:eb:bf:8e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Validity
Not Before: Feb 7 15:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6bc4acd188e953584ddd2e3e51bf7ffda353154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:1f:56:c0:e8:3b:32:d5:62:a0:8d:93:71:
59:86:23:56:ff:e6:fd:28:3f:55:d8:0a:69:0c:0f:
a2:a5:06:7a:d9:fc:86:ec:d9:94:9a:65:29:3b:54:
44:e6:38:45:44:e0:fc:45:cc:51:17:a4:21:a2:46:
08:da:01:a2:ab:95:4a:d8:ec:76:5b:d3:38:97:e4:
42:03:84:42:2d:82:34:7a:b8:63:a9:a1:c8:8e:85:
9a:4f:a8:41:fe:ad:2b:6c:1c:60:05:6a:13:cb:bd:
5d:28:a4:37:69:22:f2:56:9e:da:48:6d:37:6a:74:
c9:5d:30:0d:46:69:77:90:66:12:9f:31:af:82:a9:
69:94:e7:ad:c1:b8:a4:76:0c:ea:5c:b2:99:2a:9a:
7c:65:e7:1f:f2:0f:cc:a4:e6:95:9d:30:ae:aa:9a:
cd:32:cc:df:07:49:dc:4f:00:59:76:81:95:39:89:
dd:13:4d:c5:67:2a:18:96:86:08:76:35:34:11:35:
34:e0:da:25:0a:b7:30:79:5f:51:77:ab:c6:2b:1e:
62:e9:d0:7b:4f:2f:2b:68:58:12:3f:aa:26:ac:0e:
15:4b:fd:9b:e2:65:16:c2:7d:a9:bf:6b:a6:a6:f4:
41:69:a4:fa:f3:d1:dc:43:69:fe:e0:dd:07:a7:32:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:4A:CD:18:8E:95:35:84:DD:D2:E3:E5:1B:F7:FF:DA:35:31:54
X509v3 Authority Key Identifier:
keyid:33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/trxKzRiOlTWE3dLj5Rv3_9o1MVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
41:56:52:e3:f9:d0:79:bf:ae:ca:3b:4a:d2:16:41:12:05:e5:
15:dc:8b:a5:9d:2d:6e:16:ba:bb:9f:66:b8:67:12:ff:5d:4c:
b3:e5:96:2c:91:7b:51:d0:b4:8a:35:80:75:dd:d4:08:db:93:
e0:c9:ab:d7:26:7a:92:c9:c2:0d:66:94:b3:e2:aa:6b:2b:37:
b4:31:89:df:75:86:b6:be:66:9f:5f:e7:f9:6d:6b:11:b2:df:
16:07:8a:dc:85:58:2b:25:61:10:91:51:04:92:a8:75:07:e9:
b4:4d:e4:de:8e:1a:cb:9e:1b:b6:f8:f1:ae:9e:84:34:d4:e8:
8c:48:e6:37:92:9c:d1:8d:33:80:b2:ac:5c:fc:ee:63:26:39:
c7:ca:05:88:d6:ec:7d:d1:19:6f:5e:58:d8:86:5c:3c:41:7e:
59:fe:f7:4d:b5:4c:5f:fc:b3:e6:5a:d8:28:60:6f:4e:d7:c6:
b2:33:04:ab:fc:56:8c:95:ad:6b:21:e7:76:9a:be:b8:10:5f:
d6:88:dc:b3:df:64:5e:48:a8:a4:d4:a7:b1:5c:37:5a:0a:6a:
3e:21:41:5e:fa:0f:4a:21:84:dd:b8:ab:2a:ed:61:24:a4:3b:
a7:2c:d7:54:38:e2:0d:7e:e8:23:0d:2d:7b:53:10:22:3e:f3:
4e:71:85:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2ELxjQNEtIst+fXvfrv45dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjVjZTFmYzM3OTI3Y2I1YTRlNjdiMTc2YzdhNjNiMzJm
ZjZlODkwHhcNMjQwMjA3MTUyODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJjNGFjZDE4OGU5NTM1ODRkZGQyZTNlNTFiZjdmZmRhMzUzMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI8fVsDoOzLVYqCNk3FZhiNW/+b9
KD9V2AppDA+ipQZ62fyG7NmUmmUpO1RE5jhFROD8RcxRF6QhokYI2gGiq5VK2Ox2
W9M4l+RCA4RCLYI0erhjqaHIjoWaT6hB/q0rbBxgBWoTy71dKKQ3aSLyVp7aSG03
anTJXTANRml3kGYSnzGvgqlplOetwbikdgzqXLKZKpp8Zecf8g/MpOaVnTCuqprN
MszfB0ncTwBZdoGVOYndE03FZyoYloYIdjU0ETU04NolCrcweV9Rd6vGKx5i6dB7
Ty8raFgSP6omrA4VS/2b4mUWwn2pv2umpvRBaaT689HcQ2n+4N0HpzKVnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLa8Ss0YjpU1hN3S4+Ub9//aNTFUMB8GA1UdIwQY
MBaAFDP1zh/DeSfLWk5nsXbHpjsy/26JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9YT0g4TjVKOHRhVG1leGRzZW1PekxfYm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zYmI5ZDgtYmY1NC00ZThmLTgzZTUt
M2ZmYzAxZmNiZmI2LzEvdHJ4S3pSaU9sVFdFM2RMajVSdjNfOW8xTVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zYmI5ZDgtYmY1NC00ZThmLTgzZTUtM2ZmYzAxZmNiZmI2
LzEvTV9YT0g4TjVKOHRhVG1leGRzZW1PekxfYm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeLMA0G
CSqGSIb3DQEBCwUAA4IBAQBBVlLj+dB5v67KO0rSFkESBeUV3IulnS1uFrq7n2a4
ZxL/XUyz5ZYskXtR0LSKNYB13dQI25PgyavXJnqSycINZpSz4qprKze0MYnfdYa2
vmafX+f5bWsRst8WB4rchVgrJWEQkVEEkqh1B+m0TeTejhrLnhu2+PGunoQ01OiM
SOY3kpzRjTOAsqxc/O5jJjnHygWI1ux90RlvXljYhlw8QX5Z/vdNtUxf/LPmWtgo
YG9O18ayMwSr/FaMla1rIed2mr64EF/WiNyz32ReSKik1KexXDdaCmo+IUFe+g9K
IYTduKsq7WEkpDunLNdUOOINfugjDS17UxAiPvNOcYVF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org