Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/2K6xgeTDSLOLwQn5KUm-c8dwDKo.roa
File: 2K6xgeTDSLOLwQn5KUm-c8dwDKo.roa (raw, json)
Hash identifier: iyY1Huh1nWpMl7QFHVKVJYRRyMnKjeUymeMKs9WX254=
Subject key identifier: D8:AE:B1:81:E4:C3:48:B3:8B:C1:09:F9:29:49:BE:73:C7:70:0C:AA
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 01865FA6928F61626E4F32D7B04F48CFB8B9
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/2K6xgeTDSLOLwQn5KUm-c8dwDKo.roa
Signing time: Fri 17 Feb 2023 13:53:17 +0000
ROA not before: Fri 17 Feb 2023 13:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:a6:92:8f:61:62:6e:4f:32:d7:b0:4f:48:cf:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Feb 17 13:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8aeb181e4c348b38bc109f92949be73c7700caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:3a:6a:1f:23:72:f1:55:e1:bc:48:3e:7f:
f4:3c:24:b4:b3:97:8d:e6:3d:4a:8e:26:e9:56:55:
22:8a:5d:71:f9:11:8c:b3:aa:8a:26:ec:6a:04:e3:
2f:67:a3:66:61:9f:d6:1a:b4:a3:ac:2e:9a:c4:ef:
9d:f9:f0:75:c2:51:d4:df:3b:0b:ed:96:63:e5:9a:
71:4a:f4:59:f9:74:68:f0:37:48:bd:71:8b:55:a7:
80:7d:0e:72:3d:07:8f:61:d8:d9:d4:9a:97:01:a0:
13:a6:1a:3e:0c:0a:0c:d8:b2:c1:18:20:96:77:1c:
f7:1b:77:d8:f4:e6:d6:f8:bf:74:7d:58:d9:38:4c:
fe:e3:5d:da:d6:24:81:ac:b3:85:27:05:44:42:c1:
53:e2:03:58:dd:de:77:84:f1:f8:71:fb:d6:bb:8f:
77:5a:3c:0f:28:e9:dc:56:c8:0a:16:4e:13:e7:95:
3f:e4:a9:78:10:c6:b6:6c:34:ce:06:1d:ea:cf:91:
39:12:b5:d6:bd:7b:a7:0e:8c:38:71:f0:57:80:b4:
00:5c:01:e9:d1:1f:7e:6b:d2:c8:15:ba:89:74:34:
f1:dd:e6:7e:b2:47:0c:a3:ca:fd:c9:71:53:3d:c8:
4c:c6:3f:9a:67:93:a5:be:40:80:30:a1:82:bf:c0:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:B1:81:E4:C3:48:B3:8B:C1:09:F9:29:49:BE:73:C7:70:0C:AA
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/2K6xgeTDSLOLwQn5KUm-c8dwDKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
38:58:fd:79:85:3e:c7:09:dd:ca:d7:ab:37:85:80:27:c8:4d:
54:ce:a0:b7:dd:d2:90:56:c4:f6:ce:4e:02:a4:f7:5a:70:53:
8c:1b:15:f8:4b:b0:9c:f9:7f:6e:58:1c:e2:5e:87:41:97:f8:
e3:3d:f5:de:7f:fb:ac:9b:84:ba:58:01:7a:a3:8b:5d:9d:2d:
12:14:70:98:4d:ac:99:de:0f:13:a7:59:13:ec:32:35:e7:cd:
95:fc:73:cb:df:5d:b5:46:2e:ec:1e:c6:48:ec:64:e3:b9:a3:
bf:25:92:7a:60:b8:be:64:f2:77:2d:8a:7f:83:44:55:39:fa:
d2:bb:fd:4b:61:2a:70:0d:83:4f:83:82:56:90:36:db:4b:b0:
63:fd:83:81:7d:82:2b:41:80:8a:3a:09:b9:0f:9a:86:11:f3:
47:e5:b2:e1:dc:43:9d:33:7b:ed:87:71:a1:60:82:11:20:82:
8a:5e:c8:86:94:3e:89:31:95:ad:8e:68:fa:3a:b2:9c:38:cd:
fa:bd:64:c0:dc:3a:ba:d4:03:8d:54:f9:b3:b9:82:d3:cc:e1:
4a:72:33:7a:0e:10:65:c7:e6:b4:73:4f:71:07:35:5f:44:12:
4d:ea:3e:78:fc:2a:29:82:7c:d9:bd:33:dd:57:44:1a:96:e5:
d7:aa:5c:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZfppKPYWJuTzLXsE9Iz7i5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjMwMjE3MTM1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGFlYjE4MWU0YzM0OGIzOGJjMTA5ZjkyOTQ5YmU3M2M3NzAwY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTw6ah8jcvFV4bxIPn/0PCS0s5eN
5j1KjibpVlUiil1x+RGMs6qKJuxqBOMvZ6NmYZ/WGrSjrC6axO+d+fB1wlHU3zsL
7ZZj5ZpxSvRZ+XRo8DdIvXGLVaeAfQ5yPQePYdjZ1JqXAaATpho+DAoM2LLBGCCW
dxz3G3fY9ObW+L90fVjZOEz+413a1iSBrLOFJwVEQsFT4gNY3d53hPH4cfvWu493
WjwPKOncVsgKFk4T55U/5Kl4EMa2bDTOBh3qz5E5ErXWvXunDow4cfBXgLQAXAHp
0R9+a9LIFbqJdDTx3eZ+skcMo8r9yXFTPchMxj+aZ5OlvkCAMKGCv8DeXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiusYHkw0izi8EJ+SlJvnPHcAyqMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvMks2eGdlVERTTE9Md1FuNUtVbS1jOGR3REtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkbMA0G
CSqGSIb3DQEBCwUAA4IBAQA4WP15hT7HCd3K16s3hYAnyE1UzqC33dKQVsT2zk4C
pPdacFOMGxX4S7Cc+X9uWBziXodBl/jjPfXef/usm4S6WAF6o4tdnS0SFHCYTayZ
3g8Tp1kT7DI1582V/HPL3121Ri7sHsZI7GTjuaO/JZJ6YLi+ZPJ3LYp/g0RVOfrS
u/1LYSpwDYNPg4JWkDbbS7Bj/YOBfYIrQYCKOgm5D5qGEfNH5bLh3EOdM3vth3Gh
YIIRIIKKXsiGlD6JMZWtjmj6OrKcOM36vWTA3Dq61AONVPmzuYLTzOFKcjN6DhBl
x+a0c09xBzVfRBJN6j54/CopgnzZvTPdV0QaluXXqlyt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org