Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yvWwUTOl6QHOC94a7aLQaI16T5U.roa
File: yvWwUTOl6QHOC94a7aLQaI16T5U.roa (raw, json)
Hash identifier: lDqOrzYyFUpJCAUX3kLKuYGoIpusyk65TeMehjaFDI4=
Subject key identifier: CA:F5:B0:51:33:A5:E9:01:CE:0B:DE:1A:ED:A2:D0:68:8D:7A:4F:95
Certificate issuer: /CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Certificate serial: 01856FB1194B11ABB9DCBCABF599397757BD
Authority key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yvWwUTOl6QHOC94a7aLQaI16T5U.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 178.211.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:19:4b:11:ab:b9:dc:bc:ab:f5:99:39:77:57:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf5b05133a5e901ce0bde1aeda2d0688d7a4f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:f9:5b:80:6a:ca:cf:81:9d:40:4c:26:91:
0a:4b:19:53:f8:d3:6d:f6:17:d8:7c:ef:e1:50:96:
56:f3:d8:ef:81:6b:6b:e7:09:2e:d8:a6:d0:c8:0b:
d9:dc:e7:e3:48:b3:b1:21:ca:22:e9:cd:7f:07:79:
dd:ad:c0:59:16:1d:12:d2:da:24:f7:fa:44:60:90:
91:c0:26:38:25:03:df:0a:ac:c1:67:5b:aa:8a:3b:
98:59:02:d0:a2:03:e8:11:f4:f0:09:1a:82:6f:03:
8e:69:1e:07:4a:eb:31:e6:dd:08:fe:a6:ae:02:d3:
b8:fb:07:59:2d:64:db:7f:36:a5:55:25:08:28:c4:
b0:87:fe:7c:90:10:e0:f4:6f:29:7c:aa:05:1c:fd:
be:51:9d:ee:d7:9c:c2:80:1e:9a:fe:34:b1:55:fc:
f9:62:d3:05:db:22:5d:06:6c:f2:ce:f6:f5:c4:ce:
e3:6f:cb:92:1e:5e:d6:e4:49:fd:0a:10:ca:2f:62:
d0:c8:0a:8e:ad:e5:65:de:87:53:0c:34:1f:cf:51:
ca:bf:a1:d3:e5:6d:bb:71:f8:30:33:10:f0:3a:17:
6a:25:7c:39:fc:67:d3:20:eb:65:72:5c:25:6b:f7:
d0:bd:85:6f:39:1c:dc:c9:94:a2:64:f7:73:b0:db:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:B0:51:33:A5:E9:01:CE:0B:DE:1A:ED:A2:D0:68:8D:7A:4F:95
X509v3 Authority Key Identifier:
keyid:3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yvWwUTOl6QHOC94a7aLQaI16T5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:14:7f:4a:c0:b5:fc:49:2f:55:0a:4d:10:02:f0:7f:2b:69:
bf:fe:a3:a4:8d:69:ab:5b:57:3e:08:bd:50:72:2b:fe:ab:b7:
ca:c4:1e:1b:1b:77:d6:75:03:f1:e2:f6:cb:9b:5e:0e:56:a3:
4a:29:4e:f4:29:42:ab:b7:46:0e:9c:59:b6:2a:8b:bf:df:fa:
a4:18:52:f6:46:25:8e:58:13:71:89:05:5a:21:71:12:6e:89:
da:d4:2a:05:8c:d1:3b:8a:80:a3:56:70:22:52:5b:3b:3c:ce:
d4:17:54:78:11:06:cc:94:4b:db:3b:2d:92:e0:d9:4c:50:82:
35:08:b9:53:07:a6:f3:69:b7:92:5a:aa:c4:de:49:14:fa:94:
c4:33:1c:15:df:04:72:20:96:e6:20:30:38:75:9e:91:19:65:
2c:b0:6f:1a:7e:88:f5:8a:04:48:06:00:82:9f:c3:b1:2d:08:
66:58:1e:cb:9a:a6:a8:f2:0e:35:24:3a:29:6a:bf:4c:e4:f4:
fc:f4:cb:74:e3:f6:60:d2:3d:7c:26:df:28:14:52:3b:a8:9e:
50:85:9f:d9:39:15:31:fb:b4:db:22:90:49:b9:20:71:fc:b8:
14:2b:3c:6b:45:a1:15:a8:a3:4c:b6:94:2f:4e:b3:0f:0b:26:
07:17:f4:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsRlLEau53Lyr9Zk5d1e9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzljYTFkN2Q1NTU3YjAxODVlYTljZWRlMDQ1NDgwZTc2
Mjg5MmIwHhcNMjMwMTAxMjMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWY1YjA1MTMzYTVlOTAxY2UwYmRlMWFlZGEyZDA2ODhkN2E0Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+/5W4Bqys+BnUBMJpEKSxlT+NNt
9hfYfO/hUJZW89jvgWtr5wku2KbQyAvZ3OfjSLOxIcoi6c1/B3ndrcBZFh0S0tok
9/pEYJCRwCY4JQPfCqzBZ1uqijuYWQLQogPoEfTwCRqCbwOOaR4HSusx5t0I/qau
AtO4+wdZLWTbfzalVSUIKMSwh/58kBDg9G8pfKoFHP2+UZ3u15zCgB6a/jSxVfz5
YtMF2yJdBmzyzvb1xM7jb8uSHl7W5En9ChDKL2LQyAqOreVl3odTDDQfz1HKv6HT
5W27cfgwMxDwOhdqJXw5/GfTIOtlclwla/fQvYVvORzcyZSiZPdzsNsCnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMr1sFEzpekBzgveGu2i0GiNek+VMB8GA1UdIwQY
MBaAFD7Jyh19VVewGF6pzt4EVIDnYokrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNuS0hYMVZWN0FZWHFuTzNnUlVnT2RpaVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjUxZDAtYmU0ZS00ZjAwLThiNTIt
Njc5YjBmN2VkMTI4LzEveXZXd1VUT2w2UUhPQzk0YTdhTFFhSTE2VDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMjUxZDAtYmU0ZS00ZjAwLThiNTItNjc5YjBmN2VkMTI4
LzEvUHNuS0hYMVZWN0FZWHFuTzNnUlVnT2RpaVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOVMA0G
CSqGSIb3DQEBCwUAA4IBAQB/FH9KwLX8SS9VCk0QAvB/K2m//qOkjWmrW1c+CL1Q
civ+q7fKxB4bG3fWdQPx4vbLm14OVqNKKU70KUKrt0YOnFm2Kou/3/qkGFL2RiWO
WBNxiQVaIXESbona1CoFjNE7ioCjVnAiUls7PM7UF1R4EQbMlEvbOy2S4NlMUII1
CLlTB6bzabeSWqrE3kkU+pTEMxwV3wRyIJbmIDA4dZ6RGWUssG8afoj1igRIBgCC
n8OxLQhmWB7Lmqao8g41JDopar9M5PT89Mt04/Zg0j18Jt8oFFI7qJ5QhZ/ZORUx
+7TbIpBJuSBx/LgUKzxrRaEVqKNMtpQvTrMPCyYHF/S5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org