Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/K2T28mvmC75v2Vw2-uVMvIG2jfo.roa
File: K2T28mvmC75v2Vw2-uVMvIG2jfo.roa (raw, json)
Hash identifier: aYcEUomZvRkVI8uyEUQAOOyPFYPTFwFRDAgHhXXbx5s=
Subject key identifier: 2B:64:F6:F2:6B:E6:0B:BE:6F:D9:5C:36:FA:E5:4C:BC:81:B6:8D:FA
Certificate issuer: /CN=cba3d4fad505e926115c49edc77a8747c65e7c02
Certificate serial: 0186B89FB9D0DF3030C92CACF92A0EDDF22D
Authority key identifier: CB:A3:D4:FA:D5:05:E9:26:11:5C:49:ED:C7:7A:87:47:C6:5E:7C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6PU-tUF6SYRXEntx3qHR8ZefAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/K2T28mvmC75v2Vw2-uVMvIG2jfo.roa
Signing time: Mon 06 Mar 2023 20:32:00 +0000
ROA not before: Mon 06 Mar 2023 20:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 176.116.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:9f:b9:d0:df:30:30:c9:2c:ac:f9:2a:0e:dd:f2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba3d4fad505e926115c49edc77a8747c65e7c02
Validity
Not Before: Mar 6 20:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b64f6f26be60bbe6fd95c36fae54cbc81b68dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:01:25:77:9f:48:f6:ca:6e:ef:44:e3:ab:
33:99:66:42:55:79:4a:66:a9:5c:a9:3c:72:49:a9:
1b:45:85:be:72:ff:6c:1e:2c:bd:ed:61:66:bd:b7:
1e:19:9a:d1:12:80:33:ff:cb:0e:e4:f7:37:2d:e0:
0d:3e:41:66:14:60:b6:3c:38:d5:b2:97:43:f8:96:
38:f3:73:7d:b5:82:08:fe:76:bd:f9:5f:01:9f:34:
3b:88:11:cf:36:e6:6d:73:31:11:7a:bd:fc:1f:db:
b1:59:5c:22:54:ef:68:64:ad:e5:61:fe:d3:66:7f:
10:98:e2:21:47:ca:c1:fb:fb:12:03:ee:ad:9d:79:
88:1d:82:44:21:6d:a1:4d:9e:ed:29:9d:2e:3f:e1:
d3:88:34:f0:0c:38:67:95:b5:4a:20:24:d8:bd:74:
d7:5c:4f:e2:d1:5c:9d:03:c8:83:12:b3:e8:9b:d1:
ee:2c:53:e0:17:e6:6a:ca:d0:0b:8d:d7:bd:e1:42:
76:2d:d7:d4:4c:db:9c:e6:12:d3:31:af:81:14:c2:
9f:e3:b7:a2:b0:1c:ae:eb:63:ad:c4:cc:a0:2d:73:
e9:94:e3:4b:41:10:c0:a4:d0:9a:e9:d3:b3:1e:a6:
f5:88:06:37:28:5e:20:8a:09:eb:d5:4f:16:04:66:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:F6:F2:6B:E6:0B:BE:6F:D9:5C:36:FA:E5:4C:BC:81:B6:8D:FA
X509v3 Authority Key Identifier:
keyid:CB:A3:D4:FA:D5:05:E9:26:11:5C:49:ED:C7:7A:87:47:C6:5E:7C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6PU-tUF6SYRXEntx3qHR8ZefAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/K2T28mvmC75v2Vw2-uVMvIG2jfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/y6PU-tUF6SYRXEntx3qHR8ZefAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.13.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5c:11:50:3d:e2:20:ed:f6:4f:e0:6a:5a:15:ad:f9:5c:c4:
69:c5:c4:8a:93:42:15:7d:68:f0:9c:b9:b1:4a:91:1e:7e:71:
ed:4f:15:b8:2f:24:b6:54:7d:f4:f6:89:a1:3f:8c:69:da:f3:
89:0f:2f:18:f9:41:4c:94:8c:d6:64:13:d8:89:14:8a:1a:a4:
7f:6b:c2:e1:14:0b:c4:d4:b2:3e:d1:3c:83:2e:7d:72:de:29:
1b:39:ef:b5:ec:2f:63:a5:a8:a0:60:7c:1f:79:58:48:4f:1d:
ac:f7:21:5d:95:43:69:54:cb:45:34:bd:9b:a5:5f:18:0b:09:
10:fc:2a:00:ae:ee:a0:2c:b0:c4:14:a1:78:1e:8f:85:43:88:
7c:56:eb:f3:7f:7d:81:cc:05:9c:d2:e5:ef:53:20:1c:15:db:
a3:f2:ad:95:7f:69:b0:17:cf:a5:74:d5:17:4a:40:a5:e7:82:
d4:45:f4:b2:8f:fb:e2:d9:7b:3e:85:f5:0b:90:1f:3e:86:c8:
47:72:9f:2a:dc:71:7e:74:b8:41:a3:0c:f3:45:5b:bc:55:40:
c8:be:a3:1e:fe:9f:4b:97:57:9b:99:d5:8b:cf:b3:83:9c:9d:
b1:20:ce:ac:bb:33:13:ea:73:c4:d5:7b:a3:64:e4:ef:f7:2a:
ac:ae:ea:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa4n7nQ3zAwySys+SoO3fItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYTNkNGZhZDUwNWU5MjYxMTVjNDllZGM3N2E4NzQ3YzY1
ZTdjMDIwHhcNMjMwMzA2MjAzMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjY0ZjZmMjZiZTYwYmJlNmZkOTVjMzZmYWU1NGNiYzgxYjY4ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRsBJXefSPbKbu9E46szmWZCVXlK
ZqlcqTxySakbRYW+cv9sHiy97WFmvbceGZrREoAz/8sO5Pc3LeANPkFmFGC2PDjV
spdD+JY483N9tYII/na9+V8BnzQ7iBHPNuZtczERer38H9uxWVwiVO9oZK3lYf7T
Zn8QmOIhR8rB+/sSA+6tnXmIHYJEIW2hTZ7tKZ0uP+HTiDTwDDhnlbVKICTYvXTX
XE/i0VydA8iDErPom9HuLFPgF+ZqytALjde94UJ2LdfUTNuc5hLTMa+BFMKf47ei
sByu62OtxMygLXPplONLQRDApNCa6dOzHqb1iAY3KF4gignr1U8WBGbPgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtk9vJr5gu+b9lcNvrlTLyBto36MB8GA1UdIwQY
MBaAFMuj1PrVBekmEVxJ7cd6h0fGXnwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTZQVS10VUY2U1lSWEVudHgzcUhSOFplZkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNDQzZjgtYWYwNC00ZjYyLWEzNjAt
NDM2NzljNjM0MmUxLzEvSzJUMjhtdm1DNzV2MlZ3Mi11Vk12SUcyamZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNDQzZjgtYWYwNC00ZjYyLWEzNjAtNDM2NzljNjM0MmUx
LzEveTZQVS10VUY2U1lSWEVudHgzcUhSOFplZkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQNMA0G
CSqGSIb3DQEBCwUAA4IBAQCDXBFQPeIg7fZP4GpaFa35XMRpxcSKk0IVfWjwnLmx
SpEefnHtTxW4LyS2VH309omhP4xp2vOJDy8Y+UFMlIzWZBPYiRSKGqR/a8LhFAvE
1LI+0TyDLn1y3ikbOe+17C9jpaigYHwfeVhITx2s9yFdlUNpVMtFNL2bpV8YCwkQ
/CoAru6gLLDEFKF4Ho+FQ4h8Vuvzf32BzAWc0uXvUyAcFduj8q2Vf2mwF8+ldNUX
SkCl54LURfSyj/vi2Xs+hfULkB8+hshHcp8q3HF+dLhBowzzRVu8VUDIvqMe/p9L
l1ebmdWLz7ODnJ2xIM6suzMT6nPE1XujZOTv9yqsrupF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:34 2024 by rpki-client on console-fra.rpki-client.org