Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/HrEUO4vd6T6hrfeTEagPcNKP3tw.roa
File: HrEUO4vd6T6hrfeTEagPcNKP3tw.roa (raw, json)
Hash identifier: KHdnOsypVzMnxYZfNewEyPYZOJzet17jGu19za2RQHs=
Subject key identifier: 1E:B1:14:3B:8B:DD:E9:3E:A1:AD:F7:93:11:A8:0F:70:D2:8F:DE:DC
Certificate issuer: /CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Certificate serial: 018CC6B7B5FCDEA447BFE640E457008A5CE3
Authority key identifier: 71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/HrEUO4vd6T6hrfeTEagPcNKP3tw.roa
Signing time: Mon 01 Jan 2024 20:29:37 +0000
ROA not before: Mon 01 Jan 2024 20:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202470
IP address blocks: 91.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b5:fc:de:a4:47:bf:e6:40:e4:57:00:8a:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Validity
Not Before: Jan 1 20:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eb1143b8bdde93ea1adf79311a80f70d28fdedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:c2:40:6b:95:3a:9a:a0:72:16:6f:b6:08:
db:34:0a:b8:da:d3:10:69:76:70:f1:b1:b9:67:0e:
ca:88:af:3f:34:21:e1:0a:e0:7f:c5:9d:a7:8f:77:
3d:a8:1c:3c:04:d4:c5:e9:f3:c4:11:d1:59:81:6b:
07:f3:e8:23:f0:b0:6a:66:d9:10:ce:e2:98:f3:86:
b3:a1:fa:29:bd:c5:57:cd:b0:21:b2:00:16:37:2e:
21:c7:d1:a1:4f:04:30:1b:09:90:ae:d1:f3:84:45:
83:57:8f:cb:a5:ef:82:8b:e2:8f:f5:2a:51:50:68:
a1:f5:32:c9:b1:6e:86:cd:b4:b1:b0:19:25:f7:67:
ce:b2:7c:a2:23:80:ce:52:52:75:ef:e4:12:b8:23:
22:f0:2e:0c:0c:80:5d:a0:e7:ea:20:5e:02:bf:c0:
44:e8:b0:f3:b5:26:2a:f8:10:7f:b4:2f:02:f2:e3:
65:a2:a4:5e:11:30:fb:42:ec:b2:60:fd:8b:23:7c:
1b:7b:4c:24:ff:e5:e5:ae:e0:64:60:f3:35:53:1f:
e0:40:5f:c1:75:3d:9f:f6:56:70:5f:e2:0d:95:b5:
60:92:11:1d:eb:48:fa:e0:24:d8:4c:fa:df:45:fb:
e7:60:62:94:4e:9b:c6:53:d2:2f:1d:6d:8a:6b:f7:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:14:3B:8B:DD:E9:3E:A1:AD:F7:93:11:A8:0F:70:D2:8F:DE:DC
X509v3 Authority Key Identifier:
keyid:71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/HrEUO4vd6T6hrfeTEagPcNKP3tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.123.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:93:01:4f:3a:a2:3c:f9:f5:64:44:07:7d:33:da:5f:15:
21:cc:d0:e9:4a:1d:a4:43:2d:12:4e:f5:de:b3:5f:f5:05:64:
8e:82:00:f3:e4:f0:57:58:fc:8e:6b:b1:b6:80:21:24:71:ff:
46:23:d0:54:f1:d1:b8:d9:a1:c5:2a:c3:a3:05:61:d5:fb:60:
15:12:5e:b0:16:c4:e4:6e:93:bf:f9:a1:d8:6d:e9:06:e4:41:
6e:19:39:9e:03:de:45:5f:19:11:90:01:f1:af:08:62:72:3c:
5c:c3:1f:e8:1c:ed:26:c0:92:b6:60:c7:d1:c8:e1:c0:73:9c:
32:c6:f9:8a:b4:d9:9a:9e:00:44:30:c9:53:93:55:93:89:41:
03:3b:ed:90:2d:0b:8f:de:9b:36:fd:e7:7b:5d:4e:07:9e:19:
cd:00:e3:f0:6c:99:9d:c5:7f:58:0d:e0:8e:93:85:d1:80:55:
78:b9:3e:12:b5:ef:b3:35:ea:43:a1:58:bd:4b:8e:46:dc:f4:
60:e6:5f:71:8e:6f:d4:ab:92:28:d6:12:b3:bb:d1:b2:69:84:
0f:78:fa:d9:62:d2:d3:b9:8d:2f:50:6c:cb:4b:13:27:05:e5:
32:07:0c:9a:59:cf:5b:52:11:fe:2f:30:29:c3:88:8c:ad:fc:
07:36:ce:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt7X83qRHv+ZA5FcAilzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMWI0ZjNhYTQ1ZGM0ZWMzMzZkNjJlOWE3ZTg5ZDc5YjNl
ZmNhYjAwHhcNMjQwMTAxMjAyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWIxMTQzYjhiZGRlOTNlYTFhZGY3OTMxMWE4MGY3MGQyOGZkZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknfCQGuVOpqgchZvtgjbNAq42tMQ
aXZw8bG5Zw7KiK8/NCHhCuB/xZ2nj3c9qBw8BNTF6fPEEdFZgWsH8+gj8LBqZtkQ
zuKY84azofopvcVXzbAhsgAWNy4hx9GhTwQwGwmQrtHzhEWDV4/Lpe+Ci+KP9SpR
UGih9TLJsW6GzbSxsBkl92fOsnyiI4DOUlJ17+QSuCMi8C4MDIBdoOfqIF4Cv8BE
6LDztSYq+BB/tC8C8uNloqReETD7QuyyYP2LI3wbe0wk/+XlruBkYPM1Ux/gQF/B
dT2f9lZwX+INlbVgkhEd60j64CTYTPrfRfvnYGKUTpvGU9IvHW2Ka/cf8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6xFDuL3ek+oa33kxGoD3DSj97cMB8GA1UdIwQY
MBaAFHEbTzqkXcTsM21i6afonXmz78qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1J0UE9xUmR4T3d6YldMcHAtaWRlYlB2eXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNzFjNTYtYjhiZS00ZDFhLWJjMjIt
MDM3NTM5NjMxYmI0LzEvSHJFVU80dmQ2VDZocmZlVEVhZ1BjTktQM3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kNzFjNTYtYjhiZS00ZDFhLWJjMjItMDM3NTM5NjMxYmI0
LzEvY1J0UE9xUmR4T3d6YldMcHAtaWRlYlB2eXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+57MA0G
CSqGSIb3DQEBCwUAA4IBAQCD3pMBTzqiPPn1ZEQHfTPaXxUhzNDpSh2kQy0STvXe
s1/1BWSOggDz5PBXWPyOa7G2gCEkcf9GI9BU8dG42aHFKsOjBWHV+2AVEl6wFsTk
bpO/+aHYbekG5EFuGTmeA95FXxkRkAHxrwhicjxcwx/oHO0mwJK2YMfRyOHAc5wy
xvmKtNmangBEMMlTk1WTiUEDO+2QLQuP3ps2/ed7XU4HnhnNAOPwbJmdxX9YDeCO
k4XRgFV4uT4Ste+zNepDoVi9S45G3PRg5l9xjm/Uq5Io1hKzu9GyaYQPePrZYtLT
uY0vUGzLSxMnBeUyBwyaWc9bUhH+LzApw4iMrfwHNs7U
-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:43 2024 by rpki-client on console-ams.rpki-client.org