Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/pNTYM1EIOHYbB48930MsJSsW24Q.roa
File: pNTYM1EIOHYbB48930MsJSsW24Q.roa (raw, json)
Hash identifier: IV9767U7H7HwSzZUwXYzQupLGh83yoxkQBSM1Imh5+8=
Subject key identifier: A4:D4:D8:33:51:08:38:76:1B:07:8F:3D:DF:43:2C:25:2B:16:DB:84
Certificate issuer: /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial: 018CC6B93C4F4E56FE322D86AE722F003F3D
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/pNTYM1EIOHYbB48930MsJSsW24Q.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57427
IP address blocks: 185.11.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:4f:4e:56:fe:32:2d:86:ae:72:2f:00:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4d4d833510838761b078f3ddf432c252b16db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:f4:f2:7d:f6:f5:38:84:08:4c:90:1c:1f:
83:b7:9f:59:c5:91:a2:2f:b3:35:25:62:39:a9:2a:
5d:ef:7f:d8:ce:b8:0e:9d:87:1a:b7:f3:2c:ea:e6:
fc:7d:d7:3d:6f:ff:41:56:2e:02:30:dc:51:57:e1:
f6:9e:aa:74:6c:f1:97:2c:2c:d2:58:ef:0f:3a:97:
c3:68:b6:d1:22:f1:00:6b:7e:b6:b6:67:53:b1:6a:
bd:0a:56:52:29:56:23:5d:e0:55:19:63:60:35:7e:
25:41:b9:55:42:80:e0:f2:bf:7d:34:60:b6:73:6a:
64:54:f9:84:5d:5c:7c:c6:6d:bc:7a:b2:2c:12:0c:
36:a5:7b:f6:ea:eb:f6:56:b7:12:49:1a:ae:d2:30:
e0:a3:70:f6:87:bb:a5:57:79:02:8b:80:a7:2d:bd:
25:5f:39:35:b9:dd:0a:a8:37:8f:65:be:65:57:8f:
b4:34:25:a7:dc:05:99:a4:f8:aa:4a:b0:ae:26:ef:
14:75:45:b5:14:e4:44:68:ed:ab:54:33:79:9e:41:
37:ad:4a:ec:f2:cd:75:66:62:f4:dc:db:a0:94:6c:
88:67:4e:15:02:1e:25:67:66:e9:9e:62:53:83:ed:
60:d9:5e:cf:a5:63:33:0c:36:6e:c3:c5:cb:b4:a0:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:D8:33:51:08:38:76:1B:07:8F:3D:DF:43:2C:25:2B:16:DB:84
X509v3 Authority Key Identifier:
keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/pNTYM1EIOHYbB48930MsJSsW24Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.61.0/24
Signature Algorithm: sha256WithRSAEncryption
03:74:18:3e:fb:81:48:88:33:52:04:bc:8b:4c:8b:66:85:da:
5a:55:4a:a4:f5:8f:ff:a4:6f:d2:93:61:45:07:32:ef:3a:40:
cf:e4:53:cd:7e:29:66:b8:2a:5c:01:e7:2b:b8:92:6a:43:7e:
0e:79:c9:15:a8:21:71:e5:a2:c2:2c:92:33:c0:93:10:6a:08:
c8:c3:99:a8:7a:f9:16:de:ad:7d:ab:ea:27:d8:95:9e:07:a4:
40:14:81:1e:d6:90:00:c3:7c:4e:fa:bd:34:df:01:51:b2:a1:
95:c3:af:6b:80:e0:7a:56:7c:f1:a3:ec:21:65:8c:8c:97:37:
ab:39:71:39:7d:2b:cd:61:2e:24:2e:a2:4c:3f:f2:f5:9e:54:
70:0f:3a:a7:bb:49:3e:9b:a1:c8:61:2b:7e:c9:80:b9:05:d2:
ed:64:44:db:64:96:cd:83:41:4b:d3:db:65:6b:be:66:a5:b1:
f8:a6:c5:da:68:64:27:03:ec:ca:85:8f:a5:71:7b:15:91:98:
d5:5d:e5:de:50:8b:84:f1:c6:97:bf:22:cc:7e:47:93:b5:0c:
ab:30:9a:8e:1c:02:ed:1a:1d:60:c0:14:b0:b7:29:9c:f8:26:
9b:e2:09:45:e7:b8:74:aa:74:b2:de:67:20:5b:d3:ee:44:6f:
dd:3c:e5:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTxPTlb+Mi2GrnIvAD89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGQ4OWM4ZTliZTUyZDk1NmZjNWI4OGE5OGE3MmJlMDY5
OWZkZmQwHhcNMjQwMTAxMjAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGQ0ZDgzMzUxMDgzODc2MWIwNzhmM2RkZjQzMmMyNTJiMTZkYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksn08n329TiECEyQHB+Dt59ZxZGi
L7M1JWI5qSpd73/YzrgOnYcat/Ms6ub8fdc9b/9BVi4CMNxRV+H2nqp0bPGXLCzS
WO8POpfDaLbRIvEAa362tmdTsWq9ClZSKVYjXeBVGWNgNX4lQblVQoDg8r99NGC2
c2pkVPmEXVx8xm28erIsEgw2pXv26uv2VrcSSRqu0jDgo3D2h7ulV3kCi4CnLb0l
Xzk1ud0KqDePZb5lV4+0NCWn3AWZpPiqSrCuJu8UdUW1FOREaO2rVDN5nkE3rUrs
8s11ZmL03NuglGyIZ04VAh4lZ2bpnmJTg+1g2V7PpWMzDDZuw8XLtKBzcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKTU2DNRCDh2GwePPd9DLCUrFtuEMB8GA1UdIwQY
MBaAFGdNicjpvlLZVvxbiKmKcr4Gmf39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjAySnlPbS1VdGxXX0Z1SXFZcHl2Z2FaX2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMzZlNWEtYmExYS00YWUzLWE0Yzgt
NTllMmZkNGUzODBmLzEvcE5UWU0xRUlPSFliQjQ4OTMwTXNKU3NXMjRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xMzZlNWEtYmExYS00YWUzLWE0YzgtNTllMmZkNGUzODBm
LzEvWjAySnlPbS1VdGxXX0Z1SXFZcHl2Z2FaX2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQs9MA0G
CSqGSIb3DQEBCwUAA4IBAQADdBg++4FIiDNSBLyLTItmhdpaVUqk9Y//pG/Sk2FF
BzLvOkDP5FPNfilmuCpcAecruJJqQ34OeckVqCFx5aLCLJIzwJMQagjIw5moevkW
3q19q+on2JWeB6RAFIEe1pAAw3xO+r003wFRsqGVw69rgOB6Vnzxo+whZYyMlzer
OXE5fSvNYS4kLqJMP/L1nlRwDzqnu0k+m6HIYSt+yYC5BdLtZETbZJbNg0FL09tl
a75mpbH4psXaaGQnA+zKhY+lcXsVkZjVXeXeUIuE8caXvyLMfkeTtQyrMJqOHALt
Gh1gwBSwtymc+Cab4glF57h0qnSy3mcgW9PuRG/dPOUE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-fra.rpki-client.org