Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/ve3Y9byTEYL_aihpAR46DLEL-bw.roa
File: ve3Y9byTEYL_aihpAR46DLEL-bw.roa (raw, json)
Hash identifier: Vr0LkEuThEm3+Pjx79+LQ3B4VJjMeOi3s+dFcEtYjaw=
Subject key identifier: BD:ED:D8:F5:BC:93:11:82:FF:6A:28:69:01:1E:3A:0C:B1:0B:F9:BC
Certificate issuer: /CN=271925e29ae039d43619d6b4f6442cb37c9e9705
Certificate serial: 01882086796EE7EC68FE7AB6208BC4609D46
Authority key identifier: 27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/ve3Y9byTEYL_aihpAR46DLEL-bw.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 212.18.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:79:6e:e7:ec:68:fe:7a:b6:20:8b:c4:60:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271925e29ae039d43619d6b4f6442cb37c9e9705
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdedd8f5bc931182ff6a2869011e3a0cb10bf9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:5b:0a:cd:fc:ac:a6:c4:b0:25:5d:ee:7e:
05:ec:e0:e7:26:82:db:99:b6:a0:5e:dd:3c:99:84:
a0:ae:e5:50:b3:34:24:c9:9b:a6:31:67:fa:44:5e:
8d:96:dd:76:db:ef:e2:5b:e0:18:63:e2:d5:8f:33:
d8:62:1f:3b:fa:88:45:22:cd:2e:21:d8:50:74:cc:
7d:6e:99:d9:41:a8:d8:7d:fb:a6:a0:f7:93:53:e8:
9d:5d:ae:4f:7c:63:ec:92:ce:45:9a:aa:b5:f5:f2:
95:f3:b3:92:30:54:b6:22:aa:9a:16:58:3b:75:ad:
01:16:a7:db:ac:1f:12:4f:c5:ba:75:fd:ac:26:c3:
22:d8:76:c7:d0:89:bd:ed:80:fd:26:04:2d:fb:67:
cf:c2:c8:f7:3d:fc:cc:34:78:31:62:fb:43:7c:a9:
97:b1:a4:ca:75:2b:63:01:dd:f3:09:64:ba:e2:94:
a6:02:af:78:e0:1b:46:cc:51:ce:a0:e3:33:8f:4f:
91:16:2f:13:f1:03:dd:a6:e3:ea:94:93:f5:3f:df:
a8:c1:09:2c:1a:2a:85:72:24:07:33:46:6d:ab:bf:
0d:ba:64:00:4b:bb:86:7a:24:83:be:32:e0:37:cc:
6c:04:f7:7c:a9:02:3c:7a:a3:de:25:c2:ac:f0:b5:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:D8:F5:BC:93:11:82:FF:6A:28:69:01:1E:3A:0C:B1:0B:F9:BC
X509v3 Authority Key Identifier:
keyid:27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/ve3Y9byTEYL_aihpAR46DLEL-bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:75:41:4a:b4:36:48:8b:39:55:16:9e:bf:6e:c7:b4:e6:51:
26:ec:67:e9:66:82:5e:00:c2:42:fb:f3:67:de:69:03:92:ea:
ac:7a:0d:e3:a2:c4:e5:31:9e:20:1c:a6:6e:af:b9:bb:12:42:
36:81:d4:39:1e:a5:89:b9:77:3c:af:64:03:6a:ec:9e:b3:90:
0c:ab:72:bb:c4:4e:d3:63:02:27:74:a5:5c:d6:2b:f8:80:e6:
95:33:28:51:d9:74:36:15:0a:81:5d:9f:54:f6:99:69:94:3d:
23:f5:46:e6:f2:98:25:0a:82:3b:e1:22:5e:dd:bd:e0:d7:e6:
f9:16:2e:d7:91:c5:66:d8:87:aa:e0:64:9f:35:3d:98:5b:07:
97:fa:a9:54:ed:67:06:cd:4c:dd:e5:ab:5b:f2:17:ea:78:eb:
18:a6:28:4b:d8:0c:97:cf:65:8a:8a:20:ae:ec:34:0d:2b:ee:
80:4c:63:79:bc:62:37:d5:e3:f2:c8:8f:db:da:f4:de:13:e3:
5e:56:46:ae:35:30:06:22:eb:59:7a:7c:d3:40:06:aa:ee:3f:
20:58:bb:cb:3d:11:17:31:a9:01:87:35:23:6b:4b:09:15:7a:
f2:76:dc:3c:47:b2:44:f7:49:a3:f2:c9:5d:b0:44:2c:4f:49:
41:2c:03:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnlu5+xo/nq2IIvEYJ1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTkyNWUyOWFlMDM5ZDQzNjE5ZDZiNGY2NDQyY2IzN2M5
ZTk3MDUwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGVkZDhmNWJjOTMxMTgyZmY2YTI4NjkwMTFlM2EwY2IxMGJmOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZdbCs38rKbEsCVd7n4F7ODnJoLb
mbagXt08mYSgruVQszQkyZumMWf6RF6Nlt122+/iW+AYY+LVjzPYYh87+ohFIs0u
IdhQdMx9bpnZQajYffumoPeTU+idXa5PfGPsks5Fmqq19fKV87OSMFS2IqqaFlg7
da0BFqfbrB8ST8W6df2sJsMi2HbH0Im97YD9JgQt+2fPwsj3PfzMNHgxYvtDfKmX
saTKdStjAd3zCWS64pSmAq944BtGzFHOoOMzj0+RFi8T8QPdpuPqlJP1P9+owQks
GiqFciQHM0Ztq78NumQAS7uGeiSDvjLgN8xsBPd8qQI8eqPeJcKs8LXVUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3t2PW8kxGC/2ooaQEeOgyxC/m8MB8GA1UdIwQY
MBaAFCcZJeKa4DnUNhnWtPZELLN8npcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhrbDRwcmdPZFEyR2RhMDlrUXNzM3llbHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85OTRlODYtZDU3Zi00OWNmLTgyNDYt
Zjc3NmQzMzM2YzYyLzEvdmUzWTlieVRFWUxfYWlocEFSNDZETEVMLWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85OTRlODYtZDU3Zi00OWNmLTgyNDYtZjc3NmQzMzM2YzYy
LzEvSnhrbDRwcmdPZFEyR2RhMDlrUXNzM3llbHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJmMA0G
CSqGSIb3DQEBCwUAA4IBAQBudUFKtDZIizlVFp6/bse05lEm7GfpZoJeAMJC+/Nn
3mkDkuqseg3josTlMZ4gHKZur7m7EkI2gdQ5HqWJuXc8r2QDauyes5AMq3K7xE7T
YwIndKVc1iv4gOaVMyhR2XQ2FQqBXZ9U9plplD0j9Ubm8pglCoI74SJe3b3g1+b5
Fi7XkcVm2Ieq4GSfNT2YWweX+qlU7WcGzUzd5atb8hfqeOsYpihL2AyXz2WKiiCu
7DQNK+6ATGN5vGI31ePyyI/b2vTeE+NeVkauNTAGIutZenzTQAaq7j8gWLvLPREX
MakBhzUja0sJFXrydtw8R7JE90mj8sldsEQsT0lBLAM7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org