Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/n9miYy3r2fx9ese6icBhxvueLio.roa
File: n9miYy3r2fx9ese6icBhxvueLio.roa (raw, json)
Hash identifier: o9MZXcfYtn/qpy03oSM3nxQBQG+ZAuueNKPOlG2/R74=
Subject key identifier: 9F:D9:A2:63:2D:EB:D9:FC:7D:7A:C7:BA:89:C0:61:C6:FB:9E:2E:2A
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: 018CC500816E63EE0827349C4D04AD7DBB52
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/n9miYy3r2fx9ese6icBhxvueLio.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.122.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:81:6e:63:ee:08:27:34:9c:4d:04:ad:7d:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd9a2632debd9fc7d7ac7ba89c061c6fb9e2e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:96:54:67:0f:24:97:95:5b:a7:d0:ad:74:
64:c5:99:27:29:bd:b6:bb:f7:36:8e:ea:b3:73:ee:
cf:74:6e:61:bb:5e:69:17:6a:dd:ae:f2:92:7e:81:
9a:ef:5a:2d:37:a4:cd:ca:26:bf:f7:00:b4:45:d7:
89:07:be:ec:a6:c9:73:4b:33:e7:6c:a5:fa:80:ce:
21:e6:d5:ac:55:03:e1:29:dc:40:af:c6:ff:da:1b:
27:f6:6c:53:de:a5:c1:71:e1:1f:b6:3b:86:84:e4:
89:a4:3a:81:2e:b2:55:21:a7:53:4b:41:88:9f:8e:
1e:49:3b:98:8b:48:a0:ba:a7:06:79:23:3b:d5:4d:
a8:6a:ce:50:be:23:50:28:ae:a4:74:01:c8:98:8f:
42:42:6b:21:53:dc:f8:3b:87:7a:35:ee:5b:7d:31:
3d:2d:3c:e5:d5:78:65:7d:14:31:cd:e8:27:74:23:
26:1a:77:44:4d:d2:77:b3:22:b7:99:04:49:dd:fc:
48:0e:1d:26:93:a1:f3:54:b9:9b:5b:cd:f4:cd:6d:
42:16:fc:ad:d3:b4:5d:de:78:24:c3:80:81:14:0d:
e4:51:e2:3b:48:92:41:ad:e7:6d:67:06:7d:37:47:
02:9f:e8:6d:ee:55:fa:51:8a:76:88:ba:70:ba:60:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:A2:63:2D:EB:D9:FC:7D:7A:C7:BA:89:C0:61:C6:FB:9E:2E:2A
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/n9miYy3r2fx9ese6icBhxvueLio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:89:6c:e1:9e:7e:0b:69:d5:6a:9f:fc:64:a1:0e:87:b7:8a:
14:fa:76:3c:5a:9a:37:f1:5b:14:78:7d:78:11:eb:8e:30:95:
99:b0:4f:c7:5b:79:ab:d4:12:19:03:c7:2c:3f:6e:16:70:76:
db:20:76:01:c8:09:1d:ac:e6:03:07:22:dd:41:0b:23:94:4d:
79:fe:65:13:bc:be:de:34:cf:ae:2c:4b:c2:ca:34:e0:cd:1d:
58:14:5c:9d:e1:66:fe:8c:c5:16:97:23:46:b0:bb:56:03:ca:
92:87:27:20:29:da:3c:16:e0:45:3b:59:1d:26:c7:b3:a8:bf:
3f:6e:f5:ce:9b:40:c7:19:90:b4:cb:39:eb:eb:b5:ad:05:64:
cf:88:15:0c:cb:f9:d1:c3:b6:05:24:b9:10:43:6f:f6:51:a9:
c6:55:6f:c2:ff:9b:5f:af:80:39:a0:65:c3:b8:8e:0d:53:a0:
92:e0:d3:30:44:e1:61:65:4d:6d:e5:d1:ce:59:56:bf:91:b0:
d8:4c:7a:e5:96:c3:b4:83:32:b4:32:69:90:14:01:8c:fe:4e:
7b:2e:68:4e:1d:8f:7c:dc:ab:84:b3:7d:3d:c1:7b:03:1d:2b:
d9:03:99:3a:0d:2e:da:b9:b0:f8:98:c6:8b:dc:fe:10:e9:de:
5c:ff:91:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAIFuY+4IJzScTQStfbtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYWU2ZGMzYzkxOGM3ZWE4Y2QyNzhmNDk3Zjg1NGRj
YTNkYzgwHhcNMjQwMTAxMTIyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmQ5YTI2MzJkZWJkOWZjN2Q3YWM3YmE4OWMwNjFjNmZiOWUyZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39mWVGcPJJeVW6fQrXRkxZknKb22
u/c2juqzc+7PdG5hu15pF2rdrvKSfoGa71otN6TNyia/9wC0RdeJB77spslzSzPn
bKX6gM4h5tWsVQPhKdxAr8b/2hsn9mxT3qXBceEftjuGhOSJpDqBLrJVIadTS0GI
n44eSTuYi0iguqcGeSM71U2oas5QviNQKK6kdAHImI9CQmshU9z4O4d6Ne5bfTE9
LTzl1XhlfRQxzegndCMmGndETdJ3syK3mQRJ3fxIDh0mk6HzVLmbW830zW1CFvyt
07Rd3ngkw4CBFA3kUeI7SJJBredtZwZ9N0cCn+ht7lX6UYp2iLpwumDzvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/ZomMt69n8fXrHuonAYcb7ni4qMB8GA1UdIwQY
MBaAFNvgyubcPJGMfqjNJ49Jf4VNyj3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ESzV0dzhrWXgtcU0wbmowbF9oVTNLUGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDVkOTEtZTE0Zi00YmRmLThmOTkt
Mjg0OWViNzMzNGI2LzEvbjltaVl5M3IyZng5ZXNlNmljQmh4dnVlTGlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMDVkOTEtZTE0Zi00YmRmLThmOTktMjg0OWViNzMzNGI2
LzEvMi1ESzV0dzhrWXgtcU0wbmowbF9oVTNLUGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrOMA0G
CSqGSIb3DQEBCwUAA4IBAQAriWzhnn4LadVqn/xkoQ6Ht4oU+nY8Wpo38VsUeH14
EeuOMJWZsE/HW3mr1BIZA8csP24WcHbbIHYByAkdrOYDByLdQQsjlE15/mUTvL7e
NM+uLEvCyjTgzR1YFFyd4Wb+jMUWlyNGsLtWA8qShycgKdo8FuBFO1kdJsezqL8/
bvXOm0DHGZC0yznr67WtBWTPiBUMy/nRw7YFJLkQQ2/2UanGVW/C/5tfr4A5oGXD
uI4NU6CS4NMwROFhZU1t5dHOWVa/kbDYTHrllsO0gzK0MmmQFAGM/k57LmhOHY98
3KuEs309wXsDHSvZA5k6DS7aubD4mMaL3P4Q6d5c/5F3
-----END CERTIFICATE-----
Generated at Thu Feb 8 13:44:36 2024 by rpki-client on console-ams.rpki-client.org