Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/CYXA4Ti5xv1ZrJVVeYmDEk1yErs.roa
File: CYXA4Ti5xv1ZrJVVeYmDEk1yErs.roa (raw, json)
Hash identifier: tEo1xrWeRzdzEc1jTHyks6QQE11+wf84Xs1pWOJ2Fvo=
Subject key identifier: 09:85:C0:E1:38:B9:C6:FD:59:AC:95:55:79:89:83:12:4D:72:12:BB
Certificate issuer: /CN=d4df420af45da27789ef1729e25035c427717257
Certificate serial: 01856EA6BD902E4CE78161FD1F884EC4B785
Authority key identifier: D4:DF:42:0A:F4:5D:A2:77:89:EF:17:29:E2:50:35:C4:27:71:72:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N9CCvRdoneJ7xcp4lA1xCdxclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/CYXA4Ti5xv1ZrJVVeYmDEk1yErs.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.39.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bd:90:2e:4c:e7:81:61:fd:1f:88:4e:c4:b7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4df420af45da27789ef1729e25035c427717257
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0985c0e138b9c6fd59ac9555798983124d7212bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:43:87:06:ed:3b:d2:97:99:ed:27:c3:35:
2d:cb:c6:82:be:35:f2:f3:0c:b0:15:f0:b6:a7:4b:
e4:ab:34:03:bd:04:52:ab:97:d3:2e:52:f3:c5:89:
60:1d:0c:9d:d3:0b:e8:f0:bf:c1:be:0d:dc:76:c6:
7d:2d:49:85:45:b7:e9:63:b6:33:87:e7:6b:63:9d:
07:ef:67:b7:7d:b4:cb:1a:bc:99:ab:47:3b:15:a9:
df:8c:85:92:31:dc:4a:4c:65:68:ee:db:b9:11:49:
66:0c:ff:74:52:7a:e6:26:32:07:1f:eb:77:98:15:
43:ad:26:41:5f:37:d5:d8:25:ca:5c:33:f5:07:59:
0f:65:8c:70:2b:be:8e:81:0a:aa:44:58:a9:63:c6:
d2:47:89:7c:50:62:0c:b9:e3:23:e6:fc:d3:4f:28:
6b:2c:c8:f5:cd:9c:a1:14:35:5e:19:59:a4:92:84:
48:28:ee:b1:37:f7:f4:08:ed:d4:a1:35:b6:9f:38:
0b:35:e4:3a:58:6b:6c:12:dd:1f:e3:45:8f:15:3c:
c7:96:0d:b8:25:e5:10:29:59:9b:4f:7c:09:9d:f2:
5d:ad:66:0c:de:36:fc:1a:7c:e9:a2:73:e7:b5:a6:
56:e1:93:77:0f:2a:75:97:6e:2b:e8:ca:d6:31:1a:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:C0:E1:38:B9:C6:FD:59:AC:95:55:79:89:83:12:4D:72:12:BB
X509v3 Authority Key Identifier:
keyid:D4:DF:42:0A:F4:5D:A2:77:89:EF:17:29:E2:50:35:C4:27:71:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N9CCvRdoneJ7xcp4lA1xCdxclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/CYXA4Ti5xv1ZrJVVeYmDEk1yErs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/1N9CCvRdoneJ7xcp4lA1xCdxclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ca:d3:8a:74:8e:f8:36:14:e0:dc:09:5a:7a:9f:a6:69:c3:
30:ed:61:dc:e1:d8:db:8b:21:b9:a9:00:f6:af:02:9b:ac:2b:
92:45:6c:c2:44:33:77:ae:f6:ea:6c:32:71:5c:3b:36:93:56:
77:fa:6b:52:89:3f:11:80:24:5e:6e:5d:30:ab:9f:80:aa:ff:
2a:5f:e3:5a:2b:ce:9e:67:ee:d9:ac:2f:a8:52:c9:c0:54:89:
a4:cf:91:46:56:f9:4c:6f:a1:3d:4b:f1:8e:1a:ad:60:4b:c7:
ec:0b:5e:75:f8:36:4b:15:bf:c8:0a:c8:be:7f:9b:53:01:93:
9a:b4:c6:83:67:5b:18:b8:0a:7f:7e:58:ac:3d:d2:0e:30:ee:
6a:e7:23:e3:0f:df:3f:4a:e6:ae:b7:ed:35:d5:aa:53:ec:f1:
2f:de:bb:4d:97:9a:fb:99:f2:33:d7:50:d3:78:21:56:58:0d:
af:e1:6e:ef:46:9d:b8:46:7b:9d:a4:2b:41:9b:44:eb:2c:fb:
83:49:69:a7:fe:99:1e:70:77:cd:4d:cc:b1:2e:93:3f:1c:eb:
8f:b4:f1:82:c9:7c:c9:20:0c:5b:e1:ea:52:38:62:43:86:e5:
de:c8:22:a9:04:ab:ad:21:04:fc:32:20:49:1d:bb:c3:cb:4f:
65:7d:c9:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupr2QLkzngWH9H4hOxLeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZGY0MjBhZjQ1ZGEyNzc4OWVmMTcyOWUyNTAzNWM0Mjc3
MTcyNTcwHhcNMjMwMTAxMTg0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTg1YzBlMTM4YjljNmZkNTlhYzk1NTU3OTg5ODMxMjRkNzIxMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRVDhwbtO9KXme0nwzUty8aCvjXy
8wywFfC2p0vkqzQDvQRSq5fTLlLzxYlgHQyd0wvo8L/Bvg3cdsZ9LUmFRbfpY7Yz
h+drY50H72e3fbTLGryZq0c7FanfjIWSMdxKTGVo7tu5EUlmDP90UnrmJjIHH+t3
mBVDrSZBXzfV2CXKXDP1B1kPZYxwK76OgQqqRFipY8bSR4l8UGIMueMj5vzTTyhr
LMj1zZyhFDVeGVmkkoRIKO6xN/f0CO3UoTW2nzgLNeQ6WGtsEt0f40WPFTzHlg24
JeUQKVmbT3wJnfJdrWYM3jb8GnzponPntaZW4ZN3Dyp1l24r6MrWMRoVSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmFwOE4ucb9WayVVXmJgxJNchK7MB8GA1UdIwQY
MBaAFNTfQgr0XaJ3ie8XKeJQNcQncXJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU45Q0N2UmRvbmVKN3hjcDRsQTF4Q2R4Y2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTcwOGEtNjQzNC00NmU5LWEzMzUt
ZmQxZjM2ZThiNWIzLzEvQ1lYQTRUaTV4djFackpWVmVZbURFazF5RXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85YTcwOGEtNjQzNC00NmU5LWEzMzUtZmQxZjM2ZThiNWIz
LzEvMU45Q0N2UmRvbmVKN3hjcDRsQTF4Q2R4Y2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwie+MA0G
CSqGSIb3DQEBCwUAA4IBAQBtytOKdI74NhTg3Alaep+macMw7WHc4djbiyG5qQD2
rwKbrCuSRWzCRDN3rvbqbDJxXDs2k1Z3+mtSiT8RgCRebl0wq5+Aqv8qX+NaK86e
Z+7ZrC+oUsnAVImkz5FGVvlMb6E9S/GOGq1gS8fsC151+DZLFb/ICsi+f5tTAZOa
tMaDZ1sYuAp/flisPdIOMO5q5yPjD98/Suaut+011apT7PEv3rtNl5r7mfIz11DT
eCFWWA2v4W7vRp24RnudpCtBm0TrLPuDSWmn/pkecHfNTcyxLpM/HOuPtPGCyXzJ
IAxb4epSOGJDhuXeyCKpBKutIQT8MiBJHbvDy09lfcnU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-fra.rpki-client.org