Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/BXxb1YDCcUIgETFZ-h0KmRxueJg.roa
File: BXxb1YDCcUIgETFZ-h0KmRxueJg.roa (raw, json)
Hash identifier: Mx70N2ukxoY3erqky+4CymkjkuHnjCIxaIPxlM5HEcA=
Subject key identifier: 05:7C:5B:D5:80:C2:71:42:20:11:31:59:FA:1D:0A:99:1C:6E:78:98
Certificate issuer: /CN=9ee76113dbf320386f73e1935ac9ac943e81b58c
Certificate serial: 018C86E1ADE3CC7F61B1AEDE31734E3867E3
Authority key identifier: 9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nudhE9vzIDhvc-GTWsmslD6BtYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/BXxb1YDCcUIgETFZ-h0KmRxueJg.roa
Signing time: Wed 20 Dec 2023 10:59:46 +0000
ROA not before: Wed 20 Dec 2023 10:59:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20986
IP address blocks: 185.111.56.0/22 maxlen: 22
185.111.52.0/22 maxlen: 22
185.112.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:e1:ad:e3:cc:7f:61:b1:ae:de:31:73:4e:38:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee76113dbf320386f73e1935ac9ac943e81b58c
Validity
Not Before: Dec 20 10:59:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057c5bd580c2714220113159fa1d0a991c6e7898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:5d:94:fd:73:6e:a7:0e:ee:f6:46:58:8c:
d5:0c:4e:6c:4d:7d:36:81:c1:4b:8e:83:9e:7e:9d:
6d:60:89:a7:e0:f6:de:da:d6:f7:bb:6e:14:9d:be:
89:37:73:63:0f:f4:19:2c:99:58:e5:27:5a:bd:4b:
4e:b6:6a:da:a3:ff:ad:cb:96:c5:47:b6:18:05:1d:
f1:46:b0:3e:e3:64:35:43:a2:c7:76:98:1b:6a:ec:
03:19:c1:06:b7:29:27:d3:0a:31:6a:76:f8:9e:3f:
c9:0e:2d:90:0f:c1:9f:4e:c8:1b:6d:09:69:a0:33:
1c:7b:9f:df:b4:bc:a2:e6:4c:7b:3d:23:2f:00:ae:
39:a8:ba:cf:fc:8f:e8:f3:5e:d4:74:39:e4:98:1b:
ec:c3:01:cf:c9:ce:95:f4:bc:01:fb:d5:e1:ca:6e:
b1:fc:a2:0e:6b:3d:6e:0d:7d:98:29:cb:ea:ed:99:
55:30:3b:4d:db:42:63:7a:fa:59:57:e0:4c:3e:45:
46:f7:89:23:81:02:15:0e:75:ad:14:b7:82:c1:71:
80:12:d5:d7:f2:a2:62:d4:72:66:74:89:78:14:51:
73:43:9c:94:fe:bf:60:5d:5e:35:ac:81:7b:61:4f:
b5:7a:6d:05:a2:ad:db:be:ff:fa:62:70:a2:98:fc:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:5B:D5:80:C2:71:42:20:11:31:59:FA:1D:0A:99:1C:6E:78:98
X509v3 Authority Key Identifier:
keyid:9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nudhE9vzIDhvc-GTWsmslD6BtYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/BXxb1YDCcUIgETFZ-h0KmRxueJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.52.0-185.111.59.255
185.112.16.0/22
Signature Algorithm: sha256WithRSAEncryption
51:21:bb:d7:46:97:ab:cb:dd:83:bc:6d:39:d0:a8:43:2d:5f:
d0:60:7a:b7:97:6c:33:7f:00:19:8b:24:de:74:ae:a8:3f:f8:
31:09:6a:0d:07:5a:98:1c:61:e7:6a:70:e0:66:6f:c7:58:46:
7a:09:c2:ba:db:be:a0:2b:47:b4:7a:f3:54:b2:39:f5:0a:28:
13:45:49:fb:21:d2:d6:60:00:30:da:00:bd:59:98:77:60:60:
4f:7e:56:9b:f5:d7:5b:32:2b:80:39:b7:b5:fa:e3:d1:b9:24:
bd:be:3a:8b:c7:c6:3d:52:7e:02:d3:8e:f8:e0:00:87:6c:d6:
9b:96:cc:ac:26:d7:14:8d:4d:56:f4:7d:3f:dc:ed:e3:64:23:
8f:a7:2e:f9:a5:d8:17:ae:57:0b:08:78:0e:01:58:e5:24:2c:
ae:ff:69:de:1d:39:f0:07:9b:f4:bf:e2:78:d1:3d:5f:15:ee:
7b:71:35:e6:02:06:85:f2:bb:a0:33:94:2f:96:b5:d2:f6:af:
91:35:aa:8d:cd:7d:03:da:7b:81:9b:24:9a:e5:4c:1f:c5:4a:
20:72:2f:0c:c2:67:7e:91:49:5a:c1:a1:bf:aa:8b:66:39:db:
a2:1e:e2:f5:7d:75:83:55:88:19:08:ba:1a:b2:56:49:15:96:
b9:6c:77:e7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYyG4a3jzH9hsa7eMXNOOGfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZTc2MTEzZGJmMzIwMzg2ZjczZTE5MzVhYzlhYzk0M2U4
MWI1OGMwHhcNMjMxMjIwMTA1OTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTdjNWJkNTgwYzI3MTQyMjAxMTMxNTlmYTFkMGE5OTFjNmU3ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iZdlP1zbqcO7vZGWIzVDE5sTX02
gcFLjoOefp1tYImn4Pbe2tb3u24Unb6JN3NjD/QZLJlY5SdavUtOtmrao/+ty5bF
R7YYBR3xRrA+42Q1Q6LHdpgbauwDGcEGtykn0woxanb4nj/JDi2QD8GfTsgbbQlp
oDMce5/ftLyi5kx7PSMvAK45qLrP/I/o817UdDnkmBvswwHPyc6V9LwB+9Xhym6x
/KIOaz1uDX2YKcvq7ZlVMDtN20JjevpZV+BMPkVG94kjgQIVDnWtFLeCwXGAEtXX
8qJi1HJmdIl4FFFzQ5yU/r9gXV41rIF7YU+1em0Foq3bvv/6YnCimPyJKwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAV8W9WAwnFCIBExWfodCpkcbniYMB8GA1UdIwQY
MBaAFJ7nYRPb8yA4b3Phk1rJrJQ+gbWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVkaEU5dnpJRGh2Yy1HVFdzbXNsRDZCdFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOTE5Y2UtMGY4My00ZmI0LThkZDgt
ZGUwNDEyZWIzYmNjLzEvQlh4YjFZRENjVUlnRVRGWi1oMEttUnh1ZUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iOTE5Y2UtMGY4My00ZmI0LThkZDgtZGUwNDEyZWIzYmNj
LzEvbnVkaEU5dnpJRGh2Yy1HVFdzbXNsRDZCdFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5bzQD
BAK5bzgDBAK5cBAwDQYJKoZIhvcNAQELBQADggEBAFEhu9dGl6vL3YO8bTnQqEMt
X9BgereXbDN/ABmLJN50rqg/+DEJag0HWpgcYedqcOBmb8dYRnoJwrrbvqArR7R6
81SyOfUKKBNFSfsh0tZgADDaAL1ZmHdgYE9+Vpv111syK4A5t7X649G5JL2+OovH
xj1SfgLTjvjgAIds1puWzKwm1xSNTVb0fT/c7eNkI4+nLvml2BeuVwsIeA4BWOUk
LK7/ad4dOfAHm/S/4njRPV8V7ntxNeYCBoXyu6AzlC+WtdL2r5E1qo3NfQPae4Gb
JJrlTB/FSiByLwzCZ36RSVrBob+qi2Y526Ie4vV9dYNViBkIuhqyVkkVlrlsd+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:47 2024 by rpki-client on console-ams.rpki-client.org