Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/6V8dm2Z8xevA6yp0p2lLEdfOZio.roa
File: 6V8dm2Z8xevA6yp0p2lLEdfOZio.roa (raw, json)
Hash identifier: 1TVfa2HgXkG2gTNrgXMXZNpX89kZWyl8QFEo17mDRtE=
Subject key identifier: E9:5F:1D:9B:66:7C:C5:EB:C0:EB:2A:74:A7:69:4B:11:D7:CE:66:2A
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018570306E71BC17E271C1D84B16CFA0F268
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/6V8dm2Z8xevA6yp0p2lLEdfOZio.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 194.156.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6e:71:bc:17:e2:71:c1:d8:4b:16:cf:a0:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e95f1d9b667cc5ebc0eb2a74a7694b11d7ce662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:59:db:c3:08:ff:d7:9f:ca:f9:a6:ff:49:
06:af:59:9f:59:d9:bd:cb:f8:bc:43:07:f7:2b:32:
fc:7b:ce:65:b9:0a:fa:32:a2:f1:2d:59:7b:31:c3:
2c:4e:90:a8:7a:1a:5d:03:58:5a:28:57:67:af:5b:
09:30:f3:2e:a2:b0:88:b4:4c:83:4e:c0:5e:a0:ce:
a5:81:51:0b:0a:df:41:98:ca:8f:02:cd:f8:ab:b1:
9a:c6:e2:f5:3d:86:f8:b9:40:74:10:57:31:c4:8b:
97:92:98:c4:20:53:ae:3d:e5:e2:cf:9b:61:4e:6f:
85:39:9f:d0:4e:e1:2f:3f:f9:5c:a1:2c:59:30:8c:
20:68:14:f9:54:1b:aa:75:30:b6:6a:f0:2c:a5:b5:
43:87:2d:38:37:26:cc:48:6a:5e:44:a8:ad:3d:39:
f5:50:4d:8a:07:fe:b5:03:5b:f8:42:13:87:7a:03:
97:63:82:93:08:e9:2a:6f:be:a5:d5:85:4c:16:dd:
25:fc:ea:a6:11:4d:cd:d9:c9:c3:55:e2:c1:24:8d:
0b:ec:b2:da:86:cb:fc:a0:80:64:37:55:b6:5c:2c:
16:bf:16:e1:75:14:f8:3f:54:a2:bb:ac:eb:cc:05:
39:0f:0b:93:2f:27:15:ef:31:11:ec:89:96:44:0f:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:1D:9B:66:7C:C5:EB:C0:EB:2A:74:A7:69:4B:11:D7:CE:66:2A
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/6V8dm2Z8xevA6yp0p2lLEdfOZio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:fd:1e:53:4f:f8:03:99:1e:fc:7d:3a:e6:d4:94:46:be:2a:
d2:b1:9f:bf:3c:92:68:ff:56:d9:65:a2:f8:4a:3c:84:f9:d2:
53:06:d1:cd:49:99:3a:e1:2f:65:a7:89:f4:f5:00:f9:b7:d6:
d0:4e:82:1c:31:b3:a3:72:de:1a:4f:46:b7:d4:d2:a7:0d:61:
20:d9:f4:ae:2d:47:a4:26:6c:dc:c2:f4:1f:ba:87:a4:f7:cb:
03:70:ac:11:e1:46:93:12:30:0a:cc:aa:f0:ca:69:cc:de:dd:
df:7a:13:7e:2b:15:a8:79:b8:35:e8:45:02:35:67:42:f0:cf:
89:96:23:0b:72:c6:8b:28:e3:28:f1:38:e3:52:f8:19:58:6a:
e3:96:9c:d2:a9:34:10:a7:ae:63:4e:61:f5:55:03:15:91:3a:
f4:b4:ac:83:81:11:a6:1d:5e:78:64:25:da:cf:40:f4:7b:96:
44:af:fa:f1:3b:15:5c:0e:a6:e6:db:f0:20:53:13:e8:c5:cd:
88:15:4b:e9:c4:09:02:b3:e8:b2:4e:57:c4:d6:ee:7a:47:08:
15:79:38:64:0e:3d:7f:18:c0:e1:a9:6d:1b:70:1c:29:98:00:
53:3a:e8:34:72:77:9d:7f:78:4c:44:5b:84:f6:00:e1:77:f0:
36:fd:f6:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMG5xvBficcHYSxbPoPJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDk1MTZkYjk0MTc5NTJkZWRkOTI1MmZlNWQ4M2YwOWEz
ZDk5ZjUwHhcNMjMwMTAyMDE1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTVmMWQ5YjY2N2NjNWViYzBlYjJhNzRhNzY5NGIxMWQ3Y2U2NjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ1Z28MI/9efyvmm/0kGr1mfWdm9
y/i8Qwf3KzL8e85luQr6MqLxLVl7McMsTpCoehpdA1haKFdnr1sJMPMuorCItEyD
TsBeoM6lgVELCt9BmMqPAs34q7GaxuL1PYb4uUB0EFcxxIuXkpjEIFOuPeXiz5th
Tm+FOZ/QTuEvP/lcoSxZMIwgaBT5VBuqdTC2avAspbVDhy04NybMSGpeRKitPTn1
UE2KB/61A1v4QhOHegOXY4KTCOkqb76l1YVMFt0l/OqmEU3N2cnDVeLBJI0L7LLa
hsv8oIBkN1W2XCwWvxbhdRT4P1Siu6zrzAU5DwuTLycV7zER7ImWRA+TFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlfHZtmfMXrwOsqdKdpSxHXzmYqMB8GA1UdIwQY
MBaAFCzZUW25QXlS3t2SUv5dg/CaPZn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5sUmJibEJlVkxlM1pKU19sMkQ4Sm85bWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iYWI1M2ItMzExNS00MWM1LTg3ZWEt
YzAwNDU0ZTBiMTJhLzEvNlY4ZG0yWjh4ZXZBNnlwMHAybExFZGZPWmlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iYWI1M2ItMzExNS00MWM1LTg3ZWEtYzAwNDU0ZTBiMTJh
LzEvTE5sUmJibEJlVkxlM1pKU19sMkQ4Sm85bWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpxeMA0G
CSqGSIb3DQEBCwUAA4IBAQCg/R5TT/gDmR78fTrm1JRGvirSsZ+/PJJo/1bZZaL4
SjyE+dJTBtHNSZk64S9lp4n09QD5t9bQToIcMbOjct4aT0a31NKnDWEg2fSuLUek
JmzcwvQfuoek98sDcKwR4UaTEjAKzKrwymnM3t3fehN+KxWoebg16EUCNWdC8M+J
liMLcsaLKOMo8TjjUvgZWGrjlpzSqTQQp65jTmH1VQMVkTr0tKyDgRGmHV54ZCXa
z0D0e5ZEr/rxOxVcDqbm2/AgUxPoxc2IFUvpxAkCs+iyTlfE1u56RwgVeThkDj1/
GMDhqW0bcBwpmABTOug0cnedf3hMRFuE9gDhd/A2/fbE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-fra.rpki-client.org