Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/shPMfgX52zNRd21fZ9Vb6oQaDj4.roa
File: shPMfgX52zNRd21fZ9Vb6oQaDj4.roa (raw, json)
Hash identifier: KybKgYPEjHSvYixYFNY/SWvxcUQJxU+3mt/VqFHLAAM=
Subject key identifier: B2:13:CC:7E:05:F9:DB:33:51:77:6D:5F:67:D5:5B:EA:84:1A:0E:3E
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018C57836FCD79AB843E51EB655720AB778E
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/shPMfgX52zNRd21fZ9Vb6oQaDj4.roa
Signing time: Mon 11 Dec 2023 06:14:40 +0000
ROA not before: Mon 11 Dec 2023 06:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:83:6f:cd:79:ab:84:3e:51:eb:65:57:20:ab:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Dec 11 06:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b213cc7e05f9db3351776d5f67d55bea841a0e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:7c:fb:9f:12:d9:ca:dc:ee:ee:e7:64:2c:
c5:53:45:18:28:0d:d7:c0:26:3f:fb:14:90:28:80:
e2:f2:f5:81:e3:46:1e:86:74:62:15:da:74:c1:65:
c8:81:3e:cc:92:43:9f:77:04:b5:9a:ef:f0:b6:e3:
b3:95:20:4a:4a:a3:77:6f:69:e4:99:d4:8c:7d:d1:
0c:50:14:a9:9e:ec:55:3b:dd:8d:7a:8a:86:3e:52:
4e:26:e5:a6:6b:16:8f:f1:16:e1:e3:61:d5:6b:a7:
1e:72:e0:c9:56:6c:06:3e:03:1f:5d:10:07:6f:a1:
52:9d:4d:51:09:e3:38:b4:9e:2c:42:96:2c:d2:33:
53:2b:88:ec:4a:62:73:78:cb:dc:11:8b:9d:0e:a3:
69:a1:2e:33:43:ae:1f:4a:c7:51:0b:a6:dc:32:04:
c5:85:80:ae:dc:7a:d8:4d:39:9c:79:df:67:d9:05:
fc:4b:32:08:c7:87:f1:8a:5e:5e:16:7f:3a:00:a1:
4a:1c:8e:38:f8:15:40:a8:ba:e0:11:c6:f7:16:07:
69:3b:5e:7d:c2:b5:0f:6d:37:ae:4d:07:3f:66:df:
e5:06:a4:f1:5c:85:a9:ab:1c:81:2a:83:59:83:b7:
69:b9:24:10:e2:28:1e:e6:3a:c3:3a:18:af:fb:a7:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:13:CC:7E:05:F9:DB:33:51:77:6D:5F:67:D5:5B:EA:84:1A:0E:3E
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/shPMfgX52zNRd21fZ9Vb6oQaDj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7b:ae:0e:d5:9d:7e:0c:ca:51:5e:f4:a7:c6:60:61:51:af:
cf:55:f4:60:99:eb:66:29:29:3f:8f:aa:21:0f:ad:e3:a1:a2:
88:1e:56:f8:f3:d4:18:3a:3c:b8:2e:43:8d:ae:8f:7f:54:e7:
82:5a:a3:7d:b4:da:00:9b:0b:f8:1e:a3:c3:4f:80:16:2d:99:
a8:a7:59:ed:ac:79:7d:f0:bc:c7:17:e6:71:ed:99:00:bb:8d:
d3:e6:ff:56:03:65:ad:de:6d:71:b2:e9:7a:1f:78:9f:a4:02:
fc:67:17:7b:1b:cc:dc:08:a8:ab:82:09:71:5c:d1:8a:1c:cb:
07:4a:10:c0:be:8d:b4:1f:71:cd:da:27:ce:6c:fa:61:ea:08:
ae:02:52:4e:38:a9:c4:1f:88:bc:2a:82:3f:63:66:04:b5:79:
43:48:4e:4c:77:23:24:41:7b:34:b5:2d:c9:13:09:7c:53:79:
b0:29:46:71:04:23:9c:f7:85:ee:d2:a2:0c:bd:41:43:90:a1:
ea:9b:74:8c:f4:ba:26:f5:88:2d:84:7c:6f:d0:cb:b7:c2:4c:
33:6e:2b:6f:a8:72:88:98:c3:0f:c8:c8:74:21:6c:ca:5e:0b:
94:84:4b:f7:96:e9:5e:30:9e:26:bb:b7:3c:41:b3:3e:07:30:
96:88:15:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxXg2/NeauEPlHrZVcgq3eOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjc2YjFmMDRhYTJjZDRmM2NkMjU2ODMxMGVjMTQxNTYz
YjkyNDMwHhcNMjMxMjExMDYxNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjEzY2M3ZTA1ZjlkYjMzNTE3NzZkNWY2N2Q1NWJlYTg0MWEwZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDt8+58S2crc7u7nZCzFU0UYKA3X
wCY/+xSQKIDi8vWB40YehnRiFdp0wWXIgT7MkkOfdwS1mu/wtuOzlSBKSqN3b2nk
mdSMfdEMUBSpnuxVO92NeoqGPlJOJuWmaxaP8Rbh42HVa6cecuDJVmwGPgMfXRAH
b6FSnU1RCeM4tJ4sQpYs0jNTK4jsSmJzeMvcEYudDqNpoS4zQ64fSsdRC6bcMgTF
hYCu3HrYTTmced9n2QX8SzIIx4fxil5eFn86AKFKHI44+BVAqLrgEcb3FgdpO159
wrUPbTeuTQc/Zt/lBqTxXIWpqxyBKoNZg7dpuSQQ4ige5jrDOhiv+6czUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLITzH4F+dszUXdtX2fVW+qEGg4+MB8GA1UdIwQY
MBaAFA1nax8EqizU880laDEOwUFWO5JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdkckh3U3FMTlR6elNWb01RN0JRVlk3a2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZWJjY2QtOGQxZC00NmNlLThkOTgt
ZjAwNDMxMWQ0NTcwLzEvc2hQTWZnWDUyek5SZDIxZlo5VmI2b1FhRGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZWJjY2QtOGQxZC00NmNlLThkOTgtZjAwNDMxMWQ0NTcw
LzEvRFdkckh3U3FMTlR6elNWb01RN0JRVlk3a2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJzMA0G
CSqGSIb3DQEBCwUAA4IBAQB8e64O1Z1+DMpRXvSnxmBhUa/PVfRgmetmKSk/j6oh
D63joaKIHlb489QYOjy4LkONro9/VOeCWqN9tNoAmwv4HqPDT4AWLZmop1ntrHl9
8LzHF+Zx7ZkAu43T5v9WA2Wt3m1xsul6H3ifpAL8Zxd7G8zcCKirgglxXNGKHMsH
ShDAvo20H3HN2ifObPph6giuAlJOOKnEH4i8KoI/Y2YEtXlDSE5MdyMkQXs0tS3J
Ewl8U3mwKUZxBCOc94Xu0qIMvUFDkKHqm3SM9Lom9YgthHxv0Mu3wkwzbitvqHKI
mMMPyMh0IWzKXguUhEv3luleMJ4mu7c8QbM+BzCWiBWC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:26 2024 by rpki-client on console-ams.rpki-client.org