Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/h9NFviVtvIK6ttcPcUFjg6LZFuE.roa
File: h9NFviVtvIK6ttcPcUFjg6LZFuE.roa (raw, json)
Hash identifier: nyVM644fBHE/KMfs42pgFj95YlH9I9RXBEJSYdU2doo=
Subject key identifier: 87:D3:45:BE:25:6D:BC:82:BA:B6:D7:0F:71:41:63:83:A2:D9:16:E1
Certificate issuer: /CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
Certificate serial: 0185720C6DB32340E33DE93CAE6D9C987403
Authority key identifier: 11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/h9NFviVtvIK6ttcPcUFjg6LZFuE.roa
Signing time: Mon 02 Jan 2023 10:34:55 +0000
ROA not before: Mon 02 Jan 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12200
IP address blocks: 193.138.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:6d:b3:23:40:e3:3d:e9:3c:ae:6d:9c:98:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
Validity
Not Before: Jan 2 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d345be256dbc82bab6d70f71416383a2d916e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:4a:61:a5:d1:84:8d:f6:e8:a3:8d:9d:e5:
99:1c:88:3c:4a:b6:70:f7:7e:73:df:c3:da:cc:33:
de:1e:0a:04:76:ad:b9:ad:69:da:70:b8:38:d6:9a:
b4:72:a1:df:0d:13:6f:c5:d4:a0:5f:3d:db:78:98:
e0:42:b3:ae:90:b4:1d:a5:8f:68:45:a6:5a:5e:cd:
2e:78:fd:d9:0f:db:47:5e:05:a8:c0:20:58:38:27:
fd:55:06:61:38:5d:cf:a3:d5:a7:cf:f8:2a:65:fc:
c9:2b:13:13:e9:00:6d:84:da:ce:09:80:4d:10:4d:
33:09:e3:75:af:c3:7e:ed:20:60:94:73:c5:09:9c:
88:e7:03:06:5a:f9:82:cc:fd:23:0b:62:2f:ba:0e:
46:f7:98:e6:2d:f1:cf:4c:fc:ec:7e:be:08:39:6e:
09:d6:ea:63:c6:79:66:b3:07:fa:70:23:8d:dd:ec:
98:86:82:c0:cf:7c:b3:6d:de:9a:aa:16:05:9b:09:
09:76:8c:a9:7e:38:59:f6:5c:99:6f:6e:ec:5e:f6:
dc:8d:df:c2:c2:28:c2:86:51:39:77:9d:fe:a2:58:
69:6b:c6:dc:85:bf:89:5d:4e:77:96:6a:10:36:80:
41:4f:47:5d:e4:25:8c:fc:e7:b5:31:bb:ca:4c:a0:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:45:BE:25:6D:BC:82:BA:B6:D7:0F:71:41:63:83:A2:D9:16:E1
X509v3 Authority Key Identifier:
keyid:11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/h9NFviVtvIK6ttcPcUFjg6LZFuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/EZ8tyzNrclcXxfmQLUpg6YwEqG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ba:bc:2c:d6:23:7d:59:b3:91:9a:8c:8c:af:64:f9:04:99:
35:50:70:a7:62:32:8e:cc:9b:44:56:37:84:80:c1:a4:1c:03:
e0:6f:67:ad:ad:50:d8:87:dd:7a:1a:dc:17:fc:3f:e2:a8:f9:
17:7e:4e:68:2c:3d:ff:1e:cf:7c:e3:01:f2:12:9d:0b:8a:7a:
33:ca:c1:ca:0d:b6:0b:99:12:01:08:a0:f9:1d:14:82:00:cd:
48:2a:f3:04:cc:65:93:22:f7:6a:ef:ee:d4:5e:99:9b:e8:c3:
ac:52:2e:b2:60:58:94:97:d7:78:9a:29:f2:16:35:3b:09:7c:
de:45:4c:04:6c:ac:d2:35:7c:c5:b3:6b:fc:b2:4f:1e:af:61:
8f:9e:67:a8:16:63:b6:75:1c:60:e5:2b:c3:4c:46:b6:34:30:
18:7e:40:4a:5c:4c:c2:b6:26:f5:85:05:6f:a3:1f:f6:2b:7e:
75:31:f7:a8:ea:a5:38:3c:16:9a:a1:49:c9:e6:d1:a6:76:f3:
bf:a6:cd:ae:38:c0:8e:44:b8:d7:63:fa:28:5d:a0:30:46:9d:
c5:97:68:58:0c:18:21:d2:fc:23:20:db:78:29:cb:42:ad:19:
b2:eb:3f:ab:5b:09:86:81:d2:bd:0c:a5:e1:56:c4:e1:96:36:
46:de:1f:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDG2zI0DjPek8rm2cmHQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExOWYyZGNiMzM2YjcyNTcxN2M1Zjk5MDJkNGE2MGU5OGMw
NGE4NmQwHhcNMjMwMTAyMTAzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2QzNDViZTI1NmRiYzgyYmFiNmQ3MGY3MTQxNjM4M2EyZDkxNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOxKYaXRhI326KONneWZHIg8SrZw
935z38PazDPeHgoEdq25rWnacLg41pq0cqHfDRNvxdSgXz3beJjgQrOukLQdpY9o
RaZaXs0ueP3ZD9tHXgWowCBYOCf9VQZhOF3Po9Wnz/gqZfzJKxMT6QBthNrOCYBN
EE0zCeN1r8N+7SBglHPFCZyI5wMGWvmCzP0jC2Ivug5G95jmLfHPTPzsfr4IOW4J
1upjxnlmswf6cCON3eyYhoLAz3yzbd6aqhYFmwkJdoypfjhZ9lyZb27sXvbcjd/C
wijChlE5d53+olhpa8bchb+JXU53lmoQNoBBT0dd5CWM/Oe1MbvKTKCTjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfTRb4lbbyCurbXD3FBY4Oi2RbhMB8GA1UdIwQY
MBaAFBGfLcsza3JXF8X5kC1KYOmMBKhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVo4dHl6TnJjbGNYeGZtUUxVcGc2WXdFcUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MGJjZDItY2Q5My00OTIyLWEzNzMt
NDg1YjE5M2RiMjQzLzEvaDlORnZpVnR2SUs2dHRjUGNVRmpnNkxaRnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80MGJjZDItY2Q5My00OTIyLWEzNzMtNDg1YjE5M2RiMjQz
LzEvRVo4dHl6TnJjbGNYeGZtUUxVcGc2WXdFcUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYp6MA0G
CSqGSIb3DQEBCwUAA4IBAQCfurws1iN9WbORmoyMr2T5BJk1UHCnYjKOzJtEVjeE
gMGkHAPgb2etrVDYh916GtwX/D/iqPkXfk5oLD3/Hs984wHyEp0LinozysHKDbYL
mRIBCKD5HRSCAM1IKvMEzGWTIvdq7+7UXpmb6MOsUi6yYFiUl9d4minyFjU7CXze
RUwEbKzSNXzFs2v8sk8er2GPnmeoFmO2dRxg5SvDTEa2NDAYfkBKXEzCtib1hQVv
ox/2K351Mfeo6qU4PBaaoUnJ5tGmdvO/ps2uOMCORLjXY/ooXaAwRp3Fl2hYDBgh
0vwjINt4KctCrRmy6z+rWwmGgdK9DKXhVsThljZG3h+w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org