Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/txWNx1DLAHjJTWcqfvKywgj95k4.roa
File: txWNx1DLAHjJTWcqfvKywgj95k4.roa (raw, json)
Hash identifier: 95feR42nfDxdfzRA/2FgMoOD3FcN0UFHBhOlD2WHfRE=
Subject key identifier: B7:15:8D:C7:50:CB:00:78:C9:4D:67:2A:7E:F2:B2:C2:08:FD:E6:4E
Certificate issuer: /CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Certificate serial: 018891710F6E009BD5A7AA8B890C3BCF8F81
Authority key identifier: 85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/txWNx1DLAHjJTWcqfvKywgj95k4.roa
Signing time: Tue 06 Jun 2023 16:01:25 +0000
ROA not before: Tue 06 Jun 2023 16:01:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 185.212.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:71:0f:6e:00:9b:d5:a7:aa:8b:89:0c:3b:cf:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Validity
Not Before: Jun 6 16:01:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7158dc750cb0078c94d672a7ef2b2c208fde64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:4d:26:58:7c:b1:15:3a:57:10:1d:dc:af:
2e:a3:0c:68:20:8d:4e:54:a1:e9:f6:2c:06:2f:3e:
46:7a:47:a5:6e:83:fd:fd:42:fc:60:99:e4:85:18:
35:18:47:03:47:25:3c:a5:91:fd:03:50:73:2f:9e:
f0:91:3e:aa:45:0b:4f:e6:3e:3c:84:04:8c:c0:d8:
a2:c0:10:36:c6:08:41:77:f4:f9:d6:b2:2b:e4:4f:
ba:d9:03:16:02:01:9a:85:83:ea:d5:01:48:ca:14:
ad:a4:a4:de:a2:84:75:29:34:19:cc:27:5b:07:3e:
bb:54:3c:dd:72:2d:15:2a:fd:5b:e4:72:e7:68:6e:
2c:7f:a0:c6:b5:3b:c3:2b:17:d6:8c:89:34:3b:06:
b8:be:60:d7:d3:70:a5:1b:0e:3d:ea:87:93:18:70:
6c:09:b6:a5:49:b9:8e:08:b3:7f:7b:98:a1:68:62:
03:91:05:08:26:6d:3a:1e:bd:f9:60:4b:b9:28:4a:
85:60:9e:b1:e0:5a:f4:a1:45:55:42:ac:3c:26:9b:
0d:b8:0c:5d:04:0d:a9:ff:94:62:3d:25:29:e1:4f:
2f:90:82:97:cd:af:72:a4:eb:e5:8d:e7:81:04:de:
37:16:5f:b0:57:6e:a6:98:df:77:41:4f:7a:e9:61:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:8D:C7:50:CB:00:78:C9:4D:67:2A:7E:F2:B2:C2:08:FD:E6:4E
X509v3 Authority Key Identifier:
keyid:85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/txWNx1DLAHjJTWcqfvKywgj95k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a7:e6:27:8a:0a:a6:a7:1e:41:4c:d6:c5:3c:93:14:15:3e:
39:87:48:6e:2d:0d:86:bb:e7:a0:7c:db:20:4c:20:e0:21:ef:
b3:ed:7c:d7:d3:00:e2:e7:40:43:91:60:46:99:ac:a6:85:ac:
1c:d6:7a:e6:ba:c9:97:1e:b1:16:d6:6e:7f:3a:78:c6:a9:79:
91:9a:49:a7:b6:77:eb:1b:5f:1b:ea:9e:27:6c:54:1f:33:7a:
42:35:90:f5:90:73:7a:29:05:9b:fd:bb:9e:28:3b:ae:76:89:
ef:7c:92:a4:a5:c7:5e:0a:ce:aa:e7:07:9f:63:94:38:e4:74:
8b:2e:18:c3:39:08:b4:9d:7c:a5:7f:2e:ec:9b:c8:ed:14:da:
84:76:79:18:95:b9:ca:30:df:93:32:6f:b7:f8:16:5c:a2:26:
8e:04:d4:88:1d:68:99:e1:4a:60:53:15:ad:ad:61:21:ec:55:
38:de:a7:3b:a6:25:11:d2:79:b2:4d:f4:6a:4c:fe:05:75:44:
32:e7:d6:6c:95:3f:ea:df:b6:a3:dc:de:5b:5c:6d:b5:96:fd:
9e:6c:5a:0b:83:55:3b:05:e1:eb:be:3c:4d:51:c4:2a:5c:15:
f7:54:b9:8e:74:f5:8c:bb:99:99:aa:00:42:ee:34:22:b1:d0:
9b:63:b7:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiRcQ9uAJvVp6qLiQw7z4+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjhiMjFlNGY1ZmJmZGViNzE0ZDNlMWIzOGE1MzgxN2I1
NzI5ZWQwHhcNMjMwNjA2MTYwMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzE1OGRjNzUwY2IwMDc4Yzk0ZDY3MmE3ZWYyYjJjMjA4ZmRlNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U9NJlh8sRU6VxAd3K8uowxoII1O
VKHp9iwGLz5GekelboP9/UL8YJnkhRg1GEcDRyU8pZH9A1BzL57wkT6qRQtP5j48
hASMwNiiwBA2xghBd/T51rIr5E+62QMWAgGahYPq1QFIyhStpKTeooR1KTQZzCdb
Bz67VDzdci0VKv1b5HLnaG4sf6DGtTvDKxfWjIk0Owa4vmDX03ClGw496oeTGHBs
CbalSbmOCLN/e5ihaGIDkQUIJm06Hr35YEu5KEqFYJ6x4Fr0oUVVQqw8JpsNuAxd
BA2p/5RiPSUp4U8vkIKXza9ypOvljeeBBN43Fl+wV26mmN93QU966WH1QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLcVjcdQywB4yU1nKn7yssII/eZOMB8GA1UdIwQY
MBaAFIW4sh5PX7/etxTT4bOKU4F7VyntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJpeUhrOWZ2OTYzRk5QaHM0cFRnWHRYS2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82NDgyOWQtYTM0NC00NGQyLTllOWQt
MWRkNjdjMzJiMDZhLzEvdHhXTngxRExBSGpKVFdjcWZ2S3l3Z2o5NWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82NDgyOWQtYTM0NC00NGQyLTllOWQtMWRkNjdjMzJiMDZh
LzEvaGJpeUhrOWZ2OTYzRk5QaHM0cFRnWHRYS2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudRzMA0G
CSqGSIb3DQEBCwUAA4IBAQCbp+Ynigqmpx5BTNbFPJMUFT45h0huLQ2Gu+egfNsg
TCDgIe+z7XzX0wDi50BDkWBGmaymhawc1nrmusmXHrEW1m5/OnjGqXmRmkmntnfr
G18b6p4nbFQfM3pCNZD1kHN6KQWb/bueKDuudonvfJKkpcdeCs6q5wefY5Q45HSL
LhjDOQi0nXylfy7sm8jtFNqEdnkYlbnKMN+TMm+3+BZcoiaOBNSIHWiZ4UpgUxWt
rWEh7FU43qc7piUR0nmyTfRqTP4FdUQy59ZslT/q37aj3N5bXG21lv2ebFoLg1U7
BeHrvjxNUcQqXBX3VLmOdPWMu5mZqgBC7jQisdCbY7cD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org