Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/RerT6ithGiWLWULzlmgZb1ETpFg.roa
File: RerT6ithGiWLWULzlmgZb1ETpFg.roa (raw, json)
Hash identifier: J5COq6EDjDhtK6NzW4Rhu8HbejwvLoMY7yr/AQw9M78=
Subject key identifier: 45:EA:D3:EA:2B:61:1A:25:8B:59:42:F3:96:68:19:6F:51:13:A4:58
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018C595EFBC18FFFFB4C9489C9B4B0C28AD4
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/RerT6ithGiWLWULzlmgZb1ETpFg.roa
Signing time: Mon 11 Dec 2023 14:54:06 +0000
ROA not before: Mon 11 Dec 2023 14:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205007
IP address blocks: 217.196.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:5e:fb:c1:8f:ff:fb:4c:94:89:c9:b4:b0:c2:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Dec 11 14:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ead3ea2b611a258b5942f39668196f5113a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:3b:d7:ba:70:b2:48:f0:e2:24:6b:ec:87:
e4:b1:a3:ab:05:45:7b:f9:11:6c:c4:d3:f7:90:b2:
0f:93:42:d7:86:13:b5:15:d3:af:ea:82:96:96:50:
6b:28:b7:74:6d:8c:11:8c:0f:08:81:4e:91:d2:26:
33:1c:03:8f:0f:eb:55:69:a2:68:be:da:63:0a:57:
15:56:b5:a2:3f:71:39:f2:05:08:04:97:8c:a2:88:
e3:bf:26:43:0e:84:3e:c7:ee:e6:67:5b:f3:6a:35:
e3:66:2f:74:65:bf:64:2e:e3:fd:9a:7c:9d:8a:f7:
55:dd:ca:5b:ff:2a:85:e3:d5:de:54:88:52:2e:b9:
4d:03:23:f7:8c:a8:52:88:68:ec:f3:32:44:09:16:
a2:73:4c:f9:e3:36:d3:ea:b5:be:eb:ec:07:d7:b8:
c2:48:58:14:81:90:fa:43:a5:05:bc:7f:a5:b5:fb:
76:f7:d6:e7:0e:b5:45:c2:d2:6c:bb:bc:56:c6:d3:
d2:97:f3:bb:39:ff:42:dd:2d:9e:d1:fa:63:81:4c:
f1:56:8c:f9:aa:a2:bf:14:c9:71:00:56:34:11:5a:
0e:76:c3:d8:73:ca:52:bc:7b:5c:ee:6b:50:84:b3:
8b:a0:18:91:a9:12:1e:ac:fc:5e:99:b6:13:89:83:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:D3:EA:2B:61:1A:25:8B:59:42:F3:96:68:19:6F:51:13:A4:58
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/RerT6ithGiWLWULzlmgZb1ETpFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.104.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b4:cc:7c:7e:37:40:24:c5:31:00:24:df:88:af:b3:79:b8:
3f:85:94:17:b4:36:a8:a7:55:c9:70:4a:2d:a3:63:e5:fa:2c:
3c:c6:d6:0c:60:7d:6f:81:4d:77:a3:93:55:be:a1:a9:22:3b:
ba:db:14:64:59:a2:36:55:a4:fd:41:9b:f7:30:fb:78:18:ac:
44:a7:da:a6:fd:0f:c2:38:f5:1c:ef:44:29:a4:83:91:75:7b:
df:3e:b0:3f:69:9e:32:7a:b2:94:63:ce:70:a1:f9:a9:06:e1:
c7:0b:f0:de:b2:e6:88:e8:1b:75:c4:80:90:09:7b:ee:9c:4d:
83:d4:68:02:bd:66:2b:e4:da:e5:2b:79:df:8a:d7:93:81:3e:
ab:18:b8:d3:b2:e1:c3:38:a9:c3:3a:a7:cc:a0:a2:3f:65:cf:
b2:78:6b:a3:2d:87:b1:5a:0e:21:53:85:a6:4f:32:b1:62:88:
99:e0:6f:17:9f:e3:96:9f:75:d1:49:a7:6e:52:9a:25:28:43:
3b:6c:29:4e:f3:2c:71:0b:21:dc:c7:aa:72:0d:8d:7b:e7:4e:
04:d3:09:1f:9d:c7:a5:f2:99:e2:c3:d9:78:da:5e:c9:14:54:
7f:16:2c:20:31:54:63:8d:b9:58:e6:28:9f:0f:b3:8d:0b:68:
56:a2:2d:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxZXvvBj//7TJSJybSwworUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjMxMjExMTQ1NDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVhZDNlYTJiNjExYTI1OGI1OTQyZjM5NjY4MTk2ZjUxMTNhNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdM717pwskjw4iRr7IfksaOrBUV7
+RFsxNP3kLIPk0LXhhO1FdOv6oKWllBrKLd0bYwRjA8IgU6R0iYzHAOPD+tVaaJo
vtpjClcVVrWiP3E58gUIBJeMoojjvyZDDoQ+x+7mZ1vzajXjZi90Zb9kLuP9mnyd
ivdV3cpb/yqF49XeVIhSLrlNAyP3jKhSiGjs8zJECRaic0z54zbT6rW+6+wH17jC
SFgUgZD6Q6UFvH+ltft299bnDrVFwtJsu7xWxtPSl/O7Of9C3S2e0fpjgUzxVoz5
qqK/FMlxAFY0EVoOdsPYc8pSvHtc7mtQhLOLoBiRqRIerPxembYTiYP0OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXq0+orYRoli1lC85ZoGW9RE6RYMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvUmVyVDZpdGhHaVdMV1VMemxtZ1piMUVUcEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cRoMA0G
CSqGSIb3DQEBCwUAA4IBAQCVtMx8fjdAJMUxACTfiK+zebg/hZQXtDaop1XJcEot
o2Pl+iw8xtYMYH1vgU13o5NVvqGpIju62xRkWaI2VaT9QZv3MPt4GKxEp9qm/Q/C
OPUc70QppIORdXvfPrA/aZ4yerKUY85wofmpBuHHC/DesuaI6Bt1xICQCXvunE2D
1GgCvWYr5NrlK3nfiteTgT6rGLjTsuHDOKnDOqfMoKI/Zc+yeGujLYexWg4hU4Wm
TzKxYoiZ4G8Xn+OWn3XRSaduUpolKEM7bClO8yxxCyHcx6pyDY17504E0wkfncel
8pniw9l42l7JFFR/FiwgMVRjjblY5iifD7ONC2hWoi21
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:32 2025 by rpki-client