Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa
File: rqMvB3LlGvM5KZi3PiXWy3RENOY.roa (raw, json)
Hash identifier: mL3+Ki1TYKGf3WXIdHyp5gf53OcuoPM7xFeu6W5Ym04=
Subject key identifier: AE:A3:2F:07:72:E5:1A:F3:39:29:98:B7:3E:25:D6:CB:74:44:34:E6
Certificate issuer: /CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Certificate serial: 01867A5291B56391B7C59E280A89B9A19CCD
Authority key identifier: F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa
Signing time: Wed 22 Feb 2023 18:11:16 +0000
ROA not before: Wed 22 Feb 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 212.18.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:52:91:b5:63:91:b7:c5:9e:28:0a:89:b9:a1:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Validity
Not Before: Feb 22 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea32f0772e51af3392998b73e25d6cb744434e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:4f:8e:51:90:e6:aa:ca:d1:08:fe:45:34:
9b:b8:05:0a:77:51:0f:9b:0a:63:07:46:de:8e:5d:
c6:a4:f6:f6:e6:f8:50:d2:9a:5a:ff:56:c0:2b:9d:
42:41:3d:f6:02:25:ff:c8:33:7a:1c:75:55:03:70:
e3:d2:15:6b:a8:a1:b9:4d:df:65:e8:f0:81:a1:f4:
bb:88:de:6b:3e:03:91:ed:58:ce:22:2e:b2:f7:ae:
c5:cf:cc:27:e4:80:93:47:57:c2:43:35:0a:ba:f9:
ff:79:e4:0f:49:cf:af:3a:0c:90:ad:60:ee:b9:a0:
89:b7:9e:77:f5:b9:8c:ce:b7:e9:d9:ae:c3:11:59:
3b:fd:6d:28:a1:21:d9:e4:c3:1e:ad:94:cd:94:a2:
a7:a7:83:c7:52:47:9d:94:84:b8:52:ec:59:0b:0e:
07:12:c1:2f:a6:f3:d3:b4:c8:c5:45:bd:23:9a:85:
55:ba:f1:f4:61:b3:63:be:42:88:ae:53:14:8e:6e:
f5:bd:9c:16:cb:2d:6b:48:00:e2:37:e2:48:72:be:
01:77:d0:2f:a9:d2:1e:b8:a9:f6:c1:2b:29:af:cf:
b3:30:c2:c4:73:78:58:5c:bf:28:57:c5:7c:dc:30:
17:8c:df:fd:48:29:46:82:e5:99:75:17:8c:7c:b7:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:2F:07:72:E5:1A:F3:39:29:98:B7:3E:25:D6:CB:74:44:34:E6
X509v3 Authority Key Identifier:
keyid:F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:cc:7e:7b:2b:58:61:89:71:a6:cb:07:8b:47:33:e9:76:3c:
da:0e:f0:f1:39:46:4f:7e:72:51:b3:1c:2b:14:dd:c1:a2:69:
a5:80:0a:09:e3:27:34:b1:48:47:be:09:3c:8b:7f:03:7e:fe:
8b:ce:04:7f:4d:a1:07:8f:d3:78:d7:1d:51:40:6e:67:8a:da:
0b:f3:50:a4:46:3f:35:36:02:55:df:e3:e1:4d:8b:ca:72:fc:
d7:57:4f:c4:4c:e2:73:00:a6:ef:79:b2:71:6b:cd:31:9b:0c:
c3:b5:94:c1:6a:a5:31:50:3b:da:22:be:9f:b6:60:da:d0:fc:
53:59:f9:f6:a1:a3:c1:1d:08:16:79:7e:75:9f:b0:ac:0b:92:
52:4b:fe:21:e4:f7:4f:6b:f2:8f:f9:46:2b:ba:3a:d1:5d:d9:
b1:07:01:93:24:6b:2b:60:60:97:d5:11:85:be:7a:1e:dc:c7:
5c:5c:3e:f9:31:68:d0:f5:65:b1:9a:1c:f4:fb:a0:35:94:de:
a8:e9:14:e8:1b:c9:15:3b:23:47:88:8a:75:f7:44:62:7c:1e:
e6:ee:f6:09:0f:76:d6:2a:8b:2c:59:be:4a:6d:7f:b2:39:08:
6e:70:3c:5c:73:7a:6e:a8:da:fa:fa:c9:31:d8:b8:6e:35:41:
fb:93:93:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ6UpG1Y5G3xZ4oCom5oZzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NjFkOGM0YzljNGI5ZjY4YWE2YzdmNTNjNzZlNjMwOWYw
Nzc5MTMwHhcNMjMwMjIyMTgxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWEzMmYwNzcyZTUxYWYzMzkyOTk4YjczZTI1ZDZjYjc0NDQzNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0JPjlGQ5qrK0Qj+RTSbuAUKd1EP
mwpjB0bejl3GpPb25vhQ0ppa/1bAK51CQT32AiX/yDN6HHVVA3Dj0hVrqKG5Td9l
6PCBofS7iN5rPgOR7VjOIi6y967Fz8wn5ICTR1fCQzUKuvn/eeQPSc+vOgyQrWDu
uaCJt5539bmMzrfp2a7DEVk7/W0ooSHZ5MMerZTNlKKnp4PHUkedlIS4UuxZCw4H
EsEvpvPTtMjFRb0jmoVVuvH0YbNjvkKIrlMUjm71vZwWyy1rSADiN+JIcr4Bd9Av
qdIeuKn2wSspr8+zMMLEc3hYXL8oV8V83DAXjN/9SClGguWZdReMfLdr2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6jLwdy5RrzOSmYtz4l1st0RDTmMB8GA1UdIwQY
MBaAFPZh2MTJxLn2iqbH9Tx25jCfB3kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW1IWXhNbkV1ZmFLcHNmMVBIYm1NSjhIZVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MTA2YTgtNzI1Mi00YWQzLWFmZDct
OTM3OWU1ZGZhM2E3LzEvcnFNdkIzTGxHdk01S1ppM1BpWFd5M1JFTk9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83MTA2YTgtNzI1Mi00YWQzLWFmZDctOTM3OWU1ZGZhM2E3
LzEvOW1IWXhNbkV1ZmFLcHNmMVBIYm1NSjhIZVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJrMA0G
CSqGSIb3DQEBCwUAA4IBAQDIzH57K1hhiXGmyweLRzPpdjzaDvDxOUZPfnJRsxwr
FN3BommlgAoJ4yc0sUhHvgk8i38Dfv6LzgR/TaEHj9N41x1RQG5nitoL81CkRj81
NgJV3+PhTYvKcvzXV0/ETOJzAKbvebJxa80xmwzDtZTBaqUxUDvaIr6ftmDa0PxT
Wfn2oaPBHQgWeX51n7CsC5JSS/4h5PdPa/KP+UYrujrRXdmxBwGTJGsrYGCX1RGF
vnoe3MdcXD75MWjQ9WWxmhz0+6A1lN6o6RToG8kVOyNHiIp190RifB7m7vYJD3bW
KossWb5KbX+yOQhucDxcc3puqNr6+skx2LhuNUH7k5Ok
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:34 2025 by rpki-client