Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/dRptC1RTbXBDtg9jn7vyE1q3BEE.roa
File: dRptC1RTbXBDtg9jn7vyE1q3BEE.roa (raw, json)
Hash identifier: KePBI8csBYowV2OddmZbzx8EvcDACWfywtynrDVU9LM=
Subject key identifier: 75:1A:6D:0B:54:53:6D:70:43:B6:0F:63:9F:BB:F2:13:5A:B7:04:41
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01856EC1F75A38D03287D88B8CE4B050B887
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/dRptC1RTbXBDtg9jn7vyE1q3BEE.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400687
IP address blocks: 194.76.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f7:5a:38:d0:32:87:d8:8b:8c:e4:b0:50:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=751a6d0b54536d7043b60f639fbbf2135ab70441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:75:b8:d1:ff:25:50:75:a8:dd:08:a2:87:
14:e5:79:3b:e4:2f:f1:a4:0b:e8:61:ef:9b:c6:ff:
aa:a1:d4:1f:36:f4:d0:46:e7:26:7c:77:e3:d7:f6:
4f:0f:da:b7:4f:b7:8a:6b:18:e8:2d:24:14:a4:55:
59:40:2e:3a:fe:db:a0:26:ff:89:de:cc:7b:af:7e:
96:60:52:69:57:b5:71:f7:6e:8c:83:b7:fd:21:6a:
34:b9:5a:88:bf:53:03:ab:c6:ad:5f:f4:da:29:48:
3a:5c:03:ce:3e:ef:c9:10:1b:73:01:50:31:86:35:
c7:79:60:3c:31:4d:b1:57:05:e1:f9:62:b6:c5:f9:
2a:d9:16:ee:ae:4a:0d:e7:18:49:a0:0e:2b:92:2c:
ad:1d:ec:be:b2:c7:5c:c8:6f:1d:e6:a4:df:d8:0e:
80:c9:2a:ad:a5:16:67:49:d0:a6:c1:97:11:e2:7b:
70:1b:5a:aa:a7:3f:b5:e4:93:4f:fc:24:f5:4e:52:
0f:e0:89:7d:3c:5f:7e:75:28:a7:c1:98:da:ea:83:
7b:eb:a3:3b:dc:bb:69:66:2b:13:89:20:34:a5:0c:
19:05:1b:3b:41:b2:d3:47:d5:64:03:34:b1:58:a5:
de:4a:61:10:d1:5e:f0:1b:97:26:7a:36:71:20:2e:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:6D:0B:54:53:6D:70:43:B6:0F:63:9F:BB:F2:13:5A:B7:04:41
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/dRptC1RTbXBDtg9jn7vyE1q3BEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.1.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bf:11:aa:9d:b2:8b:ec:e4:da:56:16:1a:a7:5b:6e:6b:a9:
1d:39:54:5c:c6:db:4c:44:13:e9:4a:2f:e7:a7:09:82:de:25:
8c:b8:6d:5a:87:52:9d:49:04:b3:c2:79:2d:0d:6e:88:76:95:
4d:e0:74:ea:a2:43:c7:49:88:66:dd:eb:39:ec:65:19:15:84:
bd:d8:03:88:b9:6e:d1:90:42:34:29:13:ff:8e:16:61:d2:93:
4a:f7:8f:89:c0:ac:5a:90:70:e4:b9:9a:d8:46:aa:a4:f9:48:
16:71:37:82:8b:e6:fa:25:cd:28:2d:01:ab:29:4e:15:39:19:
4e:c5:eb:99:de:53:9f:19:10:b5:47:c6:76:73:d5:41:67:21:
e2:c7:c3:85:22:21:a2:40:cc:b1:03:7c:63:d1:e3:14:ee:2f:
8b:98:ad:ea:e6:27:76:f0:2f:11:69:dc:b8:07:39:6b:94:40:
44:69:2f:7c:be:a5:31:31:a4:69:ad:11:0d:4d:32:2f:9a:f2:
e5:3f:c0:6e:e9:25:45:66:67:8c:01:bd:e4:1d:3d:7e:e1:8e:
4c:fd:1b:65:f7:14:12:6a:fc:57:ee:c9:d1:93:36:49:86:cf:
8b:2b:eb:12:55:bc:18:09:9d:ec:00:81:6a:f4:a5:79:01:04:
09:c0:55:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwfdaONAyh9iLjOSwULiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjMwMTAxMTkxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTFhNmQwYjU0NTM2ZDcwNDNiNjBmNjM5ZmJiZjIxMzVhYjcwNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcF1uNH/JVB1qN0IoocU5Xk75C/x
pAvoYe+bxv+qodQfNvTQRucmfHfj1/ZPD9q3T7eKaxjoLSQUpFVZQC46/tugJv+J
3sx7r36WYFJpV7Vx926Mg7f9IWo0uVqIv1MDq8atX/TaKUg6XAPOPu/JEBtzAVAx
hjXHeWA8MU2xVwXh+WK2xfkq2RburkoN5xhJoA4rkiytHey+ssdcyG8d5qTf2A6A
ySqtpRZnSdCmwZcR4ntwG1qqpz+15JNP/CT1TlIP4Il9PF9+dSinwZja6oN766M7
3LtpZisTiSA0pQwZBRs7QbLTR9VkAzSxWKXeSmEQ0V7wG5cmejZxIC7wCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUabQtUU21wQ7YPY5+78hNatwRBMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvZFJwdEMxUlRiWEJEdGc5am43dnlFMXEzQkVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwBMA0G
CSqGSIb3DQEBCwUAA4IBAQA1vxGqnbKL7OTaVhYap1tua6kdOVRcxttMRBPpSi/n
pwmC3iWMuG1ah1KdSQSzwnktDW6IdpVN4HTqokPHSYhm3es57GUZFYS92AOIuW7R
kEI0KRP/jhZh0pNK94+JwKxakHDkuZrYRqqk+UgWcTeCi+b6Jc0oLQGrKU4VORlO
xeuZ3lOfGRC1R8Z2c9VBZyHix8OFIiGiQMyxA3xj0eMU7i+LmK3q5id28C8Rady4
BzlrlEBEaS98vqUxMaRprRENTTIvmvLlP8Bu6SVFZmeMAb3kHT1+4Y5M/Rtl9xQS
avxX7snRkzZJhs+LK+sSVbwYCZ3sAIFq9KV5AQQJwFX5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org