Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/80bfe1-d5f8-424d-97f5-4525481a4411/1/0oupVWAgzhllqU0MkAH4xyd_Dkk.roa
File: 0oupVWAgzhllqU0MkAH4xyd_Dkk.roa (raw, json)
Hash identifier: CIwO4S5YICQvD8W+cFgzLaon0caCPyTJuse7Vdqhvow=
Subject key identifier: D2:8B:A9:55:60:20:CE:19:65:A9:4D:0C:90:01:F8:C7:27:7F:0E:49
Certificate issuer: /CN=441dc278b8e9d3853e4a07d040af116806e9676d
Certificate serial: 03E95C02
Authority key identifier: 44:1D:C2:78:B8:E9:D3:85:3E:4A:07:D0:40:AF:11:68:06:E9:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB3CeLjp04U-SgfQQK8RaAbpZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/80bfe1-d5f8-424d-97f5-4525481a4411/1/0oupVWAgzhllqU0MkAH4xyd_Dkk.roa
Signing time: Sat 01 Jan 2022 12:57:21 +0000
ROA not before: Sat 01 Jan 2022 12:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13307
IP address blocks: 193.43.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65625090 (0x3e95c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441dc278b8e9d3853e4a07d040af116806e9676d
Validity
Not Before: Jan 1 12:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d28ba9556020ce1965a94d0c9001f8c7277f0e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:b7:40:91:4f:eb:8c:44:21:b8:e7:48:a3:
84:4b:ba:e2:34:3e:c7:87:e3:d9:77:42:ad:f9:f3:
e7:c9:a9:26:46:5d:3d:f3:0e:84:e9:12:48:96:96:
ed:ef:f6:87:a3:dc:57:f1:db:37:23:89:88:52:8b:
49:ff:67:62:57:f3:f1:f7:46:a6:14:59:46:7f:e5:
d2:ae:f2:b9:fc:a7:01:9a:a9:50:34:ef:f7:74:dc:
a5:32:75:e5:3f:2b:80:d8:2a:72:ec:56:86:d9:00:
a8:14:32:52:93:78:98:89:62:8e:bf:37:d3:b8:c2:
78:1c:d3:94:3b:59:f1:93:ff:84:ea:58:7b:8e:ac:
d4:a3:82:73:45:8a:25:66:1b:38:e9:9a:c8:78:b5:
fb:75:be:46:ef:ad:27:f9:79:92:af:fa:cf:ec:15:
54:68:e5:b5:85:bd:f1:f6:40:32:d2:cb:34:2b:0c:
c0:c6:72:8f:d1:c4:4e:6d:50:e6:29:26:dc:e7:be:
3c:f6:b1:32:c2:dd:97:4b:27:d9:f2:ee:ba:62:e9:
41:f4:3f:9f:21:e2:62:a2:5b:48:a3:7a:f9:40:a3:
2a:e1:bf:2c:b3:02:e7:c2:4b:56:36:4e:43:04:14:
5a:d4:31:ee:24:6b:e6:d1:0a:23:9a:b5:c0:e3:65:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:A9:55:60:20:CE:19:65:A9:4D:0C:90:01:F8:C7:27:7F:0E:49
X509v3 Authority Key Identifier:
keyid:44:1D:C2:78:B8:E9:D3:85:3E:4A:07:D0:40:AF:11:68:06:E9:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB3CeLjp04U-SgfQQK8RaAbpZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/80bfe1-d5f8-424d-97f5-4525481a4411/1/0oupVWAgzhllqU0MkAH4xyd_Dkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/80bfe1-d5f8-424d-97f5-4525481a4411/1/RB3CeLjp04U-SgfQQK8RaAbpZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:69:55:95:32:2c:cf:06:6e:63:69:4a:28:dc:33:ff:82:09:
c9:50:1d:7b:4f:c6:90:d2:9a:9b:89:5a:3a:a4:f0:30:99:70:
23:a7:7c:b3:14:7e:38:8b:dc:64:84:a7:e7:62:31:14:a5:2b:
9b:45:e9:25:03:5f:af:56:0c:50:0b:42:97:bf:f3:24:c6:a5:
e1:15:d8:b8:19:2d:71:0f:7d:dd:e5:6f:f0:c4:dd:de:64:56:
b2:9f:01:cf:1f:b5:97:cd:33:31:4a:51:5c:68:bd:ad:86:c7:
48:92:d6:40:58:ed:a7:8e:df:a7:88:31:14:3c:a5:e7:36:a0:
59:88:54:16:35:e8:45:7f:7a:eb:11:1a:b0:c0:67:6c:b9:88:
fe:de:16:66:6b:3c:6f:08:2d:4e:82:36:74:60:32:ae:2a:4c:
64:17:21:7a:8f:9d:c4:a5:e5:6d:2e:a1:44:10:45:34:96:6a:
37:a6:6d:68:2b:5e:b9:0b:f3:8f:b5:c8:00:62:21:4f:28:e3:
88:66:41:bd:6b:d0:3c:2e:8a:f5:cc:6d:95:16:46:94:16:1c:
a8:a7:e1:6e:72:06:3d:94:0a:85:65:23:16:ce:e6:e0:49:44:
51:ff:1e:a1:5c:36:cd:2b:54:b6:42:2b:4d:9d:75:71:0c:62:
b2:bb:22:0a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+lcAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDFkYzI3OGI4ZTlkMzg1M2U0YTA3ZDA0MGFmMTE2ODA2ZTk2NzZkMB4XDTIyMDEw
MTEyNTcyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI4YmE5NTU2MDIw
Y2UxOTY1YTk0ZDBjOTAwMWY4YzcyNzdmMGU0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOlYt0CRT+uMRCG450ijhEu64jQ+x4fj2XdCrfnz58mpJkZd
PfMOhOkSSJaW7e/2h6PcV/HbNyOJiFKLSf9nYlfz8fdGphRZRn/l0q7yufynAZqp
UDTv93TcpTJ15T8rgNgqcuxWhtkAqBQyUpN4mIlijr8307jCeBzTlDtZ8ZP/hOpY
e46s1KOCc0WKJWYbOOmayHi1+3W+Ru+tJ/l5kq/6z+wVVGjltYW98fZAMtLLNCsM
wMZyj9HETm1Q5ikm3Oe+PPaxMsLdl0sn2fLuumLpQfQ/nyHiYqJbSKN6+UCjKuG/
LLMC58JLVjZOQwQUWtQx7iRr5tEKI5q1wONluh8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSi6lVYCDOGWWpTQyQAfjHJ38OSTAfBgNVHSMEGDAWgBREHcJ4uOnThT5K
B9BArxFoBulnbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JCM0NlTGpwMDRVLVNnZlFRSzhSYUFicFoyMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvODBiZmUxLWQ1ZjgtNDI0ZC05N2Y1LTQ1MjU0ODFhNDQxMS8x
LzBvdXBWV0FnemhsbHFVME1rQUg0eHlkX0Rray5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ODBiZmUxLWQ1ZjgtNDI0ZC05N2Y1LTQ1MjU0ODFhNDQxMS8xL1JCM0NlTGpwMDRV
LVNnZlFRSzhSYUFicFoyMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEr4DANBgkqhkiG9w0BAQsFAAOC
AQEAHmlVlTIszwZuY2lKKNwz/4IJyVAde0/GkNKam4laOqTwMJlwI6d8sxR+OIvc
ZISn52IxFKUrm0XpJQNfr1YMUAtCl7/zJMal4RXYuBktcQ993eVv8MTd3mRWsp8B
zx+1l80zMUpRXGi9rYbHSJLWQFjtp47fp4gxFDyl5zagWYhUFjXoRX966xEasMBn
bLmI/t4WZms8bwgtToI2dGAyripMZBcheo+dxKXlbS6hRBBFNJZqN6ZtaCteuQvz
j7XIAGIhTyjjiGZBvWvQPC6K9cxtlRZGlBYcqKfhbnIGPZQKhWUjFs7m4ElEUf8e
oVw2zStUtkIrTZ11cQxisrsiCg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:12 2024 by rpki-client on console-fra.rpki-client.org