Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/0PEmk1AZbdKeRB_EQi34avL-iZ4.roa
File: 0PEmk1AZbdKeRB_EQi34avL-iZ4.roa (raw, json)
Hash identifier: qXSHfRVpFAAYkH6vuN13B+cUyN0mOYrNeF6F2ZcEUUg=
Subject key identifier: D0:F1:26:93:50:19:6D:D2:9E:44:1F:C4:42:2D:F8:6A:F2:FE:89:9E
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 01828E7DBF2A4145CC14FA15B18328B2A2D1
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/0PEmk1AZbdKeRB_EQi34avL-iZ4.roa
Signing time: Thu 11 Aug 2022 19:59:41 +0000
ROA not before: Thu 11 Aug 2022 19:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:7d:bf:2a:41:45:cc:14:fa:15:b1:83:28:b2:a2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Aug 11 19:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0f1269350196dd29e441fc4422df86af2fe899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:28:70:fa:b0:d1:42:a5:67:99:3a:61:ba:
f3:6c:a2:75:c0:f3:6c:d6:70:5e:17:09:c6:fa:39:
85:6a:af:ef:8d:57:8e:53:98:af:b4:b3:2c:5a:4d:
bf:b6:f4:75:ed:0b:d2:ef:3f:66:5d:45:81:d2:f9:
0f:1b:b7:86:b5:ee:f8:e7:3b:2e:31:90:97:bd:dc:
c5:4a:31:5c:a1:9d:c8:cf:96:b8:23:99:0c:25:f9:
70:5b:47:ac:73:ca:3c:1d:21:ce:c6:54:ef:fb:fc:
6e:78:63:fe:d5:1a:39:65:b9:d7:ba:d5:d6:b0:c6:
7d:2c:19:91:ad:1c:a9:81:b1:e6:5c:f7:f1:c1:e5:
8e:91:dd:a8:8a:29:d5:55:dd:f1:55:b3:c0:7a:6f:
be:49:3d:d1:69:77:d4:9d:32:b0:c1:99:11:f5:2b:
a7:9d:2a:d2:57:7a:5e:d4:e2:67:ab:f7:39:b2:b2:
55:4c:84:dd:08:8e:99:de:62:d8:fb:31:bc:7a:f8:
12:08:1b:b9:6e:9d:ff:70:27:06:b1:2c:ef:1f:14:
fd:5d:82:00:de:83:1b:26:34:07:95:18:15:91:3f:
a5:f1:6a:f7:c4:0a:10:02:2f:25:fe:cd:c7:52:bf:
a7:43:82:b8:73:77:ab:a7:fd:f2:71:c3:a7:76:8d:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:26:93:50:19:6D:D2:9E:44:1F:C4:42:2D:F8:6A:F2:FE:89:9E
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/0PEmk1AZbdKeRB_EQi34avL-iZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
58:05:4e:83:a0:c0:f0:fa:21:cb:37:97:03:86:08:03:c0:c6:
07:95:22:70:5d:9d:ae:4a:07:9c:cb:f7:44:7c:eb:b5:10:f8:
9e:de:82:db:18:4e:f5:87:84:25:c1:1d:5b:f6:45:40:db:e8:
5e:14:94:f1:64:d4:7d:91:32:14:46:82:a3:fe:4a:63:83:30:
ff:f5:72:0c:7e:88:31:a2:5d:1e:21:a8:0a:82:29:ce:6e:e0:
ed:2a:16:9b:de:06:eb:f5:7f:57:5e:6c:91:3c:d4:f6:61:a7:
6f:ed:5b:d3:2d:3f:9a:ea:11:7f:ce:83:bf:8c:af:af:9a:6d:
87:c9:11:57:82:5a:31:9e:77:e9:73:30:05:e0:1a:44:9a:f9:
32:da:95:aa:3d:82:1e:8e:b1:b3:00:75:a8:3a:79:e3:9b:f0:
e3:c4:96:e2:07:f8:a5:92:87:4f:12:99:87:7d:3d:b4:ae:c7:
eb:03:b7:b1:4e:97:2f:2e:fb:7e:a9:7d:a8:66:fd:a8:0f:50:
79:bd:88:39:4d:6f:70:c8:be:5f:c4:45:82:d6:fb:7c:49:ca:
66:20:36:7f:86:18:0a:41:08:30:55:5c:f7:db:30:2a:be:b5:
dd:65:bb:4b:60:fb:48:44:ca:6a:84:78:58:fe:5f:8f:a1:00:
de:52:2f:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKOfb8qQUXMFPoVsYMosqLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMWVhMTVjMjFiN2Q1NWRlYTRiZGM4NjFiMWMwYWZjOWU0
MzcwMzEwHhcNMjIwODExMTk1OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGYxMjY5MzUwMTk2ZGQyOWU0NDFmYzQ0MjJkZjg2YWYyZmU4OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBwocPqw0UKlZ5k6YbrzbKJ1wPNs
1nBeFwnG+jmFaq/vjVeOU5ivtLMsWk2/tvR17QvS7z9mXUWB0vkPG7eGte745zsu
MZCXvdzFSjFcoZ3Iz5a4I5kMJflwW0esc8o8HSHOxlTv+/xueGP+1Ro5ZbnXutXW
sMZ9LBmRrRypgbHmXPfxweWOkd2oiinVVd3xVbPAem++ST3RaXfUnTKwwZkR9Sun
nSrSV3pe1OJnq/c5srJVTITdCI6Z3mLY+zG8evgSCBu5bp3/cCcGsSzvHxT9XYIA
3oMbJjQHlRgVkT+l8Wr3xAoQAi8l/s3HUr+nQ4K4c3erp/3yccOndo0/OwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNDxJpNQGW3SnkQfxEIt+Gry/omeMB8GA1UdIwQY
MBaAFJseoVwht9Vd6kvchhscCvyeQ3AxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUt
OTRjZjIyZGVlNWZlLzEvMFBFbWsxQVpiZEtlUkJfRVFpMzRhdkwtaVo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZl
LzEvbXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsCYAwQB
XrDWAwQAvNBnMA0GCSqGSIb3DQEBCwUAA4IBAQBYBU6DoMDw+iHLN5cDhggDwMYH
lSJwXZ2uSgecy/dEfOu1EPie3oLbGE71h4QlwR1b9kVA2+heFJTxZNR9kTIURoKj
/kpjgzD/9XIMfogxol0eIagKginObuDtKhab3gbr9X9XXmyRPNT2Yadv7VvTLT+a
6hF/zoO/jK+vmm2HyRFXgloxnnfpczAF4BpEmvky2pWqPYIejrGzAHWoOnnjm/Dj
xJbiB/ilkodPEpmHfT20rsfrA7exTpcvLvt+qX2oZv2oD1B5vYg5TW9wyL5fxEWC
1vt8ScpmIDZ/hhgKQQgwVVz32zAqvrXdZbtLYPtIRMpqhHhY/l+PoQDeUi/p
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org