Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/exOy-YqfGKZ8aEldMtD2IbpV1qk.roa
File: exOy-YqfGKZ8aEldMtD2IbpV1qk.roa (raw, json)
Hash identifier: JYntrUrs8ZuskAvT5RRd7skBog9du4PlkpH9IzeLD/o=
Subject key identifier: 7B:13:B2:F9:8A:9F:18:A6:7C:68:49:5D:32:D0:F6:21:BA:55:D6:A9
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 018625B16B72A45E41FD31453520E3741128
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/exOy-YqfGKZ8aEldMtD2IbpV1qk.roa
Signing time: Mon 06 Feb 2023 07:47:09 +0000
ROA not before: Mon 06 Feb 2023 07:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.252.112.0/24 maxlen: 24
84.252.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:b1:6b:72:a4:5e:41:fd:31:45:35:20:e3:74:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Feb 6 07:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b13b2f98a9f18a67c68495d32d0f621ba55d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:6c:a7:cc:09:f9:e2:82:9c:13:70:33:aa:
b8:6c:2a:f4:f3:8e:52:7f:99:48:07:d0:36:4f:ba:
09:bd:82:47:3f:4d:29:1f:4a:24:ad:59:d0:30:18:
43:99:ea:d8:dc:99:6a:65:69:48:36:9b:0c:3a:0d:
6d:0a:12:b1:40:9d:ae:99:1f:74:77:57:3a:60:42:
2c:0f:05:0e:05:40:11:19:57:5f:0e:e3:a4:10:38:
24:45:67:66:e1:77:f8:ae:0f:75:5c:4a:99:28:e3:
cc:44:67:79:ec:95:f3:2e:ee:b8:93:61:d3:dc:ab:
10:21:43:f9:2a:05:4c:a6:64:c1:88:86:5f:37:59:
e6:d9:e4:b7:76:6c:ba:35:d8:ef:9d:33:e7:4f:70:
15:a5:d6:d8:49:ff:c2:99:a7:75:39:4f:41:a3:f9:
a9:f6:cf:bf:ed:c5:8c:70:96:01:a0:50:21:15:db:
6e:59:a5:bd:f2:54:61:8c:a0:34:cf:a1:ec:da:bf:
27:c7:5f:b0:d6:a3:c4:49:74:cb:a0:22:fb:c9:fe:
e9:18:02:5f:5f:38:22:0a:74:7b:dd:54:77:74:45:
ab:86:48:a0:83:c3:c3:c1:34:a3:f9:ed:9a:a0:43:
6a:fb:07:fd:cd:90:df:e8:d8:07:64:93:61:ef:05:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:B2:F9:8A:9F:18:A6:7C:68:49:5D:32:D0:F6:21:BA:55:D6:A9
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/exOy-YqfGKZ8aEldMtD2IbpV1qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:36:67:ed:e5:67:02:09:2e:61:53:4b:51:ac:87:dd:15:72:
4e:5c:21:3e:e8:96:ee:9e:c3:0c:3f:19:7d:37:ef:3c:89:43:
49:96:c6:26:6f:cd:1a:7c:24:c9:4e:f8:06:2d:63:ef:70:bd:
8e:a4:38:c5:34:86:df:7e:9c:fa:cb:e8:0a:7a:89:de:03:b9:
bf:3f:59:8e:e4:8d:57:20:aa:e8:e0:26:7a:c6:22:2a:b7:84:
c6:de:2e:af:50:64:82:8d:b9:32:a3:83:24:ce:38:78:f7:cc:
6d:c8:99:3b:c6:38:1d:c0:7a:11:73:4e:62:ee:ad:8b:a9:eb:
aa:ee:7d:e4:9a:f7:0c:1d:00:9d:d7:c3:e9:79:66:9c:4c:08:
53:5d:91:60:a6:a6:5f:6e:87:fb:db:87:08:09:8f:f1:97:12:
86:6a:00:38:87:ab:26:cf:dc:a6:94:38:3c:b9:d3:57:ee:1d:
d4:c8:9c:0d:92:06:1e:84:f0:27:ea:28:a3:fb:b4:7d:ad:fa:
bc:03:85:7c:2f:a6:e9:a5:fe:01:0f:a8:c0:a7:6e:17:45:af:
d6:97:8b:27:5d:05:ee:1f:b9:64:8c:df:d4:b9:53:ef:a1:56:
14:f9:8b:0f:75:01:65:b4:97:5c:aa:5e:af:29:af:33:f5:60:
60:8d:a7:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYlsWtypF5B/TFFNSDjdBEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTdkMDZlZGEzNjFkOTM1NTg4ZTQyN2YzZDk4MzNmOGY3
ZDFkMjAwHhcNMjMwMjA2MDc0NzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjEzYjJmOThhOWYxOGE2N2M2ODQ5NWQzMmQwZjYyMWJhNTVkNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmxsp8wJ+eKCnBNwM6q4bCr0845S
f5lIB9A2T7oJvYJHP00pH0okrVnQMBhDmerY3JlqZWlINpsMOg1tChKxQJ2umR90
d1c6YEIsDwUOBUARGVdfDuOkEDgkRWdm4Xf4rg91XEqZKOPMRGd57JXzLu64k2HT
3KsQIUP5KgVMpmTBiIZfN1nm2eS3dmy6NdjvnTPnT3AVpdbYSf/Cmad1OU9Bo/mp
9s+/7cWMcJYBoFAhFdtuWaW98lRhjKA0z6Hs2r8nx1+w1qPESXTLoCL7yf7pGAJf
XzgiCnR73VR3dEWrhkigg8PDwTSj+e2aoENq+wf9zZDf6NgHZJNh7wUUaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsTsvmKnximfGhJXTLQ9iG6VdapMB8GA1UdIwQY
MBaAFNmX0G7aNh2TVYjkJ/PZgz+PfR0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpmUWJ0bzJIWk5WaU9Rbjg5bURQNDk5SFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83MDJkYTUtYzJjYi00YjY2LWIyOTkt
ZGM1ZTBjNDZlNzZjLzEvZXhPeS1ZcWZHS1o4YUVsZE10RDJJYnBWMXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83MDJkYTUtYzJjYi00YjY2LWIyOTktZGM1ZTBjNDZlNzZj
LzEvMlpmUWJ0bzJIWk5WaU9Rbjg5bURQNDk5SFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVPxwMA0G
CSqGSIb3DQEBCwUAA4IBAQCMNmft5WcCCS5hU0tRrIfdFXJOXCE+6JbunsMMPxl9
N+88iUNJlsYmb80afCTJTvgGLWPvcL2OpDjFNIbffpz6y+gKeoneA7m/P1mO5I1X
IKro4CZ6xiIqt4TG3i6vUGSCjbkyo4Mkzjh498xtyJk7xjgdwHoRc05i7q2Lqeuq
7n3kmvcMHQCd18PpeWacTAhTXZFgpqZfbof724cICY/xlxKGagA4h6smz9ymlDg8
udNX7h3UyJwNkgYehPAn6iij+7R9rfq8A4V8L6bppf4BD6jAp24XRa/Wl4snXQXu
H7lkjN/UuVPvoVYU+YsPdQFltJdcql6vKa8z9WBgjad5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-ams.rpki-client.org