Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/4IhxN6dETtHZkB0lPspu0TztDOE.roa
File: 4IhxN6dETtHZkB0lPspu0TztDOE.roa (raw, json)
Hash identifier: +wIiw37yVz5vQlP59JLEZorTG3qlEhqiR2+rSllq+s4=
Subject key identifier: E0:88:71:37:A7:44:4E:D1:D9:90:1D:25:3E:CA:6E:D1:3C:ED:0C:E1
Certificate issuer: /CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Certificate serial: 018CC8012AF1728CEC544737B3D8DA205BF3
Authority key identifier: A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/4IhxN6dETtHZkB0lPspu0TztDOE.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47802
IP address blocks: 193.43.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2a:f1:72:8c:ec:54:47:37:b3:d8:da:20:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0887137a7444ed1d9901d253eca6ed13ced0ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:f8:e4:ba:ea:86:f3:27:0b:c0:33:3a:44:
d8:80:d7:7e:16:c0:bd:f9:b3:d5:b9:e5:01:16:cc:
9b:d0:eb:52:75:d3:53:ed:c7:cb:50:5c:e1:16:70:
66:7b:11:75:4f:dc:7e:65:18:b6:e0:5b:37:cb:22:
02:a5:32:b1:e4:4b:df:1c:78:10:b0:a4:80:3a:09:
a9:28:5c:8d:f1:7c:41:a9:23:43:f4:72:03:b5:f2:
01:ca:4e:48:66:ec:bc:5e:92:31:03:b3:74:25:1b:
69:14:87:8c:38:57:61:e1:f7:ad:9b:b8:94:ef:0f:
bc:45:e4:48:3e:6b:e7:42:f4:81:ce:e2:d4:54:30:
7d:78:52:68:8d:ca:ff:0c:5e:76:b3:ed:7f:1a:90:
8b:15:e6:f0:e2:fc:c9:e6:10:d9:35:9f:86:71:39:
f5:08:52:f2:78:e5:db:ec:cd:91:f3:28:e1:58:92:
97:79:60:3b:0e:b5:ca:29:53:b4:c4:be:ad:df:fc:
a6:77:3a:8a:50:56:72:1c:ef:45:6d:b7:97:17:4d:
5e:ff:0f:29:ca:37:6f:50:9b:d0:bc:98:80:8d:5e:
f5:69:8b:f4:75:58:b4:81:ab:7c:67:9c:ab:b7:5e:
a5:6d:e5:4f:b6:30:73:38:db:40:66:48:b2:b1:1c:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:71:37:A7:44:4E:D1:D9:90:1D:25:3E:CA:6E:D1:3C:ED:0C:E1
X509v3 Authority Key Identifier:
keyid:A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/4IhxN6dETtHZkB0lPspu0TztDOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.105.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8b:45:83:f8:f5:e8:74:68:00:bf:56:7a:12:6f:14:d6:95:
0f:43:33:77:b8:6e:b8:de:21:35:ac:94:6e:8f:9a:16:f5:f7:
e8:7f:bf:6e:8d:42:2f:d2:12:a5:57:a2:21:da:d0:5c:61:ae:
63:a2:93:7c:04:d2:26:8a:91:a3:bc:f3:e7:7b:a9:5a:fd:04:
07:38:2f:17:0b:46:54:50:02:ed:4d:44:a0:2f:85:a6:8e:c5:
af:ee:8a:9f:be:50:be:a6:ca:e4:9a:56:c7:2f:7c:8d:25:de:
5f:36:2e:c6:7b:30:90:86:a2:67:0e:6c:ee:a9:06:9e:31:1d:
74:61:5f:ea:7c:88:e5:7b:a1:63:04:3b:16:8f:35:f2:21:d0:
b7:cb:8c:f8:c2:04:8d:96:a7:63:c8:a9:57:9c:3e:6a:a9:67:
8a:b8:79:41:0e:37:cf:b4:ae:f4:04:b9:5e:e6:3d:d2:03:f8:
70:bb:32:8c:5d:43:c2:d9:cc:42:6b:ff:8f:b7:4b:5f:c8:d8:
87:cf:fd:ed:fb:aa:4e:19:b0:f1:42:24:c7:11:40:9d:be:db:
04:32:17:95:f5:60:2d:0e:e3:37:05:44:f5:6f:b2:7d:e1:de:
75:ef:dc:2a:87:f5:8b:a4:a4:ee:8d:b4:fb:2b:8a:2f:c9:98:
2b:90:65:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASrxcozsVEc3s9jaIFvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDIwOTQzNjA0MTA3ZjZhYjE4MTM5ZTlkMzA3NWY5N2Mw
NzFjZTMwHhcNMjQwMTAyMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDg4NzEzN2E3NDQ0ZWQxZDk5MDFkMjUzZWNhNmVkMTNjZWQwY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvob45LrqhvMnC8AzOkTYgNd+FsC9
+bPVueUBFsyb0OtSddNT7cfLUFzhFnBmexF1T9x+ZRi24Fs3yyICpTKx5EvfHHgQ
sKSAOgmpKFyN8XxBqSND9HIDtfIByk5IZuy8XpIxA7N0JRtpFIeMOFdh4fetm7iU
7w+8ReRIPmvnQvSBzuLUVDB9eFJojcr/DF52s+1/GpCLFebw4vzJ5hDZNZ+GcTn1
CFLyeOXb7M2R8yjhWJKXeWA7DrXKKVO0xL6t3/ymdzqKUFZyHO9FbbeXF01e/w8p
yjdvUJvQvJiAjV71aYv0dVi0gat8Z5yrt16lbeVPtjBzONtAZkiysRwr9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOCIcTenRE7R2ZAdJT7KbtE87QzhMB8GA1UdIwQY
MBaAFKLSCUNgQQf2qxgTnp0wdfl8BxzjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RJSlEyQkJCX2FyR0JPZW5UQjEtWHdISE9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjhmYTItNGEzYy00MTA3LWFmZjMt
YjA4ZGZjMTE4Y2NjLzEvNEloeE42ZEVUdEhaa0IwbFBzcHUwVHp0RE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjhmYTItNGEzYy00MTA3LWFmZjMtYjA4ZGZjMTE4Y2Nj
LzEvb3RJSlEyQkJCX2FyR0JPZW5UQjEtWHdISE9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwStpMA0G
CSqGSIb3DQEBCwUAA4IBAQBni0WD+PXodGgAv1Z6Em8U1pUPQzN3uG643iE1rJRu
j5oW9ffof79ujUIv0hKlV6Ih2tBcYa5jopN8BNImipGjvPPne6la/QQHOC8XC0ZU
UALtTUSgL4WmjsWv7oqfvlC+psrkmlbHL3yNJd5fNi7GezCQhqJnDmzuqQaeMR10
YV/qfIjle6FjBDsWjzXyIdC3y4z4wgSNlqdjyKlXnD5qqWeKuHlBDjfPtK70BLle
5j3SA/hwuzKMXUPC2cxCa/+Pt0tfyNiHz/3t+6pOGbDxQiTHEUCdvtsEMheV9WAt
DuM3BUT1b7J94d5179wqh/WLpKTujbT7K4ovyZgrkGW5
-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:29 2024 by rpki-client on console-fra.rpki-client.org