Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/mICJhnNj60PldCvZBHzz5GWu4iw.roa
File: mICJhnNj60PldCvZBHzz5GWu4iw.roa (raw, json)
Hash identifier: BfTbVqGJXmJP0SdVa9TEhUecsSOTCTnzYiT7uUlXjHA=
Subject key identifier: 98:80:89:86:73:63:EB:43:E5:74:2B:D9:04:7C:F3:E4:65:AE:E2:2C
Certificate issuer: /CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
Certificate serial: 0188208675BE4B26146F09029F2E738D95A5
Authority key identifier: 4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/mICJhnNj60PldCvZBHzz5GWu4iw.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 212.52.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:be:4b:26:14:6f:09:02:9f:2e:73:8d:95:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=988089867363eb43e5742bd9047cf3e465aee22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:78:ec:43:7f:ca:c0:76:85:ab:fc:4d:e0:
5f:bd:4c:94:fd:e5:fe:04:4d:39:9b:5e:dc:77:e7:
15:df:75:7c:3d:ea:74:7d:7d:b6:0f:89:d1:19:29:
48:be:98:c5:ca:a0:31:ea:0a:54:48:85:3f:84:b3:
db:25:d4:de:ef:fa:ec:02:00:17:7c:93:a9:c8:cc:
a3:02:64:28:c2:6c:89:4d:fe:0f:ea:6d:86:71:d4:
07:9b:83:46:42:1d:89:8b:41:c5:54:a4:6d:91:82:
17:54:8f:50:82:62:ea:21:63:02:f9:6e:8d:b3:16:
22:56:9f:d2:89:4a:05:e1:9b:de:3c:6e:3a:b4:f4:
55:62:5e:58:cc:ee:ba:06:5d:f2:b2:7e:4d:26:f6:
ae:19:ea:be:70:82:c6:38:f8:8b:38:97:22:4d:dc:
18:78:d2:cd:01:b2:a7:5b:44:49:5d:db:5c:c1:b8:
72:de:d6:2a:49:d5:ff:b0:c4:61:8f:16:92:82:69:
2b:db:7f:2a:d3:51:fa:04:aa:bb:b6:1b:a9:9a:90:
17:99:e2:bb:77:ed:c0:6e:f2:c8:45:6f:ce:d4:3c:
16:24:9d:59:da:e5:32:bf:6c:52:7d:31:ed:c9:0f:
4c:31:7b:90:a9:2d:b4:95:2a:4f:c7:bd:8f:ae:25:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:80:89:86:73:63:EB:43:E5:74:2B:D9:04:7C:F3:E4:65:AE:E2:2C
X509v3 Authority Key Identifier:
keyid:4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/mICJhnNj60PldCvZBHzz5GWu4iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4a:17:e7:5b:c0:ef:60:e1:15:d0:02:cf:2b:b2:b3:0f:54:
5f:96:c5:94:a4:7f:63:0a:46:86:f8:15:95:1c:1a:d1:f4:29:
a5:33:fe:63:29:43:b8:06:ca:df:bc:d1:45:21:5f:ca:c4:b0:
53:6f:3b:7c:04:9c:29:6b:43:d8:98:04:d4:3c:32:0d:31:0d:
d0:69:64:93:9a:8f:bc:9a:95:c6:9a:c5:ed:d0:91:57:5f:d3:
3c:5e:09:1e:16:18:85:de:04:45:ee:cc:2a:02:b6:91:49:41:
8e:ae:d8:82:92:2e:77:c9:8c:5f:59:28:e9:f4:5f:7d:72:98:
4a:7d:fa:43:0b:7e:02:d7:6f:fe:30:cc:c3:be:2e:9c:84:c1:
b7:0a:41:03:ca:6e:b9:f4:6f:f3:e0:11:01:42:de:4f:74:0e:
ab:34:94:3e:e4:70:59:4b:37:81:18:e9:6e:7f:02:51:60:02:
83:ca:5e:b9:70:5b:98:30:cc:67:5e:39:27:d6:a0:92:ed:40:
52:0c:07:d5:2f:bf:63:a4:69:0a:58:66:c9:d2:7d:16:02:67:
2a:c5:bc:08:72:e9:9a:f3:e3:87:81:c7:f2:48:99:58:40:ca:
4a:d7:ca:4c:e2:a7:5e:60:92:06:89:0e:18:68:92:ea:72:39:
09:ab:d8:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnW+SyYUbwkCny5zjZWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDg3ZDA2NWYyZTQ2OTUzYzY4MzI2ZGM2OTliM2ZjMWY3
MjI3ZmMwHhcNMjMwNTE1MTc0NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODgwODk4NjczNjNlYjQzZTU3NDJiZDkwNDdjZjNlNDY1YWVlMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTV47EN/ysB2hav8TeBfvUyU/eX+
BE05m17cd+cV33V8Pep0fX22D4nRGSlIvpjFyqAx6gpUSIU/hLPbJdTe7/rsAgAX
fJOpyMyjAmQowmyJTf4P6m2GcdQHm4NGQh2Ji0HFVKRtkYIXVI9QgmLqIWMC+W6N
sxYiVp/SiUoF4ZvePG46tPRVYl5YzO66Bl3ysn5NJvauGeq+cILGOPiLOJciTdwY
eNLNAbKnW0RJXdtcwbhy3tYqSdX/sMRhjxaSgmkr238q01H6BKq7thupmpAXmeK7
d+3AbvLIRW/O1DwWJJ1Z2uUyv2xSfTHtyQ9MMXuQqS20lSpPx72PriV3XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiAiYZzY+tD5XQr2QR88+RlruIsMB8GA1UdIwQY
MBaAFEwIfQZfLkaVPGgybcaZs/wfcif8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFoOUJsOHVScFU4YURKdHhwbXpfQjl5Sl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjVlNWYtNDM2Yy00ZWZjLThkZjct
OWI2ZDgyYWNlZDMzLzEvbUlDSmhuTmo2MFBsZEN2WkJIeno1R1d1NGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZjVlNWYtNDM2Yy00ZWZjLThkZjctOWI2ZDgyYWNlZDMz
LzEvVEFoOUJsOHVScFU4YURKdHhwbXpfQjl5Sl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQJMA0G
CSqGSIb3DQEBCwUAA4IBAQCMShfnW8DvYOEV0ALPK7KzD1RflsWUpH9jCkaG+BWV
HBrR9CmlM/5jKUO4BsrfvNFFIV/KxLBTbzt8BJwpa0PYmATUPDINMQ3QaWSTmo+8
mpXGmsXt0JFXX9M8XgkeFhiF3gRF7swqAraRSUGOrtiCki53yYxfWSjp9F99cphK
ffpDC34C12/+MMzDvi6chMG3CkEDym659G/z4BEBQt5PdA6rNJQ+5HBZSzeBGOlu
fwJRYAKDyl65cFuYMMxnXjkn1qCS7UBSDAfVL79jpGkKWGbJ0n0WAmcqxbwIcuma
8+OHgcfySJlYQMpK18pM4qdeYJIGiQ4YaJLqcjkJq9gx
-----END CERTIFICATE-----
Generated at Fri Nov 17 11:24:24 2023 by rpki-client on console-fra.rpki-client.org