Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/Ei4f2CZqvECV9EDXPOUMDrJMTmw.roa
File: Ei4f2CZqvECV9EDXPOUMDrJMTmw.roa (raw, json)
Hash identifier: oj1/Zb8ZFzFX7zf4C8wOh4W0Zsco9acBmH22iqfWGhk=
Subject key identifier: 12:2E:1F:D8:26:6A:BC:40:95:F4:40:D7:3C:E5:0C:0E:B2:4C:4E:6C
Certificate issuer: /CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Certificate serial: 01856EC201355115A7A19B6E3477A0213673
Authority key identifier: E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/Ei4f2CZqvECV9EDXPOUMDrJMTmw.roa
Signing time: Sun 01 Jan 2023 19:14:46 +0000
ROA not before: Sun 01 Jan 2023 19:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:01:35:51:15:a7:a1:9b:6e:34:77:a0:21:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Validity
Not Before: Jan 1 19:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=122e1fd8266abc4095f440d73ce50c0eb24c4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:28:9e:f1:d7:75:79:7c:ee:b5:da:ee:33:
57:89:fb:9e:78:f8:2f:c3:bf:68:7f:38:e7:15:70:
46:da:07:c2:e0:0b:19:9a:17:4b:10:16:71:ee:c1:
97:2c:0f:25:a8:9d:57:ee:20:ee:6c:78:49:1a:f2:
85:73:03:c9:7a:94:d0:dc:31:7a:3a:f3:d0:03:4b:
50:bb:5c:79:c9:93:e4:09:b8:f1:2c:9e:4d:52:8b:
75:71:20:0a:5b:db:82:ed:d2:8d:61:8f:88:cb:02:
b8:59:f8:23:66:01:a3:a0:5f:12:e9:a3:3b:d9:8d:
c6:26:14:79:fa:30:ab:34:70:de:e2:16:99:a7:d0:
13:8c:39:35:07:57:43:e0:b8:9a:59:be:20:0b:69:
fe:57:c8:52:63:c6:24:8e:67:cf:e0:58:69:0b:dc:
38:3a:28:ba:00:ae:92:49:b1:6d:de:55:be:aa:78:
d8:a1:95:ce:c1:16:30:19:f6:12:cb:c2:04:73:ee:
32:5c:ab:4c:55:a1:8d:ae:f5:74:4c:7b:1e:56:29:
d5:a1:03:1a:af:6e:04:ab:0d:5e:f7:90:ea:21:df:
dc:d7:b6:c2:f2:8f:c5:f3:c0:d1:6d:f7:21:ef:87:
de:a2:c5:7c:88:e4:96:9a:60:e4:1e:79:98:63:28:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:1F:D8:26:6A:BC:40:95:F4:40:D7:3C:E5:0C:0E:B2:4C:4E:6C
X509v3 Authority Key Identifier:
keyid:E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/Ei4f2CZqvECV9EDXPOUMDrJMTmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:44:0b:b2:5a:fc:ba:66:8b:2c:07:2b:8f:8b:85:41:55:df:
53:05:c6:3a:26:75:d8:de:ca:d5:e7:0a:7f:2a:87:fb:20:64:
06:5c:75:cb:f9:65:fe:26:6d:00:d0:b8:ed:75:12:db:8b:38:
04:c1:a1:77:f0:30:d9:df:4d:73:30:93:dd:b0:7c:03:f3:22:
91:4f:8f:f9:67:d3:a7:69:0e:4a:61:07:14:e1:d9:b9:40:fa:
41:58:fd:c3:f5:2c:d7:0f:b7:63:41:9e:52:9a:5f:38:19:a0:
91:89:64:5b:ae:14:95:97:2e:71:b3:25:67:51:0e:15:a2:1e:
fc:60:54:00:3d:86:63:17:84:ef:f5:54:e5:0e:c3:78:81:de:
c5:54:18:32:c5:51:b2:c0:71:df:8a:a7:2a:b4:32:84:71:27:
9a:b9:2c:6c:5a:cc:fd:35:ac:b2:d8:f9:0e:7a:ab:80:65:8e:
41:5e:b8:b1:e0:89:7d:a7:1b:4d:db:82:2a:b2:60:ac:c7:3c:
3b:2f:b5:a9:72:2d:c2:ca:19:d1:9e:6f:2a:9c:1e:62:08:ce:
a6:57:50:ec:1c:5f:2f:7d:17:b8:1a:86:8a:72:86:c5:51:4f:
9c:23:3f:14:04:ec:15:34:6b:e5:61:b2:d6:73:ea:39:ef:cf:
30:33:0a:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwgE1URWnoZtuNHegITZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YmE0NmMxNDJhYmJhNzhmZTE5MjU3YTg3NGFhMzNhMDg4
NGQ2OWEwHhcNMjMwMTAxMTkxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjJlMWZkODI2NmFiYzQwOTVmNDQwZDczY2U1MGMwZWIyNGM0ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCEonvHXdXl87rXa7jNXifueePgv
w79ofzjnFXBG2gfC4AsZmhdLEBZx7sGXLA8lqJ1X7iDubHhJGvKFcwPJepTQ3DF6
OvPQA0tQu1x5yZPkCbjxLJ5NUot1cSAKW9uC7dKNYY+IywK4WfgjZgGjoF8S6aM7
2Y3GJhR5+jCrNHDe4haZp9ATjDk1B1dD4LiaWb4gC2n+V8hSY8YkjmfP4FhpC9w4
Oii6AK6SSbFt3lW+qnjYoZXOwRYwGfYSy8IEc+4yXKtMVaGNrvV0THseVinVoQMa
r24Eqw1e95DqId/c17bC8o/F88DRbfch74feosV8iOSWmmDkHnmYYyjLTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIuH9gmarxAlfRA1zzlDA6yTE5sMB8GA1UdIwQY
MBaAFOa6RsFCq7p4/hkleodKozoIhNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJwR3dVS3J1bmotR1NWNmgwcWpPZ2lFMXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yM2IxYzYtNGFkZC00YjYyLTgwZjMt
M2Q0YzZiNjRmOTg2LzEvRWk0ZjJDWnF2RUNWOUVEWFBPVU1EckpNVG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yM2IxYzYtNGFkZC00YjYyLTgwZjMtM2Q0YzZiNjRmOTg2
LzEvNXJwR3dVS3J1bmotR1NWNmgwcWpPZ2lFMXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2VMA0G
CSqGSIb3DQEBCwUAA4IBAQBbRAuyWvy6ZossByuPi4VBVd9TBcY6JnXY3srV5wp/
Kof7IGQGXHXL+WX+Jm0A0LjtdRLbizgEwaF38DDZ301zMJPdsHwD8yKRT4/5Z9On
aQ5KYQcU4dm5QPpBWP3D9SzXD7djQZ5Sml84GaCRiWRbrhSVly5xsyVnUQ4Voh78
YFQAPYZjF4Tv9VTlDsN4gd7FVBgyxVGywHHfiqcqtDKEcSeauSxsWsz9Nayy2PkO
equAZY5BXrix4Il9pxtN24IqsmCsxzw7L7Wpci3CyhnRnm8qnB5iCM6mV1DsHF8v
fRe4GoaKcobFUU+cIz8UBOwVNGvlYbLWc+o5788wMwoH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org