Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/4PDPXZj4IxARfmKIXQehnXDsLrg.roa
File: 4PDPXZj4IxARfmKIXQehnXDsLrg.roa (raw, json)
Hash identifier: xOBd+flBvNnlFayEIUQb4Be6HjrlP+xuWFMjqqQbHVQ=
Subject key identifier: E0:F0:CF:5D:98:F8:23:10:11:7E:62:88:5D:07:A1:9D:70:EC:2E:B8
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018627376FC6B41B7B2E9678BDC052358DE4
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/4PDPXZj4IxARfmKIXQehnXDsLrg.roa
Signing time: Mon 06 Feb 2023 14:53:09 +0000
ROA not before: Mon 06 Feb 2023 14:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 193.246.4.0/24 maxlen: 24
193.246.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:37:6f:c6:b4:1b:7b:2e:96:78:bd:c0:52:35:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Feb 6 14:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f0cf5d98f82310117e62885d07a19d70ec2eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:19:c5:2b:2a:5e:2f:54:48:d6:75:08:f7:
6a:1c:31:50:10:13:9f:0f:50:6b:5f:f5:10:2b:43:
dc:a2:a2:1e:00:54:45:0e:1d:99:9c:81:c9:60:2b:
7e:d5:56:ba:cd:5d:43:e4:37:7c:96:2e:8e:e0:a6:
f3:71:01:1a:99:ea:53:67:0d:90:ac:9b:34:38:be:
a2:24:24:4a:ea:f0:19:95:8a:5a:40:a8:05:f9:1e:
55:99:93:53:76:33:dd:39:ce:e3:07:62:2e:95:d5:
e0:1b:26:8b:e5:6b:90:4e:c1:59:9c:34:48:55:5e:
6f:47:1b:74:51:6d:eb:64:0e:f1:b8:98:ba:f6:58:
9b:08:e7:69:0a:fb:27:a4:ae:05:db:4c:a3:40:b5:
94:aa:42:40:5a:18:87:9c:ba:5b:a3:34:94:0d:a0:
1b:17:c8:67:2f:b6:a8:cd:79:ce:e6:84:5c:d2:e3:
8d:b9:bb:6b:3a:80:cb:eb:fa:b4:0d:99:74:67:ed:
ee:b9:a9:c5:d8:8f:66:9f:f5:2a:b4:9c:b8:96:7c:
16:35:b8:92:a9:c2:89:69:6d:fa:dd:1e:f0:d6:ef:
ed:88:8f:58:d0:f3:f0:8a:fa:9b:dd:b8:d6:f1:69:
6b:06:48:33:ad:59:00:36:1d:f8:02:3f:d4:23:57:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:CF:5D:98:F8:23:10:11:7E:62:88:5D:07:A1:9D:70:EC:2E:B8
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/4PDPXZj4IxARfmKIXQehnXDsLrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:72:df:34:0b:34:8b:83:8e:5d:9b:ec:4d:82:1b:84:5c:1d:
74:a8:1a:68:df:21:1f:93:af:0c:c5:5a:be:0b:21:01:3f:c1:
6c:29:fb:12:6c:64:54:e7:89:c6:a3:ec:dc:f2:a7:84:41:f4:
5d:ee:4a:4e:fb:3a:02:ea:7f:bf:67:42:18:2b:87:03:e3:f6:
05:9a:c0:f4:56:35:d1:00:26:d4:e0:46:6e:a0:88:d0:df:e2:
c2:a7:31:8c:b1:aa:8a:a1:04:25:67:5c:b1:d9:a1:d3:52:39:
59:b2:52:8d:33:6b:23:85:de:ba:90:c7:41:5b:70:ab:ce:f6:
da:d4:16:3d:15:fa:ab:0a:02:95:5e:d8:c5:42:82:3f:0a:8b:
d2:06:d2:46:79:d0:ff:49:20:5b:6f:78:b5:4b:0d:b6:7e:d4:
8d:36:b1:7e:d0:16:51:78:b8:1a:4e:06:6a:d0:bb:72:6b:0e:
9a:f3:96:6c:fc:c1:03:ee:af:65:d0:dd:e4:93:a9:af:c7:7c:
d9:44:e8:e8:80:67:5c:6a:1c:07:b9:de:a4:4b:4f:17:b7:84:
0a:c3:5a:e7:82:0f:b3:a8:7c:23:84:e0:28:9f:59:9e:9f:64:
39:79:ff:f7:42:95:bf:b4:f7:c8:c0:17:2f:5a:38:86:c7:f7:
42:b2:be:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYnN2/GtBt7LpZ4vcBSNY3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmMwYzA2MzNjYmVmMmU5N2ZjZWFjNzk3NjMzZDQ5MTJm
NzZmOTYwHhcNMjMwMjA2MTQ1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYwY2Y1ZDk4ZjgyMzEwMTE3ZTYyODg1ZDA3YTE5ZDcwZWMyZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoIZxSsqXi9USNZ1CPdqHDFQEBOf
D1BrX/UQK0PcoqIeAFRFDh2ZnIHJYCt+1Va6zV1D5Dd8li6O4KbzcQEamepTZw2Q
rJs0OL6iJCRK6vAZlYpaQKgF+R5VmZNTdjPdOc7jB2IuldXgGyaL5WuQTsFZnDRI
VV5vRxt0UW3rZA7xuJi69libCOdpCvsnpK4F20yjQLWUqkJAWhiHnLpbozSUDaAb
F8hnL7aozXnO5oRc0uONubtrOoDL6/q0DZl0Z+3uuanF2I9mn/UqtJy4lnwWNbiS
qcKJaW363R7w1u/tiI9Y0PPwivqb3bjW8WlrBkgzrVkANh34Aj/UI1cVAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODwz12Y+CMQEX5iiF0HoZ1w7C64MB8GA1UdIwQY
MBaAFE28DAYzy+8ul/zqx5djPUkS92+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQt
NTNlNDEwODI1Njc2LzEvNFBEUFhaajRJeEFSZm1LSVhRZWhuWERzTHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQtNTNlNDEwODI1Njc2
LzEvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfYEMA0G
CSqGSIb3DQEBCwUAA4IBAQAsct80CzSLg45dm+xNghuEXB10qBpo3yEfk68MxVq+
CyEBP8FsKfsSbGRU54nGo+zc8qeEQfRd7kpO+zoC6n+/Z0IYK4cD4/YFmsD0VjXR
ACbU4EZuoIjQ3+LCpzGMsaqKoQQlZ1yx2aHTUjlZslKNM2sjhd66kMdBW3Crzvba
1BY9FfqrCgKVXtjFQoI/CovSBtJGedD/SSBbb3i1Sw22ftSNNrF+0BZReLgaTgZq
0Ltyaw6a85Zs/MED7q9l0N3kk6mvx3zZROjogGdcahwHud6kS08Xt4QKw1rngg+z
qHwjhOAon1men2Q5ef/3QpW/tPfIwBcvWjiGx/dCsr5K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org