Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/iTYUkW4DsUBDZL8zRSMA-BXYefM.roa
File: iTYUkW4DsUBDZL8zRSMA-BXYefM.roa (raw, json)
Hash identifier: KvzbDiF7rTk9xoj9U3M74s7PS1igLePcDvNNHf+7Y4s=
Subject key identifier: 89:36:14:91:6E:03:B1:40:43:64:BF:33:45:23:00:F8:15:D8:79:F3
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018570D5100B97BB802621619B020CB59A8B
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/iTYUkW4DsUBDZL8zRSMA-BXYefM.roa
Signing time: Mon 02 Jan 2023 04:54:49 +0000
ROA not before: Mon 02 Jan 2023 04:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:10:0b:97:bb:80:26:21:61:9b:02:0c:b5:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Jan 2 04:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=893614916e03b1404364bf33452300f815d879f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:eb:9d:04:9e:62:50:99:aa:78:5e:29:61:
ed:a6:b1:39:f4:0f:4d:1f:8f:08:b8:56:bb:f0:f9:
3d:10:32:3a:de:23:01:af:3e:b1:20:fe:13:9d:9d:
b8:73:e6:12:e5:66:42:ff:a6:c3:37:97:e3:e0:9d:
05:e5:1e:d1:a0:42:8b:8a:f0:2e:c1:95:33:09:23:
a9:10:86:55:6d:ed:5a:d3:95:58:0e:a9:55:a3:9e:
88:c0:d8:0b:b0:33:e6:25:5c:a8:6c:14:eb:da:6a:
76:3a:49:9e:6f:ba:57:91:dc:2c:66:63:18:ba:cb:
bf:73:49:93:90:f9:a9:9b:89:54:2b:68:37:03:81:
a0:40:4d:a1:1f:bf:5a:09:98:9f:16:56:d0:09:0a:
75:29:09:70:2c:dd:cc:68:f6:2a:ff:81:3e:15:e4:
b5:52:25:38:63:eb:0e:4b:21:78:38:e2:e6:2f:14:
6e:5a:56:4a:18:97:4e:ee:eb:ce:28:e5:06:d0:2c:
ee:e9:6b:af:ed:13:c6:78:15:cb:18:04:60:7f:89:
9f:b9:e6:04:46:91:56:72:4b:e8:95:a9:d3:54:2c:
ce:91:66:cc:97:b0:9b:70:60:ee:83:37:8f:c2:93:
07:36:e6:a4:a7:d2:99:83:16:50:e3:cf:ed:3d:4c:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:14:91:6E:03:B1:40:43:64:BF:33:45:23:00:F8:15:D8:79:F3
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/iTYUkW4DsUBDZL8zRSMA-BXYefM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
24:21:80:50:fc:cc:98:83:de:33:5e:d7:5e:a5:13:54:c4:89:
2a:46:6c:fa:0c:47:ba:d5:4c:38:75:49:0a:14:06:b9:a3:b7:
86:1f:13:df:50:55:71:00:fc:41:4d:80:1a:34:46:76:a9:dd:
75:46:fe:f0:ca:af:7e:a6:3b:1a:4c:49:1f:78:a4:a6:57:ec:
e2:54:03:de:03:cf:9d:cb:2b:b9:a1:34:49:10:0f:02:f5:70:
0b:1b:01:57:19:8b:5e:dd:9e:26:5d:72:05:7a:38:76:a0:c1:
e8:96:8c:cd:61:a2:67:ea:d0:f9:c5:df:18:3b:aa:c0:51:f7:
c9:ae:07:fb:98:22:33:69:4d:f5:64:e1:57:ce:76:02:28:c1:
30:56:25:fa:91:09:5a:cb:3a:9f:c3:f0:e0:b1:d0:4c:bd:9b:
e2:38:ae:db:1a:a1:b3:38:d6:08:7b:e6:11:0e:7d:44:67:89:
df:ce:69:b8:ee:01:44:6a:e0:0d:95:1a:31:c2:69:b4:a3:b3:
5b:9e:66:f0:64:d2:92:3c:b1:14:cc:bc:e1:5d:5b:e4:f8:bd:
67:94:41:6a:31:99:80:f0:64:1e:d1:d3:62:a3:03:e8:8c:87:
8b:b2:a6:30:56:12:26:ea:7c:7c:12:d4:f1:5d:c8:9d:9a:4a:
30:71:2f:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1RALl7uAJiFhmwIMtZqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmMwYzA2MzNjYmVmMmU5N2ZjZWFjNzk3NjMzZDQ5MTJm
NzZmOTYwHhcNMjMwMTAyMDQ1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTM2MTQ5MTZlMDNiMTQwNDM2NGJmMzM0NTIzMDBmODE1ZDg3OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1PrnQSeYlCZqnheKWHtprE59A9N
H48IuFa78Pk9EDI63iMBrz6xIP4TnZ24c+YS5WZC/6bDN5fj4J0F5R7RoEKLivAu
wZUzCSOpEIZVbe1a05VYDqlVo56IwNgLsDPmJVyobBTr2mp2Okmeb7pXkdwsZmMY
usu/c0mTkPmpm4lUK2g3A4GgQE2hH79aCZifFlbQCQp1KQlwLN3MaPYq/4E+FeS1
UiU4Y+sOSyF4OOLmLxRuWlZKGJdO7uvOKOUG0Czu6Wuv7RPGeBXLGARgf4mfueYE
RpFWckvolanTVCzOkWbMl7CbcGDugzePwpMHNuakp9KZgxZQ48/tPUwSNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIk2FJFuA7FAQ2S/M0UjAPgV2HnzMB8GA1UdIwQY
MBaAFE28DAYzy+8ul/zqx5djPUkS92+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQt
NTNlNDEwODI1Njc2LzEvaVRZVWtXNERzVUJEWkw4elJTTUEtQlhZZWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQtNTNlNDEwODI1Njc2
LzEvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfZmMA0G
CSqGSIb3DQEBCwUAA4IBAQAkIYBQ/MyYg94zXtdepRNUxIkqRmz6DEe61Uw4dUkK
FAa5o7eGHxPfUFVxAPxBTYAaNEZ2qd11Rv7wyq9+pjsaTEkfeKSmV+ziVAPeA8+d
yyu5oTRJEA8C9XALGwFXGYte3Z4mXXIFejh2oMHolozNYaJn6tD5xd8YO6rAUffJ
rgf7mCIzaU31ZOFXznYCKMEwViX6kQlayzqfw/DgsdBMvZviOK7bGqGzONYIe+YR
Dn1EZ4nfzmm47gFEauANlRoxwmm0o7NbnmbwZNKSPLEUzLzhXVvk+L1nlEFqMZmA
8GQe0dNiowPojIeLsqYwVhIm6nx8EtTxXcidmkowcS+C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org