Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/opihOanGEPxjcBOTUsmL4r9xcUI.roa
File: opihOanGEPxjcBOTUsmL4r9xcUI.roa (raw, json)
Hash identifier: Vgz9v//HpoWAsTp3RJhr98IaJXHjD35VM+59RpfRD9M=
Subject key identifier: A2:98:A1:39:A9:C6:10:FC:63:70:13:93:52:C9:8B:E2:BF:71:71:42
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 10C978
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/opihOanGEPxjcBOTUsmL4r9xcUI.roa
Signing time: Tue 15 Feb 2022 09:04:53 +0000
ROA not before: Tue 15 Feb 2022 09:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100152 (0x10c978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Feb 15 09:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a298a139a9c610fc6370139352c98be2bf717142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:7b:e9:3a:69:d9:67:5c:37:ea:11:8d:68:
51:66:9f:52:8b:47:eb:0b:c1:ec:5f:08:01:67:f1:
29:89:be:c7:99:d8:db:1f:a1:7a:2c:05:1a:fb:ee:
44:ee:fd:8a:e5:6c:a1:4d:b4:06:30:a4:0d:23:be:
7a:94:70:1e:4f:e3:67:8d:a2:3c:df:74:5f:30:28:
ee:bb:f6:c9:86:89:70:1e:f8:e4:93:74:42:c3:81:
34:28:83:4d:a2:b4:f5:ce:e8:16:c4:82:c0:cd:35:
0d:50:2a:a6:45:11:12:1c:3f:b8:62:56:80:a5:dc:
b1:9e:cb:59:af:ef:de:c4:32:a4:ea:ac:06:b1:fa:
dd:6b:6e:6c:b7:65:d9:c1:80:93:6f:a8:56:05:8d:
3e:a8:5b:ee:8a:98:5e:e6:56:2c:99:47:1a:42:5d:
7f:1f:fe:2c:41:62:c0:50:81:de:52:71:06:6d:8c:
b5:be:46:f2:9e:27:30:b8:69:e6:37:ea:30:cd:c9:
b5:fc:ec:fe:43:f1:16:19:37:30:b5:c2:04:1e:77:
ec:99:38:f6:33:61:d1:d9:0e:81:53:d6:3a:9b:c5:
93:f2:38:36:f1:41:6a:ce:a7:ef:a4:bd:5a:ba:a8:
19:fc:9e:b6:e8:05:2b:87:45:2f:56:e2:e9:67:47:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:A1:39:A9:C6:10:FC:63:70:13:93:52:C9:8B:E2:BF:71:71:42
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/opihOanGEPxjcBOTUsmL4r9xcUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:eb:9a:41:c2:41:98:64:ae:2d:ab:92:5c:6c:75:b6:2f:7a:
db:34:6a:50:d5:ec:21:c6:f5:d8:a7:e2:ae:33:e0:8f:01:ce:
96:5b:72:c7:9b:bf:f1:2e:46:f5:d3:3f:c7:f5:09:e1:d2:2d:
cd:31:bd:28:31:10:29:3c:74:1d:bb:d2:9a:df:b5:3b:64:4b:
da:79:50:d8:f5:f2:2d:9d:72:3a:f5:ac:37:31:23:e7:08:43:
1f:b4:83:d9:8c:2d:e1:f3:f5:e5:0d:b0:44:7c:b0:a9:c7:c7:
f6:cb:45:df:21:9e:53:5c:3b:61:93:11:a0:68:e3:8c:22:61:
cc:e0:62:72:c8:87:ec:61:1f:c2:99:e0:69:f7:69:7c:11:79:
d1:92:ff:5d:76:f1:4a:67:6d:38:25:da:73:92:26:ac:4c:06:
46:b3:c3:05:61:b2:8f:58:38:a8:b3:2a:b1:67:7d:d2:f9:b5:
4e:e2:0a:f4:0b:b7:2c:de:f8:94:1c:69:5e:c7:8b:d1:9a:a0:
e2:7c:1b:ef:3d:0e:25:3d:3a:fe:13:73:94:8f:9c:f4:58:2e:
24:a6:60:b3:8d:e2:d5:31:7f:4f:ea:d9:24:cc:d6:b8:d7:db:
e1:74:56:82:d0:f3:b6:7d:91:d6:eb:4a:10:48:24:b8:81:f5:
9c:e9:1a:26
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEMl4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
YmMwYzA2MzNjYmVmMmU5N2ZjZWFjNzk3NjMzZDQ5MTJmNzZmOTYwHhcNMjIwMjE1
MDkwNDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMjk4YTEzOWE5YzYx
MGZjNjM3MDEzOTM1MmM5OGJlMmJmNzE3MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvRF76Tpp2WdcN+oRjWhRZp9Si0frC8HsXwgBZ/Epib7Hmdjb
H6F6LAUa++5E7v2K5WyhTbQGMKQNI756lHAeT+NnjaI833RfMCjuu/bJholwHvjk
k3RCw4E0KINNorT1zugWxILAzTUNUCqmRRESHD+4YlaApdyxnstZr+/exDKk6qwG
sfrda25st2XZwYCTb6hWBY0+qFvuiphe5lYsmUcaQl1/H/4sQWLAUIHeUnEGbYy1
vkbynicwuGnmN+owzcm1/Oz+Q/EWGTcwtcIEHnfsmTj2M2HR2Q6BU9Y6m8WT8jg2
8UFqzqfvpL1auqgZ/J626AUrh0UvVuLpZ0fxjwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKKYoTmpxhD8Y3ATk1LJi+K/cXFCMB8GA1UdIwQYMBaAFE28DAYzy+8ul/zq
x5djPUkS92+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQtNTNlNDEwODI1Njc2LzEv
b3BpaE9hbkdFUHhqY0JPVFVzbUw0cjl4Y1VJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9i
NGI1MDktNGEwNi00YmM0LTkzODQtNTNlNDEwODI1Njc2LzEvVGJ3TUJqUEw3eTZY
X09ySGwyTTlTUkwzYjVZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ca7MA0GCSqGSIb3DQEBCwUAA4IB
AQAO65pBwkGYZK4tq5JcbHW2L3rbNGpQ1ewhxvXYp+KuM+CPAc6WW3LHm7/xLkb1
0z/H9Qnh0i3NMb0oMRApPHQdu9Ka37U7ZEvaeVDY9fItnXI69aw3MSPnCEMftIPZ
jC3h8/XlDbBEfLCpx8f2y0XfIZ5TXDthkxGgaOOMImHM4GJyyIfsYR/CmeBp92l8
EXnRkv9ddvFKZ204JdpzkiasTAZGs8MFYbKPWDiosyqxZ33S+bVO4gr0C7cs3viU
HGlex4vRmqDifBvvPQ4lPTr+E3OUj5z0WC4kpmCzjeLVMX9P6tkkzNa419vhdFaC
0PO2fZHW60oQSCS4gfWc6Rom
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org