Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/l5-9Qw1SQEmhIT7493AQKScd-5M.roa
File: l5-9Qw1SQEmhIT7493AQKScd-5M.roa (raw, json)
Hash identifier: B5/Prt5EtMqGi3EqL+qTvJVFwHRuRPz+pfyVgXxO/to=
Subject key identifier: 97:9F:BD:43:0D:52:40:49:A1:21:3E:F8:F7:70:10:29:27:1D:FB:93
Certificate issuer: /CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Certificate serial: 05BA1333
Authority key identifier: C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/l5-9Qw1SQEmhIT7493AQKScd-5M.roa
Signing time: Wed 18 May 2022 14:48:17 +0000
ROA not before: Wed 18 May 2022 14:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207579
IP address blocks: 185.210.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96080691 (0x5ba1333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Validity
Not Before: May 18 14:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=979fbd430d524049a1213ef8f7701029271dfb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:d0:4d:56:ff:9f:a2:4f:9e:8c:0b:1e:4f:
67:e2:81:c7:24:d4:11:20:c5:7e:4e:ae:36:0d:0a:
78:33:c1:8f:7d:b7:03:bc:73:93:71:b8:20:3e:8b:
42:26:a8:20:65:c4:b0:53:e5:db:41:98:2e:f1:d4:
31:ed:04:8c:10:2c:43:e6:2a:ea:bd:39:2a:ca:fa:
14:12:c2:bd:26:5b:16:cb:27:8f:a7:c8:da:2a:12:
22:95:92:1c:84:2f:41:b9:53:8f:23:ae:00:0d:3a:
80:f1:60:c3:bf:34:8d:44:4e:bc:7a:c7:f7:85:22:
5d:00:7a:16:70:f6:e3:e7:e9:57:a7:f5:d9:fd:8f:
e8:2a:ff:4f:5b:0e:34:8c:71:64:85:bb:0a:d3:04:
90:30:42:c8:fd:3c:25:5d:06:41:69:32:84:ec:aa:
98:96:89:50:cb:0f:f2:3a:f1:d4:18:50:ca:bc:93:
5e:f2:bd:a0:a9:60:b4:51:e7:0e:66:1f:97:9c:85:
50:98:25:b9:04:83:ff:38:2c:a0:6d:f6:ce:0b:f2:
5b:d2:e2:81:54:59:5d:e2:d5:dd:13:06:16:d0:4c:
aa:32:26:ee:6e:2c:5c:61:25:fa:b1:33:ed:f3:43:
d3:22:85:9b:71:14:e6:56:1e:c2:c2:2e:e6:db:36:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:BD:43:0D:52:40:49:A1:21:3E:F8:F7:70:10:29:27:1D:FB:93
X509v3 Authority Key Identifier:
keyid:C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/l5-9Qw1SQEmhIT7493AQKScd-5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.194.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ed:eb:26:dd:23:f1:c8:ed:5d:6e:4f:0e:86:48:7f:91:e7:
b3:d1:bc:b5:13:50:e4:e7:45:63:52:f0:1e:b3:b6:0a:e6:08:
44:c5:21:78:c8:b4:a2:2c:82:a8:11:81:7a:02:60:73:f7:79:
f3:c3:83:5a:4f:40:81:3c:54:95:28:b5:57:4a:37:85:5b:02:
c8:c4:a4:bd:0d:fc:67:54:10:64:26:61:98:8f:a6:02:24:86:
2c:6b:b9:3c:f6:99:50:92:f8:fa:12:b6:57:11:4b:19:76:c3:
2e:75:75:cb:94:58:3e:99:30:f6:c2:17:ca:0c:62:f6:21:52:
5a:ae:57:0c:cc:4d:dd:b3:4b:a1:16:07:5c:50:67:87:58:fb:
98:fb:54:fa:19:c5:78:52:87:a0:3e:99:41:59:e0:50:5b:70:
45:90:0b:cb:86:5f:8f:42:aa:57:1d:13:1e:73:17:52:e4:a7:
e1:4f:2e:c9:28:c9:1b:04:ac:15:f7:ad:5f:40:85:82:32:bc:
c3:64:7c:ae:b1:0c:1f:e5:5f:76:51:8f:4e:7a:25:d0:5d:c4:
c1:33:48:f0:14:73:2a:ae:d3:bb:83:0a:e1:e0:84:56:2f:f3:
c6:f6:b0:0e:84:4d:1f:1b:c8:9f:21:71:fa:87:02:56:b9:8f:
1a:d8:13:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBboTMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWRlODdjMTNjYTFkMWJmYmYwOTY3NmM5MDIxZDBiMjM4NmE5OGY1MB4XDTIyMDUx
ODE0NDgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTc5ZmJkNDMwZDUy
NDA0OWExMjEzZWY4Zjc3MDEwMjkyNzFkZmI5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXK0E1W/5+iT56MCx5PZ+KBxyTUESDFfk6uNg0KeDPBj323
A7xzk3G4ID6LQiaoIGXEsFPl20GYLvHUMe0EjBAsQ+Yq6r05Ksr6FBLCvSZbFssn
j6fI2ioSIpWSHIQvQblTjyOuAA06gPFgw780jUROvHrH94UiXQB6FnD24+fpV6f1
2f2P6Cr/T1sONIxxZIW7CtMEkDBCyP08JV0GQWkyhOyqmJaJUMsP8jrx1BhQyryT
XvK9oKlgtFHnDmYfl5yFUJgluQSD/zgsoG32zgvyW9LigVRZXeLV3RMGFtBMqjIm
7m4sXGEl+rEz7fND0yKFm3EU5lYewsIu5ts21BMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSXn71DDVJASaEhPvj3cBApJx37kzAfBgNVHSMEGDAWgBTJ3ofBPKHRv78J
Z2yQIdCyOGqY9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkNkh3VHloMGItX0NXZHNrQ0hRc2pocW1QVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvZTJkMDAzLTJhMGItNGJhZC04NGM5LWY5NzZiMTQwMGIwYi8x
L2w1LTlRdzFTUUVtaElUNzQ5M0FRS1NjZC01TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
ZTJkMDAzLTJhMGItNGJhZC04NGM5LWY5NzZiMTQwMGIwYi8xL3lkNkh3VHloMGIt
X0NXZHNrQ0hRc2pocW1QVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnSwjANBgkqhkiG9w0BAQsFAAOC
AQEAQe3rJt0j8cjtXW5PDoZIf5Hns9G8tRNQ5OdFY1LwHrO2CuYIRMUheMi0oiyC
qBGBegJgc/d588ODWk9AgTxUlSi1V0o3hVsCyMSkvQ38Z1QQZCZhmI+mAiSGLGu5
PPaZUJL4+hK2VxFLGXbDLnV1y5RYPpkw9sIXygxi9iFSWq5XDMxN3bNLoRYHXFBn
h1j7mPtU+hnFeFKHoD6ZQVngUFtwRZALy4Zfj0KqVx0THnMXUuSn4U8uySjJGwSs
FfetX0CFgjK8w2R8rrEMH+VfdlGPTnol0F3EwTNI8BRzKq7Tu4MK4eCEVi/zxvaw
DoRNHxvInyFx+ocCVrmPGtgT/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:45 2024 by rpki-client on console-fra.rpki-client.org