Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/9C219U86AqDpvk0WVf_Lhr74nTQ.roa
File: 9C219U86AqDpvk0WVf_Lhr74nTQ.roa (raw, json)
Hash identifier: LUl2aApyyBXZ+njcgvlZBIhGr0bDzYIoC2KhQkMwqI4=
Subject key identifier: F4:2D:B5:F5:4F:3A:02:A0:E9:BE:4D:16:55:FF:CB:86:BE:F8:9D:34
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: D6CA45
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/9C219U86AqDpvk0WVf_Lhr74nTQ.roa
Signing time: Mon 25 Apr 2022 17:51:01 +0000
ROA not before: Mon 25 Apr 2022 17:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14076485 (0xd6ca45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Apr 25 17:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f42db5f54f3a02a0e9be4d1655ffcb86bef89d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:e6:01:68:bc:5f:8c:ea:02:f6:75:79:d0:
ac:5d:a0:4c:e5:d4:2b:13:5b:21:0e:4c:71:d7:2a:
97:dd:ca:e1:b4:09:58:ab:05:3e:b8:62:8a:ff:82:
c3:58:17:24:62:a1:e3:6f:eb:5e:ea:e0:9b:04:a2:
e8:43:24:98:e0:01:f6:8c:a8:f4:50:22:c3:50:55:
45:c9:2d:99:6b:7c:33:90:72:ae:34:37:99:5a:83:
ef:9b:a4:72:84:19:2e:29:f9:aa:52:65:2a:85:39:
76:8b:3d:45:86:3b:2d:8d:d0:34:98:7e:3d:30:08:
db:72:fb:e3:87:0e:24:4b:7a:63:76:4d:07:b3:e3:
7b:b5:1b:9e:14:be:10:5d:ca:9e:32:a5:3c:1a:38:
03:d5:a6:5c:6b:f5:30:2f:30:3e:cd:dd:bf:84:87:
66:89:a7:cb:9b:e0:ca:c1:ff:c8:06:89:f9:80:17:
02:d7:6d:9b:b1:48:a1:4b:2f:5b:d7:fa:26:51:aa:
c0:e8:6c:ad:31:c2:dc:03:50:c8:b5:79:88:d0:45:
b7:4e:86:05:3c:91:2a:3e:8d:43:08:a7:f2:a6:8e:
54:94:c7:8d:79:93:e9:7f:2b:30:7e:fe:cc:14:90:
2a:9f:f7:98:ef:18:a4:cb:6c:68:7b:b9:98:ea:23:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:B5:F5:4F:3A:02:A0:E9:BE:4D:16:55:FF:CB:86:BE:F8:9D:34
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/9C219U86AqDpvk0WVf_Lhr74nTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:01:94:0c:8b:7c:d4:76:49:f1:56:3f:fa:ce:f8:b3:33:00:
b3:71:7e:7f:55:f3:19:5f:b5:e6:20:84:36:d0:a0:b1:8d:75:
bc:aa:12:70:64:75:13:98:ba:2a:dd:d5:a4:c4:29:f3:5a:14:
c1:e7:1d:07:60:87:11:84:d5:39:b1:04:7a:61:1d:df:a6:a8:
b2:bb:a3:6b:88:fe:ba:a5:29:c9:67:bf:7b:36:d1:be:cf:74:
ef:ad:7c:d3:aa:49:eb:96:a4:2d:cc:be:1e:fd:83:39:fa:5a:
72:26:03:5c:90:03:2d:23:b0:f5:24:f6:f8:2c:bc:34:b7:22:
34:44:8f:26:aa:cf:66:61:7a:2e:b3:3c:0c:fd:e8:68:4d:aa:
99:23:a7:07:7a:fa:c6:2f:ce:14:e1:d1:1f:48:76:d7:71:93:
76:75:94:8d:ea:fa:09:59:a0:0f:de:c3:5d:b9:b8:e2:8c:7d:
03:f0:52:5f:ad:b1:2c:93:b9:da:b0:4a:57:30:83:82:99:1c:
a4:c6:cc:d4:d7:6e:21:a1:45:ff:40:15:df:16:b8:8a:30:27:
8c:99:f9:5a:79:6d:d9:82:af:8b:aa:54:27:08:21:57:4e:43:
a3:22:c5:b1:95:e2:bd:cc:44:28:b0:d7:64:13:30:cb:cc:ae:
b7:de:24:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANbKRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OWUyNzYwZDcwYTBkNmI3YTA0NzEzMGVkYmQ5OTZkMDQxZTlkMzAwMB4XDTIyMDQy
NTE3NTEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQyZGI1ZjU0ZjNh
MDJhMGU5YmU0ZDE2NTVmZmNiODZiZWY4OWQzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUk5gFovF+M6gL2dXnQrF2gTOXUKxNbIQ5Mcdcql93K4bQJ
WKsFPrhiiv+Cw1gXJGKh42/rXurgmwSi6EMkmOAB9oyo9FAiw1BVRcktmWt8M5By
rjQ3mVqD75ukcoQZLin5qlJlKoU5dos9RYY7LY3QNJh+PTAI23L744cOJEt6Y3ZN
B7Pje7UbnhS+EF3KnjKlPBo4A9WmXGv1MC8wPs3dv4SHZomny5vgysH/yAaJ+YAX
Atdtm7FIoUsvW9f6JlGqwOhsrTHC3ANQyLV5iNBFt06GBTyRKj6NQwin8qaOVJTH
jXmT6X8rMH7+zBSQKp/3mO8YpMtsaHu5mOojn6cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT0LbX1TzoCoOm+TRZV/8uGvvidNDAfBgNVHSMEGDAWgBTZ4nYNcKDWt6BH
Ew7b2ZbQQenTADAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJlSjJEWENnMXJlZ1J4TU8yOW1XMEVIcDB3QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNTUyNWFlLTQ0MDEtNDBhNi05MDU5LWM2MzA1MDI1NzA2Ni8x
LzlDMjE5VTg2QXFEcHZrMFdWZl9MaHI3NG5UUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
NTUyNWFlLTQ0MDEtNDBhNi05MDU5LWM2MzA1MDI1NzA2Ni8xLzJlSjJEWENnMXJl
Z1J4TU8yOW1XMEVIcDB3QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm7EzANBgkqhkiG9w0BAQsFAAOC
AQEADwGUDIt81HZJ8VY/+s74szMAs3F+f1XzGV+15iCENtCgsY11vKoScGR1E5i6
Kt3VpMQp81oUwecdB2CHEYTVObEEemEd36aosruja4j+uqUpyWe/ezbRvs907618
06pJ65akLcy+Hv2DOfpaciYDXJADLSOw9ST2+Cy8NLciNESPJqrPZmF6LrM8DP3o
aE2qmSOnB3r6xi/OFOHRH0h213GTdnWUjer6CVmgD97DXbm44ox9A/BSX62xLJO5
2rBKVzCDgpkcpMbM1NduIaFF/0AV3xa4ijAnjJn5Wnlt2YKvi6pUJwghV05DoyLF
sZXivcxEKLDXZBMwy8yut94khQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:20 2024 by rpki-client on console-fra.rpki-client.org