Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1qJINAfRQkZowMbeezub-dmmVm0.roa
File: 1qJINAfRQkZowMbeezub-dmmVm0.roa (raw, json)
Hash identifier: HS91k4ZoWzHpKO0liRqxNenQucHTisgLQosOcXm46rc=
Subject key identifier: D6:A2:48:34:07:D1:42:46:68:C0:C6:DE:7B:3B:9B:F9:D9:A6:56:6D
Certificate issuer: /CN=d71ee53337a1d05baa47e009cb5ba9f2c4570144
Certificate serial: 018CCA2BC0C6B0F2B65C264D3EF12F15542D
Authority key identifier: D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1qJINAfRQkZowMbeezub-dmmVm0.roa
Signing time: Tue 02 Jan 2024 12:35:14 +0000
ROA not before: Tue 02 Jan 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.211.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c0:c6:b0:f2:b6:5c:26:4d:3e:f1:2f:15:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71ee53337a1d05baa47e009cb5ba9f2c4570144
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a2483407d1424668c0c6de7b3b9bf9d9a6566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:15:bc:c3:dd:34:3c:88:67:31:97:da:b1:
c6:99:b9:99:5e:66:86:f2:ac:ff:7b:08:de:b4:a8:
b9:2a:6d:5c:c3:7c:83:b8:c0:03:66:62:67:f4:fc:
fb:af:0e:d6:02:d0:1e:c9:8e:60:0c:5b:aa:b2:0b:
5e:80:95:68:42:78:8d:21:5c:aa:74:c2:8b:2d:7b:
7c:48:f9:dd:2f:8b:0b:57:f5:f5:43:64:16:a5:1d:
57:09:ac:1a:bb:3f:39:fa:4b:23:7d:a9:04:80:8b:
b1:ed:16:ce:36:e6:0f:e2:43:e2:bb:e7:46:c5:7b:
2e:b7:1a:f5:68:b6:95:0a:f2:00:a3:79:db:a5:aa:
de:64:bb:0d:eb:fa:a4:c7:f3:89:bf:77:6c:c4:0a:
81:10:85:16:88:4b:02:68:db:20:20:1f:67:6a:f0:
9d:ad:10:49:b4:06:23:cd:fe:85:3e:fd:e3:10:8a:
26:06:f0:f8:99:a5:98:2e:6e:87:53:19:17:2d:7f:
f5:6f:59:ef:ff:43:31:7b:b4:11:5b:ea:19:5b:0a:
8e:de:3e:28:e1:fe:44:8a:55:d6:98:0a:70:f7:0b:
61:c4:69:41:03:86:7d:44:a7:87:33:58:af:dd:a8:
06:8a:a4:09:0f:1a:72:ad:45:60:cd:22:9c:d0:2e:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:48:34:07:D1:42:46:68:C0:C6:DE:7B:3B:9B:F9:D9:A6:56:6D
X509v3 Authority Key Identifier:
keyid:D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1qJINAfRQkZowMbeezub-dmmVm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.168.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dc:83:27:5d:cd:e5:2c:fa:1a:2e:c2:99:f6:be:32:2a:b5:
28:59:19:1e:0d:de:51:98:d6:3f:be:df:2b:c3:64:3f:c2:ec:
6f:7c:e7:44:c3:41:2b:0e:17:0b:38:0c:d9:9f:60:f7:4f:ef:
c2:ad:b0:1b:27:6c:9e:f9:4d:01:ad:53:92:f9:b9:65:e4:90:
8a:62:41:63:82:f1:e0:6d:02:25:47:e0:c3:77:6f:83:40:f3:
21:12:98:89:0d:d4:ed:7b:50:99:05:20:b3:04:15:4f:a2:00:
75:ed:3c:fa:26:42:08:1c:9d:cb:91:02:ee:58:c7:c2:53:2d:
44:b6:f3:c5:e8:a6:4f:31:8c:8d:54:85:ca:2a:e6:8f:96:ea:
8b:32:7e:ce:a2:92:29:27:25:9d:33:2d:79:5c:03:7f:75:e3:
f4:a3:c6:74:e4:3e:76:23:56:b3:ca:60:da:e9:a7:42:95:50:
23:5a:d6:2f:df:71:75:34:27:37:a6:5e:80:ff:68:a1:0f:43:
c4:f3:b7:ab:eb:27:0c:f1:49:22:11:47:8a:a7:15:44:4d:71:
d5:49:91:13:c8:f0:67:3d:ba:7c:36:22:55:53:fc:da:72:02:
a6:c6:13:98:29:7a:86:20:e0:55:99:cb:10:e7:83:5b:97:16:
9e:3a:a8:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK8DGsPK2XCZNPvEvFVQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MWVlNTMzMzdhMWQwNWJhYTQ3ZTAwOWNiNWJhOWYyYzQ1
NzAxNDQwHhcNMjQwMTAyMTIzNTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmEyNDgzNDA3ZDE0MjQ2NjhjMGM2ZGU3YjNiOWJmOWQ5YTY1NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40sVvMPdNDyIZzGX2rHGmbmZXmaG
8qz/ewjetKi5Km1cw3yDuMADZmJn9Pz7rw7WAtAeyY5gDFuqsgtegJVoQniNIVyq
dMKLLXt8SPndL4sLV/X1Q2QWpR1XCawauz85+ksjfakEgIux7RbONuYP4kPiu+dG
xXsutxr1aLaVCvIAo3nbpareZLsN6/qkx/OJv3dsxAqBEIUWiEsCaNsgIB9navCd
rRBJtAYjzf6FPv3jEIomBvD4maWYLm6HUxkXLX/1b1nv/0Mxe7QRW+oZWwqO3j4o
4f5EilXWmApw9wthxGlBA4Z9RKeHM1iv3agGiqQJDxpyrUVgzSKc0C4XyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNaiSDQH0UJGaMDG3ns7m/nZplZtMB8GA1UdIwQY
MBaAFNce5TM3odBbqkfgCctbqfLEVwFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXg3bE16ZWgwRnVxUi1BSnkxdXA4c1JYQVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wODQyZWEtNzg4YS00OTViLWJkMjEt
NTE4MDE1ZjU5ZTQ3LzEvMXFKSU5BZlJRa1pvd01iZWV6dWItZG1tVm0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wODQyZWEtNzg4YS00OTViLWJkMjEtNTE4MDE1ZjU5ZTQ3
LzEvMXg3bE16ZWgwRnVxUi1BSnkxdXA4c1JYQVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudOoMA0G
CSqGSIb3DQEBCwUAA4IBAQBx3IMnXc3lLPoaLsKZ9r4yKrUoWRkeDd5RmNY/vt8r
w2Q/wuxvfOdEw0ErDhcLOAzZn2D3T+/CrbAbJ2ye+U0BrVOS+bll5JCKYkFjgvHg
bQIlR+DDd2+DQPMhEpiJDdTte1CZBSCzBBVPogB17Tz6JkIIHJ3LkQLuWMfCUy1E
tvPF6KZPMYyNVIXKKuaPluqLMn7OopIpJyWdMy15XAN/deP0o8Z05D52I1azymDa
6adClVAjWtYv33F1NCc3pl6A/2ihD0PE87er6ycM8UkiEUeKpxVETXHVSZETyPBn
Pbp8NiJVU/zacgKmxhOYKXqGIOBVmcsQ54NblxaeOqiM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:30 2024 by rpki-client on console-fra.rpki-client.org