Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/PVqBBp6lkxwM4obKvmu4MbSvNrg.roa
File: PVqBBp6lkxwM4obKvmu4MbSvNrg.roa (raw, json)
Hash identifier: iQb/KmGeOaO4oJwFDNxMkiXJ47T1GyUp2rDMSQTanxU=
Subject key identifier: 3D:5A:81:06:9E:A5:93:1C:0C:E2:86:CA:BE:6B:B8:31:B4:AF:36:B8
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 081A43E6
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/PVqBBp6lkxwM4obKvmu4MbSvNrg.roa
Signing time: Sat 01 Jan 2022 15:58:33 +0000
ROA not before: Sat 01 Jan 2022 15:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25227
IP address blocks: 185.244.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135939046 (0x81a43e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Jan 1 15:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d5a81069ea5931c0ce286cabe6bb831b4af36b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:18:34:e0:41:50:44:fa:12:0e:69:5b:b4:
47:c3:09:fd:95:5e:d3:96:70:06:3a:d7:0d:43:f7:
4c:cb:cc:01:5c:a0:42:60:61:60:5c:fa:fa:69:c6:
68:36:28:50:f1:44:bf:af:c1:95:38:03:9e:3e:51:
30:bf:90:20:fb:63:96:a3:7d:39:c0:c2:14:b0:3e:
ec:4f:d9:78:18:52:eb:53:2d:ac:cf:41:95:5e:64:
bd:06:4f:d2:69:c2:2f:bc:b0:e9:6c:05:5d:37:72:
21:35:fe:1a:bb:12:db:c7:0e:02:33:9f:0e:f7:10:
ee:93:ed:ac:4c:f9:43:ec:35:65:9f:32:5c:73:cf:
1b:e1:01:1b:75:c6:ac:6b:2b:d9:87:c8:01:65:cb:
9f:f4:61:61:9a:fe:65:26:b6:45:a2:4f:a8:ee:22:
78:ea:1c:2a:79:9d:c7:c1:21:8a:45:6b:34:a0:63:
f4:fd:19:f4:e4:10:35:ed:17:67:e2:41:35:ae:8f:
24:72:9c:06:3e:d0:cd:b8:b8:62:e3:54:32:df:74:
c4:e7:11:b3:09:15:e5:50:9a:f9:6e:dc:d2:58:63:
2a:10:e5:ba:3c:ae:84:85:0f:5a:c9:10:b8:36:e4:
31:79:b4:b7:0c:c9:29:30:e5:a5:63:be:38:ee:32:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:81:06:9E:A5:93:1C:0C:E2:86:CA:BE:6B:B8:31:B4:AF:36:B8
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/PVqBBp6lkxwM4obKvmu4MbSvNrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1e:d7:57:cb:d7:3f:c5:8b:3e:38:b1:23:9f:fc:b3:33:2d:
ec:f1:88:62:fa:b6:cc:8b:5b:0f:97:05:33:29:37:6b:bb:a0:
b3:75:5e:0e:a4:b6:b4:e8:37:53:3d:2d:d7:88:13:20:ba:85:
13:11:a7:ed:66:1a:12:e3:15:04:41:28:a8:95:39:6e:4c:d6:
ff:72:cd:bd:7e:db:55:7f:f5:2c:57:f2:4e:4a:21:30:5b:2a:
6a:5c:06:a0:3c:2e:ff:af:b9:f5:fe:34:5a:80:f3:ca:a3:bd:
71:f5:88:3d:b9:2e:52:ab:a1:a5:e0:82:67:02:45:8d:ea:52:
e0:bc:77:3b:d8:c7:c5:46:83:1c:de:95:ce:a0:5f:62:39:91:
e9:67:df:9f:b3:65:cc:d2:9b:ba:64:42:96:60:bd:4a:9e:c1:
b3:88:42:82:40:51:41:08:b8:08:c8:f4:66:b4:49:41:3c:85:
d2:19:6c:a8:d5:b8:16:10:fe:ff:10:f2:21:82:7c:7d:ea:da:
5e:a0:72:32:9c:2e:f4:68:ca:e0:1d:c8:40:a9:f4:b9:5f:35:
a8:69:cf:50:41:af:9b:66:d5:51:c7:6b:06:fe:eb:9b:10:6b:
e1:fe:aa:fd:6b:58:da:30:ff:42:a9:1a:1a:a6:c7:aa:c3:57:
12:9f:ec:de
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECBpD5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MzU0ZDcwYTk4OGUyNTdlYzU3YzM0MDgxNTlkYzhiNTA0ZjU3MjNhMB4XDTIyMDEw
MTE1NTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q1YTgxMDY5ZWE1
OTMxYzBjZTI4NmNhYmU2YmI4MzFiNGFmMzZiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkmGDTgQVBE+hIOaVu0R8MJ/ZVe05ZwBjrXDUP3TMvMAVyg
QmBhYFz6+mnGaDYoUPFEv6/BlTgDnj5RML+QIPtjlqN9OcDCFLA+7E/ZeBhS61Mt
rM9BlV5kvQZP0mnCL7yw6WwFXTdyITX+GrsS28cOAjOfDvcQ7pPtrEz5Q+w1ZZ8y
XHPPG+EBG3XGrGsr2YfIAWXLn/RhYZr+ZSa2RaJPqO4ieOocKnmdx8EhikVrNKBj
9P0Z9OQQNe0XZ+JBNa6PJHKcBj7Qzbi4YuNUMt90xOcRswkV5VCa+W7c0lhjKhDl
ujyuhIUPWskQuDbkMXm0twzJKTDlpWO+OO4yoHkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9WoEGnqWTHAzihsq+a7gxtK82uDAfBgNVHSMEGDAWgBRDVNcKmI4lfsV8
NAgVnci1BPVyOjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ExVFhDcGlPSlg3RmZEUUlGWjNJdFFUMWNqby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvYzVjMDE2LTRmMWMtNGYzMy1hY2YwLTI3NDk4Zjg3NGQ0Zi8x
L1BWcUJCcDZsa3h3TTRvYkt2bXU0TWJTdk5yZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
YzVjMDE2LTRmMWMtNGYzMy1hY2YwLTI3NDk4Zjg3NGQ0Zi8xL1ExVFhDcGlPSlg3
RmZEUUlGWjNJdFFUMWNqby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn0rzANBgkqhkiG9w0BAQsFAAOC
AQEAOh7XV8vXP8WLPjixI5/8szMt7PGIYvq2zItbD5cFMyk3a7ugs3VeDqS2tOg3
Uz0t14gTILqFExGn7WYaEuMVBEEoqJU5bkzW/3LNvX7bVX/1LFfyTkohMFsqalwG
oDwu/6+59f40WoDzyqO9cfWIPbkuUquhpeCCZwJFjepS4Lx3O9jHxUaDHN6VzqBf
YjmR6Wffn7NlzNKbumRClmC9Sp7Bs4hCgkBRQQi4CMj0ZrRJQTyF0hlsqNW4FhD+
/xDyIYJ8feraXqByMpwu9GjK4B3IQKn0uV81qGnPUEGvm2bVUcdrBv7rmxBr4f6q
/WtY2jD/QqkaGqbHqsNXEp/s3g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org