Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/I0u8nm6ygwCRRk1nrVoS89IEYV8.roa
File: I0u8nm6ygwCRRk1nrVoS89IEYV8.roa (raw, json)
Hash identifier: xog34kYyTQx2wubY2wHcaN3yXXZuYBtH/8vM8Au2vlk=
Subject key identifier: 23:4B:BC:9E:6E:B2:83:00:91:46:4D:67:AD:5A:12:F3:D2:04:61:5F
Certificate issuer: /CN=744ea51ef8a937ecd84e003a8c4e50d8234b8000
Certificate serial: 01856FB1243F5092B4B8447F6C3FC907ED4E
Authority key identifier: 74:4E:A5:1E:F8:A9:37:EC:D8:4E:00:3A:8C:4E:50:D8:23:4B:80:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE6lHvipN-zYTgA6jE5Q2CNLgAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/I0u8nm6ygwCRRk1nrVoS89IEYV8.roa
Signing time: Sun 01 Jan 2023 23:35:58 +0000
ROA not before: Sun 01 Jan 2023 23:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60475
IP address blocks: 5.178.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:24:3f:50:92:b4:b8:44:7f:6c:3f:c9:07:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744ea51ef8a937ecd84e003a8c4e50d8234b8000
Validity
Not Before: Jan 1 23:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=234bbc9e6eb2830091464d67ad5a12f3d204615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:e7:e9:15:7c:22:86:66:ab:3b:0b:80:16:
9d:6d:b7:54:e7:5f:6c:fd:e2:25:a1:83:15:61:77:
b9:4f:37:f5:ca:3c:84:14:1a:ed:f8:21:a8:a9:12:
0c:47:01:f7:12:db:84:b4:c8:8f:39:9b:3f:a3:8a:
92:9d:6f:78:eb:78:d3:66:ae:a8:34:ae:93:44:29:
51:a9:30:bd:36:e0:76:8f:18:e4:fe:89:6d:ba:19:
ce:99:21:e2:57:ff:22:82:0e:90:ca:7a:30:47:05:
d2:38:9c:82:f9:cb:60:a7:d7:7b:db:68:b6:0d:e5:
48:1d:5c:bc:2f:1e:cb:a5:c8:72:fb:ee:37:2b:b8:
0b:81:b2:b4:f5:0d:97:f0:50:84:e8:06:26:80:16:
91:3f:96:d4:9f:11:83:63:68:01:54:51:30:70:ea:
10:0f:e7:d4:79:4c:23:b6:a3:3a:18:89:9f:09:bb:
8e:dc:03:74:04:5e:b2:0d:fc:ba:7a:3f:2a:3d:fe:
e0:fe:cd:14:5a:91:00:59:b0:f2:09:28:88:b2:f3:
f2:94:09:82:1f:94:79:50:5b:8d:6a:81:cd:b3:b9:
78:fc:eb:6d:02:a8:ad:e3:df:f9:bf:76:8c:cc:b6:
8a:a3:f0:85:a8:56:49:d7:b4:23:6d:e2:de:26:25:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:BC:9E:6E:B2:83:00:91:46:4D:67:AD:5A:12:F3:D2:04:61:5F
X509v3 Authority Key Identifier:
keyid:74:4E:A5:1E:F8:A9:37:EC:D8:4E:00:3A:8C:4E:50:D8:23:4B:80:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE6lHvipN-zYTgA6jE5Q2CNLgAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/I0u8nm6ygwCRRk1nrVoS89IEYV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/dE6lHvipN-zYTgA6jE5Q2CNLgAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:6e:01:cc:76:bc:3d:da:85:f0:6f:4c:85:f7:51:bf:91:62:
c0:ac:d8:b5:02:bd:31:95:eb:1b:9a:47:c1:e0:fe:cf:83:35:
3c:04:05:63:29:3c:22:70:b9:fd:4c:8d:3b:c1:f6:66:7e:b3:
39:bc:a0:8a:bf:7d:70:00:ba:04:92:0d:d6:5a:2e:78:10:15:
e8:ce:1d:b5:74:be:a6:fb:64:7f:92:c0:58:55:0b:0d:3b:4a:
d1:ee:37:1d:8a:6b:40:d1:5e:62:d9:ab:e1:2a:59:48:22:56:
3f:6c:62:aa:76:93:c5:fb:52:2d:fa:b2:23:b3:8d:89:92:34:
6a:1a:95:97:4f:b6:1b:19:a1:29:1d:04:75:8d:b1:d1:a3:a7:
1d:87:75:87:df:89:84:c2:71:d7:06:a4:7f:86:ed:9f:5e:a6:
52:e2:09:36:1e:21:9a:1a:d2:0f:f8:60:2e:68:d2:90:01:7f:
91:24:a7:2d:1d:f7:02:f2:ae:bb:ad:47:ae:1f:17:67:ab:c5:
44:33:a9:5c:bd:c6:19:4b:8a:02:f3:bc:1c:d8:fe:98:b0:a5:
ca:f3:c7:f0:dd:00:8c:1f:1c:dd:d8:7b:aa:29:71:97:40:0f:
fa:c5:72:f2:71:f9:57:31:3e:6e:01:83:46:8a:4f:80:6b:e1:
5f:5a:d9:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsSQ/UJK0uER/bD/JB+1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGVhNTFlZjhhOTM3ZWNkODRlMDAzYThjNGU1MGQ4MjM0
YjgwMDAwHhcNMjMwMTAxMjMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzRiYmM5ZTZlYjI4MzAwOTE0NjRkNjdhZDVhMTJmM2QyMDQ2MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTn6RV8IoZmqzsLgBadbbdU519s
/eIloYMVYXe5Tzf1yjyEFBrt+CGoqRIMRwH3EtuEtMiPOZs/o4qSnW9463jTZq6o
NK6TRClRqTC9NuB2jxjk/oltuhnOmSHiV/8igg6QynowRwXSOJyC+ctgp9d722i2
DeVIHVy8Lx7Lpchy++43K7gLgbK09Q2X8FCE6AYmgBaRP5bUnxGDY2gBVFEwcOoQ
D+fUeUwjtqM6GImfCbuO3AN0BF6yDfy6ej8qPf7g/s0UWpEAWbDyCSiIsvPylAmC
H5R5UFuNaoHNs7l4/OttAqit49/5v3aMzLaKo/CFqFZJ17QjbeLeJiVUzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNLvJ5usoMAkUZNZ61aEvPSBGFfMB8GA1UdIwQY
MBaAFHROpR74qTfs2E4AOoxOUNgjS4AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEU2bEh2aXBOLXpZVGdBNmpFNVEyQ05MZ0FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xMDA5YWMtYTBlMi00ODJjLTg2MGYt
N2ViZDYyNmNjMTZiLzEvSTB1OG5tNnlnd0NSUmsxbnJWb1M4OUlFWVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xMDA5YWMtYTBlMi00ODJjLTg2MGYtN2ViZDYyNmNjMTZi
LzEvZEU2bEh2aXBOLXpZVGdBNmpFNVEyQ05MZ0FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBbJ4MA0G
CSqGSIb3DQEBCwUAA4IBAQB6bgHMdrw92oXwb0yF91G/kWLArNi1Ar0xlesbmkfB
4P7PgzU8BAVjKTwicLn9TI07wfZmfrM5vKCKv31wALoEkg3WWi54EBXozh21dL6m
+2R/ksBYVQsNO0rR7jcdimtA0V5i2avhKllIIlY/bGKqdpPF+1It+rIjs42JkjRq
GpWXT7YbGaEpHQR1jbHRo6cdh3WH34mEwnHXBqR/hu2fXqZS4gk2HiGaGtIP+GAu
aNKQAX+RJKctHfcC8q67rUeuHxdnq8VEM6lcvcYZS4oC87wc2P6YsKXK88fw3QCM
Hxzd2HuqKXGXQA/6xXLycflXMT5uAYNGik+Aa+FfWtlx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org