Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/PIqCPDHBY16mDwPZDCRE4xaJIIQ.roa
File: PIqCPDHBY16mDwPZDCRE4xaJIIQ.roa (raw, json)
Hash identifier: lCxIGZXMLDS/vo86nFK1Z7OyOGno59J86YxPuUqBUxQ=
Subject key identifier: 3C:8A:82:3C:31:C1:63:5E:A6:0F:03:D9:0C:24:44:E3:16:89:20:84
Certificate issuer: /CN=abce214564c2f48ebe97a4376ed127e31c50b974
Certificate serial: 01882086B49F36C88A5869DB7168AE81C186
Authority key identifier: AB:CE:21:45:64:C2:F4:8E:BE:97:A4:37:6E:D1:27:E3:1C:50:B9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q84hRWTC9I6-l6Q3btEn4xxQuXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/PIqCPDHBY16mDwPZDCRE4xaJIIQ.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.234.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b4:9f:36:c8:8a:58:69:db:71:68:ae:81:c1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abce214564c2f48ebe97a4376ed127e31c50b974
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c8a823c31c1635ea60f03d90c2444e316892084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:4d:ff:24:42:1d:ba:5c:3c:fc:48:9d:66:
30:12:f2:f9:f2:1c:9e:f3:12:6e:d4:db:1f:b3:57:
eb:61:5a:75:db:4c:04:f0:d0:b0:2f:70:a4:df:79:
dc:d8:cf:93:93:c7:3f:c8:e7:39:27:ed:27:42:46:
d3:f5:bc:70:fa:a9:a8:a0:2e:14:fe:01:08:c5:44:
92:a5:c4:61:13:b1:6d:d3:b0:ec:16:20:f3:87:57:
c7:cf:70:55:1b:5d:61:e0:c9:61:42:d2:57:7a:2f:
2a:63:ed:dd:da:a9:d4:cb:fd:bd:15:35:ad:51:d2:
9a:0b:25:25:f0:b3:35:ef:8b:ce:92:d5:c8:cf:1e:
cb:29:04:c2:79:fd:e9:b7:97:f4:c8:54:10:55:13:
ea:8d:c0:86:6e:bd:e2:3b:c0:76:f7:ba:64:12:a6:
67:9e:8c:13:14:61:96:9b:b2:6d:ab:e3:a0:19:a6:
55:74:0d:df:f8:08:16:a8:ff:75:bb:66:e0:54:d3:
ca:20:2c:a3:8a:20:d3:ab:5a:49:95:20:fe:ac:b5:
7d:e8:5c:63:59:4c:54:57:d7:cf:2a:2d:60:3e:84:
c2:d6:8b:f2:22:82:97:aa:75:e4:61:1a:0f:0e:7f:
59:01:66:ca:d7:22:9e:6b:16:01:01:a0:63:3b:01:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:82:3C:31:C1:63:5E:A6:0F:03:D9:0C:24:44:E3:16:89:20:84
X509v3 Authority Key Identifier:
keyid:AB:CE:21:45:64:C2:F4:8E:BE:97:A4:37:6E:D1:27:E3:1C:50:B9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q84hRWTC9I6-l6Q3btEn4xxQuXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/PIqCPDHBY16mDwPZDCRE4xaJIIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/q84hRWTC9I6-l6Q3btEn4xxQuXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ab:a8:13:36:02:ec:da:99:2a:71:77:41:a2:ad:9b:56:61:
bf:c3:b6:ad:e3:8f:1a:a5:f3:7a:ba:3c:0e:6a:1f:13:82:8b:
ee:86:c0:94:7f:c6:56:19:b2:05:d6:9e:01:3f:85:1f:0e:cb:
a9:c9:1b:93:9d:06:b4:80:33:7d:8e:48:d6:8c:24:fc:0e:0b:
d9:22:77:7a:dd:2a:48:24:97:75:04:0c:70:30:93:62:4c:4f:
8c:45:1a:e2:11:8b:44:0c:2f:26:88:ad:5b:52:08:65:f4:8c:
11:11:6a:a0:e0:72:52:cb:d0:37:2d:b7:27:21:a2:12:00:d0:
d4:26:0b:4c:06:09:1c:9c:ff:6c:c0:40:fb:9a:66:43:32:2d:
e1:8e:1d:dd:fa:52:be:70:92:88:45:58:2e:38:4b:a7:ca:67:
7d:b7:5e:97:0f:23:8b:14:1a:e7:c1:42:1c:bc:23:7d:75:f8:
81:2e:59:a6:ad:9d:10:16:08:b1:76:9b:85:4a:b2:0c:ae:c8:
ec:90:4e:6a:58:fa:a8:3f:bd:f6:36:7f:bf:90:19:6c:3a:94:
37:a8:56:3d:60:08:f6:2d:d2:ab:d2:94:77:15:42:86:79:1f:
9f:92:34:ba:7a:08:34:1b:32:f5:ae:74:2f:39:7e:71:bb:a1:
13:b7:87:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrSfNsiKWGnbcWiugcGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2UyMTQ1NjRjMmY0OGViZTk3YTQzNzZlZDEyN2UzMWM1
MGI5NzQwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzhhODIzYzMxYzE2MzVlYTYwZjAzZDkwYzI0NDRlMzE2ODkyMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxghN/yRCHbpcPPxInWYwEvL58hye
8xJu1Nsfs1frYVp120wE8NCwL3Ck33nc2M+Tk8c/yOc5J+0nQkbT9bxw+qmooC4U
/gEIxUSSpcRhE7Ft07DsFiDzh1fHz3BVG11h4MlhQtJXei8qY+3d2qnUy/29FTWt
UdKaCyUl8LM174vOktXIzx7LKQTCef3pt5f0yFQQVRPqjcCGbr3iO8B297pkEqZn
nowTFGGWm7Jtq+OgGaZVdA3f+AgWqP91u2bgVNPKICyjiiDTq1pJlSD+rLV96Fxj
WUxUV9fPKi1gPoTC1ovyIoKXqnXkYRoPDn9ZAWbK1yKeaxYBAaBjOwGwAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyKgjwxwWNepg8D2QwkROMWiSCEMB8GA1UdIwQY
MBaAFKvOIUVkwvSOvpekN27RJ+McULl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTg0aFJXVEM5STYtbDZRM2J0RW40eHhRdVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84YTQ0ZDUtM2Q3NC00YjhhLTkzYzAt
MDQzNjI1MDI3N2ZmLzEvUElxQ1BESEJZMTZtRHdQWkRDUkU0eGFKSUlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84YTQ0ZDUtM2Q3NC00YjhhLTkzYzAtMDQzNjI1MDI3N2Zm
LzEvcTg0aFJXVEM5STYtbDZRM2J0RW40eHhRdVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoPMA0G
CSqGSIb3DQEBCwUAA4IBAQBdq6gTNgLs2pkqcXdBoq2bVmG/w7at448apfN6ujwO
ah8TgovuhsCUf8ZWGbIF1p4BP4UfDsupyRuTnQa0gDN9jkjWjCT8DgvZInd63SpI
JJd1BAxwMJNiTE+MRRriEYtEDC8miK1bUghl9IwREWqg4HJSy9A3LbcnIaISANDU
JgtMBgkcnP9swED7mmZDMi3hjh3d+lK+cJKIRVguOEunymd9t16XDyOLFBrnwUIc
vCN9dfiBLlmmrZ0QFgixdpuFSrIMrsjskE5qWPqoP732Nn+/kBlsOpQ3qFY9YAj2
LdKr0pR3FUKGeR+fkjS6egg0GzL1rnQvOX5xu6ETt4dt
-----END CERTIFICATE-----
Generated at Wed Oct 4 08:15:09 2023 by rpki-client on console-fra.rpki-client.org