Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/myo9HcHCAUdmKd2VnAkeHrN6OB8.roa
File: myo9HcHCAUdmKd2VnAkeHrN6OB8.roa (raw, json)
Hash identifier: 0pwS7WA7M/TOI9HMRoQDE767mQpBbi+5XB0gWs54uRI=
Subject key identifier: 9B:2A:3D:1D:C1:C2:01:47:66:29:DD:95:9C:09:1E:1E:B3:7A:38:1F
Certificate issuer: /CN=0c8c359264744c814b742704e6c99e8cffb4353d
Certificate serial: 06F06EE4
Authority key identifier: 0C:8C:35:92:64:74:4C:81:4B:74:27:04:E6:C9:9E:8C:FF:B4:35:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIw1kmR0TIFLdCcE5smejP-0NT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/myo9HcHCAUdmKd2VnAkeHrN6OB8.roa
Signing time: Sat 01 Jan 2022 09:06:10 +0000
ROA not before: Sat 01 Jan 2022 09:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29608
IP address blocks: 193.46.252.0/24 maxlen: 24
193.47.70.0/24 maxlen: 24
193.47.75.0/24 maxlen: 24
193.47.86.0/24 maxlen: 24
2a0f:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116420324 (0x6f06ee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8c359264744c814b742704e6c99e8cffb4353d
Validity
Not Before: Jan 1 09:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b2a3d1dc1c201476629dd959c091e1eb37a381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:5e:2b:28:6c:35:ed:d6:07:be:0e:cd:63:
38:1c:71:00:96:52:47:9e:14:7a:64:5a:90:1f:9d:
e6:87:b8:c2:b0:80:38:6c:7a:8e:a8:94:f8:5f:e6:
51:7d:1b:3a:18:fc:70:e3:9b:78:e7:44:4b:07:04:
99:9c:2c:cd:5e:44:8d:5d:74:6f:f2:60:54:1b:76:
8e:19:0d:d1:3f:c2:67:c9:9b:1e:fa:83:63:b6:a0:
a5:49:67:d3:47:78:94:bb:26:f4:8e:a0:37:a8:2b:
9a:4a:7a:c0:10:21:d7:d8:f7:02:93:02:25:5d:2d:
d0:b1:64:83:01:4f:37:ed:11:eb:d7:82:d5:ea:44:
20:b7:bd:64:90:87:6f:c6:3d:a0:9f:5d:24:c7:d1:
48:b7:12:bf:5b:66:8d:d0:a9:8f:53:26:89:c7:17:
37:a8:61:35:df:04:22:b7:31:08:16:aa:88:ac:11:
1a:7d:e2:c9:e5:84:30:50:30:6c:ed:65:98:09:0c:
cb:ab:d3:18:e0:71:54:e1:03:a4:77:36:eb:f3:81:
a5:fb:8e:44:96:56:ac:ed:d0:44:79:0b:41:dd:7c:
22:ca:82:58:b5:33:7e:e9:91:04:6e:83:1e:3f:97:
4f:72:20:7f:62:c2:72:3c:0c:c1:1a:73:d4:37:80:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:3D:1D:C1:C2:01:47:66:29:DD:95:9C:09:1E:1E:B3:7A:38:1F
X509v3 Authority Key Identifier:
keyid:0C:8C:35:92:64:74:4C:81:4B:74:27:04:E6:C9:9E:8C:FF:B4:35:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIw1kmR0TIFLdCcE5smejP-0NT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/myo9HcHCAUdmKd2VnAkeHrN6OB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/11cfca-bc16-4a42-ac32-f84219ba9855/1/DIw1kmR0TIFLdCcE5smejP-0NT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.252.0/24
193.47.70.0/24
193.47.75.0/24
193.47.86.0/24
IPv6:
2a0f:8340::/29
Signature Algorithm: sha256WithRSAEncryption
46:77:a6:7d:4a:0c:bd:61:79:b0:0a:6b:2b:16:6b:76:5f:82:
99:a6:45:e9:8a:ae:f1:cb:bf:01:ea:4a:f9:5d:5c:08:45:96:
a5:dc:6d:93:32:36:33:51:4a:ee:ae:67:42:81:10:73:75:e2:
c3:38:6d:81:1b:66:6e:15:63:36:a3:7b:52:70:68:4e:7e:be:
f4:a9:fb:4d:ca:e1:c4:c2:a8:91:99:03:08:65:64:df:06:50:
8e:16:a3:c4:b2:0b:c9:0b:14:86:69:d8:8e:b2:3b:59:f5:98:
35:5b:63:19:87:4a:89:54:20:e7:cb:01:d8:01:89:09:b5:e0:
82:1c:9a:1b:a1:32:ab:50:cd:3a:17:3f:fe:1f:a0:1e:ff:02:
bc:48:b0:78:19:ca:c4:f9:b3:f8:a6:00:34:be:12:0b:0d:8e:
66:49:ea:54:bd:6a:97:b3:4e:79:ce:91:96:1b:27:4c:f8:91:
d7:3d:f0:6e:9a:c0:45:b2:3a:8a:e1:99:ee:72:fb:44:0f:82:
40:fd:0b:a3:55:9b:08:76:c5:55:62:4c:84:56:6e:fb:45:b3:
61:2d:7d:ad:0a:ec:0f:e6:8e:c1:84:c4:72:c1:b6:e8:d9:43:
11:fa:d0:3f:b1:64:76:05:de:e1:a6:db:c8:e2:68:ef:34:75:
bc:57:62:33
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBvBu5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzhjMzU5MjY0NzQ0YzgxNGI3NDI3MDRlNmM5OWU4Y2ZmYjQzNTNkMB4XDTIyMDEw
MTA5MDYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIyYTNkMWRjMWMy
MDE0NzY2MjlkZDk1OWMwOTFlMWViMzdhMzgxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCnXisobDXt1ge+Ds1jOBxxAJZSR54UemRakB+d5oe4wrCA
OGx6jqiU+F/mUX0bOhj8cOObeOdESwcEmZwszV5EjV10b/JgVBt2jhkN0T/CZ8mb
HvqDY7agpUln00d4lLsm9I6gN6grmkp6wBAh19j3ApMCJV0t0LFkgwFPN+0R69eC
1epEILe9ZJCHb8Y9oJ9dJMfRSLcSv1tmjdCpj1MmiccXN6hhNd8EIrcxCBaqiKwR
Gn3iyeWEMFAwbO1lmAkMy6vTGOBxVOEDpHc26/OBpfuORJZWrO3QRHkLQd18IsqC
WLUzfumRBG6DHj+XT3Igf2LCcjwMwRpz1DeAKBMCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSbKj0dwcIBR2Yp3ZWcCR4es3o4HzAfBgNVHSMEGDAWgBQMjDWSZHRMgUt0
JwTmyZ6M/7Q1PTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RJdzFrbVIwVElGTGRDY0U1c21lalAtME5UMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMTFjZmNhLWJjMTYtNGE0Mi1hYzMyLWY4NDIxOWJhOTg1NS8x
L215bzlIY0hDQVVkbUtkMlZuQWtlSHJONk9COC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MTFjZmNhLWJjMTYtNGE0Mi1hYzMyLWY4NDIxOWJhOTg1NS8xL0RJdzFrbVIwVElG
TGRDY0U1c21lalAtME5UMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAMEu/AMEAMEvRgMEAMEvSwMEAMEv
VjANBAIAAjAHAwUDKg+DQDANBgkqhkiG9w0BAQsFAAOCAQEARnemfUoMvWF5sApr
KxZrdl+CmaZF6Yqu8cu/AepK+V1cCEWWpdxtkzI2M1FK7q5nQoEQc3XiwzhtgRtm
bhVjNqN7UnBoTn6+9Kn7TcrhxMKokZkDCGVk3wZQjhajxLILyQsUhmnYjrI7WfWY
NVtjGYdKiVQg58sB2AGJCbXgghyaG6Eyq1DNOhc//h+gHv8CvEiweBnKxPmz+KYA
NL4SCw2OZknqVL1ql7NOec6RlhsnTPiR1z3wbprARbI6iuGZ7nL7RA+CQP0Lo1Wb
CHbFVWJMhFZu+0WzYS19rQrsD+aOwYTEcsG26NlDEfrQP7FkdgXe4abbyOJo7zR1
vFdiMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org