Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/DKEfKbX0cIqIZ5rqlSwsz5jUo40.roa
File: DKEfKbX0cIqIZ5rqlSwsz5jUo40.roa (raw, json)
Hash identifier: 6XoAsXMz3TdRYnId8wUrrehaOMhfm4kYvHsCW1YTuRQ=
Subject key identifier: 0C:A1:1F:29:B5:F4:70:8A:88:67:9A:EA:95:2C:2C:CF:98:D4:A3:8D
Certificate issuer: /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial: 01832B8ED11531789448AEE5066F8A34D5B8
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/DKEfKbX0cIqIZ5rqlSwsz5jUo40.roa
Signing time: Sun 11 Sep 2022 07:58:43 +0000
ROA not before: Sun 11 Sep 2022 07:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 188.227.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2b:8e:d1:15:31:78:94:48:ae:e5:06:6f:8a:34:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Validity
Not Before: Sep 11 07:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ca11f29b5f4708a88679aea952c2ccf98d4a38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:03:ef:e0:85:f3:a0:40:1a:17:6b:e6:83:
70:86:4d:91:2d:24:6c:3a:79:9d:f0:0d:e7:d4:b0:
28:5c:f7:ff:94:c6:e6:54:2f:b4:16:99:f7:e7:99:
2a:7d:71:11:e7:55:4d:46:0a:ad:14:62:d7:c4:7e:
00:97:ae:8e:8a:26:f7:4a:f7:bd:21:c7:f6:b1:99:
62:6f:9c:77:ce:67:43:03:aa:ea:64:f6:30:29:72:
1a:a3:db:eb:37:91:09:a5:93:53:30:83:bc:61:a3:
44:d2:a0:67:97:a9:41:54:a6:1b:3a:df:02:f2:45:
9c:1f:ce:03:68:ed:aa:05:17:94:d8:7e:b8:5f:33:
c7:54:2b:95:00:54:79:65:44:05:cc:91:d4:30:fd:
f5:2d:6c:cb:64:a7:db:1b:1b:61:90:bc:b9:13:73:
09:61:9e:ad:76:c2:6d:e8:af:cb:75:e7:87:d1:d9:
e8:c8:a6:78:09:83:0a:ef:a3:90:51:a4:32:e8:7a:
ec:bc:fa:0e:9f:3a:9c:9a:d8:9e:7a:56:21:95:12:
09:2f:ed:40:91:7a:84:3f:26:74:63:c4:05:9c:0e:
82:68:58:9e:2a:44:dc:2e:fa:ef:f6:a4:a8:91:13:
6b:f9:17:de:91:e8:2f:30:77:d8:86:19:9f:55:bf:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:1F:29:B5:F4:70:8A:88:67:9A:EA:95:2C:2C:CF:98:D4:A3:8D
X509v3 Authority Key Identifier:
keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/DKEfKbX0cIqIZ5rqlSwsz5jUo40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:09:1d:4a:16:43:93:e2:af:fa:ee:63:12:00:0e:bf:9d:47:
f3:64:a4:0e:5e:88:f5:03:b8:2e:97:b7:d0:94:bd:a9:14:f9:
c8:12:65:92:73:b6:b6:03:ae:8b:bb:f0:6d:a8:28:31:40:aa:
ae:72:ec:12:ef:7c:3f:66:a6:7d:92:e8:21:8d:9a:34:05:61:
1c:26:e7:e3:9f:be:f8:e0:97:32:c6:2b:e0:2d:43:21:29:a8:
ba:16:82:4d:20:d1:90:10:36:30:68:37:73:70:eb:79:5f:f3:
5b:99:c8:b7:c1:d4:a2:0c:fd:ec:56:94:61:29:05:6c:ad:a9:
b0:7a:c2:86:19:69:b7:e0:52:21:63:36:8f:b0:f4:4b:99:bb:
7b:d5:fb:af:02:d7:c7:fc:bb:a6:5c:ee:0c:1c:14:22:d9:83:
59:b2:dc:88:77:9f:63:2d:6d:7b:19:15:d5:27:28:c0:7d:5f:
2a:df:5d:b7:a0:88:91:d1:df:e9:56:b4:61:52:80:4a:61:74:
ac:c4:47:29:c7:bb:12:55:b1:cd:71:a8:08:ec:02:6b:3b:22:
45:8f:d9:ae:24:61:eb:58:cd:02:76:20:f0:9a:95:b3:97:bf:
0f:9f:d1:fc:71:9b:de:e7:f3:7f:da:ef:01:61:bd:13:76:27:
79:16:13:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMrjtEVMXiUSK7lBm+KNNW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmFmMzkwOWFiNDA2MTAzMTQ4ZjNmMzJmOTVhNzlmOGRl
MzVkMGUwHhcNMjIwOTExMDc1ODQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2ExMWYyOWI1ZjQ3MDhhODg2NzlhZWE5NTJjMmNjZjk4ZDRhMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMED7+CF86BAGhdr5oNwhk2RLSRs
Onmd8A3n1LAoXPf/lMbmVC+0Fpn355kqfXER51VNRgqtFGLXxH4Al66Oiib3Sve9
Icf2sZlib5x3zmdDA6rqZPYwKXIao9vrN5EJpZNTMIO8YaNE0qBnl6lBVKYbOt8C
8kWcH84DaO2qBReU2H64XzPHVCuVAFR5ZUQFzJHUMP31LWzLZKfbGxthkLy5E3MJ
YZ6tdsJt6K/LdeeH0dnoyKZ4CYMK76OQUaQy6HrsvPoOnzqcmtieelYhlRIJL+1A
kXqEPyZ0Y8QFnA6CaFieKkTcLvrv9qSokRNr+RfekegvMHfYhhmfVb/d0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyhHym19HCKiGea6pUsLM+Y1KONMB8GA1UdIwQY
MBaAFFj685CatAYQMUjz8y+Vp5+N410OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ByemtKcTBCaEF4U1BQekw1V25uNDNqWFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xYWU3YjktM2U1Ni00Zjg5LWJhZDYt
NmUxYjBkNjQ3OGMwLzEvREtFZktiWDBjSXFJWjVycWxTd3N6NWpVbzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xYWU3YjktM2U1Ni00Zjg5LWJhZDYtNmUxYjBkNjQ3OGMw
LzEvV1ByemtKcTBCaEF4U1BQekw1V25uNDNqWFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvOPEMA0G
CSqGSIb3DQEBCwUAA4IBAQCkCR1KFkOT4q/67mMSAA6/nUfzZKQOXoj1A7gul7fQ
lL2pFPnIEmWSc7a2A66Lu/BtqCgxQKqucuwS73w/ZqZ9kughjZo0BWEcJufjn774
4JcyxivgLUMhKai6FoJNINGQEDYwaDdzcOt5X/Nbmci3wdSiDP3sVpRhKQVsramw
esKGGWm34FIhYzaPsPRLmbt71fuvAtfH/LumXO4MHBQi2YNZstyId59jLW17GRXV
JyjAfV8q3123oIiR0d/pVrRhUoBKYXSsxEcpx7sSVbHNcagI7AJrOyJFj9muJGHr
WM0CdiDwmpWzl78Pn9H8cZve5/N/2u8BYb0Tdid5FhNQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org