Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/3oZK7IceLgQ4tb1Bpx78doEcPW0.roa
File: 3oZK7IceLgQ4tb1Bpx78doEcPW0.roa (raw, json)
Hash identifier: beL9v9SxDSQnDG6kjWNiu1W/gD+sepAxwV1qcBFmtBU=
Subject key identifier: DE:86:4A:EC:87:1E:2E:04:38:B5:BD:41:A7:1E:FC:76:81:1C:3D:6D
Certificate issuer: /CN=298074ad430476574d86d2d56c54f76be2a86a17
Certificate serial: 02C3B59E
Authority key identifier: 29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/3oZK7IceLgQ4tb1Bpx78doEcPW0.roa
Signing time: Wed 30 Mar 2022 13:34:56 +0000
ROA not before: Wed 30 Mar 2022 13:34:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 2.58.116.0/24 maxlen: 24
2.58.117.0/24 maxlen: 24
2.58.118.0/24 maxlen: 24
2.58.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46380446 (0x2c3b59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298074ad430476574d86d2d56c54f76be2a86a17
Validity
Not Before: Mar 30 13:34:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de864aec871e2e0438b5bd41a71efc76811c3d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:c0:95:7b:05:16:1d:48:8d:0e:1a:3b:a7:
fa:f7:af:ec:64:f5:ce:a8:ef:fa:13:2f:15:5d:44:
30:e0:2f:47:7d:7b:00:f0:f0:6d:a6:46:97:69:20:
fb:3c:85:4b:dc:fd:8e:63:68:58:42:60:8c:10:d3:
fd:49:e7:c1:9c:45:16:e3:cd:d8:e4:8a:68:32:6d:
32:5e:67:b3:97:68:06:6d:f8:f7:52:12:db:cd:0e:
4f:b7:2b:e6:0f:09:06:ae:fe:5c:49:85:f3:94:a1:
13:68:70:4e:f9:f2:bb:7b:3f:d9:26:75:8e:dd:50:
f6:91:b9:33:0f:cd:a3:bd:a0:fb:3f:e9:d0:5b:f7:
35:06:b7:50:25:aa:c0:b7:ac:30:2e:7d:ec:4a:18:
52:98:85:fe:65:68:44:98:00:91:d5:4b:75:99:2c:
c4:60:48:7e:91:25:1e:e1:0f:f2:87:58:8b:c0:e9:
7f:a3:a3:55:42:70:4f:e4:e5:c1:8a:c5:5e:b6:1f:
b5:35:4c:73:4e:8d:24:a7:85:2c:b3:54:ae:25:b7:
84:41:f9:d4:ba:d6:3b:6f:81:57:bc:8c:f7:2b:80:
b3:79:8f:65:7f:4e:55:a6:9e:56:a8:70:73:57:31:
92:a1:4e:d9:a7:8f:f6:45:98:c2:b3:04:5b:2b:d4:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:4A:EC:87:1E:2E:04:38:B5:BD:41:A7:1E:FC:76:81:1C:3D:6D
X509v3 Authority Key Identifier:
keyid:29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/3oZK7IceLgQ4tb1Bpx78doEcPW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a1:d8:15:30:74:be:e0:d3:61:c2:cb:25:96:5a:5e:d4:ee:
5e:a4:32:7f:31:96:86:69:95:7f:37:06:9f:34:d7:7e:53:8e:
07:68:7f:d8:d1:63:03:6c:45:b6:f0:75:97:8f:cf:40:83:24:
aa:a1:25:40:e3:e4:2d:87:bb:9c:e1:79:dd:98:16:2b:84:40:
3f:72:dd:1e:8b:83:49:af:e2:49:87:6e:b5:7c:6f:9f:43:4b:
f7:9d:86:11:4b:67:0c:df:c6:2d:39:15:cb:2f:d0:b2:90:3e:
dc:4e:f1:03:79:7c:83:6e:96:e3:81:a4:13:68:e2:23:f4:00:
e9:79:e7:db:fa:e4:38:ea:4c:91:84:bf:f9:22:c5:0b:cf:71:
a3:00:1c:ae:75:13:f3:b0:20:d1:1a:85:4a:63:68:0e:e2:8f:
a4:bc:6c:f4:a0:1a:37:d2:5e:12:8b:e3:56:43:46:47:78:5b:
0b:b5:04:bd:2b:01:79:a7:cb:40:96:f5:64:95:da:51:7e:3b:
67:6b:43:67:55:98:cf:e3:a3:49:04:35:b7:bd:3f:b9:4e:4a:
f6:5e:d1:56:3f:0d:ab:d5:62:c5:75:29:a6:7b:11:13:77:3b:
f5:da:40:2d:1c:b3:8f:24:03:f4:a3:ca:62:aa:7b:fd:86:b4:
f2:6d:b0:1a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsO1njANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTgwNzRhZDQzMDQ3NjU3NGQ4NmQyZDU2YzU0Zjc2YmUyYTg2YTE3MB4XDTIyMDMz
MDEzMzQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGU4NjRhZWM4NzFl
MmUwNDM4YjViZDQxYTcxZWZjNzY4MTFjM2Q2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmDwJV7BRYdSI0OGjun+vev7GT1zqjv+hMvFV1EMOAvR317
APDwbaZGl2kg+zyFS9z9jmNoWEJgjBDT/UnnwZxFFuPN2OSKaDJtMl5ns5doBm34
91IS280OT7cr5g8JBq7+XEmF85ShE2hwTvnyu3s/2SZ1jt1Q9pG5Mw/No72g+z/p
0Fv3NQa3UCWqwLesMC597EoYUpiF/mVoRJgAkdVLdZksxGBIfpElHuEP8odYi8Dp
f6OjVUJwT+TlwYrFXrYftTVMc06NJKeFLLNUriW3hEH51LrWO2+BV7yM9yuAs3mP
ZX9OVaaeVqhwc1cxkqFO2aeP9kWYwrMEWyvUG2cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTehkrshx4uBDi1vUGnHvx2gRw9bTAfBgNVHSMEGDAWgBQpgHStQwR2V02G
0tVsVPdr4qhqFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tZQjByVU1FZGxkTmh0TFZiRlQzYS1Lb2FoYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNGMwNDE3LWRjYjAtNGFkZC1hMjY1LWQ4ZGExZmU0YjA4MC8x
LzNvWks3SWNlTGdRNHRiMUJweDc4ZG9FY1BXMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NGMwNDE3LWRjYjAtNGFkZC1hMjY1LWQ4ZGExZmU0YjA4MC8xL0tZQjByVU1FZGxk
Tmh0TFZiRlQzYS1Lb2FoYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI6dDANBgkqhkiG9w0BAQsFAAOC
AQEAT6HYFTB0vuDTYcLLJZZaXtTuXqQyfzGWhmmVfzcGnzTXflOOB2h/2NFjA2xF
tvB1l4/PQIMkqqElQOPkLYe7nOF53ZgWK4RAP3LdHouDSa/iSYdutXxvn0NL952G
EUtnDN/GLTkVyy/QspA+3E7xA3l8g26W44GkE2jiI/QA6Xnn2/rkOOpMkYS/+SLF
C89xowAcrnUT87Ag0RqFSmNoDuKPpLxs9KAaN9JeEovjVkNGR3hbC7UEvSsBeafL
QJb1ZJXaUX47Z2tDZ1WYz+OjSQQ1t70/uU5K9l7RVj8Nq9VixXUppnsRE3c79dpA
LRyzjyQD9KPKYqp7/Ya08m2wGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org