Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/DcK5x-yGHtL9IlRgO2RtYPCgyVo.roa
File: DcK5x-yGHtL9IlRgO2RtYPCgyVo.roa (raw, json)
Hash identifier: k2Ya0NPbVfwkadGsXYJGNq34L7dgfuWlFdkOe2Oxs6I=
Subject key identifier: 0D:C2:B9:C7:EC:86:1E:D2:FD:22:54:60:3B:64:6D:60:F0:A0:C9:5A
Certificate issuer: /CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Certificate serial: 0AE77189
Authority key identifier: 18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/DcK5x-yGHtL9IlRgO2RtYPCgyVo.roa
Signing time: Sat 01 Jan 2022 08:57:31 +0000
ROA not before: Sat 01 Jan 2022 08:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 193.141.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182940041 (0xae77189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Validity
Not Before: Jan 1 08:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dc2b9c7ec861ed2fd2254603b646d60f0a0c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:22:f6:41:02:15:07:58:83:1f:ac:53:5b:
bf:4e:ae:d3:10:97:97:a8:cd:18:27:49:1f:9e:4a:
1d:3c:56:e2:07:6d:04:c1:63:ea:32:35:64:12:60:
fa:42:2d:8c:d8:46:fa:54:c0:33:54:ac:57:75:fb:
32:37:a5:c0:7f:97:b7:7a:e2:01:f2:eb:b5:24:a0:
d8:37:89:88:19:23:d8:7c:ce:25:99:c4:14:29:5a:
2c:91:b3:e5:86:b4:e7:07:c8:41:16:ab:24:68:fc:
3b:e7:d4:50:e1:e8:cf:9f:8c:4b:0c:00:76:e7:55:
c2:5f:92:52:b9:44:d8:47:ff:c0:37:3d:7d:5c:99:
1b:49:06:db:9e:18:e7:c3:0f:db:d0:3d:e5:49:2e:
32:be:95:15:5a:eb:8f:d6:62:52:c7:fa:c1:d5:0f:
22:62:7f:a5:2e:76:23:93:a3:86:24:5d:7c:54:77:
22:35:1a:84:7e:98:ca:ff:dd:b7:42:bb:f3:6a:5d:
7b:79:00:65:5e:da:29:9a:aa:2d:36:7f:00:42:e0:
2f:3c:1d:05:62:fc:50:81:65:ba:0b:e4:55:23:ed:
2a:85:79:55:b3:16:a3:97:a0:a1:be:3f:49:c7:09:
64:83:11:f0:61:3d:23:16:3d:40:51:28:be:99:5d:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:B9:C7:EC:86:1E:D2:FD:22:54:60:3B:64:6D:60:F0:A0:C9:5A
X509v3 Authority Key Identifier:
keyid:18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/DcK5x-yGHtL9IlRgO2RtYPCgyVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/GKPZLdqRA2czl3PWymSB-yB70sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.23.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b3:3c:f0:65:20:d7:28:96:a1:ac:16:33:34:34:6a:6f:d9:
fa:f9:39:ad:34:e1:01:74:40:88:8a:d1:f9:e7:46:7c:35:55:
f6:a6:b3:2f:4d:a2:a1:58:a3:55:50:f6:4a:8b:b7:01:e8:ce:
a0:54:3c:17:90:2a:d3:9e:f2:3b:a6:5a:be:a9:c9:fb:d7:de:
b1:78:a9:d5:49:a7:87:f8:57:f9:28:b6:d0:63:9e:49:6c:49:
62:fc:24:aa:bf:c5:93:15:ac:b4:83:8d:4a:a7:b3:42:ed:b1:
1e:e0:ad:62:4a:98:5a:02:f3:9d:c1:3c:4c:c4:14:f9:f8:bf:
a9:1e:62:0b:b2:da:57:78:13:2b:70:8a:8e:ae:d0:e4:66:49:
96:a8:07:7b:86:9c:ed:7e:4b:bc:7b:26:7c:79:f0:bc:9f:20:
90:0a:91:c1:ae:86:0a:96:8a:91:e5:29:cd:f3:9d:81:d4:51:
07:3b:f8:03:8b:0f:d1:60:e9:45:b0:28:9e:ba:a3:0d:81:ff:
d4:04:66:bc:1a:5c:1a:94:24:32:24:e8:89:37:1a:50:e4:ab:
ec:34:d5:ac:95:1c:c7:54:44:bc:0d:17:9b:f9:d1:0e:96:36:
8f:5b:16:43:51:4c:7d:93:5c:9d:28:79:cf:79:e2:e9:b2:dc:
b8:da:6d:2e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECudxiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGEzZDkyZGRhOTEwMzY3MzM5NzczZDZjYTY0ODFmYjIwN2JkMmM3MB4XDTIyMDEw
MTA4NTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRjMmI5YzdlYzg2
MWVkMmZkMjI1NDYwM2I2NDZkNjBmMGEwYzk1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJu/IvZBAhUHWIMfrFNbv06u0xCXl6jNGCdJH55KHTxW4gdt
BMFj6jI1ZBJg+kItjNhG+lTAM1SsV3X7MjelwH+Xt3riAfLrtSSg2DeJiBkj2HzO
JZnEFClaLJGz5Ya05wfIQRarJGj8O+fUUOHoz5+MSwwAdudVwl+SUrlE2Ef/wDc9
fVyZG0kG254Y58MP29A95UkuMr6VFVrrj9ZiUsf6wdUPImJ/pS52I5OjhiRdfFR3
IjUahH6Yyv/dt0K782pde3kAZV7aKZqqLTZ/AELgLzwdBWL8UIFlugvkVSPtKoV5
VbMWo5egob4/SccJZIMR8GE9IxY9QFEovpldzu8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNwrnH7IYe0v0iVGA7ZG1g8KDJWjAfBgNVHSMEGDAWgBQYo9kt2pEDZzOX
c9bKZIH7IHvSxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dLUFpMZHFSQTJjemwzUFd5bVNCLXlCNzBzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvZTY2Zjg5LTVkZjUtNDdhYy1iN2FmLWU3NTkyMzA4ZTcwNi8x
L0RjSzV4LXlHSHRMOUlsUmdPMlJ0WVBDZ3lWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
ZTY2Zjg5LTVkZjUtNDdhYy1iN2FmLWU3NTkyMzA4ZTcwNi8xL0dLUFpMZHFSQTJj
emwzUFd5bVNCLXlCNzBzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGNFzANBgkqhkiG9w0BAQsFAAOC
AQEAVrM88GUg1yiWoawWMzQ0am/Z+vk5rTThAXRAiIrR+edGfDVV9qazL02ioVij
VVD2Sou3AejOoFQ8F5Aq057yO6ZavqnJ+9fesXip1Umnh/hX+Si20GOeSWxJYvwk
qr/FkxWstIONSqezQu2xHuCtYkqYWgLzncE8TMQU+fi/qR5iC7LaV3gTK3CKjq7Q
5GZJlqgHe4ac7X5LvHsmfHnwvJ8gkAqRwa6GCpaKkeUpzfOdgdRRBzv4A4sP0WDp
RbAonrqjDYH/1ARmvBpcGpQkMiToiTcaUOSr7DTVrJUcx1REvA0Xm/nRDpY2j1sW
Q1FMfZNcnSh5z3ni6bLcuNptLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org