Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/IWMbllzy4rBjMdOcmcJVC4VSOiI.roa
File: IWMbllzy4rBjMdOcmcJVC4VSOiI.roa (raw, json)
Hash identifier: qKXdBybwoteyNWHJ/pi2cstIS/9I6GJONwvoh3VMpqk=
Subject key identifier: 21:63:1B:96:5C:F2:E2:B0:63:31:D3:9C:99:C2:55:0B:85:52:3A:22
Certificate issuer: /CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Certificate serial: 0B9C5C23
Authority key identifier: 18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/IWMbllzy4rBjMdOcmcJVC4VSOiI.roa
Signing time: Mon 21 Mar 2022 08:15:40 +0000
ROA not before: Mon 21 Mar 2022 08:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209830
IP address blocks: 193.141.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194796579 (0xb9c5c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Validity
Not Before: Mar 21 08:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21631b965cf2e2b06331d39c99c2550b85523a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:97:ae:66:4a:84:31:d0:56:9e:8e:92:92:
22:29:6b:35:1a:0c:b7:9f:95:93:f6:1c:da:02:fb:
92:9e:0e:27:58:16:ef:89:68:67:06:50:23:f4:0b:
9b:8c:d7:c0:da:05:3a:bc:ed:a4:be:a0:f3:43:5e:
cf:a2:e5:53:64:61:6c:b7:12:81:20:21:5e:01:c9:
94:58:5d:b4:d6:d4:37:ff:b4:86:52:0a:6b:6c:2b:
93:40:db:21:37:de:d6:75:30:32:e0:1c:75:05:72:
ca:c7:40:c1:50:77:3b:ef:2d:44:44:21:03:23:37:
ee:2d:94:c4:97:3b:a1:54:16:b0:ff:8f:87:51:da:
71:4c:91:7d:47:e5:fa:8a:39:79:ad:f6:ff:e9:00:
1c:10:4b:27:dc:82:c7:ad:f7:4f:e8:72:6e:25:44:
06:c8:0c:ac:64:d6:54:02:bb:b3:19:48:1e:cd:4b:
3f:42:36:ed:67:62:7d:66:34:6d:10:bf:3e:d1:7c:
f5:50:3e:09:1a:5d:c9:f3:b7:18:92:b9:a9:1c:7a:
c2:37:14:05:7a:de:21:89:9e:0f:0f:a9:e6:52:06:
8c:f3:1b:18:b3:ff:ac:ef:9a:71:f6:eb:62:1b:7f:
c4:15:df:a6:8f:f3:9c:29:8a:d3:9e:11:4f:b4:a9:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:1B:96:5C:F2:E2:B0:63:31:D3:9C:99:C2:55:0B:85:52:3A:22
X509v3 Authority Key Identifier:
keyid:18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/IWMbllzy4rBjMdOcmcJVC4VSOiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/GKPZLdqRA2czl3PWymSB-yB70sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.24.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d8:49:15:c1:8c:66:f5:4b:ea:1a:ed:56:4b:25:cc:05:0e:
9f:52:29:93:c1:3c:d1:d1:ee:2a:23:ff:b3:83:65:7d:a2:39:
16:f5:1c:be:9b:17:06:de:22:99:a7:3f:6e:6b:b0:26:11:3b:
05:35:33:38:bd:cc:67:99:14:89:67:b4:57:83:58:da:5b:7b:
3d:68:39:98:a9:bf:5e:12:24:0c:be:c9:30:fc:c4:4c:0d:6c:
41:ed:dc:dd:7b:7c:24:d4:c1:32:1a:09:0c:d9:f9:1a:b0:74:
28:e3:f3:2e:4d:7e:c5:81:bd:45:ac:e3:ad:66:7b:e5:4d:e1:
54:6c:6d:0a:9f:07:d5:f9:c3:51:12:fb:60:98:2f:33:d2:ca:
d3:95:04:3c:0a:b6:c5:a5:8c:34:9a:bf:63:ad:7d:b6:ff:19:
6f:58:1d:6a:5d:53:5c:c3:68:a9:3d:37:bf:0d:5f:3d:62:65:
6b:27:b8:92:f1:a8:98:2e:c9:6e:43:4d:6a:74:59:36:8b:1d:
d4:af:39:79:30:06:e1:29:e1:bb:55:a2:0b:f5:97:44:2e:26:
a1:ab:94:75:00:61:a3:c4:bd:30:e0:60:96:ef:5c:f0:48:2d:
66:4d:5b:e1:bc:f2:ab:c5:41:64:80:bb:42:8a:66:fd:7b:6d:
cb:2b:90:d5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC5xcIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGEzZDkyZGRhOTEwMzY3MzM5NzczZDZjYTY0ODFmYjIwN2JkMmM3MB4XDTIyMDMy
MTA4MTU0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjE2MzFiOTY1Y2Yy
ZTJiMDYzMzFkMzljOTljMjU1MGI4NTUyM2EyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN0Dl65mSoQx0FaejpKSIilrNRoMt5+Vk/Yc2gL7kp4OJ1gW
74loZwZQI/QLm4zXwNoFOrztpL6g80Nez6LlU2RhbLcSgSAhXgHJlFhdtNbUN/+0
hlIKa2wrk0DbITfe1nUwMuAcdQVyysdAwVB3O+8tREQhAyM37i2UxJc7oVQWsP+P
h1HacUyRfUfl+oo5ea32/+kAHBBLJ9yCx633T+hybiVEBsgMrGTWVAK7sxlIHs1L
P0I27WdifWY0bRC/PtF89VA+CRpdyfO3GJK5qRx6wjcUBXreIYmeDw+p5lIGjPMb
GLP/rO+acfbrYht/xBXfpo/znCmK054RT7SpF0cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhYxuWXPLisGMx05yZwlULhVI6IjAfBgNVHSMEGDAWgBQYo9kt2pEDZzOX
c9bKZIH7IHvSxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dLUFpMZHFSQTJjemwzUFd5bVNCLXlCNzBzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvZTY2Zjg5LTVkZjUtNDdhYy1iN2FmLWU3NTkyMzA4ZTcwNi8x
L0lXTWJsbHp5NHJCak1kT2NtY0pWQzRWU09pSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
ZTY2Zjg5LTVkZjUtNDdhYy1iN2FmLWU3NTkyMzA4ZTcwNi8xL0dLUFpMZHFSQTJj
emwzUFd5bVNCLXlCNzBzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGNGDANBgkqhkiG9w0BAQsFAAOC
AQEAFdhJFcGMZvVL6hrtVkslzAUOn1Ipk8E80dHuKiP/s4NlfaI5FvUcvpsXBt4i
mac/bmuwJhE7BTUzOL3MZ5kUiWe0V4NY2lt7PWg5mKm/XhIkDL7JMPzETA1sQe3c
3Xt8JNTBMhoJDNn5GrB0KOPzLk1+xYG9RazjrWZ75U3hVGxtCp8H1fnDURL7YJgv
M9LK05UEPAq2xaWMNJq/Y619tv8Zb1gdal1TXMNoqT03vw1fPWJlaye4kvGomC7J
bkNNanRZNosd1K85eTAG4Snhu1WiC/WXRC4moauUdQBho8S9MOBglu9c8EgtZk1b
4bzyq8VBZIC7Qopm/XttyyuQ1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org