Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/k9EfRr8yA8o2WsBoBS74PMQ0CvI.roa
File: k9EfRr8yA8o2WsBoBS74PMQ0CvI.roa (raw, json)
Hash identifier: m/wXdsdA+uzHA6RvPirys9/ejR7zx8rDmEdpykc6Ng4=
Subject key identifier: 93:D1:1F:46:BF:32:03:CA:36:5A:C0:68:05:2E:F8:3C:C4:34:0A:F2
Certificate issuer: /CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Certificate serial: 018B01062D92C1DC1F0EB82F9B04F72BD030
Authority key identifier: F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/k9EfRr8yA8o2WsBoBS74PMQ0CvI.roa
Signing time: Thu 05 Oct 2023 18:07:43 +0000
ROA not before: Thu 05 Oct 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 213.109.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:06:2d:92:c1:dc:1f:0e:b8:2f:9b:04:f7:2b:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Validity
Not Before: Oct 5 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d11f46bf3203ca365ac068052ef83cc4340af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:7c:12:90:4c:c0:cd:27:3e:07:34:72:0d:
75:68:86:95:bf:eb:a9:60:5a:ae:49:92:16:a7:59:
66:0c:e5:17:51:8e:71:22:ad:8e:4c:e8:cb:c2:4a:
4b:bd:74:01:72:5e:8d:85:c6:db:ed:56:2b:46:ed:
42:55:57:94:15:54:61:4e:dd:55:19:46:96:c8:e2:
e9:63:ad:cc:3c:3f:6c:eb:a8:15:dc:6d:59:8b:45:
fa:c5:3e:32:bf:6c:c2:0c:e1:99:fe:ae:77:5a:58:
6e:54:78:a0:a8:f5:f3:ac:f0:cd:4d:c9:f5:9b:bc:
a4:77:c4:2c:cf:46:7d:65:b9:6e:1f:21:e0:82:cb:
e2:ac:6c:ce:73:20:b4:a5:bc:eb:e6:a0:62:c4:d2:
a6:6e:93:29:7a:a8:d2:b7:53:dc:f3:89:d6:65:b7:
f5:0c:c0:c4:fe:42:44:47:0b:43:93:27:f8:d3:35:
f8:3d:18:12:03:b0:6a:ee:2d:1e:97:91:f3:2e:cb:
3d:d8:32:94:f8:80:52:29:76:6f:67:55:f6:05:3e:
46:f2:eb:87:34:71:aa:ee:7a:0a:ff:d8:0c:26:eb:
e5:4b:a7:07:66:65:9f:03:23:8d:2a:c7:56:4a:88:
d4:30:75:fa:34:52:aa:9d:12:05:43:4b:d1:6c:8d:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:1F:46:BF:32:03:CA:36:5A:C0:68:05:2E:F8:3C:C4:34:0A:F2
X509v3 Authority Key Identifier:
keyid:F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/k9EfRr8yA8o2WsBoBS74PMQ0CvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f0:85:83:c3:d4:c6:d7:c4:92:e2:fd:0c:41:d8:7c:98:04:
9a:27:7c:a9:83:c2:d3:2a:a5:6a:7c:ac:c0:f9:3b:b0:af:6f:
fb:5b:0f:e5:91:00:15:95:a0:89:a2:db:02:ad:c5:5d:e9:ab:
c8:b2:bb:48:0b:54:09:e0:16:b5:7f:a8:5e:88:d0:33:4d:46:
c8:30:56:72:a9:e2:cd:14:94:83:d1:b5:ac:2a:34:84:d7:ef:
2f:99:1e:bd:25:cb:32:18:0e:f2:50:cd:64:91:cf:bc:2f:5d:
05:a1:f9:d4:e5:d1:f3:11:d3:f1:4d:06:15:de:cd:ca:ac:e4:
38:c9:00:16:98:70:a1:6a:d9:17:39:95:47:f4:92:ac:1f:3a:
1b:23:72:d6:cd:25:92:7d:7b:12:27:03:09:6d:ad:03:ae:4d:
89:c4:12:c4:39:b2:17:2e:cd:d7:d7:6a:96:bd:46:09:4d:bb:
71:73:73:97:88:3e:2a:ab:7a:b1:7f:0e:d6:c5:d7:93:3d:4c:
ea:6a:e0:bd:08:13:d6:90:72:b3:7f:d9:ad:a8:de:e6:c6:f9:
a8:d8:1a:e4:95:fb:12:37:f3:f4:c0:5a:7d:6b:9f:b2:53:33:
eb:13:63:cf:b5:8a:82:95:84:07:da:77:e4:07:bc:d8:6b:c4:
8f:75:f9:ea
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYsBBi2SwdwfDrgvmwT3K9AwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjZjZTE4MTAyYjM2YWNhNmY3ZTk3NTA3YzY1Y2RjZGQx
YWVlYTUwHhcNMjMxMDA1MTgwNzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2QxMWY0NmJmMzIwM2NhMzY1YWMwNjgwNTJlZjgzY2M0MzQwYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe18EpBMwM0nPgc0cg11aIaVv+up
YFquSZIWp1lmDOUXUY5xIq2OTOjLwkpLvXQBcl6Nhcbb7VYrRu1CVVeUFVRhTt1V
GUaWyOLpY63MPD9s66gV3G1Zi0X6xT4yv2zCDOGZ/q53WlhuVHigqPXzrPDNTcn1
m7ykd8Qsz0Z9ZbluHyHggsvirGzOcyC0pbzr5qBixNKmbpMpeqjSt1Pc84nWZbf1
DMDE/kJERwtDkyf40zX4PRgSA7Bq7i0el5HzLss92DKU+IBSKXZvZ1X2BT5G8uuH
NHGq7noK/9gMJuvlS6cHZmWfAyONKsdWSojUMHX6NFKqnRIFQ0vRbI2ixwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJPRH0a/MgPKNlrAaAUu+DzENAryMB8GA1UdIwQY
MBaAFPi2zhgQKzaspvfpdQfGXNzdGu6lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MYk9HQkFyTnF5bTktbDFCOFpjM04wYTdxVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZWIzYzk0LTFkZTktNGVkMy1iN2Iz
LTE2MmVmZGY4MjgzZS8xL2s5RWZScjh5QThvMldzQm9CUzc0UE1RMEN2SS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDYvZWIzYzk0LTFkZTktNGVkMy1iN2IzLTE2MmVmZGY4Mjgz
ZS8xLzEtTGJPR0JBck5xeW05LWwxQjhaYzNOMGE3cVUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVbcMw
DQYJKoZIhvcNAQELBQADggEBADPwhYPD1MbXxJLi/QxB2HyYBJonfKmDwtMqpWp8
rMD5O7Cvb/tbD+WRABWVoImi2wKtxV3pq8iyu0gLVAngFrV/qF6I0DNNRsgwVnKp
4s0UlIPRtawqNITX7y+ZHr0lyzIYDvJQzWSRz7wvXQWh+dTl0fMR0/FNBhXezcqs
5DjJABaYcKFq2Rc5lUf0kqwfOhsjctbNJZJ9exInAwltrQOuTYnEEsQ5shcuzdfX
apa9RglNu3Fzc5eIPiqrerF/DtbF15M9TOpq4L0IE9aQcrN/2a2o3ubG+ajYGuSV
+xI38/TAWn1rn7JTM+sTY8+1ioKVhAfad+QHvNhrxI91+eo=
-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:03 2023 by rpki-client on console-fra.rpki-client.org