Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PWDEAvj9dyL-M0PMj1mirmbZOok.roa
File: PWDEAvj9dyL-M0PMj1mirmbZOok.roa (raw, json)
Hash identifier: TlZCQftEyg1BhtMmzSnenAVoq4dS2Em11pk20VGQ3hg=
Subject key identifier: 3D:60:C4:02:F8:FD:77:22:FE:33:43:CC:8F:59:A2:AE:66:D9:3A:89
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FFEF9443B98DBDFE4264FB452CA6
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PWDEAvj9dyL-M0PMj1mirmbZOok.roa
Signing time: Thu 15 Aug 2024 09:35:02 +0000
ROA not before: Thu 15 Aug 2024 09:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201645
IP address blocks: 194.69.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:ff:ef:94:43:b9:8d:bd:fe:42:64:fb:45:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d60c402f8fd7722fe3343cc8f59a2ae66d93a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:f2:0d:24:30:c4:28:ce:d8:d1:fb:df:2e:
80:9a:ae:c2:25:e7:24:3a:e7:e7:e0:53:ef:2f:95:
e2:30:b2:4a:2d:78:e6:b0:bd:0e:9f:f3:0e:13:82:
a4:76:86:ff:3e:c0:c8:85:74:f3:25:cb:a2:7e:c8:
25:de:b9:bb:26:19:6a:84:44:36:90:fb:1f:21:6a:
63:a4:10:2b:cc:1c:81:3e:a2:b1:04:10:60:0e:3e:
90:87:d0:a4:99:3c:cd:5a:cd:dd:87:c6:5a:a0:64:
18:69:20:52:aa:80:96:ac:36:c6:49:1d:e6:a1:85:
50:f9:a9:c5:15:90:64:71:4d:ed:57:8b:7b:a2:bb:
df:ca:c8:c5:da:7b:89:9c:59:fd:ca:f6:47:ee:82:
75:67:89:4f:57:59:d7:81:71:8e:cb:54:82:1a:38:
52:67:d3:72:14:65:14:1f:82:b5:67:e7:3c:3b:fc:
09:ec:c1:6f:b4:d2:6e:45:b9:c2:e1:fc:01:8c:a7:
24:78:85:7c:bd:9e:57:5a:03:ff:d9:fd:3f:ce:43:
eb:06:3e:3f:e2:64:e0:04:4a:2b:b2:ec:d4:cd:4e:
10:0e:79:ac:97:2a:c3:15:70:23:b4:1d:c0:38:dd:
97:e7:eb:9f:d2:0e:f5:4e:2f:af:e5:0e:fb:9b:5b:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:C4:02:F8:FD:77:22:FE:33:43:CC:8F:59:A2:AE:66:D9:3A:89
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PWDEAvj9dyL-M0PMj1mirmbZOok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7a:23:91:30:bd:26:02:3e:85:3c:81:f8:d9:f4:cf:8b:27:
7e:db:b7:f6:61:6d:8e:df:6e:f0:7e:72:50:fb:3d:ab:c0:a7:
97:7c:e1:91:ba:b3:61:d3:85:51:f9:ad:40:1b:2c:14:47:ef:
7a:28:26:0c:b6:9c:b1:5c:94:8d:5b:81:29:9f:a0:1a:88:4c:
8a:9e:27:5a:67:c2:7c:b6:10:8b:b4:6b:8e:c1:3f:a5:0e:96:
78:05:45:51:b8:64:bb:09:9e:f0:89:1e:b8:e4:dc:8b:42:40:
a6:9b:0a:06:96:b6:37:dc:bf:c1:1c:c9:40:27:39:0f:35:2c:
9a:3a:cb:9a:d2:76:bf:6f:21:32:53:80:3f:f4:9c:1a:a2:5d:
a7:82:bc:e1:45:02:bc:ee:42:34:90:30:8f:70:40:d0:2c:e3:
bd:57:f3:c3:52:05:e3:ad:e1:7a:7c:e7:f1:1e:bd:62:68:e2:
88:84:08:c1:e2:f3:62:60:36:17:cc:15:8b:4d:98:9d:48:a0:
d8:0b:fb:5a:b7:e1:38:0d:0d:5f:3e:28:70:77:e3:f7:5b:42:
a4:e6:7f:a4:1d:3a:1c:5c:9f:d2:13:ec:7e:ab:26:ed:3d:05:
35:a8:f9:80:e6:b5:6f:56:9e:e2:d7:31:f9:3a:cb:3b:eb:f6:
80:4b:d5:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFVY//vlEO5jb3+QmT7RSymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDc4OTI0MzcxNjBkZDU3NzdlZDNlZDc4ZDQ5YmM3MmI1
ZTFjNWUwHhcNMjQwODE1MDkzNTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDYwYzQwMmY4ZmQ3NzIyZmUzMzQzY2M4ZjU5YTJhZTY2ZDkzYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyETyDSQwxCjO2NH73y6Amq7CJeck
Oufn4FPvL5XiMLJKLXjmsL0On/MOE4Kkdob/PsDIhXTzJcuifsgl3rm7JhlqhEQ2
kPsfIWpjpBArzByBPqKxBBBgDj6Qh9CkmTzNWs3dh8ZaoGQYaSBSqoCWrDbGSR3m
oYVQ+anFFZBkcU3tV4t7orvfysjF2nuJnFn9yvZH7oJ1Z4lPV1nXgXGOy1SCGjhS
Z9NyFGUUH4K1Z+c8O/wJ7MFvtNJuRbnC4fwBjKckeIV8vZ5XWgP/2f0/zkPrBj4/
4mTgBEorsuzUzU4QDnmslyrDFXAjtB3AON2X5+uf0g71Ti+v5Q77m1sunwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1gxAL4/Xci/jNDzI9Zoq5m2TqJMB8GA1UdIwQY
MBaAFGZHiSQ3Fg3Vd37T7XjUm8crXhxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzIt
ZjhhZjU2ODU2M2U0LzEvUFdERUF2ajlkeUwtTTBQTWoxbWlybWJaT29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzItZjhhZjU2ODU2M2U0
LzEvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkW0MA0G
CSqGSIb3DQEBCwUAA4IBAQAqeiORML0mAj6FPIH42fTPiyd+27f2YW2O327wfnJQ
+z2rwKeXfOGRurNh04VR+a1AGywUR+96KCYMtpyxXJSNW4Epn6AaiEyKnidaZ8J8
thCLtGuOwT+lDpZ4BUVRuGS7CZ7wiR645NyLQkCmmwoGlrY33L/BHMlAJzkPNSya
Osua0na/byEyU4A/9Jwaol2ngrzhRQK87kI0kDCPcEDQLOO9V/PDUgXjreF6fOfx
Hr1iaOKIhAjB4vNiYDYXzBWLTZidSKDYC/tat+E4DQ1fPihwd+P3W0Kk5n+kHToc
XJ/SE+x+qybtPQU1qPmA5rVvVp7i1zH5Oss76/aAS9Ux
-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org