Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ndFBcggcrzyD2IK9lfZ3NTagTLI.roa
File: ndFBcggcrzyD2IK9lfZ3NTagTLI.roa (raw, json)
Hash identifier: BdBEOM0L84RPqcmBEp3cTLJkU2J7rAwn2Ji/5aY15F4=
Subject key identifier: 9D:D1:41:72:08:1C:AF:3C:83:D8:82:BD:95:F6:77:35:36:A0:4C:B2
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FB0CBEDA5C43E5C211F1A8A9DA71
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ndFBcggcrzyD2IK9lfZ3NTagTLI.roa
Signing time: Thu 15 Aug 2024 09:35:01 +0000
ROA not before: Thu 15 Aug 2024 09:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22731
IP address blocks: 194.69.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fb:0c:be:da:5c:43:e5:c2:11:f1:a8:a9:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dd14172081caf3c83d882bd95f6773536a04cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:72:e2:ad:5c:8c:43:6c:f4:71:7e:4f:8f:
b1:58:9a:6b:f5:81:a2:19:42:5f:b7:58:25:93:b3:
a3:49:d0:9c:9a:42:c8:e5:e0:dd:d4:45:02:01:fa:
b8:86:91:da:f5:96:03:53:63:00:62:c7:36:f7:aa:
e2:93:c6:3e:83:8e:87:ea:43:07:56:10:86:b7:a6:
aa:59:2f:2f:a0:66:a6:ad:6f:b6:ce:a1:4a:a7:13:
e5:a6:a5:a0:a3:5e:b8:35:b8:55:80:06:02:31:d0:
79:4d:04:b2:b2:77:ba:b2:bb:4b:50:22:11:1b:fd:
b7:e8:33:0a:8c:00:ec:d5:e9:fa:2f:34:20:ab:07:
d4:c5:da:84:49:0a:03:f5:c4:f6:bb:0a:7c:d8:c4:
c3:ef:76:49:ef:47:d7:0f:d6:61:5d:fa:d7:0c:5c:
36:17:4d:b4:c2:d6:33:1e:4e:6c:08:b0:1c:e7:28:
1e:31:10:b1:d9:07:0c:85:20:6b:42:c5:52:30:c3:
fb:45:e7:db:10:62:ac:46:52:2a:b5:ca:7c:ec:fb:
c9:7a:32:39:97:65:6b:54:83:54:49:18:1e:c2:ff:
d3:c0:7d:ad:7d:44:c6:87:c2:3d:e9:bc:a9:0d:cf:
e4:f2:ef:67:88:9b:20:55:e6:77:cf:2b:cd:85:c1:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:41:72:08:1C:AF:3C:83:D8:82:BD:95:F6:77:35:36:A0:4C:B2
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ndFBcggcrzyD2IK9lfZ3NTagTLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:78:3f:f0:2d:2a:58:30:ae:4e:c8:f0:7f:94:34:7a:0f:03:
49:20:25:7f:e6:ce:d7:d7:71:d5:97:e6:58:9a:13:af:88:96:
38:35:00:fc:8d:38:70:1b:fb:4e:61:b1:da:a2:9a:c3:fc:41:
b2:39:27:f5:5c:23:45:fc:51:91:af:d4:c9:a0:06:28:84:98:
72:ae:5d:d1:b7:b1:5a:c9:d1:0c:16:c6:72:d0:55:1b:2d:60:
ac:d4:48:82:fd:31:11:e1:43:80:d1:df:f5:a4:54:92:e9:17:
38:d3:57:0d:cc:63:ca:45:72:47:e9:29:85:1e:91:3e:8c:77:
32:85:93:60:c0:39:6f:13:b6:d5:e1:0d:37:41:9b:57:63:99:
bc:81:6b:d1:f9:cd:20:db:ed:d7:be:25:a8:a7:78:bb:f3:4f:
21:de:96:c7:51:02:0e:e9:57:9f:ff:a8:bc:e5:bd:b8:39:6c:
9d:5f:d0:29:d7:da:41:b7:be:90:39:23:f7:b4:ae:8b:59:63:
7d:8e:ce:8a:42:49:37:bd:4b:07:a5:6d:bd:ec:8a:c1:0d:75:
73:7e:56:83:1b:c6:7d:02:2c:6b:33:fe:f7:b1:e4:ae:6a:ac:
ca:81:93:45:df:72:21:bf:57:3b:da:42:af:6a:3e:ec:2a:fe:
34:3a:82:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFVY/sMvtpcQ+XCEfGoqdpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDc4OTI0MzcxNjBkZDU3NzdlZDNlZDc4ZDQ5YmM3MmI1
ZTFjNWUwHhcNMjQwODE1MDkzNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQxNDE3MjA4MWNhZjNjODNkODgyYmQ5NWY2NzczNTM2YTA0Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Jy4q1cjENs9HF+T4+xWJpr9YGi
GUJft1glk7OjSdCcmkLI5eDd1EUCAfq4hpHa9ZYDU2MAYsc296rik8Y+g46H6kMH
VhCGt6aqWS8voGamrW+2zqFKpxPlpqWgo164NbhVgAYCMdB5TQSysne6srtLUCIR
G/236DMKjADs1en6LzQgqwfUxdqESQoD9cT2uwp82MTD73ZJ70fXD9ZhXfrXDFw2
F020wtYzHk5sCLAc5ygeMRCx2QcMhSBrQsVSMMP7RefbEGKsRlIqtcp87PvJejI5
l2VrVINUSRgewv/TwH2tfUTGh8I96bypDc/k8u9niJsgVeZ3zyvNhcE1ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3RQXIIHK88g9iCvZX2dzU2oEyyMB8GA1UdIwQY
MBaAFGZHiSQ3Fg3Vd37T7XjUm8crXhxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzIt
ZjhhZjU2ODU2M2U0LzEvbmRGQmNnZ2NyenlEMklLOWxmWjNOVGFnVExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzItZjhhZjU2ODU2M2U0
LzEvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWwMA0G
CSqGSIb3DQEBCwUAA4IBAQBVeD/wLSpYMK5OyPB/lDR6DwNJICV/5s7X13HVl+ZY
mhOviJY4NQD8jThwG/tOYbHaoprD/EGyOSf1XCNF/FGRr9TJoAYohJhyrl3Rt7Fa
ydEMFsZy0FUbLWCs1EiC/TER4UOA0d/1pFSS6Rc401cNzGPKRXJH6SmFHpE+jHcy
hZNgwDlvE7bV4Q03QZtXY5m8gWvR+c0g2+3XviWop3i7808h3pbHUQIO6Vef/6i8
5b24OWydX9Ap19pBt76QOSP3tK6LWWN9js6KQkk3vUsHpW297IrBDXVzflaDG8Z9
AixrM/73seSuaqzKgZNF33Ihv1c72kKvaj7sKv40OoLP
-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org