Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa
File: hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa (raw, json)
Hash identifier: hB4bg/RNkMnjB05Rug2GEYcoWabUjy/vDPdnau0MqcQ=
Subject key identifier: 84:AD:C8:5E:A0:28:77:DA:76:B0:95:59:BD:C3:A6:7D:89:C9:AB:84
Certificate issuer: /CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Certificate serial: 018CC492BEE76748CEE575F0D2109C63EA6C
Authority key identifier: F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa
Signing time: Mon 01 Jan 2024 10:30:00 +0000
ROA not before: Mon 01 Jan 2024 10:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211195
IP address blocks: 185.65.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:be:e7:67:48:ce:e5:75:f0:d2:10:9c:63:ea:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Validity
Not Before: Jan 1 10:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84adc85ea02877da76b09559bdc3a67d89c9ab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:b0:1f:55:e2:5a:4a:6d:98:05:98:0d:1a:
b4:a0:51:8b:b6:48:7b:99:54:11:99:03:3c:ac:0d:
df:b3:bf:3d:fc:5c:99:ad:ae:dd:df:b4:3f:76:f5:
c5:04:8f:56:b7:a8:3d:57:50:13:f2:b1:3b:71:97:
5f:94:dd:b0:65:9e:55:da:f1:96:f3:f0:9e:cf:a2:
0c:06:fd:c0:78:19:fa:ef:bc:44:50:e9:b4:31:cf:
e2:ea:32:6c:7d:7c:3b:12:8c:02:ba:b0:47:05:a6:
fc:5e:f4:09:82:0f:9d:85:1d:ce:4b:e4:ab:7f:16:
43:08:28:82:e0:df:49:6f:78:cd:4e:e4:b9:b0:95:
3e:7d:ee:eb:12:f7:16:d3:6a:6f:0c:69:cf:68:9d:
3e:73:ae:47:53:a7:8b:64:55:2f:a7:3e:f3:fe:5f:
e6:88:47:9e:17:26:97:53:78:57:ab:d3:ad:17:b2:
8e:36:11:f7:0a:57:c5:6b:fa:36:85:73:a0:89:a0:
a2:d1:3e:5d:2c:ed:01:35:4d:44:d2:e6:58:e6:63:
30:a0:cd:15:8c:3c:08:4c:9d:04:5d:af:c0:a1:8c:
2b:87:f2:e5:93:90:7c:f3:85:ea:18:6d:82:f6:ea:
0d:fa:37:2b:7f:2f:da:f1:34:a3:08:65:80:ea:e5:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:C8:5E:A0:28:77:DA:76:B0:95:59:BD:C3:A6:7D:89:C9:AB:84
X509v3 Authority Key Identifier:
keyid:F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.71.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8c:5a:68:cf:c6:94:6f:77:7e:4e:b8:f9:92:66:ca:b3:19:
fc:44:31:37:b1:10:c3:2e:f0:d9:ba:cc:0f:5e:8a:c1:51:50:
92:50:d8:8e:4c:db:7a:c2:c7:7a:80:cb:c3:d3:1a:58:a0:fe:
7e:78:d0:c8:cd:fb:97:bd:8f:d0:9a:a1:b1:50:46:85:71:7d:
ea:ea:c9:04:ca:99:6c:73:1c:5e:ce:c5:8d:94:0c:35:7e:3b:
7d:dc:ad:93:3d:f9:78:f1:d8:ff:c7:a1:f2:20:0c:58:5a:5e:
fa:e3:7d:70:56:37:79:f3:e4:54:c6:dc:14:a6:71:7b:fe:56:
af:43:1d:8b:00:82:6d:22:bf:72:71:07:8c:18:cb:be:40:87:
f3:fa:f8:a2:f6:66:57:67:e1:ac:4b:59:a8:25:b1:7b:e1:49:
13:d5:73:74:6b:12:1d:c3:ef:fc:0e:b9:16:f2:67:a0:57:46:
bb:ab:b6:c0:38:8a:af:75:c7:0e:91:e1:f9:3d:1a:65:ef:61:
6a:d5:d2:f2:de:cf:06:d4:44:3d:de:27:0e:6f:9c:be:5d:b3:
fa:00:fe:77:f8:9f:c5:37:ba:fc:60:4f:83:7d:92:2e:5b:a7:
45:be:ca:9b:e1:6b:66:bc:5c:6f:3e:ce:aa:f9:ee:d5:dc:24:
c8:eb:ea:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkr7nZ0jO5XXw0hCcY+psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTA4NTQzNjhiZDNhYTBiZWU0OWJmN2VkYzAzMTFiOTBk
ZjM3MTcwHhcNMjQwMTAxMTAzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGFkYzg1ZWEwMjg3N2RhNzZiMDk1NTliZGMzYTY3ZDg5YzlhYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoGwH1XiWkptmAWYDRq0oFGLtkh7
mVQRmQM8rA3fs789/FyZra7d37Q/dvXFBI9Wt6g9V1AT8rE7cZdflN2wZZ5V2vGW
8/Cez6IMBv3AeBn677xEUOm0Mc/i6jJsfXw7EowCurBHBab8XvQJgg+dhR3OS+Sr
fxZDCCiC4N9Jb3jNTuS5sJU+fe7rEvcW02pvDGnPaJ0+c65HU6eLZFUvpz7z/l/m
iEeeFyaXU3hXq9OtF7KONhH3ClfFa/o2hXOgiaCi0T5dLO0BNU1E0uZY5mMwoM0V
jDwITJ0EXa/AoYwrh/Llk5B884XqGG2C9uoN+jcrfy/a8TSjCGWA6uXu8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIStyF6gKHfadrCVWb3Dpn2JyauEMB8GA1UdIwQY
MBaAFPZQhUNovTqgvuSb9+3AMRuQ3zcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUt
Y2JlOTUxMzliOWE2LzEvaEszSVhxQW9kOXAyc0pWWnZjT21mWW5KcTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUtY2JlOTUxMzliOWE2
LzEvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUFHMA0G
CSqGSIb3DQEBCwUAA4IBAQB1jFpoz8aUb3d+Trj5kmbKsxn8RDE3sRDDLvDZuswP
XorBUVCSUNiOTNt6wsd6gMvD0xpYoP5+eNDIzfuXvY/QmqGxUEaFcX3q6skEypls
cxxezsWNlAw1fjt93K2TPfl48dj/x6HyIAxYWl76431wVjd58+RUxtwUpnF7/lav
Qx2LAIJtIr9ycQeMGMu+QIfz+vii9mZXZ+GsS1moJbF74UkT1XN0axIdw+/8DrkW
8megV0a7q7bAOIqvdccOkeH5PRpl72Fq1dLy3s8G1EQ93icOb5y+XbP6AP53+J/F
N7r8YE+DfZIuW6dFvsqb4WtmvFxvPs6q+e7V3CTI6+qI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org