Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/tnYEQ3qp4nUWYxRxeoTC0aqJ8Mc.roa
File: tnYEQ3qp4nUWYxRxeoTC0aqJ8Mc.roa (raw, json)
Hash identifier: dt3ZdaGj7WX+5K0cH9yNbmXmhoOOyadq/AY3aESZfUo=
Subject key identifier: B6:76:04:43:7A:A9:E2:75:16:63:14:71:7A:84:C2:D1:AA:89:F0:C7
Certificate issuer: /CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Certificate serial: 01856AF7D9DD04440AA6734EA107CFE1E536
Authority key identifier: F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/tnYEQ3qp4nUWYxRxeoTC0aqJ8Mc.roa
Signing time: Sun 01 Jan 2023 01:35:06 +0000
ROA not before: Sun 01 Jan 2023 01:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211195
IP address blocks: 185.65.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f7:d9:dd:04:44:0a:a6:73:4e:a1:07:cf:e1:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Validity
Not Before: Jan 1 01:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b67604437aa9e275166314717a84c2d1aa89f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:f4:b5:39:e2:96:e1:76:f9:00:96:68:40:
ba:d5:34:32:e7:73:7e:f1:75:2c:95:75:78:67:d9:
4b:55:03:a9:95:ed:73:0d:3c:e4:22:29:a3:f2:32:
97:d0:96:94:7a:ad:b8:dc:44:f5:6b:f9:f7:93:67:
fc:f4:c9:06:7f:55:21:d9:22:5f:1f:60:27:14:62:
d3:b2:e4:c6:b3:62:43:f9:ae:c3:57:28:ff:d3:f5:
d3:38:cc:fa:99:c9:ac:1c:f5:7e:46:f9:ec:87:e2:
b9:4a:ac:ed:0a:4b:8c:8a:cd:30:af:db:4f:59:c1:
7e:73:a1:83:d9:a1:fd:18:42:21:5d:86:00:76:07:
3d:35:23:c2:2b:bd:6f:e6:b5:c1:b1:9b:57:13:17:
94:f2:83:c3:b9:aa:96:3e:bf:53:54:65:b7:53:cb:
6a:84:fa:eb:6c:96:67:9f:92:db:03:0a:e9:4c:4b:
ce:11:59:13:39:89:70:24:36:fb:27:dc:6e:cc:b1:
85:f3:4e:99:a7:6e:81:e6:e5:76:fa:87:36:b5:ac:
cb:14:5c:26:7b:b0:03:b0:7b:1d:34:c4:27:40:2b:
30:b2:3a:c0:53:e0:ed:d9:aa:4c:22:09:35:8b:b1:
ab:fb:42:60:47:e9:1f:77:0a:95:45:bb:d1:9a:fc:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:04:43:7A:A9:E2:75:16:63:14:71:7A:84:C2:D1:AA:89:F0:C7
X509v3 Authority Key Identifier:
keyid:F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/tnYEQ3qp4nUWYxRxeoTC0aqJ8Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f2:5e:f0:ec:90:59:0b:72:4e:d1:b4:46:51:7a:a1:92:10:
db:d3:01:7d:ed:82:6a:a7:4f:ac:9f:4a:71:0d:6c:ab:1e:7c:
51:57:aa:b5:cf:3c:32:38:5a:67:aa:90:4f:78:32:22:07:f7:
ab:3c:1e:f5:be:d3:c5:af:36:d6:c4:c2:9b:84:71:48:8d:2e:
e1:0b:02:8e:7b:da:4f:bf:c6:76:ed:90:40:78:1b:99:60:b7:
1c:82:d7:02:89:d0:b0:f3:a8:a6:ef:a4:b1:c6:24:86:78:f3:
f6:36:e8:56:a1:95:61:9a:eb:56:a2:f7:e9:fa:16:8c:36:90:
28:2d:b5:60:a6:f4:24:a4:a3:2a:c6:5e:6c:5a:89:53:fe:bc:
04:2a:73:c8:fb:d9:88:c5:8d:51:82:8a:14:e3:d6:70:3f:4d:
7d:51:4e:8f:cf:dd:8d:ec:56:70:cd:be:75:81:b4:fa:90:ed:
31:e1:cc:37:77:51:aa:99:39:1b:50:76:13:69:d6:70:e6:07:
2c:52:46:cd:79:58:c3:cf:15:ba:f6:51:08:a4:b2:9d:c1:0b:
98:4f:b1:5f:4e:51:24:5e:02:0c:b1:8e:0e:b0:4f:32:1c:0f:
60:80:8b:43:95:54:a7:ce:56:ce:db:72:c9:e6:1f:00:3b:f2:
29:be:3b:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVq99ndBEQKpnNOoQfP4eU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTA4NTQzNjhiZDNhYTBiZWU0OWJmN2VkYzAzMTFiOTBk
ZjM3MTcwHhcNMjMwMTAxMDEzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjc2MDQ0MzdhYTllMjc1MTY2MzE0NzE3YTg0YzJkMWFhODlmMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpL0tTniluF2+QCWaEC61TQy53N+
8XUslXV4Z9lLVQOple1zDTzkIimj8jKX0JaUeq243ET1a/n3k2f89MkGf1Uh2SJf
H2AnFGLTsuTGs2JD+a7DVyj/0/XTOMz6mcmsHPV+Rvnsh+K5SqztCkuMis0wr9tP
WcF+c6GD2aH9GEIhXYYAdgc9NSPCK71v5rXBsZtXExeU8oPDuaqWPr9TVGW3U8tq
hPrrbJZnn5LbAwrpTEvOEVkTOYlwJDb7J9xuzLGF806Zp26B5uV2+oc2tazLFFwm
e7ADsHsdNMQnQCswsjrAU+Dt2apMIgk1i7Gr+0JgR+kfdwqVRbvRmvyRpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZ2BEN6qeJ1FmMUcXqEwtGqifDHMB8GA1UdIwQY
MBaAFPZQhUNovTqgvuSb9+3AMRuQ3zcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUt
Y2JlOTUxMzliOWE2LzEvdG5ZRVEzcXA0blVXWXhSeGVvVEMwYXFKOE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUtY2JlOTUxMzliOWE2
LzEvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUFHMA0G
CSqGSIb3DQEBCwUAA4IBAQAM8l7w7JBZC3JO0bRGUXqhkhDb0wF97YJqp0+sn0px
DWyrHnxRV6q1zzwyOFpnqpBPeDIiB/erPB71vtPFrzbWxMKbhHFIjS7hCwKOe9pP
v8Z27ZBAeBuZYLccgtcCidCw86im76SxxiSGePP2NuhWoZVhmutWovfp+haMNpAo
LbVgpvQkpKMqxl5sWolT/rwEKnPI+9mIxY1RgooU49ZwP019UU6Pz92N7FZwzb51
gbT6kO0x4cw3d1GqmTkbUHYTadZw5gcsUkbNeVjDzxW69lEIpLKdwQuYT7FfTlEk
XgIMsY4OsE8yHA9ggItDlVSnzlbO23LJ5h8AO/IpvjuV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org