Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/PpEKGvU8hClGRfyUXsUKDY1t6ek.roa
File: PpEKGvU8hClGRfyUXsUKDY1t6ek.roa (raw, json)
Hash identifier: /M+8LhNgYGjrUOKyu2Zyoi+hHrEyeZR0wx91ZnwvDZE=
Subject key identifier: 3E:91:0A:1A:F5:3C:84:29:46:45:FC:94:5E:C5:0A:0D:8D:6D:E9:E9
Certificate issuer: /CN=382b3395740b29ec1bea25808b676ce9ba3dd80c
Certificate serial: 01884E92BCCB746CA6459A24CA0E902EB57B
Authority key identifier: 38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCszlXQLKewb6iWAi2ds6bo92Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/PpEKGvU8hClGRfyUXsUKDY1t6ek.roa
Signing time: Wed 24 May 2023 16:23:39 +0000
ROA not before: Wed 24 May 2023 16:23:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 217.119.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:92:bc:cb:74:6c:a6:45:9a:24:ca:0e:90:2e:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382b3395740b29ec1bea25808b676ce9ba3dd80c
Validity
Not Before: May 24 16:23:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e910a1af53c84294645fc945ec50a0d8d6de9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:9f:72:7e:e0:e4:b5:c6:7c:fd:d7:54:5d:
b3:3f:37:b0:92:bd:a2:5b:78:a0:51:9f:99:e3:b3:
50:97:92:ad:f4:85:27:92:76:f7:aa:4f:3e:17:e9:
09:8c:05:86:b3:a3:53:9c:3f:6a:be:b1:c1:eb:88:
22:5c:75:00:5b:9a:d4:43:5c:ae:b5:b7:9e:53:f1:
f3:aa:14:42:72:58:6c:d0:4c:17:a5:38:13:72:8f:
54:53:7d:6a:3d:62:1c:69:20:25:2d:d7:4b:02:ff:
85:1c:1e:b3:bb:34:45:81:30:cc:25:83:69:5e:ae:
93:1a:60:9b:15:75:23:8f:37:c0:ae:da:6d:f6:fa:
39:78:18:6d:8b:6d:61:f9:0c:23:4c:0d:7f:2c:41:
70:98:7c:e9:79:85:55:01:75:cb:2a:17:33:cc:d4:
2c:9d:a1:4c:9c:4c:08:aa:08:ac:6d:80:6d:4f:54:
48:6e:73:0c:41:19:1f:82:c6:ca:3d:0d:dd:74:ef:
22:12:e6:53:96:2e:4e:9f:ac:32:77:b2:41:13:fa:
52:65:9f:8b:71:2f:b7:22:fd:ff:aa:9a:4c:d2:be:
f8:29:c6:2e:d4:36:42:de:b7:f0:71:dc:ff:7f:36:
74:9b:c9:7b:98:d5:d7:98:d2:c1:79:c4:f2:84:6a:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:0A:1A:F5:3C:84:29:46:45:FC:94:5E:C5:0A:0D:8D:6D:E9:E9
X509v3 Authority Key Identifier:
keyid:38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCszlXQLKewb6iWAi2ds6bo92Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/PpEKGvU8hClGRfyUXsUKDY1t6ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.141.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8c:71:72:c3:f9:92:b2:43:67:19:6e:88:a6:5c:6d:c2:c2:
90:9b:2f:18:25:27:bd:4b:aa:bb:ec:13:ab:0d:e1:fb:39:f1:
3b:54:13:81:28:0c:4d:fe:0d:cd:9a:89:4a:12:9d:26:37:87:
c1:a5:0e:5a:af:bf:58:37:be:db:ec:46:37:b8:c7:e2:e9:d6:
f5:73:22:6d:3e:45:d2:ee:c8:dd:03:09:ac:d6:ce:e5:0a:5b:
72:c6:c9:0d:20:f7:68:99:30:05:c6:4a:cb:68:a8:99:e5:ad:
65:33:c9:2d:47:45:e8:b8:5c:73:0e:ba:2e:f8:1b:f9:04:42:
2f:f5:2c:24:50:14:c2:50:14:9b:aa:c3:6a:4b:44:83:19:37:
e5:07:68:a5:28:a0:45:a5:29:a2:a3:89:df:23:70:df:6e:69:
8b:ad:b0:c9:e5:b3:dd:7d:f7:fc:4e:7d:a9:fa:c4:22:b8:84:
7e:be:04:39:38:9b:33:df:e5:d2:8f:75:3a:5f:75:97:7e:f0:
7b:13:78:76:38:2b:32:2c:cb:41:70:71:2b:30:fe:c3:30:98:
a0:16:e7:77:bf:29:8e:e2:09:e6:f1:4b:95:bf:32:e0:82:11:
e3:89:9c:f2:06:15:7d:22:c0:41:17:54:d6:03:24:8e:ce:fe:
e2:09:7f:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhOkrzLdGymRZokyg6QLrV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmIzMzk1NzQwYjI5ZWMxYmVhMjU4MDhiNjc2Y2U5YmEz
ZGQ4MGMwHhcNMjMwNTI0MTYyMzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTkxMGExYWY1M2M4NDI5NDY0NWZjOTQ1ZWM1MGEwZDhkNmRlOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uufcn7g5LXGfP3XVF2zPzewkr2i
W3igUZ+Z47NQl5Kt9IUnknb3qk8+F+kJjAWGs6NTnD9qvrHB64giXHUAW5rUQ1yu
tbeeU/HzqhRCclhs0EwXpTgTco9UU31qPWIcaSAlLddLAv+FHB6zuzRFgTDMJYNp
Xq6TGmCbFXUjjzfArtpt9vo5eBhti21h+QwjTA1/LEFwmHzpeYVVAXXLKhczzNQs
naFMnEwIqgisbYBtT1RIbnMMQRkfgsbKPQ3ddO8iEuZTli5On6wyd7JBE/pSZZ+L
cS+3Iv3/qppM0r74KcYu1DZC3rfwcdz/fzZ0m8l7mNXXmNLBecTyhGpnKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD6RChr1PIQpRkX8lF7FCg2NbenpMB8GA1UdIwQY
MBaAFDgrM5V0CynsG+olgItnbOm6PdgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NzemxYUUxLZXdiNmlXQWkyZHM2Ym85MkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yYWJjNWUtZjE0Ni00MjBmLTkyMjUt
ZDkzMTkzMjkwZjBkLzEvUHBFS0d2VThoQ2xHUmZ5VVhzVUtEWTF0NmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yYWJjNWUtZjE0Ni00MjBmLTkyMjUtZDkzMTkzMjkwZjBk
LzEvT0NzemxYUUxLZXdiNmlXQWkyZHM2Ym85MkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeNMA0G
CSqGSIb3DQEBCwUAA4IBAQAVjHFyw/mSskNnGW6IplxtwsKQmy8YJSe9S6q77BOr
DeH7OfE7VBOBKAxN/g3NmolKEp0mN4fBpQ5ar79YN77b7EY3uMfi6db1cyJtPkXS
7sjdAwms1s7lCltyxskNIPdomTAFxkrLaKiZ5a1lM8ktR0XouFxzDrou+Bv5BEIv
9SwkUBTCUBSbqsNqS0SDGTflB2ilKKBFpSmio4nfI3DfbmmLrbDJ5bPdfff8Tn2p
+sQiuIR+vgQ5OJsz3+XSj3U6X3WXfvB7E3h2OCsyLMtBcHErMP7DMJigFud3vymO
4gnm8UuVvzLgghHjiZzyBhV9IsBBF1TWAySOzv7iCX/o
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org