Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/4a342a-0caa-44a7-854a-84f55a5beb37/1/SrYN1S0MYCEK-Z7P0g8y0WRhWAo.roa
File: SrYN1S0MYCEK-Z7P0g8y0WRhWAo.roa (raw, json)
Hash identifier: n7ruTpkP+H0iRLC1Us9Oti88SVHPykOSfF6cXcc+vN8=
Subject key identifier: 4A:B6:0D:D5:2D:0C:60:21:0A:F9:9E:CF:D2:0F:32:D1:64:61:58:0A
Certificate issuer: /CN=cadc8f3edfbf6b9d4d8f51452fd1d37cfbf854f3
Certificate serial: 0119808D
Authority key identifier: CA:DC:8F:3E:DF:BF:6B:9D:4D:8F:51:45:2F:D1:D3:7C:FB:F8:54:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytyPPt-_a51Nj1FFL9HTfPv4VPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/4a342a-0caa-44a7-854a-84f55a5beb37/1/SrYN1S0MYCEK-Z7P0g8y0WRhWAo.roa
Signing time: Sat 01 Jan 2022 06:00:58 +0000
ROA not before: Sat 01 Jan 2022 06:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 176.56.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18448525 (0x119808d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc8f3edfbf6b9d4d8f51452fd1d37cfbf854f3
Validity
Not Before: Jan 1 06:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab60dd52d0c60210af99ecfd20f32d16461580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:e7:86:3a:d1:57:4e:fb:f9:58:63:e7:8b:
1c:ea:02:02:80:d2:b8:e6:14:30:47:48:82:6d:f4:
34:35:4e:bb:0e:8f:36:24:ed:3e:1e:76:c8:3d:31:
ba:18:47:d1:32:81:da:44:d6:57:f3:7c:1c:d4:d1:
bc:89:96:3c:9e:ce:c2:57:92:b1:94:cb:b5:c8:31:
f6:4c:0c:04:f3:0a:9a:da:c2:4a:6a:82:27:0e:63:
71:d9:97:4c:90:24:d9:b8:3b:34:74:3e:5b:69:e4:
75:fa:60:9b:24:70:f7:39:7c:15:53:cd:21:5e:3a:
ea:c2:a3:c5:ff:ef:08:94:d0:4c:bf:78:0c:a8:4a:
ac:28:10:d7:dd:05:86:4d:53:65:74:7d:6e:a1:da:
bb:29:68:a8:e0:54:fa:28:59:33:31:a6:15:de:40:
c2:04:7b:9d:e2:4b:75:0a:1e:b1:19:3f:1f:f4:f9:
21:51:22:c5:79:0e:cc:27:7e:55:94:b1:58:1e:2a:
cb:77:63:8f:ab:09:ac:b0:4e:e1:49:d4:74:81:f9:
04:3a:57:fe:d6:d6:4b:9d:5e:ef:ab:ca:cc:cb:0f:
99:a3:30:18:25:04:54:51:8c:2c:c5:ab:82:27:96:
cc:0c:27:04:b1:36:6b:a0:6d:5e:c6:3c:ce:8d:db:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:0D:D5:2D:0C:60:21:0A:F9:9E:CF:D2:0F:32:D1:64:61:58:0A
X509v3 Authority Key Identifier:
keyid:CA:DC:8F:3E:DF:BF:6B:9D:4D:8F:51:45:2F:D1:D3:7C:FB:F8:54:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytyPPt-_a51Nj1FFL9HTfPv4VPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4a342a-0caa-44a7-854a-84f55a5beb37/1/SrYN1S0MYCEK-Z7P0g8y0WRhWAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4a342a-0caa-44a7-854a-84f55a5beb37/1/ytyPPt-_a51Nj1FFL9HTfPv4VPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:51:51:d1:53:f2:0e:a3:fd:19:6e:cf:18:24:58:11:c9:c1:
4d:67:32:c7:1b:e0:13:4f:01:a6:16:13:10:fc:33:26:5e:c6:
57:23:a6:8e:1b:a4:e1:89:4d:61:61:54:99:f3:13:71:10:78:
0f:04:52:6e:a2:a1:db:12:33:40:e1:c9:f2:5c:5f:7c:cb:f7:
83:9c:ca:a7:65:a2:ee:cc:f2:6a:51:f1:fb:53:04:1b:d3:5c:
2a:cd:03:e6:d6:d1:31:1b:23:5d:5f:8a:d7:ff:c0:3b:e9:da:
5e:f2:97:3b:56:a7:a9:de:8f:eb:44:71:18:a7:e8:18:dc:01:
4a:2d:69:97:93:0a:fb:c4:9c:90:d2:dc:a0:5d:19:b9:98:5a:
2f:ca:48:a1:70:38:0e:a7:fb:8f:e3:dc:0d:12:d4:63:00:ed:
0c:cf:ba:61:2b:dc:02:71:22:7a:5e:d6:df:0a:e5:74:f8:73:
bd:af:d8:12:14:52:88:28:a3:74:39:58:24:f4:83:06:c1:71:
e9:49:b3:d1:bc:ea:10:b1:4e:34:27:76:2c:e5:d4:96:62:56:
46:50:31:9e:f2:1c:df:b2:c1:dc:3d:e4:48:de:c9:ee:25:19:
15:34:15:5a:8a:4f:8f:f1:f8:1c:3d:09:ca:51:3e:3c:7e:fc:
55:86:e1:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARmAjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YWRjOGYzZWRmYmY2YjlkNGQ4ZjUxNDUyZmQxZDM3Y2ZiZjg1NGYzMB4XDTIyMDEw
MTA2MDA1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFiNjBkZDUyZDBj
NjAyMTBhZjk5ZWNmZDIwZjMyZDE2NDYxNTgwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALay54Y60VdO+/lYY+eLHOoCAoDSuOYUMEdIgm30NDVOuw6P
NiTtPh52yD0xuhhH0TKB2kTWV/N8HNTRvImWPJ7OwleSsZTLtcgx9kwMBPMKmtrC
SmqCJw5jcdmXTJAk2bg7NHQ+W2nkdfpgmyRw9zl8FVPNIV466sKjxf/vCJTQTL94
DKhKrCgQ190Fhk1TZXR9bqHauyloqOBU+ihZMzGmFd5AwgR7neJLdQoesRk/H/T5
IVEixXkOzCd+VZSxWB4qy3djj6sJrLBO4UnUdIH5BDpX/tbWS51e76vKzMsPmaMw
GCUEVFGMLMWrgieWzAwnBLE2a6BtXsY8zo3bf4UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKtg3VLQxgIQr5ns/SDzLRZGFYCjAfBgNVHSMEGDAWgBTK3I8+379rnU2P
UUUv0dN8+/hU8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3l0eVBQdC1fYTUxTmoxRkZMOUhUZlB2NFZQTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGEvNGEzNDJhLTBjYWEtNDRhNy04NTRhLTg0ZjU1YTViZWIzNy8x
L1NyWU4xUzBNWUNFSy1aN1AwZzh5MFdSaFdBby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEv
NGEzNDJhLTBjYWEtNDRhNy04NTRhLTg0ZjU1YTViZWIzNy8xL3l0eVBQdC1fYTUx
TmoxRkZMOUhUZlB2NFZQTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALA4IjANBgkqhkiG9w0BAQsFAAOC
AQEA2FFR0VPyDqP9GW7PGCRYEcnBTWcyxxvgE08BphYTEPwzJl7GVyOmjhuk4YlN
YWFUmfMTcRB4DwRSbqKh2xIzQOHJ8lxffMv3g5zKp2Wi7szyalHx+1MEG9NcKs0D
5tbRMRsjXV+K1//AO+naXvKXO1anqd6P60RxGKfoGNwBSi1pl5MK+8SckNLcoF0Z
uZhaL8pIoXA4Dqf7j+PcDRLUYwDtDM+6YSvcAnEiel7W3wrldPhzva/YEhRSiCij
dDlYJPSDBsFx6Umz0bzqELFONCd2LOXUlmJWRlAxnvIc37LB3D3kSN7J7iUZFTQV
WopPj/H4HD0JylE+PH78VYbhWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org