Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/iLukvyM9ktLpiAeBYeL-3JxOsTU.roa
File: iLukvyM9ktLpiAeBYeL-3JxOsTU.roa (raw, json)
Hash identifier: vIzwP2Og7Ogd2yyf3I+TYNXE5smn+2SeWE+oxT1qG6o=
Subject key identifier: 88:BB:A4:BF:23:3D:92:D2:E9:88:07:81:61:E2:FE:DC:9C:4E:B1:35
Certificate issuer: /CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Certificate serial: 019206E6E7AD27DBA154799BD37C68D6CB17
Authority key identifier: 93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/iLukvyM9ktLpiAeBYeL-3JxOsTU.roa
Signing time: Wed 18 Sep 2024 20:50:48 +0000
ROA not before: Wed 18 Sep 2024 20:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 185.49.120.0/23 maxlen: 24
185.49.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:e6:e7:ad:27:db:a1:54:79:9b:d3:7c:68:d6:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Validity
Not Before: Sep 18 20:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88bba4bf233d92d2e988078161e2fedc9c4eb135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:f4:59:5b:73:fe:7e:38:af:54:42:b8:7b:
b2:92:96:fe:1a:a3:d2:27:d0:fe:1b:97:47:cf:ee:
10:b2:6a:89:8a:e8:79:50:54:35:90:a2:75:5e:05:
66:97:7f:4f:b0:d8:80:f0:e1:ef:d6:b0:9f:e2:30:
9c:64:7a:a3:38:46:b6:f2:f6:36:88:58:f5:a2:aa:
bf:4f:7b:8f:5d:7a:bb:aa:2d:36:7f:13:c8:b6:ed:
1c:1c:f3:97:ea:c0:40:0e:b8:83:a3:64:c7:4c:81:
ad:9e:f5:35:12:82:ab:d3:44:2e:71:57:28:aa:fb:
fa:e6:55:62:c4:e7:f3:18:1a:be:d7:c4:2d:d5:9a:
b0:80:f3:ad:f2:c6:00:27:36:62:8f:ea:5c:bd:27:
00:f9:e3:8f:42:11:4b:50:a4:43:0a:47:75:38:42:
c5:5f:b1:1f:e1:f4:80:23:10:26:1f:d7:7d:a3:94:
22:1b:b6:b8:c3:4a:58:bf:aa:c2:a0:e7:53:0d:c0:
b6:dd:c1:3e:fe:81:86:9e:16:97:de:91:9b:74:7d:
1e:89:d0:4a:84:0c:6a:b1:61:36:ad:57:df:5a:5e:
c4:7a:ec:8f:0f:50:e3:e7:54:ed:fd:6c:4a:d6:b3:
24:a0:ba:b7:21:a4:a7:5b:21:8b:5e:91:02:27:28:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:A4:BF:23:3D:92:D2:E9:88:07:81:61:E2:FE:DC:9C:4E:B1:35
X509v3 Authority Key Identifier:
keyid:93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/iLukvyM9ktLpiAeBYeL-3JxOsTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.120.0-185.49.122.255
Signature Algorithm: sha256WithRSAEncryption
5b:47:9b:8c:4d:b2:fb:5f:2a:07:c5:45:35:cf:7b:d4:bc:a0:
13:46:ff:13:fa:f7:5f:e8:2e:9c:7d:df:75:c6:fb:67:64:8e:
8f:a8:8e:42:7c:41:83:2a:ca:16:ab:da:7e:db:77:62:29:2b:
fa:b0:44:5d:41:be:27:90:09:2f:35:b6:84:b4:b9:0a:88:c9:
3a:f3:b1:00:fa:b9:61:bf:eb:12:9d:7a:92:d2:5e:63:30:db:
fe:0d:63:77:79:e2:73:1f:8a:cf:d5:cb:02:e3:3b:2d:ec:50:
94:55:50:6c:af:3f:7b:83:69:42:49:25:27:ac:a2:d9:35:00:
27:0a:4d:20:06:40:93:1d:ef:5a:64:56:15:66:c2:44:5b:97:
0a:c8:85:6f:ba:16:eb:af:af:6b:94:cc:11:dc:70:1f:01:63:
00:11:05:c3:85:49:0b:37:44:ee:61:e2:1f:33:ae:b0:90:ea:
29:65:c8:3e:ee:50:e2:fb:73:be:6a:b2:dc:8e:53:4f:46:09:
ef:a0:53:95:46:a8:8a:2f:42:f6:19:e2:9a:ca:12:10:6b:bb:
43:80:1d:a1:b2:7e:d0:1e:69:ce:5c:d2:b9:0f:43:f0:c9:28:
81:a7:68:8d:32:81:75:c5:fb:de:64:16:41:33:94:98:e3:7e:
e7:b1:b9:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZIG5uetJ9uhVHmb03xo1ssXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzRhODJmZGMwOGYwZThkZTVkODQ4ZDM3N2UwY2M1ZDk3
Nzk5YmYwHhcNMjQwOTE4MjA1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGJiYTRiZjIzM2Q5MmQyZTk4ODA3ODE2MWUyZmVkYzljNGViMTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxND0WVtz/n44r1RCuHuykpb+GqPS
J9D+G5dHz+4QsmqJiuh5UFQ1kKJ1XgVml39PsNiA8OHv1rCf4jCcZHqjOEa28vY2
iFj1oqq/T3uPXXq7qi02fxPItu0cHPOX6sBADriDo2THTIGtnvU1EoKr00QucVco
qvv65lVixOfzGBq+18Qt1ZqwgPOt8sYAJzZij+pcvScA+eOPQhFLUKRDCkd1OELF
X7Ef4fSAIxAmH9d9o5QiG7a4w0pYv6rCoOdTDcC23cE+/oGGnhaX3pGbdH0eidBK
hAxqsWE2rVffWl7EeuyPD1Dj51Tt/WxK1rMkoLq3IaSnWyGLXpECJyhSDwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIi7pL8jPZLS6YgHgWHi/tycTrE1MB8GA1UdIwQY
MBaAFJM0qC/cCPDo3l2EjTd+DMXZd5m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pTb0w5d0k4T2plWFlTTk4zNE14ZGwzbWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjZlN2UtYWIxZC00ZGE1LTljOTYt
ZmY2OGU5MjI1ZjdkLzEvaUx1a3Z5TTlrdExwaUFlQlllTC0zSnhPc1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjZlN2UtYWIxZC00ZGE1LTljOTYtZmY2OGU5MjI1Zjdk
LzEva3pTb0w5d0k4T2plWFlTTk4zNE14ZGwzbWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5MXgD
BAC5MXowDQYJKoZIhvcNAQELBQADggEBAFtHm4xNsvtfKgfFRTXPe9S8oBNG/xP6
91/oLpx933XG+2dkjo+ojkJ8QYMqyhar2n7bd2IpK/qwRF1BvieQCS81toS0uQqI
yTrzsQD6uWG/6xKdepLSXmMw2/4NY3d54nMfis/VywLjOy3sUJRVUGyvP3uDaUJJ
JSesotk1ACcKTSAGQJMd71pkVhVmwkRblwrIhW+6Fuuvr2uUzBHccB8BYwARBcOF
SQs3RO5h4h8zrrCQ6illyD7uUOL7c75qstyOU09GCe+gU5VGqIovQvYZ4prKEhBr
u0OAHaGyftAeac5c0rkPQ/DJKIGnaI0ygXXF+95kFkEzlJjjfuexuXY=
-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org