Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/ivxEPWnw8yN6BPSVJV-ol8HkrX4.roa
File: ivxEPWnw8yN6BPSVJV-ol8HkrX4.roa (raw, json)
Hash identifier: ZV+uu0qYx5FmA+x/Swg+F6HU+1t1DS5LKUPOp8tCp5s=
Subject key identifier: 8A:FC:44:3D:69:F0:F3:23:7A:04:F4:95:25:5F:A8:97:C1:E4:AD:7E
Certificate issuer: /CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Certificate serial: E66068
Authority key identifier: F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/ivxEPWnw8yN6BPSVJV-ol8HkrX4.roa
Signing time: Sat 01 Jan 2022 05:51:38 +0000
ROA not before: Sat 01 Jan 2022 05:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 194.69.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15097960 (0xe66068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Validity
Not Before: Jan 1 05:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8afc443d69f0f3237a04f495255fa897c1e4ad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:f8:44:9a:f0:ae:1b:57:16:ef:bd:5f:3a:
fe:7f:3f:6f:4c:f9:18:e0:3c:5a:d3:63:f6:7b:a1:
ea:fb:22:8c:92:e9:a5:99:f3:a2:f1:5e:06:df:1e:
f3:be:f6:8e:d6:ae:8e:8d:d3:3b:17:1f:17:a0:6d:
12:f7:bb:ec:c9:ad:73:53:f0:60:f9:60:cd:55:b1:
65:96:5a:be:24:63:e5:ad:92:f8:98:85:65:09:13:
10:27:56:04:d1:20:c7:5c:a3:45:31:8d:47:c0:29:
a0:03:74:09:6a:30:95:54:ae:92:65:4b:49:43:85:
a5:a6:1c:80:ff:61:4c:01:05:43:03:85:b7:ff:7f:
ee:ec:0a:be:9b:cd:0b:3e:f0:3f:99:53:65:bf:0e:
e5:db:5b:00:9b:5a:fe:30:7c:3b:e9:a2:38:18:7b:
8f:10:c9:19:70:dc:c3:a9:95:fa:db:03:92:09:d9:
5f:3f:b3:24:16:bf:04:7f:e8:fb:00:fc:07:9d:26:
d8:00:0d:35:20:be:f2:37:c8:e0:66:d2:1a:9d:6f:
c9:26:95:4b:94:f5:9d:8a:a7:f9:d8:0c:05:8a:01:
d0:cc:fa:98:3b:95:72:38:08:a9:cf:9e:d4:06:6c:
89:39:f7:96:a5:62:1c:61:ee:55:47:41:63:a2:34:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FC:44:3D:69:F0:F3:23:7A:04:F4:95:25:5F:A8:97:C1:E4:AD:7E
X509v3 Authority Key Identifier:
keyid:F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/ivxEPWnw8yN6BPSVJV-ol8HkrX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.164.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f4:dd:17:25:0a:92:69:d8:92:eb:3e:07:da:3d:2f:5f:78:
38:f4:23:10:49:8b:dd:78:7b:36:da:6c:05:c2:7f:9d:8c:4a:
be:57:cf:3d:c5:1c:8a:e0:b6:b6:61:b6:7e:4d:b3:5a:0a:0b:
0c:d7:03:4a:50:e9:46:16:a7:d4:a6:d8:a6:b9:e4:6d:62:72:
e7:04:8d:ec:8b:ea:fb:ea:9c:d0:39:80:1a:58:d8:8f:c0:2f:
2e:bd:fc:a6:81:99:b9:ab:2e:1c:01:20:cf:63:5d:2b:c6:17:
66:63:7b:38:2b:d1:e6:e6:67:63:cf:d7:cf:aa:3b:38:b8:35:
29:30:83:e5:fe:41:a5:65:6d:e3:93:8d:8f:3f:cd:18:ed:7b:
45:00:81:2b:ce:2b:13:80:fe:11:51:cd:40:8f:29:c2:a1:89:
ea:c8:b8:3e:ca:a7:a0:ae:9f:89:af:71:69:ea:b2:f8:6a:fd:
d6:35:30:58:c8:89:27:c1:4e:71:8b:4c:7d:67:b8:b0:db:7c:
03:bf:8c:14:9b:3f:5c:50:29:a3:bd:e4:84:28:48:d1:22:3d:
cc:5a:9b:ba:64:ec:7b:ba:e9:18:b4:71:85:d9:63:d2:92:ed:
7f:4a:1a:19:e7:c1:0c:4a:f5:00:64:41:fa:d4:9f:07:24:44:
80:be:a9:b0
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAOZgaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OWYxZDBlMWI0NDVhMzBmYzIzZjU0ODEyOTE4ZWViZDU3YjlkMDQyMB4XDTIyMDEw
MTA1NTEzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFmYzQ0M2Q2OWYw
ZjMyMzdhMDRmNDk1MjU1ZmE4OTdjMWU0YWQ3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtk+ESa8K4bVxbvvV86/n8/b0z5GOA8WtNj9nuh6vsijJLp
pZnzovFeBt8e8772jtaujo3TOxcfF6BtEve77Mmtc1PwYPlgzVWxZZZaviRj5a2S
+JiFZQkTECdWBNEgx1yjRTGNR8ApoAN0CWowlVSukmVLSUOFpaYcgP9hTAEFQwOF
t/9/7uwKvpvNCz7wP5lTZb8O5dtbAJta/jB8O+miOBh7jxDJGXDcw6mV+tsDkgnZ
Xz+zJBa/BH/o+wD8B50m2AANNSC+8jfI4GbSGp1vySaVS5T1nYqn+dgMBYoB0Mz6
mDuVcjgIqc+e1AZsiTn3lqViHGHuVUdBY6I0JUsCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSK/EQ9afDzI3oE9JUlX6iXweStfjAfBgNVHSMEGDAWgBT58dDhtEWjD8I/
VIEpGO69V7nQQjAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtZkhRNGJSRm93X0NQMVNCS1JqdXZWZTUwRUkuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2RiLzA5NzJmZS1iNmJmLTRjMDAtODM1MS1lYzMxNDQwNDRjMDEv
MS9pdnhFUFdudzh5TjZCUFNWSlYtb2w4SGtyWDQucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ri
LzA5NzJmZS1iNmJmLTRjMDAtODM1MS1lYzMxNDQwNDRjMDEvMS8xLWZIUTRiUkZv
d19DUDFTQktSanV2VmU1MEVJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWkMA0GCSqGSIb3DQEBCwUA
A4IBAQBx9N0XJQqSadiS6z4H2j0vX3g49CMQSYvdeHs22mwFwn+djEq+V889xRyK
4La2YbZ+TbNaCgsM1wNKUOlGFqfUptimueRtYnLnBI3si+r76pzQOYAaWNiPwC8u
vfymgZm5qy4cASDPY10rxhdmY3s4K9Hm5mdjz9fPqjs4uDUpMIPl/kGlZW3jk42P
P80Y7XtFAIErzisTgP4RUc1AjynCoYnqyLg+yqegrp+Jr3Fp6rL4av3WNTBYyIkn
wU5xi0x9Z7iw23wDv4wUmz9cUCmjveSEKEjRIj3MWpu6ZOx7uukYtHGF2WPSku1/
ShoZ58EMSvUAZEH61J8HJESAvqmw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org