Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/_iGHypJSL2dDdD-KaCeenrnX4EQ.roa
File: _iGHypJSL2dDdD-KaCeenrnX4EQ.roa (raw, json)
Hash identifier: Vk8T7uHvD1WwM7QQjugpJjB8BN3gEb+L6GojsrkRQKg=
Subject key identifier: FE:21:87:CA:92:52:2F:67:43:74:3F:8A:68:27:9E:9E:B9:D7:E0:44
Certificate issuer: /CN=913f4c9c6388f0a0342762009e324ec13271337e
Certificate serial: 01869C2DFFD83E9267742AC3B710AF0C8889
Authority key identifier: 91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/_iGHypJSL2dDdD-KaCeenrnX4EQ.roa
Signing time: Wed 01 Mar 2023 07:58:25 +0000
ROA not before: Wed 01 Mar 2023 07:58:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:2d:ff:d8:3e:92:67:74:2a:c3:b7:10:af:0c:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913f4c9c6388f0a0342762009e324ec13271337e
Validity
Not Before: Mar 1 07:58:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe2187ca92522f6743743f8a68279e9eb9d7e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:ff:c9:d2:23:b0:3c:da:70:4b:1f:f1:2e:
29:fe:8f:0b:84:f2:ea:3b:ea:c2:af:4a:1a:f3:47:
79:00:a9:39:3f:57:53:92:2f:5b:b5:54:84:fd:7f:
03:57:dc:26:48:de:b2:dd:ae:f6:18:a6:ee:d3:6f:
c7:98:58:ed:a7:a5:cb:98:2b:0c:a7:5e:15:c9:e8:
b3:36:d2:cb:0d:af:a4:bd:54:f0:cc:98:db:40:9b:
09:05:32:9c:00:14:d9:02:d8:65:12:0c:bd:69:87:
39:e7:87:ea:89:51:a0:c3:af:43:b2:99:c9:2e:a4:
c4:08:a6:96:5e:a0:a8:ce:b0:66:2b:3e:3b:e9:b7:
3e:57:40:2e:6f:55:c7:3e:3c:87:b0:e9:87:7a:8f:
8e:e1:69:a4:f2:7c:fe:52:b8:b9:d5:cb:10:c2:28:
f2:43:29:cc:43:ee:49:e2:86:e4:9f:48:8e:2a:fa:
24:41:5e:0b:d9:0d:78:71:ac:e2:00:42:55:d6:bd:
46:ed:93:df:51:b5:e4:5a:18:f3:b4:a0:38:34:1f:
d7:a6:41:4b:93:a4:83:fd:ff:fc:16:24:78:b4:8a:
62:1f:d7:53:ee:79:3e:d4:b5:94:ab:e6:74:1c:35:
28:32:3b:f8:a9:8c:ad:7b:ae:fe:66:01:bd:62:19:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:87:CA:92:52:2F:67:43:74:3F:8A:68:27:9E:9E:B9:D7:E0:44
X509v3 Authority Key Identifier:
keyid:91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/_iGHypJSL2dDdD-KaCeenrnX4EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b0:ce:1d:87:be:c1:d9:db:94:dd:74:09:23:8d:ad:f5:93:
71:94:47:32:2b:71:4c:4e:61:32:4e:01:b6:d0:3e:58:87:1c:
af:4c:b4:1a:bd:60:ba:5b:28:d7:03:cc:27:8f:65:ca:6d:ed:
36:58:b7:75:d8:64:27:12:3f:32:1c:87:f3:3f:75:49:46:a8:
83:34:9c:b4:ca:1f:63:30:7e:9c:f4:3a:b2:d9:0b:8c:5a:bd:
ef:23:9d:d6:ce:ee:45:21:b4:d5:a4:52:f4:90:6b:63:9f:0b:
27:e4:5e:00:76:e9:c6:6d:af:54:8c:fc:ca:61:a7:07:50:05:
3e:ea:d4:91:28:a8:10:e5:f1:78:ae:d1:91:9c:ba:04:a2:31:
76:7d:16:bd:6b:07:27:00:fd:f5:c3:9a:30:51:3c:1c:ee:8a:
20:3c:00:91:23:21:7f:48:42:4f:b6:9d:60:dd:5d:0e:b9:4e:
53:f4:40:10:41:b4:4e:da:26:1c:12:63:ab:bd:4e:4f:74:90:
46:0a:7f:f3:25:f5:50:75:ee:6b:2a:c0:2c:23:d7:fa:96:22:
c1:64:c0:f1:71:20:38:2c:0f:8f:bd:9f:97:bd:5b:75:36:12:
fc:06:8e:55:8d:9d:7f:54:66:86:ce:15:63:d6:e8:ae:65:87:
e7:a0:24:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYacLf/YPpJndCrDtxCvDIiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2Y0YzljNjM4OGYwYTAzNDI3NjIwMDllMzI0ZWMxMzI3
MTMzN2UwHhcNMjMwMzAxMDc1ODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTIxODdjYTkyNTIyZjY3NDM3NDNmOGE2ODI3OWU5ZWI5ZDdlMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt//ydIjsDzacEsf8S4p/o8LhPLq
O+rCr0oa80d5AKk5P1dTki9btVSE/X8DV9wmSN6y3a72GKbu02/HmFjtp6XLmCsM
p14VyeizNtLLDa+kvVTwzJjbQJsJBTKcABTZAthlEgy9aYc554fqiVGgw69DspnJ
LqTECKaWXqCozrBmKz476bc+V0Aub1XHPjyHsOmHeo+O4Wmk8nz+Uri51csQwijy
QynMQ+5J4obkn0iOKvokQV4L2Q14caziAEJV1r1G7ZPfUbXkWhjztKA4NB/XpkFL
k6SD/f/8FiR4tIpiH9dT7nk+1LWUq+Z0HDUoMjv4qYyte67+ZgG9YhkD4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4hh8qSUi9nQ3Q/imgnnp651+BEMB8GA1UdIwQY
MBaAFJE/TJxjiPCgNCdiAJ4yTsEycTN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYt
NDAyNzQyM2FhMzhjLzEvX2lHSHlwSlNMMmREZEQtS2FDZWVucm5YNEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYtNDAyNzQyM2FhMzhj
LzEva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeQMA0G
CSqGSIb3DQEBCwUAA4IBAQBqsM4dh77B2duU3XQJI42t9ZNxlEcyK3FMTmEyTgG2
0D5YhxyvTLQavWC6WyjXA8wnj2XKbe02WLd12GQnEj8yHIfzP3VJRqiDNJy0yh9j
MH6c9Dqy2QuMWr3vI53Wzu5FIbTVpFL0kGtjnwsn5F4AdunGba9UjPzKYacHUAU+
6tSRKKgQ5fF4rtGRnLoEojF2fRa9awcnAP31w5owUTwc7oogPACRIyF/SEJPtp1g
3V0OuU5T9EAQQbRO2iYcEmOrvU5PdJBGCn/zJfVQde5rKsAsI9f6liLBZMDxcSA4
LA+PvZ+XvVt1NhL8Bo5VjZ1/VGaGzhVj1uiuZYfnoCQs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org