Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/gdaCVq9AALP5Dyvp29rWEtPv_QU.roa
File: gdaCVq9AALP5Dyvp29rWEtPv_QU.roa (raw, json)
Hash identifier: ameTXgi1NSs1rdH9gcoaktfGy+YM0oGyVYCqbH4oZVE=
Subject key identifier: 81:D6:82:56:AF:40:00:B3:F9:0F:2B:E9:DB:DA:D6:12:D3:EF:FD:05
Certificate issuer: /CN=913f4c9c6388f0a0342762009e324ec13271337e
Certificate serial: 01877AA588D88353CC26E01BDD7EE6B973CC
Authority key identifier: 91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/gdaCVq9AALP5Dyvp29rWEtPv_QU.roa
Signing time: Thu 13 Apr 2023 12:44:41 +0000
ROA not before: Thu 13 Apr 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:a5:88:d8:83:53:cc:26:e0:1b:dd:7e:e6:b9:73:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913f4c9c6388f0a0342762009e324ec13271337e
Validity
Not Before: Apr 13 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81d68256af4000b3f90f2be9dbdad612d3effd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:b3:5f:b2:28:fc:d3:4b:2b:74:a6:e1:9d:
b3:4e:f8:33:92:35:17:e4:9c:d1:94:cc:8b:5a:9c:
e5:03:a5:3f:50:cc:cd:74:63:2f:37:02:bf:72:55:
67:d7:c6:5c:46:3d:cf:0d:d4:39:f5:f0:08:94:90:
41:6a:d2:9c:10:44:3c:08:b0:e5:f6:99:7c:57:25:
0f:81:88:ad:9f:c2:ba:8f:5a:b4:5c:85:d2:b2:6f:
4e:7d:32:ba:b2:ba:98:c5:4b:cf:49:1c:ef:04:da:
0e:96:03:d3:4f:09:df:8d:aa:53:2f:09:6e:88:ab:
25:71:14:6f:0e:8a:9e:11:45:38:3d:ed:f6:0c:39:
f0:d1:5a:7f:b4:a3:22:7a:a1:13:49:2b:e2:18:bd:
29:d8:df:ef:27:b5:4b:c7:0f:bd:f3:5d:b4:fe:9f:
45:4d:66:71:d6:e3:67:a6:cb:f1:7a:76:31:32:89:
36:4c:1f:08:3f:96:44:3e:c9:06:06:91:6e:b0:ae:
5b:fe:4f:45:bb:7e:5c:c6:14:3f:1d:ea:62:75:b0:
ba:db:31:5f:18:01:41:1e:c0:17:84:3f:9f:be:be:
e4:a0:b0:15:fb:af:f8:21:ef:a2:fe:28:e8:35:a7:
2e:30:67:97:45:ef:8b:8a:c3:02:ab:f7:a8:79:fc:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:82:56:AF:40:00:B3:F9:0F:2B:E9:DB:DA:D6:12:D3:EF:FD:05
X509v3 Authority Key Identifier:
keyid:91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/gdaCVq9AALP5Dyvp29rWEtPv_QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c3:15:56:20:eb:00:ef:a9:e5:7c:b9:4b:ea:d1:b0:ed:a0:
b6:94:97:84:f4:90:f6:34:fe:65:06:e4:42:db:0c:67:aa:39:
d7:c9:e8:6f:d0:09:3d:31:7c:7a:e1:7e:7c:ed:85:09:63:15:
e9:52:86:84:9a:78:d9:49:34:13:2f:c4:16:03:60:e0:2a:af:
8a:1f:f5:d9:2a:6a:0f:53:f1:cf:9c:c9:a9:7c:55:31:ae:a3:
85:68:e9:54:68:e1:2a:df:ef:9d:a9:54:88:a5:35:b1:d7:93:
08:d7:52:c1:ea:08:bd:48:b1:d6:55:d9:fd:1a:77:e5:d9:2b:
a8:f2:c6:5e:a6:ae:14:da:f5:8e:ee:00:07:9b:b0:00:b7:f0:
ae:41:80:87:c8:1d:62:65:a2:aa:42:c5:9b:67:28:27:e4:60:
f7:86:9b:15:d4:15:ea:2a:79:90:15:ec:5e:16:76:89:1f:4e:
8c:4e:b6:ae:ac:8c:c7:19:e2:66:e4:c6:2f:ea:3b:b3:11:86:
d2:29:08:fe:66:ae:f0:e7:4a:77:40:6d:78:83:33:77:32:ed:
4b:a0:7e:92:8b:72:eb:81:7a:11:03:ff:76:20:ab:ee:a9:62:
0c:72:c1:ad:46:92:39:e7:81:ac:75:cf:f0:4f:4c:9d:45:f0:
ec:f0:d3:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6pYjYg1PMJuAb3X7muXPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2Y0YzljNjM4OGYwYTAzNDI3NjIwMDllMzI0ZWMxMzI3
MTMzN2UwHhcNMjMwNDEzMTI0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ2ODI1NmFmNDAwMGIzZjkwZjJiZTlkYmRhZDYxMmQzZWZmZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjizX7Io/NNLK3Sm4Z2zTvgzkjUX
5JzRlMyLWpzlA6U/UMzNdGMvNwK/clVn18ZcRj3PDdQ59fAIlJBBatKcEEQ8CLDl
9pl8VyUPgYitn8K6j1q0XIXSsm9OfTK6srqYxUvPSRzvBNoOlgPTTwnfjapTLwlu
iKslcRRvDoqeEUU4Pe32DDnw0Vp/tKMieqETSSviGL0p2N/vJ7VLxw+98120/p9F
TWZx1uNnpsvxenYxMok2TB8IP5ZEPskGBpFusK5b/k9Fu35cxhQ/HepidbC62zFf
GAFBHsAXhD+fvr7koLAV+6/4Ie+i/ijoNacuMGeXRe+LisMCq/eoefxfEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHWglavQACz+Q8r6dva1hLT7/0FMB8GA1UdIwQY
MBaAFJE/TJxjiPCgNCdiAJ4yTsEycTN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYt
NDAyNzQyM2FhMzhjLzEvZ2RhQ1ZxOUFBTFA1RHl2cDI5cldFdFB2X1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYtNDAyNzQyM2FhMzhj
LzEva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeQMA0G
CSqGSIb3DQEBCwUAA4IBAQBewxVWIOsA76nlfLlL6tGw7aC2lJeE9JD2NP5lBuRC
2wxnqjnXyehv0Ak9MXx64X587YUJYxXpUoaEmnjZSTQTL8QWA2DgKq+KH/XZKmoP
U/HPnMmpfFUxrqOFaOlUaOEq3++dqVSIpTWx15MI11LB6gi9SLHWVdn9Gnfl2Suo
8sZepq4U2vWO7gAHm7AAt/CuQYCHyB1iZaKqQsWbZygn5GD3hpsV1BXqKnmQFexe
FnaJH06MTraurIzHGeJm5MYv6juzEYbSKQj+Zq7w50p3QG14gzN3Mu1LoH6Si3Lr
gXoRA/92IKvuqWIMcsGtRpI554Gsdc/wT0ydRfDs8NMW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org