Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/M-nPnlkL9R-mbkSld0QxVmsA-3s.roa
File: M-nPnlkL9R-mbkSld0QxVmsA-3s.roa (raw, json)
Hash identifier: RgWR4s/McB3GjdVrZrcJfWdfPQVMEbO2BdkDLnJZ0Gk=
Subject key identifier: 33:E9:CF:9E:59:0B:F5:1F:A6:6E:44:A5:77:44:31:56:6B:00:FB:7B
Certificate issuer: /CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Certificate serial: 011DB0F0
Authority key identifier: DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/M-nPnlkL9R-mbkSld0QxVmsA-3s.roa
Signing time: Sat 01 Jan 2022 06:53:51 +0000
ROA not before: Sat 01 Jan 2022 06:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 130.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18723056 (0x11db0f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Validity
Not Before: Jan 1 06:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e9cf9e590bf51fa66e44a5774431566b00fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:33:01:6f:db:cf:32:f4:2c:f7:33:af:4a:
31:82:10:c8:86:7a:f5:d4:75:ae:91:39:39:00:7b:
0b:9f:aa:66:c4:9a:5b:16:9c:39:82:21:fb:17:7e:
91:fd:de:dc:30:ae:b9:35:9b:e0:ad:1e:8b:69:14:
e3:08:d2:fe:04:1b:9c:85:0d:00:d0:c7:e8:ea:fc:
a1:b4:7f:d1:98:21:d3:cf:a3:cb:59:1a:29:79:5e:
9e:3a:fb:95:8b:73:f7:75:a0:99:0f:6e:b9:32:cd:
bf:36:da:26:ac:da:07:1d:87:55:42:32:35:a3:82:
ee:0f:80:5f:42:ac:63:97:99:99:9b:cf:f8:73:b4:
d3:a2:14:c2:6f:c5:31:31:6d:35:bf:f6:4a:d1:f4:
41:90:cb:bc:56:56:f8:fa:a6:0d:fc:4a:ef:29:d7:
4a:b8:1c:08:84:de:a7:48:ca:59:ba:39:81:e9:13:
b5:2e:48:40:d0:98:e5:6b:00:3f:ed:ff:75:ba:49:
7c:6e:74:52:ff:f2:1f:57:64:5a:57:d4:c7:ba:07:
9d:29:15:4d:ae:01:e9:61:c3:6d:f2:92:5b:de:25:
6f:31:45:5a:93:fa:d1:94:17:b2:9f:12:bd:e6:8f:
5a:92:02:da:9a:c9:ca:66:79:f8:55:12:0b:ce:e5:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:CF:9E:59:0B:F5:1F:A6:6E:44:A5:77:44:31:56:6B:00:FB:7B
X509v3 Authority Key Identifier:
keyid:DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/M-nPnlkL9R-mbkSld0QxVmsA-3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:75:db:e8:8f:f5:18:e2:4a:7e:b7:32:20:67:8f:90:db:c6:
74:56:53:be:fe:6a:19:c5:18:54:09:b0:14:da:52:7e:85:a0:
84:b7:5d:86:5a:cd:58:ba:e7:11:da:f5:de:fb:37:6e:5f:88:
fe:19:c7:8a:95:e8:25:ad:78:18:4a:ac:32:b6:32:ca:45:43:
1d:7c:23:7c:31:1a:54:e6:df:69:bd:0f:99:8b:08:5d:bb:ed:
6a:46:80:19:ff:38:0d:3f:2e:4e:6a:94:8d:a7:78:04:e1:e6:
cf:ca:54:ab:80:b6:78:fc:6e:a8:22:43:a2:fb:8b:9a:2b:4e:
dc:7e:a0:11:bd:bf:e8:74:28:84:fe:84:fe:31:53:c8:75:42:
b5:cc:d0:9e:51:58:21:dc:77:12:37:37:e8:8b:01:95:03:f4:
86:69:25:f7:fe:65:b9:5e:93:ca:b5:19:7b:d2:a0:48:d1:f1:
8f:33:5e:c6:cb:94:b9:c4:22:57:94:27:ce:ea:c0:a5:cb:58:
ff:8f:4a:88:b1:cb:f3:5d:1b:c0:92:a7:bd:6a:ca:1d:44:25:
69:74:3f:1c:46:15:07:e5:e6:8e:11:8f:25:a0:5d:79:99:9c:
da:62:11:c0:57:c5:61:59:92:37:88:16:63:4d:b6:14:0e:68:
37:77:ae:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAR2w8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2YwMzVmN2JmZDUwNmRmNmUxOTI0MGZiNDNhZWViMmM4NTIwMGQ0MB4XDTIyMDEw
MTA2NTM1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNlOWNmOWU1OTBi
ZjUxZmE2NmU0NGE1Nzc0NDMxNTY2YjAwZmI3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKh+MwFv288y9Cz3M69KMYIQyIZ69dR1rpE5OQB7C5+qZsSa
WxacOYIh+xd+kf3e3DCuuTWb4K0ei2kU4wjS/gQbnIUNANDH6Or8obR/0Zgh08+j
y1kaKXlenjr7lYtz93WgmQ9uuTLNvzbaJqzaBx2HVUIyNaOC7g+AX0KsY5eZmZvP
+HO006IUwm/FMTFtNb/2StH0QZDLvFZW+PqmDfxK7ynXSrgcCITep0jKWbo5gekT
tS5IQNCY5WsAP+3/dbpJfG50Uv/yH1dkWlfUx7oHnSkVTa4B6WHDbfKSW94lbzFF
WpP60ZQXsp8SveaPWpIC2prJymZ5+FUSC87lEIECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQz6c+eWQv1H6ZuRKV3RDFWawD7ezAfBgNVHSMEGDAWgBTc8DX3v9UG324Z
JA+0Ou6yyFIA1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNQQTE5N19WQnQ5dUdTUVB0RHJ1c3NoU0FOUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvMWI2MTBiLTI3NDAtNDRlOS04NDRhLTlhM2NjZDk5YmRiNC8x
L00tblBubGtMOVItbWJrU2xkMFF4Vm1zQS0zcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
MWI2MTBiLTI3NDAtNDRlOS04NDRhLTlhM2NjZDk5YmRiNC8xLzNQQTE5N19WQnQ5
dUdTUVB0RHJ1c3NoU0FOUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAILBTTANBgkqhkiG9w0BAQsFAAOC
AQEArXXb6I/1GOJKfrcyIGePkNvGdFZTvv5qGcUYVAmwFNpSfoWghLddhlrNWLrn
Edr13vs3bl+I/hnHipXoJa14GEqsMrYyykVDHXwjfDEaVObfab0PmYsIXbvtakaA
Gf84DT8uTmqUjad4BOHmz8pUq4C2ePxuqCJDovuLmitO3H6gEb2/6HQohP6E/jFT
yHVCtczQnlFYIdx3Ejc36IsBlQP0hmkl9/5luV6TyrUZe9KgSNHxjzNexsuUucQi
V5QnzurApctY/49KiLHL810bwJKnvWrKHUQlaXQ/HEYVB+XmjhGPJaBdeZmc2mIR
wFfFYVmSN4gWY022FA5oN3euAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org