Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Tgzppdc13wpFB2dxx4kz95gu_0U.roa
File: Tgzppdc13wpFB2dxx4kz95gu_0U.roa (raw, json)
Hash identifier: NDctqNzaboYaN15s1Kdsobex/LUXrH5vKxb7OHvkyj0=
Subject key identifier: 4E:0C:E9:A5:D7:35:DF:0A:45:07:67:71:C7:89:33:F7:98:2E:FF:45
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 01877BE7CBE8B9361FBF6A4075D57C486984
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Tgzppdc13wpFB2dxx4kz95gu_0U.roa
Signing time: Thu 13 Apr 2023 18:36:41 +0000
ROA not before: Thu 13 Apr 2023 18:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:e7:cb:e8:b9:36:1f:bf:6a:40:75:d5:7c:48:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Apr 13 18:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0ce9a5d735df0a45076771c78933f7982eff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:94:a1:87:8d:f2:a8:11:cb:29:5b:35:1b:
f1:02:af:3f:7c:86:fb:74:0f:07:38:b5:7d:1e:af:
94:f1:f9:ec:e1:b2:5d:9c:f7:ac:6c:0c:3c:9c:9b:
dc:e3:74:51:be:6c:32:26:91:a0:c3:4e:8f:ea:42:
37:6b:b9:3d:46:f9:c3:ae:0d:ea:88:93:f4:f4:ea:
99:52:de:d1:2c:6f:7f:49:68:f1:c3:fe:53:dd:e5:
6b:fc:9e:52:20:6e:53:92:42:54:20:7c:cf:f0:90:
a7:83:5b:88:4e:17:c7:fe:eb:e6:51:17:05:3a:15:
3c:b6:b6:14:54:4e:3c:f2:e1:c9:12:87:15:dd:9e:
35:13:c4:ee:e4:d7:ea:5a:b2:9d:4b:72:8c:6f:43:
65:9f:7e:26:73:94:27:f7:39:d3:9d:2b:41:65:92:
2f:d1:32:42:29:69:6c:32:35:26:86:5b:23:81:a5:
4f:45:cb:65:3c:82:cf:79:17:1b:39:62:0f:f7:ac:
33:33:c6:be:16:29:83:8b:00:2d:7d:bd:8d:e5:f4:
bf:e5:07:68:4a:4b:57:98:1a:2c:08:30:66:e5:1b:
d0:f4:42:76:2c:1d:73:70:58:ec:c0:6b:df:c7:5a:
f0:49:98:4f:8a:73:b3:36:a5:82:31:79:1f:e6:40:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:E9:A5:D7:35:DF:0A:45:07:67:71:C7:89:33:F7:98:2E:FF:45
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Tgzppdc13wpFB2dxx4kz95gu_0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2c:56:27:af:41:1c:5e:7b:d1:e9:2c:1f:f4:8b:af:f9:4f:
c3:1f:5a:c0:03:b2:30:2c:28:af:91:be:20:5a:6c:90:98:fb:
cf:d3:48:7e:61:3f:55:a6:a6:fc:f4:a0:68:cf:f3:d0:4c:f4:
11:9e:2c:9b:db:ae:39:48:fc:4f:62:4d:36:66:3e:d5:b8:0e:
5d:14:2f:e2:27:66:a3:fc:09:16:3f:b8:4a:10:97:b6:f7:05:
ac:0e:24:2d:67:da:36:6f:83:62:06:05:1d:e7:15:1d:15:bf:
e5:fd:f0:a8:2f:30:81:19:61:9b:78:c0:c6:b9:76:8e:ff:29:
e9:fc:c7:24:6e:8a:7e:29:fa:04:94:4a:d1:35:66:16:99:4f:
68:ef:9d:6b:f5:d5:e0:31:64:71:10:0f:64:32:fb:eb:e1:8b:
13:31:e6:c9:4f:7f:89:ca:29:8d:90:a3:6c:67:d9:d7:2b:45:
f9:b4:23:bc:d7:ee:bf:43:5a:92:94:e1:6d:a0:50:0c:d6:c3:
6b:93:de:dc:53:9e:27:6f:79:98:f1:85:b4:57:d6:e0:c5:68:
be:ee:a1:f8:55:64:44:b3:66:b7:18:24:8d:1c:5a:b6:4c:a8:
7b:38:97:21:18:a9:73:ae:ce:2b:69:66:37:a2:c1:85:bc:3c:
4b:13:c5:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd758vouTYfv2pAddV8SGmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzdjYjAwYjNkNDE0YWZhOTdjNDgyZWFiNWZkYzc2YTE2
MzRiM2QwHhcNMjMwNDEzMTgzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBjZTlhNWQ3MzVkZjBhNDUwNzY3NzFjNzg5MzNmNzk4MmVmZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouaUoYeN8qgRyylbNRvxAq8/fIb7
dA8HOLV9Hq+U8fns4bJdnPesbAw8nJvc43RRvmwyJpGgw06P6kI3a7k9RvnDrg3q
iJP09OqZUt7RLG9/SWjxw/5T3eVr/J5SIG5TkkJUIHzP8JCng1uIThfH/uvmURcF
OhU8trYUVE488uHJEocV3Z41E8Tu5NfqWrKdS3KMb0Nln34mc5Qn9znTnStBZZIv
0TJCKWlsMjUmhlsjgaVPRctlPILPeRcbOWIP96wzM8a+FimDiwAtfb2N5fS/5Qdo
SktXmBosCDBm5RvQ9EJ2LB1zcFjswGvfx1rwSZhPinOzNqWCMXkf5kCcMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4M6aXXNd8KRQdncceJM/eYLv9FMB8GA1UdIwQY
MBaAFO3HywCz1BSvqXxILqtf3HahY0s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzkt
YzE1OTE2NWRlMGM3LzEvVGd6cHBkYzEzd3BGQjJkeHg0a3o5NWd1XzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzktYzE1OTE2NWRlMGM3
LzEvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfOMA0G
CSqGSIb3DQEBCwUAA4IBAQCLLFYnr0EcXnvR6Swf9Iuv+U/DH1rAA7IwLCivkb4g
WmyQmPvP00h+YT9Vpqb89KBoz/PQTPQRniyb2645SPxPYk02Zj7VuA5dFC/iJ2aj
/AkWP7hKEJe29wWsDiQtZ9o2b4NiBgUd5xUdFb/l/fCoLzCBGWGbeMDGuXaO/ynp
/Mckbop+KfoElErRNWYWmU9o751r9dXgMWRxEA9kMvvr4YsTMebJT3+JyimNkKNs
Z9nXK0X5tCO81+6/Q1qSlOFtoFAM1sNrk97cU54nb3mY8YW0V9bgxWi+7qH4VWRE
s2a3GCSNHFq2TKh7OJchGKlzrs4raWY3osGFvDxLE8Xd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:44 2024 by rpki-client on console-ams.rpki-client.org