Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/dKTSyRdt9peqEoe5kXy9_FpGJnI.roa
File: dKTSyRdt9peqEoe5kXy9_FpGJnI.roa (raw, json)
Hash identifier: GXdF0XqGiPFzsPDlzyHWkUBVCSKkugTEPTVNTYzB2gI=
Subject key identifier: 74:A4:D2:C9:17:6D:F6:97:AA:12:87:B9:91:7C:BD:FC:5A:46:26:72
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 01879E2C6161DA72D7433EA5945021251E87
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/dKTSyRdt9peqEoe5kXy9_FpGJnI.roa
Signing time: Thu 20 Apr 2023 10:18:41 +0000
ROA not before: Thu 20 Apr 2023 10:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:2c:61:61:da:72:d7:43:3e:a5:94:50:21:25:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Apr 20 10:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74a4d2c9176df697aa1287b9917cbdfc5a462672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:f9:ef:80:2d:0d:17:82:0a:99:7b:f8:47:
e2:0f:46:64:32:70:e4:c7:88:a2:b2:f6:ae:6a:70:
1e:98:03:ef:01:a9:69:4c:88:c9:bd:e6:c6:5e:95:
00:7a:32:cb:e2:88:63:e7:b7:78:8c:81:79:dd:20:
e0:b4:44:ac:ac:07:a1:ae:a0:02:45:8b:ba:b7:c1:
21:69:43:61:fa:81:24:83:87:a8:08:7a:41:3d:a8:
09:76:8f:27:a9:2e:ec:24:93:16:d9:60:0d:a9:44:
a3:86:41:cc:d2:60:1b:a5:60:49:63:74:8d:a1:b9:
48:f7:40:39:4f:b0:e5:c6:3c:52:38:d7:db:91:a0:
39:42:51:42:29:28:6e:d5:c4:35:89:99:d3:73:03:
d2:e0:8e:ef:f8:8e:ca:7b:10:1a:63:ad:ff:19:dd:
83:b1:47:12:fd:c9:4a:b0:54:78:6c:63:be:8b:24:
64:13:ac:cf:cc:e6:08:70:4e:d7:f3:d0:29:87:ba:
f1:d6:06:d3:c3:7f:06:b9:fd:a5:f1:82:8a:3b:4b:
58:aa:60:68:33:9d:11:47:ba:94:bc:02:2b:35:5a:
20:9e:ad:18:96:68:67:8a:43:ce:04:1a:57:b3:80:
25:43:00:08:c3:4e:d2:10:23:54:28:76:14:79:ea:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:D2:C9:17:6D:F6:97:AA:12:87:B9:91:7C:BD:FC:5A:46:26:72
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/dKTSyRdt9peqEoe5kXy9_FpGJnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
21:71:60:a1:25:aa:53:30:8a:2e:35:8c:f7:0c:ea:37:6e:bc:
e8:31:2c:6f:f9:68:a1:aa:20:81:dc:3c:14:ea:48:ac:4e:77:
94:e9:00:bc:b5:56:28:8d:76:e5:7e:12:55:8f:aa:b4:c7:68:
c7:0f:74:a3:85:a3:94:7b:a9:6d:23:e9:94:1e:f8:ee:d0:16:
8f:18:98:39:84:57:31:6f:9e:04:8d:8e:f2:84:d1:6f:2e:00:
94:3b:fa:f1:72:0e:a3:24:3d:2a:7b:76:14:9f:3a:60:75:6e:
bb:14:af:35:bb:d3:c7:9e:32:02:57:f9:3b:48:d2:b6:97:f1:
a3:f0:e0:d9:71:30:92:88:bd:a4:a3:4a:17:f5:59:5d:5d:f7:
ac:eb:33:b0:a7:c6:48:84:07:ea:e4:e9:84:ea:7e:60:3c:87:
07:1c:f2:13:b0:1d:b2:e0:40:90:55:5b:0b:2c:69:de:56:34:
7c:0b:61:fc:48:2b:24:6c:93:2b:5b:f2:6d:f7:c2:e1:f6:96:
6d:8f:66:2a:d1:e4:80:b4:5c:58:8a:19:90:9d:8b:7f:69:7e:
75:d9:de:d4:60:ff:80:b5:48:fd:71:3a:70:22:2f:60:90:e1:
b1:05:f3:0b:35:e6:26:98:d4:eb:8c:21:a8:ac:5a:22:8e:d9:
36:7f:76:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeeLGFh2nLXQz6llFAhJR6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzdjYjAwYjNkNDE0YWZhOTdjNDgyZWFiNWZkYzc2YTE2
MzRiM2QwHhcNMjMwNDIwMTAxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGE0ZDJjOTE3NmRmNjk3YWExMjg3Yjk5MTdjYmRmYzVhNDYyNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7P574AtDReCCpl7+EfiD0ZkMnDk
x4iisvauanAemAPvAalpTIjJvebGXpUAejLL4ohj57d4jIF53SDgtESsrAehrqAC
RYu6t8EhaUNh+oEkg4eoCHpBPagJdo8nqS7sJJMW2WANqUSjhkHM0mAbpWBJY3SN
oblI90A5T7DlxjxSONfbkaA5QlFCKShu1cQ1iZnTcwPS4I7v+I7KexAaY63/Gd2D
sUcS/clKsFR4bGO+iyRkE6zPzOYIcE7X89Aph7rx1gbTw38Guf2l8YKKO0tYqmBo
M50RR7qUvAIrNVognq0YlmhnikPOBBpXs4AlQwAIw07SECNUKHYUeer56QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSk0skXbfaXqhKHuZF8vfxaRiZyMB8GA1UdIwQY
MBaAFO3HywCz1BSvqXxILqtf3HahY0s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzkt
YzE1OTE2NWRlMGM3LzEvZEtUU3lSZHQ5cGVxRW9lNWtYeTlfRnBHSm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzktYzE1OTE2NWRlMGM3
LzEvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfOMA0G
CSqGSIb3DQEBCwUAA4IBAQAhcWChJapTMIouNYz3DOo3brzoMSxv+WihqiCB3DwU
6kisTneU6QC8tVYojXblfhJVj6q0x2jHD3SjhaOUe6ltI+mUHvju0BaPGJg5hFcx
b54EjY7yhNFvLgCUO/rxcg6jJD0qe3YUnzpgdW67FK81u9PHnjICV/k7SNK2l/Gj
8ODZcTCSiL2ko0oX9VldXfes6zOwp8ZIhAfq5OmE6n5gPIcHHPITsB2y4ECQVVsL
LGneVjR8C2H8SCskbJMrW/Jt98Lh9pZtj2Yq0eSAtFxYihmQnYt/aX512d7UYP+A
tUj9cTpwIi9gkOGxBfMLNeYmmNTrjCGorFoijtk2f3aD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org