Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/1L9yZ13aAp0lCuCBcFbJI81Y9Sc.roa
File: 1L9yZ13aAp0lCuCBcFbJI81Y9Sc.roa (raw, json)
Hash identifier: /R3ZQboJbZnlk8glmYlo0OiGr2JOgx9qYvDqdDOARtI=
Subject key identifier: D4:BF:72:67:5D:DA:02:9D:25:0A:E0:81:70:56:C9:23:CD:58:F5:27
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 0186A6CE156719EF8D92D243C69CAF47E75E
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/1L9yZ13aAp0lCuCBcFbJI81Y9Sc.roa
Signing time: Fri 03 Mar 2023 09:29:29 +0000
ROA not before: Fri 03 Mar 2023 09:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:ce:15:67:19:ef:8d:92:d2:43:c6:9c:af:47:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Mar 3 09:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4bf72675dda029d250ae0817056c923cd58f527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:36:cd:be:93:55:cd:18:cc:22:c2:fd:fd:
d0:2d:e3:87:1c:ef:e2:a9:a3:e5:b5:93:cd:52:c7:
86:a1:4d:eb:49:b6:bf:8a:84:68:fa:ee:f0:2d:c8:
ec:82:95:98:81:bc:1f:99:8a:1c:e9:7c:86:2e:f7:
3c:71:96:78:42:74:36:69:c0:ba:3d:d6:1e:f8:bc:
bf:ec:b3:90:bf:19:7f:20:50:ec:63:df:3b:15:87:
55:4e:1f:1f:13:97:73:33:e0:d9:99:71:17:24:f5:
cc:09:7a:8e:6d:fe:10:d9:c3:41:68:08:81:09:70:
4a:14:0a:8b:4d:a2:87:d7:74:14:85:d9:b9:a8:c6:
94:46:bb:27:43:0a:70:5d:4f:9d:58:66:6d:97:45:
81:8e:9d:c7:3d:89:4d:01:a1:1b:1f:83:ec:14:7a:
83:d9:d5:7f:7e:6a:a2:8c:0b:2f:4d:c5:15:98:72:
8e:a3:f9:1a:9e:f6:74:0a:77:54:ef:c0:bf:de:01:
ec:19:98:bd:6d:58:3b:02:44:3f:8f:64:f1:6b:f9:
bf:4d:8b:b7:52:d5:7d:77:39:5e:9c:25:26:75:e9:
16:88:84:25:75:f0:93:97:be:93:99:e9:50:63:8a:
34:46:53:4a:ae:4d:e8:4c:3d:1f:1a:8d:71:48:c6:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:72:67:5D:DA:02:9D:25:0A:E0:81:70:56:C9:23:CD:58:F5:27
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/1L9yZ13aAp0lCuCBcFbJI81Y9Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
74:42:ae:99:44:fa:2e:23:af:30:87:4f:91:85:0d:a5:1d:a9:
a3:8c:10:c0:f0:5b:e0:c8:ba:6c:7a:0b:49:26:b0:3d:b5:9c:
10:33:4a:8f:de:90:ca:05:00:a4:df:83:3d:44:41:c7:55:ce:
b5:9b:74:2a:a0:9b:d3:4e:33:80:2b:81:08:1f:74:f1:f4:26:
1f:0d:02:7b:f5:70:87:89:bb:d7:e1:72:cb:53:81:dd:9d:70:
42:3c:96:36:9d:31:da:71:c1:75:24:fc:94:3a:e7:0b:14:9d:
9b:a4:df:43:a6:28:a1:98:da:4c:04:2e:91:94:39:79:5c:d9:
4b:93:ca:01:73:8a:48:98:de:c9:5e:33:16:2a:af:e5:21:a4:
84:a3:2e:f7:ac:93:2b:e5:f2:7c:aa:66:54:a6:7e:36:f1:15:
39:6c:81:d3:a2:02:38:22:75:a3:79:e1:36:c1:62:d9:68:1e:
c5:9c:7a:58:5f:82:c9:48:c9:83:93:d6:68:20:1f:7a:2d:39:
35:88:8f:0e:54:d1:3a:8c:df:b6:7e:4e:1f:ce:df:bb:7e:a8:
27:8e:23:c6:f7:db:d5:2a:aa:6f:24:95:96:84:fa:dd:07:6c:
14:50:c2:a7:f4:64:aa:51:4f:6c:5e:db:fb:54:98:04:6f:26:
47:df:7e:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamzhVnGe+NktJDxpyvR+deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjYwYTZkNzdjNGNhYzhmMTAyZDgxMGJlMzMwYjNkMzkx
ZWZlOTMwHhcNMjMwMzAzMDkyOTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJmNzI2NzVkZGEwMjlkMjUwYWUwODE3MDU2YzkyM2NkNThmNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7902zb6TVc0YzCLC/f3QLeOHHO/i
qaPltZPNUseGoU3rSba/ioRo+u7wLcjsgpWYgbwfmYoc6XyGLvc8cZZ4QnQ2acC6
PdYe+Ly/7LOQvxl/IFDsY987FYdVTh8fE5dzM+DZmXEXJPXMCXqObf4Q2cNBaAiB
CXBKFAqLTaKH13QUhdm5qMaURrsnQwpwXU+dWGZtl0WBjp3HPYlNAaEbH4PsFHqD
2dV/fmqijAsvTcUVmHKOo/kanvZ0CndU78C/3gHsGZi9bVg7AkQ/j2Txa/m/TYu3
UtV9dzlenCUmdekWiIQldfCTl76TmelQY4o0RlNKrk3oTD0fGo1xSMZzJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNS/cmdd2gKdJQrggXBWySPNWPUnMB8GA1UdIwQY
MBaAFGm2Cm13xMrI8QLYEL4zCz05Hv6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTIt
NGFkOTkxNGJiYTY4LzEvMUw5eVoxM2FBcDBsQ3VDQmNGYkpJODFZOVNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4
LzEvYWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8rRMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Qq6ZRPouI68wh0+RhQ2lHamjjBDA8FvgyLpsegtJ
JrA9tZwQM0qP3pDKBQCk34M9REHHVc61m3QqoJvTTjOAK4EIH3Tx9CYfDQJ79XCH
ibvX4XLLU4HdnXBCPJY2nTHaccF1JPyUOucLFJ2bpN9DpiihmNpMBC6RlDl5XNlL
k8oBc4pImN7JXjMWKq/lIaSEoy73rJMr5fJ8qmZUpn428RU5bIHTogI4InWjeeE2
wWLZaB7FnHpYX4LJSMmDk9ZoIB96LTk1iI8OVNE6jN+2fk4fzt+7fqgnjiPG99vV
KqpvJJWWhPrdB2wUUMKn9GSqUU9sXtv7VJgEbyZH3350
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org