Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/tCjBK7H277hEuFBnaIbfiAY8nr0.roa
File: tCjBK7H277hEuFBnaIbfiAY8nr0.roa (raw, json)
Hash identifier: KWWam3nC7qaxpsgFy83Tu1LucFB74GufBmWVlu5PyeQ=
Subject key identifier: B4:28:C1:2B:B1:F6:EF:B8:44:B8:50:67:68:86:DF:88:06:3C:9E:BD
Certificate issuer: /CN=90b9fa3d253d39a9c02c53459469dcb8765e15db
Certificate serial: 066BD801
Authority key identifier: 90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLn6PSU9OanALFNFlGncuHZeFds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/tCjBK7H277hEuFBnaIbfiAY8nr0.roa
Signing time: Sat 01 Jan 2022 03:02:24 +0000
ROA not before: Sat 01 Jan 2022 03:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60501
IP address blocks: 193.43.208.0/24 maxlen: 24
2a04:f440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107730945 (0x66bd801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b9fa3d253d39a9c02c53459469dcb8765e15db
Validity
Not Before: Jan 1 03:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b428c12bb1f6efb844b850676886df88063c9ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:49:98:0f:1a:b6:4e:c2:43:ba:2d:78:b9:
37:80:d5:06:98:0a:5e:7e:60:90:12:78:05:aa:4c:
f0:7e:76:87:5c:5a:31:7f:59:cb:88:84:e6:9d:a0:
fd:64:fe:30:eb:b7:11:1c:09:b4:5b:47:f9:db:f2:
63:f1:1f:fc:11:1c:87:ad:26:11:3a:48:b6:3d:c3:
a7:c8:dd:6f:d5:d3:51:68:a7:aa:54:b7:48:96:ef:
53:22:07:ac:61:7c:e0:9a:d4:ae:fb:25:6e:0b:50:
74:07:73:1f:81:8a:8f:46:e4:57:c6:43:7b:a2:3b:
e9:1a:bb:1a:7a:30:7a:88:fd:40:a4:42:35:40:15:
c1:d1:5b:c5:10:1b:ef:a1:6c:43:3a:a6:56:76:20:
ed:0a:bd:6c:2c:db:80:4f:e7:26:34:53:e8:16:67:
1f:0b:27:e8:96:5e:59:d8:33:2f:d6:21:39:dd:c1:
68:e7:ef:38:0f:d2:2b:a6:56:16:aa:6b:a1:87:fd:
59:4f:42:cf:2a:47:24:5a:a5:bf:16:be:1b:ff:6c:
99:8b:aa:6a:41:96:21:69:58:8c:59:c0:ca:ab:df:
5e:92:79:02:cd:94:2a:4b:ea:48:02:8d:aa:a9:71:
35:66:9e:dd:2e:19:85:80:57:88:6e:88:a2:61:e2:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:C1:2B:B1:F6:EF:B8:44:B8:50:67:68:86:DF:88:06:3C:9E:BD
X509v3 Authority Key Identifier:
keyid:90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLn6PSU9OanALFNFlGncuHZeFds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/tCjBK7H277hEuFBnaIbfiAY8nr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.208.0/24
IPv6:
2a04:f440::/29
Signature Algorithm: sha256WithRSAEncryption
75:85:82:b5:c3:22:c2:8f:b2:62:1a:79:39:68:ae:32:c5:c9:
d2:d6:d7:b9:38:79:c1:7f:e0:01:d7:3d:3d:af:a0:66:36:a1:
d1:f7:34:37:6b:cf:0c:ee:53:4c:e9:6e:35:26:ac:28:12:54:
33:33:7e:c0:d0:f9:00:51:7b:e0:64:c5:1c:9c:04:13:1c:06:
3f:d4:d2:89:1a:44:24:05:bd:5d:fe:4d:b9:a7:c5:0b:44:13:
49:32:75:50:54:09:0d:15:78:f3:5b:4d:8a:77:73:85:37:75:
d5:24:99:d1:1f:d6:26:68:ee:25:83:1b:10:ff:03:a7:30:29:
c2:74:d2:15:6e:93:d7:90:78:3c:1b:e8:cc:d0:b4:97:2c:09:
a3:31:84:f2:4b:f9:a2:2d:b6:06:24:b0:97:6d:fa:28:26:79:
dd:24:67:b5:e9:ea:6f:0b:11:6b:3b:45:f9:e5:51:d9:8a:d5:
36:31:26:37:31:b8:86:03:a9:e0:24:c7:69:fc:ca:27:fc:55:
9e:ea:da:04:1d:17:be:53:64:28:11:d5:88:4d:c5:78:4d:f2:
29:02:6d:46:96:9c:15:d8:42:62:bf:a5:35:fa:e6:76:bd:f7:
cf:c3:49:8e:68:58:95:86:d6:32:0f:81:12:74:0b:e7:80:4e:
95:34:d3:a2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBmvYATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGI5ZmEzZDI1M2QzOWE5YzAyYzUzNDU5NDY5ZGNiODc2NWUxNWRiMB4XDTIyMDEw
MTAzMDIyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQyOGMxMmJiMWY2
ZWZiODQ0Yjg1MDY3Njg4NmRmODgwNjNjOWViZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIkWSZgPGrZOwkO6LXi5N4DVBpgKXn5gkBJ4BapM8H52h1xa
MX9Zy4iE5p2g/WT+MOu3ERwJtFtH+dvyY/Ef/BEch60mETpItj3Dp8jdb9XTUWin
qlS3SJbvUyIHrGF84JrUrvslbgtQdAdzH4GKj0bkV8ZDe6I76Rq7Gnoweoj9QKRC
NUAVwdFbxRAb76FsQzqmVnYg7Qq9bCzbgE/nJjRT6BZnHwsn6JZeWdgzL9YhOd3B
aOfvOA/SK6ZWFqproYf9WU9CzypHJFqlvxa+G/9smYuqakGWIWlYjFnAyqvfXpJ5
As2UKkvqSAKNqqlxNWae3S4ZhYBXiG6IomHi2SMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS0KMErsfbvuES4UGdoht+IBjyevTAfBgNVHSMEGDAWgBSQufo9JT05qcAs
U0WUady4dl4V2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tMbjZQU1U5T2FuQUxGTkZsR25jdUhaZUZkcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTA5MzE5LWM3YjktNGIxYS1hMzg1LTE3YTUwNzhmNGFhNS8x
L3RDakJLN0gyNzdoRXVGQm5hSWJmaUFZOG5yMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTA5MzE5LWM3YjktNGIxYS1hMzg1LTE3YTUwNzhmNGFhNS8xL2tMbjZQU1U5T2Fu
QUxGTkZsR25jdUhaZUZkcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMEr0DANBAIAAjAHAwUDKgT0QDAN
BgkqhkiG9w0BAQsFAAOCAQEAdYWCtcMiwo+yYhp5OWiuMsXJ0tbXuTh5wX/gAdc9
Pa+gZjah0fc0N2vPDO5TTOluNSasKBJUMzN+wND5AFF74GTFHJwEExwGP9TSiRpE
JAW9Xf5NuafFC0QTSTJ1UFQJDRV481tNindzhTd11SSZ0R/WJmjuJYMbEP8DpzAp
wnTSFW6T15B4PBvozNC0lywJozGE8kv5oi22BiSwl236KCZ53SRntenqbwsRaztF
+eVR2YrVNjEmNzG4hgOp4CTHafzKJ/xVnuraBB0XvlNkKBHViE3FeE3yKQJtRpac
FdhCYr+lNfrmdr33z8NJjmhYlYbWMg+BEnQL54BOlTTTog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org