Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/4W42LO_Ig7BacWLo0fJFnnXSPAk.roa
File: 4W42LO_Ig7BacWLo0fJFnnXSPAk.roa (raw, json)
Hash identifier: eoL5c9ChLyZr6CDrIeWKgjsW4UOleODx2RCeNRTeyB4=
Subject key identifier: E1:6E:36:2C:EF:C8:83:B0:5A:71:62:E8:D1:F2:45:9E:75:D2:3C:09
Certificate issuer: /CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Certificate serial: 018326EC53DDEC16FAB3B980751413303775
Authority key identifier: 8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/4W42LO_Ig7BacWLo0fJFnnXSPAk.roa
Signing time: Sat 10 Sep 2022 10:22:45 +0000
ROA not before: Sat 10 Sep 2022 10:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 195.64.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:53:dd:ec:16:fa:b3:b9:80:75:14:13:30:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Validity
Not Before: Sep 10 10:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e16e362cefc883b05a7162e8d1f2459e75d23c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:e6:8c:43:07:2d:76:ec:96:47:dd:ef:d1:
4e:42:a6:f6:37:70:1b:0f:92:51:be:34:4a:f3:33:
6e:66:34:cd:30:4d:94:0d:1c:f1:68:7e:6d:b6:4a:
dc:72:c7:6e:32:42:c5:91:66:08:2a:97:82:63:54:
ef:e2:9b:93:9e:e2:01:1d:48:8f:96:98:68:36:96:
19:3d:8b:93:b0:a2:af:a0:2a:ef:2a:43:6c:cd:e4:
97:db:57:92:a5:54:2b:7d:cd:0f:a0:d0:7f:68:d1:
16:85:b6:4e:87:97:00:db:ca:95:b1:96:c2:48:4c:
09:5a:aa:9b:fa:85:00:5d:fd:d6:68:1c:89:2a:c7:
44:a5:5e:e2:7c:96:be:55:13:83:a9:54:c7:f5:ea:
2e:fa:81:d5:ce:c3:f7:66:f2:09:2a:53:09:94:87:
51:35:b4:7b:a3:c5:17:fa:0c:b8:f0:76:17:47:2d:
95:d3:70:5d:a7:56:d7:0b:0e:da:6f:11:e6:03:c8:
16:4f:87:cf:bc:8f:a5:80:f0:da:e5:a3:1a:a2:a6:
8a:b6:2f:74:c4:19:d9:76:c1:18:f7:c1:68:ee:9b:
9e:00:76:d1:10:d0:05:5d:9a:db:60:22:bc:89:ac:
ff:a5:df:2e:fd:5d:59:be:1c:ee:9b:96:9a:4b:ec:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:36:2C:EF:C8:83:B0:5A:71:62:E8:D1:F2:45:9E:75:D2:3C:09
X509v3 Authority Key Identifier:
keyid:8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/4W42LO_Ig7BacWLo0fJFnnXSPAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.113.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:d8:a9:34:0f:04:28:26:0e:74:77:cc:75:18:cc:19:81:
5c:10:98:e1:04:fc:ce:fd:0c:aa:e5:f6:cf:ce:64:fd:26:3e:
4d:da:13:fa:2c:1c:09:f4:04:67:09:d8:3c:18:69:78:7c:a8:
ca:b0:9e:97:7e:73:de:6f:9e:27:a2:b6:f0:2a:e5:ee:bc:a3:
61:c0:eb:13:6a:7e:00:10:74:b2:de:a6:44:f7:44:c3:69:f3:
81:74:93:f4:9b:67:d1:a6:9f:b3:34:a3:5c:cd:f4:27:c5:f6:
50:67:ce:1b:d1:34:3d:d4:8b:b7:cf:86:b3:d4:05:47:fa:39:
66:48:f7:47:91:d4:c3:d6:d9:42:5b:9d:56:2d:0c:b0:85:c6:
e4:2f:c7:53:8a:4a:89:b4:30:05:c1:97:21:3f:0f:85:9a:b6:
8e:8d:c5:3a:2b:ab:bd:a8:f0:b6:60:e6:d4:19:89:fe:ff:7c:
a8:b8:20:76:4c:de:ce:c0:5e:41:6f:8a:dc:69:19:f0:ef:6e:
29:a8:20:14:72:99:c1:b2:0f:02:a3:3e:30:32:4e:91:8c:08:
a8:05:9f:79:36:8e:e6:14:06:78:5e:b9:e9:81:d8:2e:ca:4d:
25:70:60:e3:36:76:fe:2a:a3:c5:4e:94:9b:f7:df:5a:c5:95:
1f:78:23:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMm7FPd7Bb6s7mAdRQTMDd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDhlNjFhMTExYjZlZWY1MjdmOWFjYzYwMWU1NDUwMGU0
MzRjNmYwHhcNMjIwOTEwMTAyMjQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZlMzYyY2VmYzg4M2IwNWE3MTYyZThkMWYyNDU5ZTc1ZDIzYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr/mjEMHLXbslkfd79FOQqb2N3Ab
D5JRvjRK8zNuZjTNME2UDRzxaH5ttkrccsduMkLFkWYIKpeCY1Tv4puTnuIBHUiP
lphoNpYZPYuTsKKvoCrvKkNszeSX21eSpVQrfc0PoNB/aNEWhbZOh5cA28qVsZbC
SEwJWqqb+oUAXf3WaByJKsdEpV7ifJa+VRODqVTH9eou+oHVzsP3ZvIJKlMJlIdR
NbR7o8UX+gy48HYXRy2V03Bdp1bXCw7abxHmA8gWT4fPvI+lgPDa5aMaoqaKti90
xBnZdsEY98Fo7pueAHbRENAFXZrbYCK8iaz/pd8u/V1Zvhzum5aaS+wLEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFuNizvyIOwWnFi6NHyRZ510jwJMB8GA1UdIwQY
MBaAFI8I5hoRG27vUn+azGAeVFAOQ0xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandqbUdoRWJidTlTZjVyTVlCNVVVQTVEVEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MTM3NDctYmU2MS00YTU2LTk1ZmEt
NzQwNjdmNmQwNmYyLzEvNFc0MkxPX0lnN0JhY1dMbzBmSkZublhTUEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83MTM3NDctYmU2MS00YTU2LTk1ZmEtNzQwNjdmNmQwNmYy
LzEvandqbUdoRWJidTlTZjVyTVlCNVVVQTVEVEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BxMA0G
CSqGSIb3DQEBCwUAA4IBAQAVKdipNA8EKCYOdHfMdRjMGYFcEJjhBPzO/Qyq5fbP
zmT9Jj5N2hP6LBwJ9ARnCdg8GGl4fKjKsJ6XfnPeb54norbwKuXuvKNhwOsTan4A
EHSy3qZE90TDafOBdJP0m2fRpp+zNKNczfQnxfZQZ84b0TQ91Iu3z4az1AVH+jlm
SPdHkdTD1tlCW51WLQywhcbkL8dTikqJtDAFwZchPw+FmraOjcU6K6u9qPC2YObU
GYn+/3youCB2TN7OwF5Bb4rcaRnw724pqCAUcpnBsg8Coz4wMk6RjAioBZ95No7m
FAZ4Xrnpgdguyk0lcGDjNnb+KqPFTpSb999axZUfeCMr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:49 2024 by rpki-client on console-ams.rpki-client.org