Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/_9pXEv_KU4jmcOXhsAWQIHk1piw.roa
File: _9pXEv_KU4jmcOXhsAWQIHk1piw.roa (raw, json)
Hash identifier: UA6BnDCcksJbJx0G0HEowSnaZJUrRhapp4jXmAtshHg=
Subject key identifier: FF:DA:57:12:FF:CA:53:88:E6:70:E5:E1:B0:05:90:20:79:35:A6:2C
Certificate issuer: /CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Certificate serial: 018663A3624498E4BC79636677E6CA8C4358
Authority key identifier: 74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/_9pXEv_KU4jmcOXhsAWQIHk1piw.roa
Signing time: Sat 18 Feb 2023 08:28:17 +0000
ROA not before: Sat 18 Feb 2023 08:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 185.249.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:a3:62:44:98:e4:bc:79:63:66:77:e6:ca:8c:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Validity
Not Before: Feb 18 08:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffda5712ffca5388e670e5e1b00590207935a62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:10:e3:1c:9f:ed:6d:50:b0:5f:82:8f:19:
5c:23:16:e6:f3:98:0e:a1:80:d3:4a:b6:cd:94:0a:
5e:40:ce:91:96:66:d9:6c:4e:69:4f:81:80:51:48:
85:c2:5c:34:4e:10:6a:3a:a4:db:66:2e:54:b9:30:
d9:01:1f:7d:6f:67:09:e5:76:3a:3c:2c:35:12:23:
5b:17:11:60:52:1a:56:aa:02:24:f2:ec:42:62:46:
ee:ab:4d:a6:95:29:4a:a4:74:0c:d1:80:81:92:f1:
56:bb:44:4b:91:1e:29:54:df:6f:4a:1a:f7:34:71:
09:eb:a1:3b:e1:50:16:dd:9d:a9:c4:c2:96:06:bf:
29:33:b7:68:f8:29:77:80:90:43:b0:1c:5f:5c:4c:
d4:3d:04:c9:6d:9d:39:66:4a:05:e9:bf:e6:b0:de:
e6:e9:c5:a4:f2:3d:da:71:34:9d:f7:c2:73:fa:f5:
b8:bb:f6:e2:ce:7b:a2:39:76:e2:c3:a0:57:14:b8:
06:70:60:0a:4e:18:3b:36:0a:d1:78:ad:51:79:a0:
31:eb:40:09:74:e9:52:25:e1:51:47:ad:61:64:f3:
cc:89:9e:51:7b:e6:fb:0b:7f:3d:33:c4:03:e8:b7:
46:c3:4b:f2:5f:cb:70:9b:4c:53:65:34:6d:a6:62:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DA:57:12:FF:CA:53:88:E6:70:E5:E1:B0:05:90:20:79:35:A6:2C
X509v3 Authority Key Identifier:
keyid:74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/_9pXEv_KU4jmcOXhsAWQIHk1piw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/dEzxFE5JWIfkin47tksXiDX7PcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7a:3a:9d:6e:d3:a6:4c:a6:2d:94:40:ea:2b:2c:0c:e4:ad:
52:0e:dd:39:47:79:0f:3a:bb:26:0b:e4:38:45:5b:db:3b:9d:
d2:2a:bf:6c:10:d6:1b:34:6b:ec:40:be:2e:15:4c:2b:ab:c3:
9e:ab:d3:88:47:c1:19:10:05:2d:0e:25:50:53:f3:aa:af:38:
3e:cf:7a:92:63:18:97:5e:b2:cf:25:fe:85:ef:d6:79:53:f4:
ad:c5:70:29:7e:40:29:60:02:9a:41:71:1d:26:a2:c5:c3:ea:
78:21:57:7d:e0:d5:62:2c:f1:2a:ad:b4:41:af:b3:a3:c3:e8:
92:ad:21:51:18:6c:38:a1:a4:c8:db:41:54:ed:43:5d:47:57:
75:83:2f:37:48:22:48:e4:23:ca:92:19:3f:73:78:72:ee:e2:
c7:ca:a8:4d:99:58:57:1b:27:ab:cc:26:5c:4e:84:12:e3:63:
12:f0:cf:29:43:b8:a3:d8:c6:c8:2b:8b:22:f3:b2:ff:a0:d7:
31:f0:a0:f1:e1:dc:86:03:06:24:07:ce:3b:3d:dc:7f:07:22:
f2:f6:aa:be:68:0d:3e:a8:73:ff:2c:ab:47:7d:43:ca:f6:ab:
98:59:1e:38:46:45:01:39:3a:d2:30:4f:c2:b5:ef:53:3f:4f:
e6:01:a1:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZjo2JEmOS8eWNmd+bKjENYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGNmMTE0NGU0OTU4ODdlNDhhN2UzYmI2NGIxNzg4MzVm
YjNkYzUwHhcNMjMwMjE4MDgyODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmRhNTcxMmZmY2E1Mzg4ZTY3MGU1ZTFiMDA1OTAyMDc5MzVhNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfEQ4xyf7W1QsF+CjxlcIxbm85gO
oYDTSrbNlApeQM6RlmbZbE5pT4GAUUiFwlw0ThBqOqTbZi5UuTDZAR99b2cJ5XY6
PCw1EiNbFxFgUhpWqgIk8uxCYkbuq02mlSlKpHQM0YCBkvFWu0RLkR4pVN9vShr3
NHEJ66E74VAW3Z2pxMKWBr8pM7do+Cl3gJBDsBxfXEzUPQTJbZ05ZkoF6b/msN7m
6cWk8j3acTSd98Jz+vW4u/biznuiOXbiw6BXFLgGcGAKThg7NgrReK1ReaAx60AJ
dOlSJeFRR61hZPPMiZ5Re+b7C389M8QD6LdGw0vyX8twm0xTZTRtpmIavQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/aVxL/ylOI5nDl4bAFkCB5NaYsMB8GA1UdIwQY
MBaAFHRM8RROSViH5Ip+O7ZLF4g1+z3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEV6eEZFNUpXSWZraW40N3Rrc1hpRFg3UGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMDYwMGMtMWFlMS00OWNhLWFiZGYt
NGY0MjVlY2RkNmUyLzEvXzlwWEV2X0tVNGptY09YaHNBV1FJSGsxcGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMDYwMGMtMWFlMS00OWNhLWFiZGYtNGY0MjVlY2RkNmUy
LzEvZEV6eEZFNUpXSWZraW40N3Rrc1hpRFg3UGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufk1MA0G
CSqGSIb3DQEBCwUAA4IBAQCtejqdbtOmTKYtlEDqKywM5K1SDt05R3kPOrsmC+Q4
RVvbO53SKr9sENYbNGvsQL4uFUwrq8Oeq9OIR8EZEAUtDiVQU/Oqrzg+z3qSYxiX
XrLPJf6F79Z5U/StxXApfkApYAKaQXEdJqLFw+p4IVd94NViLPEqrbRBr7Ojw+iS
rSFRGGw4oaTI20FU7UNdR1d1gy83SCJI5CPKkhk/c3hy7uLHyqhNmVhXGyerzCZc
ToQS42MS8M8pQ7ij2MbIK4si87L/oNcx8KDx4dyGAwYkB847Pdx/ByLy9qq+aA0+
qHP/LKtHfUPK9quYWR44RkUBOTrSME/Cte9TP0/mAaGG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:21 2024 by rpki-client on console-ams.rpki-client.org