Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/L_N5KPDuJmolRGHOQw43kwN0ZeY.roa
File: L_N5KPDuJmolRGHOQw43kwN0ZeY.roa (raw, json)
Hash identifier: P0YywAj9r4pL6UWQCikJGE5YLFzP2cArncnIDBnh0Uk=
Subject key identifier: 2F:F3:79:28:F0:EE:26:6A:25:44:61:CE:43:0E:37:93:03:74:65:E6
Certificate issuer: /CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Certificate serial: 37C825C5
Authority key identifier: E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/L_N5KPDuJmolRGHOQw43kwN0ZeY.roa
Signing time: Sat 01 Jan 2022 00:57:00 +0000
ROA not before: Sat 01 Jan 2022 00:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213126
IP address blocks: 212.94.54.0/24 maxlen: 24
2a02:36a::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935863749 (0x37c825c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Validity
Not Before: Jan 1 00:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ff37928f0ee266a254461ce430e3793037465e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:da:b0:be:ee:37:ca:e9:ff:71:d1:53:75:
87:14:75:c3:5d:32:fc:30:e4:31:a1:13:03:31:43:
9a:5d:43:a6:a9:e4:7a:78:34:67:5d:ce:1b:96:f6:
f7:35:74:7b:fe:db:f4:d5:f8:c1:fd:f5:f1:8e:86:
de:42:5f:44:10:cc:b5:4a:e9:ec:8d:0f:03:fb:14:
23:c5:08:39:b2:d1:46:b7:60:3f:17:9c:87:a2:67:
b3:2f:e1:ca:fa:56:f2:d5:98:9c:c3:07:6a:10:c2:
ac:e2:ab:09:7d:59:98:c0:70:54:2b:7b:f6:4d:7a:
de:88:fd:ce:e5:16:e6:a0:7b:59:0d:58:24:23:80:
56:c0:7b:25:96:ad:35:01:09:e9:4d:6c:ea:8a:be:
f4:31:39:2d:b6:12:3a:63:7c:94:5d:30:94:4d:43:
9d:2d:4c:8b:1c:e4:21:84:8f:dd:6e:8b:80:5a:ed:
23:04:d9:07:6b:77:40:ad:b6:c8:7e:9f:64:0c:24:
46:24:b2:b9:10:01:66:42:5c:2e:3c:1b:92:94:4c:
48:5e:8e:cb:a8:ea:18:d5:8a:54:79:13:eb:64:67:
db:31:42:6d:a5:5b:92:a6:55:f0:d2:26:e0:3b:31:
76:54:5d:70:d1:2f:b1:4d:45:20:ba:d0:49:0c:71:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:79:28:F0:EE:26:6A:25:44:61:CE:43:0E:37:93:03:74:65:E6
X509v3 Authority Key Identifier:
keyid:E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/L_N5KPDuJmolRGHOQw43kwN0ZeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.54.0/24
IPv6:
2a02:36a::/32
Signature Algorithm: sha256WithRSAEncryption
79:ab:e0:e9:35:3b:71:57:f2:84:5e:b2:cc:15:41:0d:96:c8:
46:bf:f2:d7:e2:9d:90:bc:bc:6c:71:de:2b:2c:b5:7d:22:be:
80:1c:b3:91:24:b3:13:5f:fa:89:c0:ae:e5:e7:84:d7:98:5e:
c3:ce:29:38:53:f8:f2:bb:0d:85:46:ad:a0:22:d4:90:4a:98:
cf:db:65:26:43:be:0f:35:2a:a3:d9:72:55:5b:33:1c:62:90:
cb:f6:be:00:6d:f3:1f:d7:73:90:c8:d6:3a:8d:ed:a3:6e:22:
21:53:ea:fc:8b:da:dd:f9:f2:d4:94:6f:1c:89:77:c8:7a:fd:
f7:6e:e7:7b:bf:de:6f:97:c8:61:5f:55:25:4e:8b:92:7d:0e:
8b:82:ba:cd:dc:1b:41:5b:c9:9d:c2:ef:ab:c0:62:b7:c3:d8:
3d:c9:15:af:f6:a8:5e:05:d1:12:a2:b8:a1:dc:3d:4f:6c:fa:
a2:d7:2b:a7:8d:fb:a9:fa:66:0e:31:2d:c0:e6:23:29:cd:c7:
96:7c:53:6f:61:0b:4e:bb:b1:e3:a5:d9:08:23:5d:4c:7e:dc:
8c:a4:50:21:5a:c5:54:ca:c2:99:46:fd:39:af:c7:77:28:c6:
ef:92:7d:aa:fd:04:c7:1e:d6:01:d3:68:bb:34:ff:84:0f:2d:
c9:75:c9:2f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEN8glxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MjhkMDFlOTg0MjM2YzgxMThjNTQ2MzgxY2Q5YTBmOTIwMWM3M2Q4MB4XDTIyMDEw
MTAwNTcwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZmMzc5MjhmMGVl
MjY2YTI1NDQ2MWNlNDMwZTM3OTMwMzc0NjVlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ7a2rC+7jfK6f9x0VN1hxR1w10y/DDkMaETAzFDml1Dpqnk
eng0Z13OG5b29zV0e/7b9NX4wf318Y6G3kJfRBDMtUrp7I0PA/sUI8UIObLRRrdg
Pxech6Jnsy/hyvpW8tWYnMMHahDCrOKrCX1ZmMBwVCt79k163oj9zuUW5qB7WQ1Y
JCOAVsB7JZatNQEJ6U1s6oq+9DE5LbYSOmN8lF0wlE1DnS1MixzkIYSP3W6LgFrt
IwTZB2t3QK22yH6fZAwkRiSyuRABZkJcLjwbkpRMSF6Oy6jqGNWKVHkT62Rn2zFC
baVbkqZV8NIm4DsxdlRdcNEvsU1FILrQSQxxkY8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQv83ko8O4maiVEYc5DDjeTA3Rl5jAfBgNVHSMEGDAWgBTijQHphCNsgRjF
Rjgc2aD5IBxz2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRvMEI2WVFqYklFWXhVWTRITm1nLVNBY2M5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvM2ExNDRjLTQ1NjMtNGNiNi1hOWFlLWU5NDFmNzY3Zjg0Mi8x
L0xfTjVLUER1Sm1vbFJHSE9RdzQza3dOMFplWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
M2ExNDRjLTQ1NjMtNGNiNi1hOWFlLWU5NDFmNzY3Zjg0Mi8xLzRvMEI2WVFqYklF
WXhVWTRITm1nLVNBY2M5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEANReNjANBAIAAjAHAwUAKgIDajAN
BgkqhkiG9w0BAQsFAAOCAQEAeavg6TU7cVfyhF6yzBVBDZbIRr/y1+KdkLy8bHHe
Kyy1fSK+gByzkSSzE1/6icCu5eeE15hew84pOFP48rsNhUatoCLUkEqYz9tlJkO+
DzUqo9lyVVszHGKQy/a+AG3zH9dzkMjWOo3to24iIVPq/Iva3fny1JRvHIl3yHr9
927ne7/eb5fIYV9VJU6Lkn0Oi4K6zdwbQVvJncLvq8Bit8PYPckVr/aoXgXREqK4
odw9T2z6otcrp437qfpmDjEtwOYjKc3HlnxTb2ELTrux46XZCCNdTH7cjKRQIVrF
VMrCmUb9Oa/HdyjG75J9qv0Exx7WAdNouzT/hA8tyXXJLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:36 2024 by rpki-client on console-ams.rpki-client.org