Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/cfWUrCUsXhc3HpzsLFtESF5KxFI.roa
File: cfWUrCUsXhc3HpzsLFtESF5KxFI.roa (raw, json)
Hash identifier: QhmMogoC7utw1gxumjGoxFSFtCPcrStHH1DDQixeZt8=
Subject key identifier: 71:F5:94:AC:25:2C:5E:17:37:1E:9C:EC:2C:5B:44:48:5E:4A:C4:52
Certificate issuer: /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial: 0182C5ECEFEA39614FE0ACAF4E30EE4ED9C8
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/cfWUrCUsXhc3HpzsLFtESF5KxFI.roa
Signing time: Mon 22 Aug 2022 14:20:15 +0000
ROA not before: Mon 22 Aug 2022 14:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.209.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:ec:ef:ea:39:61:4f:e0:ac:af:4e:30:ee:4e:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Validity
Not Before: Aug 22 14:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f594ac252c5e17371e9cec2c5b44485e4ac452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:aa:ea:cd:46:0c:08:b4:76:53:2e:64:c1:
de:7a:11:cf:14:fc:65:ca:65:0a:1a:5a:42:23:2f:
83:9e:b4:a0:cf:4c:91:77:b5:12:8d:af:85:76:12:
16:a7:62:5e:09:1a:e5:92:31:a7:16:ba:20:7a:c7:
46:55:a3:34:56:53:9a:90:1a:af:09:23:f0:f8:b3:
84:65:43:3a:19:37:46:75:1b:f9:72:80:c6:bb:26:
0c:a4:b6:bb:b6:dd:a3:4a:00:69:33:9e:75:55:cb:
41:83:f5:0a:9e:fa:09:0d:41:14:63:e4:d4:ab:c0:
8f:c3:3e:6e:8e:83:ed:ae:29:93:f9:09:a9:af:c4:
95:9f:31:1c:7e:d8:ff:19:ad:0e:ef:66:64:71:59:
d0:ae:b1:86:3d:b6:bc:cc:5c:d6:e1:0b:d9:29:1a:
01:75:d2:c0:fb:c1:ff:1f:76:10:bb:66:68:7b:b8:
db:a6:cd:88:7e:f3:1a:6f:c6:10:02:8e:3d:ad:ba:
cd:a4:00:d4:a3:d2:a7:e0:78:67:3e:83:f7:93:f2:
04:69:78:4c:d5:e8:54:40:c9:c9:3c:56:02:31:1e:
8b:1d:d3:20:a6:3f:de:96:78:b9:94:e1:56:2b:68:
5f:3e:23:dd:5b:1e:82:73:67:e8:ed:30:80:3c:8a:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:94:AC:25:2C:5E:17:37:1E:9C:EC:2C:5B:44:48:5E:4A:C4:52
X509v3 Authority Key Identifier:
keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/cfWUrCUsXhc3HpzsLFtESF5KxFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bb:35:d2:72:83:b0:11:d7:0c:12:30:01:ec:51:0c:12:76:
85:06:3e:55:37:f8:47:e2:4c:e5:ae:e4:af:24:59:c5:de:0d:
a4:f6:be:6d:6b:0c:22:5d:a6:42:d5:61:1f:7a:02:0a:d3:56:
f0:33:17:27:b1:5b:fc:9f:1b:14:4f:71:30:01:90:51:5c:a1:
81:c9:02:a9:87:39:c9:8a:96:5b:cd:89:4d:a2:2a:51:35:f4:
9e:0b:da:1b:b5:90:b0:ae:68:a1:24:7f:45:d4:87:49:4c:6e:
d0:36:07:51:1a:a1:8e:a8:15:e8:88:7a:90:dd:81:12:a6:4f:
99:f6:89:88:51:23:93:67:25:c7:ba:ca:10:e0:cf:5e:f2:a5:
59:f2:8d:b2:39:89:4c:ae:68:51:2d:0f:dd:7f:c9:6d:55:5d:
e5:37:d0:49:25:6d:12:b8:41:85:af:5e:69:07:d2:8f:69:93:
9c:9d:07:e5:0c:c4:0c:58:d3:04:84:aa:39:ef:ea:28:9d:cd:
75:77:96:95:16:44:14:f1:a9:42:57:e4:94:9a:3a:08:5e:36:
c6:53:92:ae:54:8c:ac:f1:f5:e9:3c:9c:13:c5:86:be:86:cc:
ba:43:d1:00:91:bd:d1:cf:74:c1:03:1e:6b:c2:d3:ee:45:19:
5d:42:d0:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLF7O/qOWFP4KyvTjDuTtnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjczOGMwZDJkYWUwNGIzYzllYzU1MDQ4NTJmN2FkNzRj
ZTIxNTIwHhcNMjIwODIyMTQyMDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWY1OTRhYzI1MmM1ZTE3MzcxZTljZWMyYzViNDQ0ODVlNGFjNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmCq6s1GDAi0dlMuZMHeehHPFPxl
ymUKGlpCIy+DnrSgz0yRd7USja+FdhIWp2JeCRrlkjGnFrogesdGVaM0VlOakBqv
CSPw+LOEZUM6GTdGdRv5coDGuyYMpLa7tt2jSgBpM551VctBg/UKnvoJDUEUY+TU
q8CPwz5ujoPtrimT+Qmpr8SVnzEcftj/Ga0O72ZkcVnQrrGGPba8zFzW4QvZKRoB
ddLA+8H/H3YQu2Zoe7jbps2IfvMab8YQAo49rbrNpADUo9Kn4HhnPoP3k/IEaXhM
1ehUQMnJPFYCMR6LHdMgpj/elni5lOFWK2hfPiPdWx6Cc2fo7TCAPIq7nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHH1lKwlLF4XNx6c7CxbREheSsRSMB8GA1UdIwQY
MBaAFCYnOMDS2uBLPJ7FUEhS9610ziFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmljNHdOTGE0RXM4bnNWUVNGTDNyWFRPSVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jNmE5NjAtNTJlMi00M2U2LWFjYzMt
YmRkZTVhYzI2ODMxLzEvY2ZXVXJDVXNYaGMzSHB6c0xGdEVTRjVLeEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jNmE5NjAtNTJlMi00M2U2LWFjYzMtYmRkZTVhYzI2ODMx
LzEvSmljNHdOTGE0RXM4bnNWUVNGTDNyWFRPSVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGEMA0G
CSqGSIb3DQEBCwUAA4IBAQCIuzXScoOwEdcMEjAB7FEMEnaFBj5VN/hH4kzlruSv
JFnF3g2k9r5tawwiXaZC1WEfegIK01bwMxcnsVv8nxsUT3EwAZBRXKGByQKphznJ
ipZbzYlNoipRNfSeC9obtZCwrmihJH9F1IdJTG7QNgdRGqGOqBXoiHqQ3YESpk+Z
9omIUSOTZyXHusoQ4M9e8qVZ8o2yOYlMrmhRLQ/df8ltVV3lN9BJJW0SuEGFr15p
B9KPaZOcnQflDMQMWNMEhKo57+oonc11d5aVFkQU8alCV+SUmjoIXjbGU5KuVIys
8fXpPJwTxYa+hsy6Q9EAkb3Rz3TBAx5rwtPuRRldQtAJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org