Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/1jKfwqbf5_6MyEeEjur7nNFoBYw.roa
File: 1jKfwqbf5_6MyEeEjur7nNFoBYw.roa (raw, json)
Hash identifier: B+vM3RAJ6Bopo+CEgiuN4OVfGxrtfUmJAqHr9JfPzso=
Subject key identifier: D6:32:9F:C2:A6:DF:E7:FE:8C:C8:47:84:8E:EA:FB:9C:D1:68:05:8C
Certificate issuer: /CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Certificate serial: 01856EA6BA34B0E47AAE5E176BF3CF6CF201
Authority key identifier: E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/1jKfwqbf5_6MyEeEjur7nNFoBYw.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207067
IP address blocks: 185.130.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ba:34:b0:e4:7a:ae:5e:17:6b:f3:cf:6c:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6329fc2a6dfe7fe8cc847848eeafb9cd168058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:40:01:0f:51:6a:c3:4c:bc:d1:bc:d9:74:
46:a2:f8:cd:6c:76:09:bd:6c:90:4a:a9:d0:37:3c:
36:69:26:b9:0d:c1:f9:ce:65:b6:e2:10:46:31:f0:
7f:07:d1:a3:55:96:4a:81:09:5e:34:f7:bd:ff:44:
c2:db:e2:0f:d7:e0:df:83:0f:4f:08:89:7b:a3:37:
ff:51:91:36:7e:5d:66:3b:2a:2f:90:43:6e:45:c8:
b5:13:38:13:ab:71:8e:6c:3c:d0:e0:9c:59:15:72:
93:be:2d:93:e9:e4:aa:24:9b:18:16:09:de:99:d8:
05:f4:73:a0:2b:51:1a:34:14:34:11:e1:f3:8a:18:
35:aa:42:b4:87:7c:f3:21:ab:2e:11:18:57:70:4f:
77:1f:c9:af:2b:a8:75:70:17:ce:d7:dc:a6:cd:f2:
8b:61:7d:26:87:62:67:8e:0b:3f:01:e6:5f:ef:87:
45:77:92:a2:06:60:b1:f2:26:46:40:f0:9a:37:1e:
de:82:09:d5:9b:c8:41:d8:66:f8:5c:f7:61:62:c7:
7e:f2:8a:69:6e:7d:09:9a:d9:da:91:24:a5:0b:5e:
c5:c8:64:84:29:ea:a1:b9:ce:62:5d:e4:0c:70:e9:
5c:d1:b2:dc:96:16:8c:4e:9b:59:02:c6:9e:09:68:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:9F:C2:A6:DF:E7:FE:8C:C8:47:84:8E:EA:FB:9C:D1:68:05:8C
X509v3 Authority Key Identifier:
keyid:E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/1jKfwqbf5_6MyEeEjur7nNFoBYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:b1:85:06:3f:15:db:fb:0b:31:5a:0a:fa:41:4c:c6:6d:
74:db:0a:7f:cf:e0:c8:94:6c:64:43:ee:a9:b4:56:82:f1:60:
b9:8c:4b:af:76:ac:93:e7:11:91:f0:2b:ba:75:69:13:c1:57:
bc:3b:56:5a:fe:d6:23:ab:e7:1c:d8:3d:e4:3f:bf:a0:a8:20:
d0:69:a5:0f:18:84:ab:13:36:43:de:d5:61:98:f5:9d:fd:03:
0e:34:c4:df:77:d1:82:f5:2d:f6:3f:55:1f:d9:14:6a:a9:9a:
61:5c:22:85:f8:49:bf:9c:5d:ee:f8:1c:65:67:d1:a7:52:de:
b7:a5:d9:82:b9:52:a0:3a:08:5a:7d:0a:23:8e:a9:09:32:f1:
8f:b3:7e:f0:66:2a:c1:06:6e:a3:02:1c:58:72:e6:e1:fb:68:
e9:f9:da:81:36:12:6e:9f:43:86:2c:e7:65:c1:5e:91:ad:b5:
18:77:b3:f0:98:e2:cd:63:0a:21:79:b8:eb:04:15:38:ae:c8:
c3:ec:3c:ce:e6:7a:10:02:91:5c:76:b8:42:d4:a8:4e:1d:97:
5b:23:7d:03:e1:24:b3:82:84:15:e0:33:f0:28:9c:74:19:1b:
a9:a9:3d:99:42:c5:29:bc:09:1e:3d:db:ca:8c:1d:05:cf:e1:
4a:8e:87:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupro0sOR6rl4Xa/PPbPIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZWIyNzNlMDQ0M2U1N2ZmY2EyODYwYjBjMjA2MTNmMGU0
MjdjNjIwHhcNMjMwMTAxMTg0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjMyOWZjMmE2ZGZlN2ZlOGNjODQ3ODQ4ZWVhZmI5Y2QxNjgwNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlBAAQ9RasNMvNG82XRGovjNbHYJ
vWyQSqnQNzw2aSa5DcH5zmW24hBGMfB/B9GjVZZKgQleNPe9/0TC2+IP1+Dfgw9P
CIl7ozf/UZE2fl1mOyovkENuRci1EzgTq3GObDzQ4JxZFXKTvi2T6eSqJJsYFgne
mdgF9HOgK1EaNBQ0EeHzihg1qkK0h3zzIasuERhXcE93H8mvK6h1cBfO19ymzfKL
YX0mh2Jnjgs/AeZf74dFd5KiBmCx8iZGQPCaNx7eggnVm8hB2Gb4XPdhYsd+8opp
bn0JmtnakSSlC17FyGSEKeqhuc5iXeQMcOlc0bLclhaMTptZAsaeCWhpNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYyn8Km3+f+jMhHhI7q+5zRaAWMMB8GA1UdIwQY
MBaAFOXrJz4EQ+V//KKGCwwgYT8OQnxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVzblBnUkQ1WF84b29ZTERDQmhQdzVDZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83OTQxYWQtMjEzMS00N2ViLWI1Njct
Nzc0MjkwM2IxYmFmLzEvMWpLZndxYmY1XzZNeUVlRWp1cjduTkZvQll3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83OTQxYWQtMjEzMS00N2ViLWI1NjctNzc0MjkwM2IxYmFm
LzEvNWVzblBnUkQ1WF84b29ZTERDQmhQdzVDZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYLQMA0G
CSqGSIb3DQEBCwUAA4IBAQB3xrGFBj8V2/sLMVoK+kFMxm102wp/z+DIlGxkQ+6p
tFaC8WC5jEuvdqyT5xGR8Cu6dWkTwVe8O1Za/tYjq+cc2D3kP7+gqCDQaaUPGISr
EzZD3tVhmPWd/QMONMTfd9GC9S32P1Uf2RRqqZphXCKF+Em/nF3u+BxlZ9GnUt63
pdmCuVKgOghafQojjqkJMvGPs37wZirBBm6jAhxYcubh+2jp+dqBNhJun0OGLOdl
wV6RrbUYd7PwmOLNYwohebjrBBU4rsjD7DzO5noQApFcdrhC1KhOHZdbI30D4SSz
goQV4DPwKJx0GRupqT2ZQsUpvAkePdvKjB0Fz+FKjofk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org