Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/8XAfDg-ObMaK-8-jZG2vKdgRPqM.roa
File: 8XAfDg-ObMaK-8-jZG2vKdgRPqM.roa (raw, json)
Hash identifier: 8bPLPePtXXqbbHrxmqK9xkCSm8mmRTBQCqJwAiXekJ4=
Subject key identifier: F1:70:1F:0E:0F:8E:6C:C6:8A:FB:CF:A3:64:6D:AF:29:D8:11:3E:A3
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 0182ED7505BB11EC512715E9EB8BDCA3617A
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/8XAfDg-ObMaK-8-jZG2vKdgRPqM.roa
Signing time: Tue 30 Aug 2022 06:34:05 +0000
ROA not before: Tue 30 Aug 2022 06:34:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:75:05:bb:11:ec:51:27:15:e9:eb:8b:dc:a3:61:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Aug 30 06:34:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1701f0e0f8e6cc68afbcfa3646daf29d8113ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:fb:66:93:1e:e0:d0:54:52:2d:b7:00:38:
a4:c7:07:34:89:9b:b6:78:cd:3c:2d:9f:50:c4:9a:
20:a2:8a:d8:bd:15:33:1e:d2:8f:40:ff:33:4c:04:
3b:4c:1a:91:99:d4:38:bb:ca:ef:ff:d5:cf:d8:d1:
0d:89:cb:25:8e:e8:0c:04:28:26:97:0d:f0:97:3c:
19:77:0b:9c:7d:6d:84:eb:4d:ef:e1:2a:08:33:8e:
15:11:77:ef:01:94:d0:43:2d:f0:12:48:97:2b:e6:
1c:58:59:05:64:7b:fe:6c:e2:83:c2:50:17:87:4c:
53:93:83:23:e4:73:ed:46:53:b0:d8:65:fe:f2:fa:
23:90:88:7f:b3:95:4f:17:0f:cb:79:57:47:16:47:
e2:52:ad:7a:49:60:cf:b4:f3:08:1e:7d:73:e1:a0:
be:92:48:a9:60:78:21:ec:1e:a3:5e:48:bf:89:fb:
21:8a:21:30:35:a5:57:44:07:1f:e4:bb:08:d9:eb:
58:de:7a:65:09:e8:3a:45:5d:f7:5c:36:a9:d0:22:
1d:b2:27:d3:fb:5f:57:8d:0f:35:76:2c:e7:60:cb:
14:d1:45:f9:30:db:15:f9:9e:17:04:de:8c:06:46:
82:16:c3:6b:1e:db:fc:06:c0:2a:9e:66:f0:8d:d4:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:1F:0E:0F:8E:6C:C6:8A:FB:CF:A3:64:6D:AF:29:D8:11:3E:A3
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/8XAfDg-ObMaK-8-jZG2vKdgRPqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:12:6c:b7:9b:1b:06:d3:52:72:56:6a:a0:a1:46:ca:bb:a1:
17:3e:de:cc:16:70:62:eb:81:bc:4f:a5:e1:70:a2:87:18:34:
01:df:a5:2d:3f:8e:ed:f1:01:43:99:10:a5:55:1b:95:de:2c:
3f:99:0e:5a:ff:36:28:ea:b4:f1:c1:77:bc:be:14:c9:f8:26:
bc:4c:4f:2a:09:2f:44:e5:a1:3c:03:60:15:1d:84:48:f8:1b:
d2:da:14:c1:ea:61:27:07:c3:85:83:9b:14:a5:8c:43:6f:5e:
20:ba:36:3c:f9:f8:56:94:d9:40:eb:df:73:40:72:17:13:6c:
e2:a0:1b:67:0e:af:42:4c:bb:84:91:5f:66:6b:b9:1b:7e:e1:
c1:60:cf:34:d6:28:d1:32:9f:b2:b4:33:75:4c:68:39:d4:f4:
e1:88:93:27:b8:48:f0:07:20:dd:9b:e8:1c:ab:5a:18:89:bc:
4b:d5:16:c0:e9:59:4a:eb:99:32:66:e4:09:87:f0:7a:25:8f:
1f:89:12:86:df:c3:28:ca:a5:22:f5:a7:55:22:a8:cc:02:f4:
a2:79:56:8f:dd:2a:b3:0a:82:f8:62:6f:3a:86:66:21:a3:90:
fc:16:e5:c9:8d:31:57:e2:8c:fe:c6:1b:bc:97:e1:7c:94:1d:
e5:f5:ea:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLtdQW7EexRJxXp64vco2F6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmViODNkZTJhNTk0NTE1ZWViZDc3ZmU1ODgwMWU2YTg5
ZmNlNjQwHhcNMjIwODMwMDYzNDA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTcwMWYwZTBmOGU2Y2M2OGFmYmNmYTM2NDZkYWYyOWQ4MTEzZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWz7ZpMe4NBUUi23ADikxwc0iZu2
eM08LZ9QxJogoorYvRUzHtKPQP8zTAQ7TBqRmdQ4u8rv/9XP2NENicsljugMBCgm
lw3wlzwZdwucfW2E603v4SoIM44VEXfvAZTQQy3wEkiXK+YcWFkFZHv+bOKDwlAX
h0xTk4Mj5HPtRlOw2GX+8vojkIh/s5VPFw/LeVdHFkfiUq16SWDPtPMIHn1z4aC+
kkipYHgh7B6jXki/ifshiiEwNaVXRAcf5LsI2etY3nplCeg6RV33XDap0CIdsifT
+19XjQ81diznYMsU0UX5MNsV+Z4XBN6MBkaCFsNrHtv8BsAqnmbwjdRFkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFwHw4PjmzGivvPo2RtrynYET6jMB8GA1UdIwQY
MBaAFG6+uD3ipZRRXuvXf+WIAeaon85kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2Et
Y2E5NjhlOTZiNGNhLzEvOFhBZkRnLU9iTWFLLTgtalpHMnZLZGdSUHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2EtY2E5NjhlOTZiNGNh
LzEvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoKMA0G
CSqGSIb3DQEBCwUAA4IBAQDFEmy3mxsG01JyVmqgoUbKu6EXPt7MFnBi64G8T6Xh
cKKHGDQB36UtP47t8QFDmRClVRuV3iw/mQ5a/zYo6rTxwXe8vhTJ+Ca8TE8qCS9E
5aE8A2AVHYRI+BvS2hTB6mEnB8OFg5sUpYxDb14gujY8+fhWlNlA699zQHIXE2zi
oBtnDq9CTLuEkV9ma7kbfuHBYM801ijRMp+ytDN1TGg51PThiJMnuEjwByDdm+gc
q1oYibxL1RbA6VlK65kyZuQJh/B6JY8fiRKG38MoyqUi9adVIqjMAvSieVaP3Sqz
CoL4Ym86hmYho5D8FuXJjTFX4oz+xhu8l+F8lB3l9eov
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org