Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/O6Ra-Lo40ZXJF3xRFxe5hXUDXrg.roa
File: O6Ra-Lo40ZXJF3xRFxe5hXUDXrg.roa (raw, json)
Hash identifier: h+icBtXSdfWmlNt9AtnQu2xJgcV32STNV9I+pgnST60=
Subject key identifier: 3B:A4:5A:F8:BA:38:D1:95:C9:17:7C:51:17:17:B9:85:75:03:5E:B8
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 018BC9BAB131F87BC03C65FCA08F69190C7F
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/O6Ra-Lo40ZXJF3xRFxe5hXUDXrg.roa
Signing time: Mon 13 Nov 2023 17:28:57 +0000
ROA not before: Mon 13 Nov 2023 17:28:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:ba:b1:31:f8:7b:c0:3c:65:fc:a0:8f:69:19:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Nov 13 17:28:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ba45af8ba38d195c9177c511717b98575035eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:c0:eb:b6:87:0e:db:43:33:a6:c6:a6:e2:
fa:0d:e3:9a:a5:32:2b:55:98:19:04:0b:ef:9b:19:
0e:21:d9:a0:2d:5c:22:fa:e7:d9:48:89:82:7d:13:
51:dc:7d:0d:a9:ed:58:1c:93:cb:f0:ec:b6:b0:e4:
60:74:07:a3:87:79:8d:d2:8d:3e:b8:04:ed:be:77:
62:6a:a4:15:ca:d5:3a:85:65:48:bd:d9:a3:5e:ad:
20:d0:c7:fd:09:5c:1f:7a:aa:b7:f6:a5:0f:5a:05:
f0:80:39:ea:6f:9b:ba:88:9d:d6:45:eb:34:04:ee:
57:cd:67:2d:6c:74:72:9d:34:dd:15:cc:2a:7f:25:
15:e5:b0:48:1c:f1:8d:08:07:b6:e7:1c:bf:0f:c2:
35:ec:64:d5:cb:70:b4:3e:58:07:d9:d4:38:53:49:
c7:08:ab:a4:dc:4a:ca:7d:a2:e0:a0:e7:0e:ad:9f:
b6:93:5c:63:ff:ed:04:70:1c:82:d3:8e:d3:67:f3:
be:3a:75:93:b5:3f:d5:55:9f:89:7a:36:d0:12:04:
cb:97:fd:3c:32:83:bd:95:5a:ab:cf:f6:cc:19:9d:
c1:53:00:01:bc:a6:36:92:78:76:f7:f8:c6:3a:38:
db:51:b1:f1:53:47:90:70:af:8a:b8:44:36:04:14:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:5A:F8:BA:38:D1:95:C9:17:7C:51:17:17:B9:85:75:03:5E:B8
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/O6Ra-Lo40ZXJF3xRFxe5hXUDXrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:bf:4f:2f:32:34:46:cb:06:31:4b:c0:d6:cd:67:82:bf:3b:
b9:9b:7a:8c:a0:8e:9e:45:4a:d7:fb:2b:4f:73:c7:ca:8b:3b:
8c:4f:8e:b6:56:b7:d8:bc:1d:96:60:e7:c4:85:5a:d5:d4:98:
b3:ba:4f:fa:3d:2c:39:43:f9:80:22:76:b4:89:25:81:4f:14:
85:5c:62:72:c5:12:98:46:59:8c:2b:73:e5:df:72:44:60:0e:
19:03:25:96:e8:3b:62:ed:4a:1b:d6:07:a3:c0:1c:47:a3:41:
5a:4c:f2:12:b4:6d:b0:07:00:09:04:53:98:0f:3f:8b:ab:79:
c5:7a:da:36:3f:10:c1:1d:a5:f9:e2:89:a8:5e:05:de:a0:8c:
2b:6f:73:26:f8:7c:12:1b:d8:21:01:79:7d:76:5c:2a:72:ea:
00:de:62:de:a5:2f:f6:d2:0f:8f:3a:20:d2:4d:2b:df:81:2b:
b7:d9:b6:22:69:df:00:1e:d4:00:af:92:79:cb:25:f3:49:af:
e1:7a:94:5d:2b:8d:23:b2:5c:1c:64:2f:8b:e9:10:ad:18:a6:
fc:a3:43:b9:40:af:40:0d:3a:64:37:8a:dd:d0:77:09:3e:63:
30:12:64:87:b3:28:58:ff:eb:2c:e4:e7:61:f2:73:63:af:8e:
07:db:a2:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvJurEx+HvAPGX8oI9pGQx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmViODNkZTJhNTk0NTE1ZWViZDc3ZmU1ODgwMWU2YTg5
ZmNlNjQwHhcNMjMxMTEzMTcyODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmE0NWFmOGJhMzhkMTk1YzkxNzdjNTExNzE3Yjk4NTc1MDM1ZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3HA67aHDttDM6bGpuL6DeOapTIr
VZgZBAvvmxkOIdmgLVwi+ufZSImCfRNR3H0Nqe1YHJPL8Oy2sORgdAejh3mN0o0+
uATtvndiaqQVytU6hWVIvdmjXq0g0Mf9CVwfeqq39qUPWgXwgDnqb5u6iJ3WRes0
BO5XzWctbHRynTTdFcwqfyUV5bBIHPGNCAe25xy/D8I17GTVy3C0PlgH2dQ4U0nH
CKuk3ErKfaLgoOcOrZ+2k1xj/+0EcByC047TZ/O+OnWTtT/VVZ+JejbQEgTLl/08
MoO9lVqrz/bMGZ3BUwABvKY2knh29/jGOjjbUbHxU0eQcK+KuEQ2BBRIGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDukWvi6ONGVyRd8URcXuYV1A164MB8GA1UdIwQY
MBaAFG6+uD3ipZRRXuvXf+WIAeaon85kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2Et
Y2E5NjhlOTZiNGNhLzEvTzZSYS1MbzQwWlhKRjN4UkZ4ZTVoWFVEWHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2EtY2E5NjhlOTZiNGNh
LzEvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoKMA0G
CSqGSIb3DQEBCwUAA4IBAQDPv08vMjRGywYxS8DWzWeCvzu5m3qMoI6eRUrX+ytP
c8fKizuMT462VrfYvB2WYOfEhVrV1Jizuk/6PSw5Q/mAIna0iSWBTxSFXGJyxRKY
RlmMK3Pl33JEYA4ZAyWW6Dti7Uob1gejwBxHo0FaTPIStG2wBwAJBFOYDz+Lq3nF
eto2PxDBHaX54omoXgXeoIwrb3Mm+HwSG9ghAXl9dlwqcuoA3mLepS/20g+POiDS
TSvfgSu32bYiad8AHtQAr5J5yyXzSa/hepRdK40jslwcZC+L6RCtGKb8o0O5QK9A
DTpkN4rd0HcJPmMwEmSHsyhY/+ss5Odh8nNjr44H26Lv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org