Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/xQOmmOGfdptcTata8nkmwg0eRUs.roa
File: xQOmmOGfdptcTata8nkmwg0eRUs.roa (raw, json)
Hash identifier: SSnnyK1dyOL9uVR/xCzkAi3rgSSXpwGed0Brrja0t14=
Subject key identifier: C5:03:A6:98:E1:9F:76:9B:5C:4D:AB:5A:F2:79:26:C2:0D:1E:45:4B
Certificate issuer: /CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Certificate serial: 0186C7C9BF0F746C1CAE58AF35FDEDA12457
Authority key identifier: 6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/xQOmmOGfdptcTata8nkmwg0eRUs.roa
Signing time: Thu 09 Mar 2023 19:12:12 +0000
ROA not before: Thu 09 Mar 2023 19:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.234.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:c9:bf:0f:74:6c:1c:ae:58:af:35:fd:ed:a1:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebeb83de2a594515eebd77fe58801e6a89fce64
Validity
Not Before: Mar 9 19:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c503a698e19f769b5c4dab5af27926c20d1e454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:81:9a:67:97:c0:ab:3e:c6:62:7b:3a:90:
e9:dc:8c:64:af:d1:02:d3:a1:e1:75:71:c0:7e:3b:
8d:e4:d8:5f:06:07:9f:65:ce:8c:46:24:64:02:e0:
f4:85:aa:33:00:b6:1a:5a:02:5e:0c:0e:5a:d7:de:
43:5f:9e:75:21:74:ff:05:cf:5e:6d:32:de:fb:16:
3a:82:bd:b1:bf:9d:f1:3d:a2:01:02:a2:bd:d1:51:
cf:87:48:b8:7f:68:d9:ee:d4:4a:42:29:16:1b:e8:
84:8e:16:ad:2d:d8:c5:bc:41:27:51:ea:79:f1:d1:
dc:78:08:51:1a:56:66:3b:6c:2e:23:ea:ed:ee:e6:
a1:cf:65:a7:ec:48:e3:34:2b:57:34:bf:a2:57:d2:
3c:9f:c1:45:1d:84:7c:34:72:b6:57:8a:be:5c:f6:
d0:39:2c:96:e2:66:34:d3:13:14:bb:e1:b4:e8:1e:
e7:ca:90:bc:4d:e0:c7:9f:bc:fe:2f:1f:d5:a6:53:
90:39:a7:4f:53:e4:45:92:d6:4b:6b:c1:01:15:7c:
ac:e4:69:98:c5:31:4c:44:d7:0a:24:32:00:28:ac:
c3:e5:66:e7:bf:0f:4f:da:e1:07:a0:7f:f1:65:b5:
79:64:fa:f1:49:d2:d9:b9:7a:d0:31:6c:fc:3e:ca:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:A6:98:E1:9F:76:9B:5C:4D:AB:5A:F2:79:26:C2:0D:1E:45:4B
X509v3 Authority Key Identifier:
keyid:6E:BE:B8:3D:E2:A5:94:51:5E:EB:D7:7F:E5:88:01:E6:A8:9F:CE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/br64PeKllFFe69d_5YgB5qifzmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/xQOmmOGfdptcTata8nkmwg0eRUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bbb779-7b96-4620-b4ca-ca968e96b4ca/1/br64PeKllFFe69d_5YgB5qifzmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.10.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:22:b3:80:69:de:a3:9c:a3:be:d8:9a:cb:20:c8:a7:1f:
c5:e0:86:ed:85:f7:f6:7d:f3:7b:99:3d:c1:d6:3b:d8:4e:a8:
b9:16:7e:9c:9d:41:59:3a:74:66:a0:2d:20:04:81:de:49:f2:
44:19:e5:b8:da:61:4c:86:07:d8:34:69:05:ee:26:7f:60:e1:
7b:89:dd:47:d1:4b:87:04:29:ab:06:2f:6b:11:f4:3e:1f:96:
21:e0:e4:47:25:f1:7b:30:92:35:9b:be:26:0a:70:0d:2e:16:
20:62:88:d9:45:3e:21:24:f9:c4:a4:8b:62:86:cc:a2:36:d0:
6a:78:7d:8e:95:0f:75:9b:a3:27:4b:cb:a1:6e:c1:35:90:d7:
22:7b:eb:d6:45:01:34:6d:f1:96:ca:d9:9d:c8:68:93:f0:60:
e1:28:33:de:55:07:c9:a6:e4:54:1e:61:9e:d6:65:83:40:1a:
47:8e:ee:69:2f:69:33:93:a9:96:1d:ef:46:2e:f5:f3:c7:5b:
f0:51:ec:a7:a5:e3:a0:88:94:b0:1d:33:1d:20:16:94:d9:ea:
68:3b:c6:ee:99:bf:56:82:9c:9f:80:5b:bc:30:d1:de:ab:fb:
1c:ce:19:f3:ec:ce:ff:32:e0:37:a7:cc:ff:cd:45:d9:ee:d5:
fb:5c:cd:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbHyb8PdGwcrlivNf3toSRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmViODNkZTJhNTk0NTE1ZWViZDc3ZmU1ODgwMWU2YTg5
ZmNlNjQwHhcNMjMwMzA5MTkxMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTAzYTY5OGUxOWY3NjliNWM0ZGFiNWFmMjc5MjZjMjBkMWU0NTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLSBmmeXwKs+xmJ7OpDp3Ixkr9EC
06HhdXHAfjuN5NhfBgefZc6MRiRkAuD0haozALYaWgJeDA5a195DX551IXT/Bc9e
bTLe+xY6gr2xv53xPaIBAqK90VHPh0i4f2jZ7tRKQikWG+iEjhatLdjFvEEnUep5
8dHceAhRGlZmO2wuI+rt7uahz2Wn7EjjNCtXNL+iV9I8n8FFHYR8NHK2V4q+XPbQ
OSyW4mY00xMUu+G06B7nypC8TeDHn7z+Lx/VplOQOadPU+RFktZLa8EBFXys5GmY
xTFMRNcKJDIAKKzD5Wbnvw9P2uEHoH/xZbV5ZPrxSdLZuXrQMWz8PsrOswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUDppjhn3abXE2rWvJ5JsINHkVLMB8GA1UdIwQY
MBaAFG6+uD3ipZRRXuvXf+WIAeaon85kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2Et
Y2E5NjhlOTZiNGNhLzEveFFPbW1PR2ZkcHRjVGF0YThua213ZzBlUlVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iYmI3NzktN2I5Ni00NjIwLWI0Y2EtY2E5NjhlOTZiNGNh
LzEvYnI2NFBlS2xsRkZlNjlkXzVZZ0I1cWlmem1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoKMA0G
CSqGSIb3DQEBCwUAA4IBAQACJyKzgGneo5yjvtiayyDIpx/F4Ibthff2ffN7mT3B
1jvYTqi5Fn6cnUFZOnRmoC0gBIHeSfJEGeW42mFMhgfYNGkF7iZ/YOF7id1H0UuH
BCmrBi9rEfQ+H5Yh4ORHJfF7MJI1m74mCnANLhYgYojZRT4hJPnEpItihsyiNtBq
eH2OlQ91m6MnS8uhbsE1kNcie+vWRQE0bfGWytmdyGiT8GDhKDPeVQfJpuRUHmGe
1mWDQBpHju5pL2kzk6mWHe9GLvXzx1vwUeynpeOgiJSwHTMdIBaU2epoO8bumb9W
gpyfgFu8MNHeq/sczhnz7M7/MuA3p8z/zUXZ7tX7XM3J
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org