Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/njpi8AoCHBkJjOtCCF1vsht-d_g.roa
File: njpi8AoCHBkJjOtCCF1vsht-d_g.roa (raw, json)
Hash identifier: +300NQ1eVjbs9+FHbd9XoTmXSCctSXUaQfknfVvPShY=
Subject key identifier: 9E:3A:62:F0:0A:02:1C:19:09:8C:EB:42:08:5D:6F:B2:1B:7E:77:F8
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CB7D3C58BBE90C5F65ADD9B79C7B5341C
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/njpi8AoCHBkJjOtCCF1vsht-d_g.roa
Signing time: Fri 29 Dec 2023 23:05:58 +0000
ROA not before: Fri 29 Dec 2023 23:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b7:d3:c5:8b:be:90:c5:f6:5a:dd:9b:79:c7:b5:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Dec 29 23:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3a62f00a021c19098ceb42085d6fb21b7e77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:9f:f4:46:03:ed:2c:c2:20:22:76:a2:c5:
33:05:b7:5a:04:f2:47:12:16:88:1f:e9:09:3d:8b:
8d:a2:4e:56:34:ec:98:ff:d4:ec:40:e8:51:a4:aa:
8a:25:89:99:21:e4:3f:5b:27:b9:05:6e:84:91:a1:
ff:a6:fc:ee:51:ef:b3:0b:4d:09:7c:7c:6c:61:e0:
c7:69:7e:80:73:64:b4:66:f6:d2:72:76:77:fc:34:
d6:95:d1:5a:1d:7e:16:f9:df:2e:8c:01:ea:d4:ec:
e4:a1:e1:8a:ef:cc:50:7f:5f:18:fe:02:a1:90:75:
30:0a:e4:a4:88:86:26:9c:af:10:43:fa:a4:7c:f1:
3a:98:cd:75:0c:7b:cc:d5:fd:6c:80:81:e4:6a:82:
87:29:d0:9a:ce:db:d4:78:04:ed:3f:f2:41:9b:4b:
1f:b6:f9:08:11:5c:d3:b8:0a:1c:ed:d4:2f:2a:9e:
59:01:f5:74:ee:e3:36:58:62:5f:64:6b:e1:82:cf:
cd:08:ab:a0:37:98:f4:37:b1:22:da:f2:ca:71:af:
6f:e0:c0:16:56:53:20:9d:bf:e5:9c:18:61:b5:24:
0f:c3:20:1d:17:db:c9:f6:68:07:fd:e6:9d:b1:2c:
8a:59:78:ea:d6:13:c7:df:04:9c:df:34:e7:90:17:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:62:F0:0A:02:1C:19:09:8C:EB:42:08:5D:6F:B2:1B:7E:77:F8
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/njpi8AoCHBkJjOtCCF1vsht-d_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b0:30:be:7d:e2:ce:5f:9e:ce:e1:0c:55:dc:83:0d:46:6c:
93:df:01:7a:69:f3:76:72:61:fe:1b:90:ef:be:95:fc:51:44:
5d:d9:72:c9:3a:cb:88:2d:48:f4:ab:86:f4:e2:5a:77:7f:69:
80:50:db:02:be:d7:6c:75:12:8b:6d:d9:80:50:e3:1d:2f:f5:
86:a7:5f:e3:3b:91:78:6a:44:c9:57:46:da:e0:62:4c:c2:a3:
c9:21:1e:8e:a3:99:42:c7:78:9b:a0:1a:d9:50:cc:1c:b5:51:
0f:22:5b:54:a6:3b:55:b6:a1:47:dd:e5:28:64:12:63:cf:9b:
40:e7:0b:09:f2:3e:2e:3f:fe:a9:a7:0f:aa:e0:db:ca:ab:d2:
60:a0:54:57:5b:25:ff:2c:1d:5d:5a:e5:f5:94:b6:6c:bc:97:
a0:e5:c5:86:9b:0c:f8:26:5b:4b:31:65:3f:66:f6:4f:4b:0c:
01:9d:ca:16:d0:be:cb:a9:89:a2:6e:35:27:31:da:0e:e3:b3:
a1:bf:2e:3b:7d:40:fc:2e:e7:e7:58:62:7a:04:61:c6:b4:c9:
6c:cb:23:60:bc:ca:e8:5c:f4:ac:df:05:df:3c:8b:72:55:2c:
b4:10:60:bb:6e:cf:0e:44:7c:82:c5:4e:28:1d:a8:c8:d3:16:
2e:76:f8:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy308WLvpDF9lrdm3nHtTQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTg4OTM0YTBiMGQ2NDhkYWY5NGRkOWU2MjlkM2RkMjJl
ZDVhYmYwHhcNMjMxMjI5MjMwNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTNhNjJmMDBhMDIxYzE5MDk4Y2ViNDIwODVkNmZiMjFiN2U3N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNOf9EYD7SzCICJ2osUzBbdaBPJH
EhaIH+kJPYuNok5WNOyY/9TsQOhRpKqKJYmZIeQ/Wye5BW6EkaH/pvzuUe+zC00J
fHxsYeDHaX6Ac2S0ZvbScnZ3/DTWldFaHX4W+d8ujAHq1OzkoeGK78xQf18Y/gKh
kHUwCuSkiIYmnK8QQ/qkfPE6mM11DHvM1f1sgIHkaoKHKdCaztvUeATtP/JBm0sf
tvkIEVzTuAoc7dQvKp5ZAfV07uM2WGJfZGvhgs/NCKugN5j0N7Ei2vLKca9v4MAW
VlMgnb/lnBhhtSQPwyAdF9vJ9mgH/eadsSyKWXjq1hPH3wSc3zTnkBdjcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ46YvAKAhwZCYzrQghdb7Ibfnf4MB8GA1UdIwQY
MBaAFHNYiTSgsNZI2vlN2eYp090i7Vq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQt
N2Q0YzBiN2Q3ODYxLzEvbmpwaThBb0NIQmtKak90Q0NGMXZzaHQtZF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQtN2Q0YzBiN2Q3ODYx
LzEvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjOMA0G
CSqGSIb3DQEBCwUAA4IBAQAqsDC+feLOX57O4QxV3IMNRmyT3wF6afN2cmH+G5Dv
vpX8UURd2XLJOsuILUj0q4b04lp3f2mAUNsCvtdsdRKLbdmAUOMdL/WGp1/jO5F4
akTJV0ba4GJMwqPJIR6Oo5lCx3iboBrZUMwctVEPIltUpjtVtqFH3eUoZBJjz5tA
5wsJ8j4uP/6ppw+q4NvKq9JgoFRXWyX/LB1dWuX1lLZsvJeg5cWGmwz4JltLMWU/
ZvZPSwwBncoW0L7LqYmibjUnMdoO47Ohvy47fUD8LufnWGJ6BGHGtMlsyyNgvMro
XPSs3wXfPItyVSy0EGC7bs8ORHyCxU4oHajI0xYudvgq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org