Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/innB0URyGQ8OlpBU5Rg_gK3utOA.roa
File: innB0URyGQ8OlpBU5Rg_gK3utOA.roa (raw, json)
Hash identifier: 2s8tvnRdkZ9l2e9MKlt40obR9OemVyQiF0RPwi7KJ9I=
Subject key identifier: 8A:79:C1:D1:44:72:19:0F:0E:96:90:54:E5:18:3F:80:AD:EE:B4:E0
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018D8431D931FE533D58D328EA203AE06F47
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/innB0URyGQ8OlpBU5Rg_gK3utOA.roa
Signing time: Wed 07 Feb 2024 15:31:15 +0000
ROA not before: Wed 07 Feb 2024 15:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 176.116.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:31:d9:31:fe:53:3d:58:d3:28:ea:20:3a:e0:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Feb 7 15:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a79c1d14472190f0e969054e5183f80adeeb4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:c9:3d:bf:15:80:55:c8:13:f1:f8:74:66:
de:61:88:01:0c:6b:1f:81:7e:fb:8f:7a:e9:25:3b:
ad:db:e9:2e:4f:3f:72:e1:fd:af:ed:5e:51:e2:3c:
80:f2:e2:fc:8a:21:16:da:db:fc:90:96:c7:d7:99:
94:46:5e:33:65:9f:18:cb:6d:fd:6d:9d:e2:50:cc:
e9:b1:ab:77:43:b9:fb:43:02:63:f7:e3:ac:bc:10:
ca:fa:bd:39:0c:a8:cf:65:f6:da:c7:3f:10:88:bd:
81:5b:66:23:56:ea:d8:d9:c0:a7:47:2c:1d:e9:1d:
05:c5:c4:a9:2e:06:b3:48:3a:7e:c7:56:00:31:84:
4e:14:be:d8:f5:dc:78:34:27:16:e2:22:6e:dd:3d:
f6:3e:c7:12:ce:fc:bc:3f:8b:e3:4f:1e:55:5f:15:
99:02:95:ad:59:31:59:ab:e6:92:df:60:a9:54:a4:
a7:1a:aa:21:b9:a0:b7:5d:23:b0:4f:b5:59:68:a3:
b9:e8:2d:30:89:f8:09:a4:02:42:c6:d7:f3:21:18:
49:ff:c8:81:0e:07:b8:d9:6a:a7:a5:84:d0:6c:d1:
66:d3:40:e7:50:49:5b:03:93:5b:6a:c8:00:0a:09:
24:fc:31:b1:00:48:7a:fd:09:6f:8c:97:f0:59:6e:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:C1:D1:44:72:19:0F:0E:96:90:54:E5:18:3F:80:AD:EE:B4:E0
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/innB0URyGQ8OlpBU5Rg_gK3utOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.28.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0b:28:e2:d3:d1:6f:24:d9:fb:55:1d:81:bb:0a:7c:48:da:
c1:19:b4:01:0a:bf:c9:95:73:c9:bf:4f:5e:f0:38:5c:98:c2:
34:8e:75:38:a1:87:c9:9b:94:d9:55:41:f1:83:23:c6:e8:36:
a1:49:6c:ff:80:37:b6:02:3a:63:90:8b:7e:74:a2:6a:1e:87:
e9:b6:d5:9a:8f:e2:bc:6d:e5:55:51:6c:d2:4e:e7:ea:56:70:
3e:9b:28:c7:a3:85:66:91:8d:68:58:35:b8:6b:92:84:b6:e2:
43:a0:59:7d:16:d8:04:96:22:10:b8:0d:bc:60:5c:d0:16:8a:
3f:1c:fb:3f:9f:ee:1f:f8:c5:e0:91:fd:5f:1d:09:c5:ed:43:
9f:59:92:00:e3:7b:c2:7f:18:b6:17:0c:5d:ef:56:38:95:af:
9a:bf:dd:00:fd:df:80:ed:80:7e:99:fd:2a:31:c8:1b:a8:c6:
31:11:58:38:de:45:33:fa:de:36:3a:e6:a2:e5:74:8f:45:53:
06:54:59:b3:06:36:05:16:23:1e:ca:3b:91:a7:b4:bc:78:5a:
5c:1f:59:ff:d5:47:ae:a8:d3:b5:e1:da:f9:d9:bb:9c:ad:d1:
d7:95:58:cc:4c:cc:1c:cd:cb:cb:d5:e2:69:d2:02:18:98:f4:
f3:17:3f:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2EMdkx/lM9WNMo6iA64G9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDYwNmVkZGJjZWM3YTU3MjExOTQxYTY3Y2M3MjliNDI5
MTVjNWUwHhcNMjQwMjA3MTUzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTc5YzFkMTQ0NzIxOTBmMGU5NjkwNTRlNTE4M2Y4MGFkZWViNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9LJPb8VgFXIE/H4dGbeYYgBDGsf
gX77j3rpJTut2+kuTz9y4f2v7V5R4jyA8uL8iiEW2tv8kJbH15mURl4zZZ8Yy239
bZ3iUMzpsat3Q7n7QwJj9+OsvBDK+r05DKjPZfbaxz8QiL2BW2YjVurY2cCnRywd
6R0FxcSpLgazSDp+x1YAMYROFL7Y9dx4NCcW4iJu3T32PscSzvy8P4vjTx5VXxWZ
ApWtWTFZq+aS32CpVKSnGqohuaC3XSOwT7VZaKO56C0wifgJpAJCxtfzIRhJ/8iB
Dge42WqnpYTQbNFm00DnUElbA5NbasgACgkk/DGxAEh6/QlvjJfwWW6B4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIp5wdFEchkPDpaQVOUYP4Ct7rTgMB8GA1UdIwQY
MBaAFHIGBu3bzselchGUGmfMcptCkVxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUt
OTlmNTQ5MWM0NDQ3LzEvaW5uQjBVUnlHUThPbHBCVTVSZ19nSzN1dE9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUtOTlmNTQ5MWM0NDQ3
LzEvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQcMA0G
CSqGSIb3DQEBCwUAA4IBAQAXCyji09FvJNn7VR2Buwp8SNrBGbQBCr/JlXPJv09e
8DhcmMI0jnU4oYfJm5TZVUHxgyPG6DahSWz/gDe2AjpjkIt+dKJqHofpttWaj+K8
beVVUWzSTufqVnA+myjHo4VmkY1oWDW4a5KEtuJDoFl9FtgEliIQuA28YFzQFoo/
HPs/n+4f+MXgkf1fHQnF7UOfWZIA43vCfxi2Fwxd71Y4la+av90A/d+A7YB+mf0q
McgbqMYxEVg43kUz+t42Ouai5XSPRVMGVFmzBjYFFiMeyjuRp7S8eFpcH1n/1Ueu
qNO14dr52bucrdHXlVjMTMwczcvL1eJp0gIYmPTzFz/0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:38 2024 by rpki-client on console-ams.rpki-client.org