Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7706e3-3cb3-4057-90c7-94d7a100c326/1/dJpdMAwdS56kBV9SuQm5YMh2b3s.roa
File: dJpdMAwdS56kBV9SuQm5YMh2b3s.roa (raw, json)
Hash identifier: p0J6TL0MmToB/p42CUg89HuckHR/PnKDa/TSTF1oMLA=
Subject key identifier: 74:9A:5D:30:0C:1D:4B:9E:A4:05:5F:52:B9:09:B9:60:C8:76:6F:7B
Certificate issuer: /CN=9d53ced12c380628ea1322abf424a74622c66ca0
Certificate serial: 01856F94ACA9EDA3D938C547074DA4A4BF0A
Authority key identifier: 9D:53:CE:D1:2C:38:06:28:EA:13:22:AB:F4:24:A7:46:22:C6:6C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVPO0Sw4BijqEyKr9CSnRiLGbKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7706e3-3cb3-4057-90c7-94d7a100c326/1/dJpdMAwdS56kBV9SuQm5YMh2b3s.roa
Signing time: Sun 01 Jan 2023 23:04:52 +0000
ROA not before: Sun 01 Jan 2023 23:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 212.23.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ac:a9:ed:a3:d9:38:c5:47:07:4d:a4:a4:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d53ced12c380628ea1322abf424a74622c66ca0
Validity
Not Before: Jan 1 23:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=749a5d300c1d4b9ea4055f52b909b960c8766f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:28:3f:a4:9b:1a:70:c1:9c:37:a1:b9:4d:
3b:7d:c6:d3:e5:0e:cf:ff:e8:80:e0:22:44:2e:fa:
17:d8:49:89:97:a2:5c:54:70:85:e0:7a:41:3f:67:
9d:16:d6:67:ec:e5:33:31:f0:1a:8f:9b:8e:55:79:
a0:ba:58:97:2f:d4:7b:43:53:dc:9f:bc:da:41:0a:
05:27:5e:07:5b:ed:45:1c:9a:a7:2a:e7:c7:03:e3:
f4:88:c4:73:ea:0d:fd:f1:62:e0:db:d1:39:9f:19:
ec:76:b7:ab:a6:68:f5:80:95:a8:d3:94:49:e4:44:
74:94:dd:9a:05:14:00:7e:23:1e:94:93:5d:4d:fc:
0e:82:95:b3:1c:41:15:f8:d5:86:5b:fa:2b:ba:b7:
5e:b0:e6:cf:cf:f2:55:d5:0b:9b:fc:8c:3c:6a:44:
92:8b:b0:58:cb:84:e6:3b:9a:1e:56:15:11:70:bd:
d1:90:ba:d5:18:89:da:1b:f8:12:04:f8:12:98:65:
8c:24:34:58:9c:74:07:2b:ab:b1:ed:f0:57:5d:95:
ad:e8:38:ff:62:ec:67:93:2e:f0:be:ef:31:f2:7d:
bb:f5:8c:ac:67:e2:02:1e:2f:e2:77:08:2a:e4:dc:
7b:bf:b1:e5:f2:23:bc:a4:61:51:a4:58:ac:66:77:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:5D:30:0C:1D:4B:9E:A4:05:5F:52:B9:09:B9:60:C8:76:6F:7B
X509v3 Authority Key Identifier:
keyid:9D:53:CE:D1:2C:38:06:28:EA:13:22:AB:F4:24:A7:46:22:C6:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVPO0Sw4BijqEyKr9CSnRiLGbKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7706e3-3cb3-4057-90c7-94d7a100c326/1/dJpdMAwdS56kBV9SuQm5YMh2b3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7706e3-3cb3-4057-90c7-94d7a100c326/1/nVPO0Sw4BijqEyKr9CSnRiLGbKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.200.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6c:04:1a:52:c1:ad:65:be:72:66:9e:63:e9:0b:79:21:6e:
57:f3:2e:94:29:10:47:49:e9:e4:4c:79:18:2d:20:22:57:85:
b9:7a:87:39:20:00:2c:76:65:6b:c2:cd:3d:20:55:f8:fa:7b:
b3:1e:cd:f1:e9:36:05:a9:a8:12:a5:f0:e6:34:bf:93:98:a9:
e8:3e:78:c8:ee:da:b5:4f:f5:6d:2c:90:0c:c6:fc:99:6f:6f:
63:03:35:38:c2:7f:b7:15:9b:ef:c0:8e:79:a2:fd:24:f2:49:
c1:23:3e:73:ed:32:9d:4e:d9:88:35:5c:85:88:b1:d5:1c:f3:
df:df:eb:9c:ef:18:2d:c7:49:51:04:79:2e:54:63:cd:6d:d0:
03:5b:6b:f3:b7:83:57:b5:fd:9b:28:32:f3:49:f9:e5:70:33:
b4:78:90:17:4a:78:cf:3e:8c:c9:70:31:a3:b8:57:fb:5a:16:
28:96:44:c5:8c:a7:e2:2b:cc:8e:55:3e:bc:34:18:9e:95:e8:
52:de:82:71:aa:c5:77:41:92:d9:fe:a5:27:22:9b:ef:a1:05:
4e:d3:95:1d:89:07:2f:27:04:28:b7:06:6d:5b:35:5f:fc:b6:
4a:5e:39:9d:9b:fa:f3:9f:6f:89:08:ff:60:7a:f9:d3:00:f8:
d9:cc:23:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlKyp7aPZOMVHB02kpL8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTNjZWQxMmMzODA2MjhlYTEzMjJhYmY0MjRhNzQ2MjJj
NjZjYTAwHhcNMjMwMTAxMjMwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDlhNWQzMDBjMWQ0YjllYTQwNTVmNTJiOTA5Yjk2MGM4NzY2ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAoP6SbGnDBnDehuU07fcbT5Q7P
/+iA4CJELvoX2EmJl6JcVHCF4HpBP2edFtZn7OUzMfAaj5uOVXmguliXL9R7Q1Pc
n7zaQQoFJ14HW+1FHJqnKufHA+P0iMRz6g398WLg29E5nxnsdrerpmj1gJWo05RJ
5ER0lN2aBRQAfiMelJNdTfwOgpWzHEEV+NWGW/orurdesObPz/JV1Qub/Iw8akSS
i7BYy4TmO5oeVhURcL3RkLrVGInaG/gSBPgSmGWMJDRYnHQHK6ux7fBXXZWt6Dj/
Yuxnky7wvu8x8n279YysZ+ICHi/idwgq5Nx7v7Hl8iO8pGFRpFisZndm+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSaXTAMHUuepAVfUrkJuWDIdm97MB8GA1UdIwQY
MBaAFJ1TztEsOAYo6hMiq/Qkp0YixmygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZQTzBTdzRCaWpxRXlLcjlDU25SaUxHYktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NzA2ZTMtM2NiMy00MDU3LTkwYzct
OTRkN2ExMDBjMzI2LzEvZEpwZE1Bd2RTNTZrQlY5U3VRbTVZTWgyYjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NzA2ZTMtM2NiMy00MDU3LTkwYzctOTRkN2ExMDBjMzI2
LzEvblZQTzBTdzRCaWpxRXlLcjlDU25SaUxHYktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfIMA0G
CSqGSIb3DQEBCwUAA4IBAQCGbAQaUsGtZb5yZp5j6Qt5IW5X8y6UKRBHSenkTHkY
LSAiV4W5eoc5IAAsdmVrws09IFX4+nuzHs3x6TYFqagSpfDmNL+TmKnoPnjI7tq1
T/VtLJAMxvyZb29jAzU4wn+3FZvvwI55ov0k8knBIz5z7TKdTtmINVyFiLHVHPPf
3+uc7xgtx0lRBHkuVGPNbdADW2vzt4NXtf2bKDLzSfnlcDO0eJAXSnjPPozJcDGj
uFf7WhYolkTFjKfiK8yOVT68NBielehS3oJxqsV3QZLZ/qUnIpvvoQVO05UdiQcv
JwQotwZtWzVf/LZKXjmdm/rzn2+JCP9gevnTAPjZzCO4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:40 2024 by rpki-client on console-fra.rpki-client.org