Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa
File: gBoHGGjEhk297jFLrgHDnUPN7lk.roa (raw, json)
Hash identifier: XKS9+4zMiQhT8I6iRGZg0ojFYqF+NSd3YM3FzaXuVtg=
Subject key identifier: 80:1A:07:18:68:C4:86:4D:BD:EE:31:4B:AE:01:C3:9D:43:CD:EE:59
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185431585BB75F077E1361F65EFF6C049B9
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa
Signing time: Sat 24 Dec 2022 07:42:42 +0000
ROA not before: Sat 24 Dec 2022 07:42:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 88.218.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:15:85:bb:75:f0:77:e1:36:1f:65:ef:f6:c0:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Dec 24 07:42:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801a071868c4864dbdee314bae01c39d43cdee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:93:81:57:e3:16:52:bb:3f:38:25:9e:ed:
1b:fb:0e:5d:e2:3e:d7:79:52:62:9b:20:0a:ff:cc:
29:5e:38:2e:bf:c2:9d:0f:a2:22:b7:28:c6:dd:e6:
b8:56:2a:70:94:bc:5a:5d:8d:88:19:bf:05:bd:bb:
b6:cf:0d:0d:47:d6:90:04:33:2b:cd:b8:75:37:d1:
a0:4b:12:b6:12:39:51:53:3b:cc:1b:79:d6:dc:27:
94:9e:a1:68:94:93:70:de:18:6b:81:76:58:44:ab:
27:9b:05:78:f2:4b:ac:71:76:ef:f0:9c:6a:1b:22:
ae:26:9a:f4:04:73:b8:f4:d1:42:f5:05:60:52:d2:
0c:29:42:4b:5d:73:97:08:97:b1:82:e8:e1:b5:52:
a8:63:1e:2a:37:20:a2:d8:34:87:07:04:04:98:39:
5a:07:a3:75:f5:b0:65:8d:14:06:a7:93:4f:b6:dc:
45:5b:50:b6:15:31:08:6b:24:f9:a4:8a:62:15:e0:
8a:43:d7:c1:3f:9d:be:47:fd:53:8a:8e:10:68:95:
45:b2:03:b9:65:29:76:71:1d:1a:7a:80:5a:73:c5:
6f:48:02:f3:ae:4d:2d:27:ab:87:45:27:4a:e8:bc:
f9:fa:d2:05:22:14:de:76:cd:24:72:80:be:ff:2c:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:07:18:68:C4:86:4D:BD:EE:31:4B:AE:01:C3:9D:43:CD:EE:59
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.46.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0c:1e:61:47:21:a6:e4:37:f0:0b:18:1b:96:41:dd:4b:21:
d3:3c:9e:77:98:48:d6:16:0a:02:e9:a2:b9:b4:f3:5a:02:08:
fd:0f:4f:73:e0:ee:ef:57:1e:ab:c5:9e:54:04:73:9b:06:9c:
cd:72:5b:91:c6:3e:12:1a:12:f2:98:0d:96:ca:7e:f2:a9:64:
63:2c:4b:1f:bb:bc:c5:bf:dd:2e:48:20:dc:40:4d:ae:aa:05:
fe:7d:73:bb:f9:b4:fa:0a:61:e6:f8:ad:c7:73:36:b8:18:d4:
7c:d3:1f:a3:96:a5:23:03:b3:94:8e:72:96:aa:43:40:0f:86:
5f:13:be:70:9a:30:6c:3b:73:6e:a3:50:64:ee:41:75:63:95:
42:9d:b6:26:46:7a:ff:b2:1f:72:f3:d9:81:6b:11:bb:f5:8a:
f7:d5:12:1c:c1:15:fb:81:64:e2:3e:9c:4e:cd:c9:e4:46:fb:
ac:f6:04:a3:c9:6e:68:f2:f5:8b:51:0c:ea:44:d8:c2:7d:1f:
a4:82:cb:44:b1:52:60:38:a5:18:f3:8d:35:2d:ff:82:f7:e3:
18:ac:76:88:12:dd:bf:29:af:3b:41:dd:9a:a5:77:89:42:c8:
ef:53:b4:f4:ad:42:d4:76:b5:63:d5:6f:b3:e5:8b:37:aa:01:
62:a3:ad:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVDFYW7dfB34TYfZe/2wEm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjIxMjI0MDc0MjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDFhMDcxODY4YzQ4NjRkYmRlZTMxNGJhZTAxYzM5ZDQzY2RlZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocSTgVfjFlK7Pzglnu0b+w5d4j7X
eVJimyAK/8wpXjguv8KdD6IityjG3ea4VipwlLxaXY2IGb8Fvbu2zw0NR9aQBDMr
zbh1N9GgSxK2EjlRUzvMG3nW3CeUnqFolJNw3hhrgXZYRKsnmwV48kuscXbv8Jxq
GyKuJpr0BHO49NFC9QVgUtIMKUJLXXOXCJexgujhtVKoYx4qNyCi2DSHBwQEmDla
B6N19bBljRQGp5NPttxFW1C2FTEIayT5pIpiFeCKQ9fBP52+R/1Tio4QaJVFsgO5
ZSl2cR0aeoBac8VvSALzrk0tJ6uHRSdK6Lz5+tIFIhTeds0kcoC+/yyXNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIAaBxhoxIZNve4xS64Bw51Dze5ZMB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEvZ0JvSEdHakVoazI5N2pGTHJnSERuVVBON2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNouMA0G
CSqGSIb3DQEBCwUAA4IBAQACDB5hRyGm5DfwCxgblkHdSyHTPJ53mEjWFgoC6aK5
tPNaAgj9D09z4O7vVx6rxZ5UBHObBpzNcluRxj4SGhLymA2Wyn7yqWRjLEsfu7zF
v90uSCDcQE2uqgX+fXO7+bT6CmHm+K3Hcza4GNR80x+jlqUjA7OUjnKWqkNAD4Zf
E75wmjBsO3Nuo1Bk7kF1Y5VCnbYmRnr/sh9y89mBaxG79Yr31RIcwRX7gWTiPpxO
zcnkRvus9gSjyW5o8vWLUQzqRNjCfR+kgstEsVJgOKUY8401Lf+C9+MYrHaIEt2/
Ka87Qd2apXeJQsjvU7T0rULUdrVj1W+z5Ys3qgFio61B
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:17 2024 by rpki-client on console-ams.rpki-client.org