Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iFR4X6IuUvoWgRfLw5X0TQ-mJmQ.roa
File: iFR4X6IuUvoWgRfLw5X0TQ-mJmQ.roa (raw, json)
Hash identifier: X2b5TQ1uB9mZkXRuIFuCSvUr+Dt1vuZGzan9I3MNWJk=
Subject key identifier: 88:54:78:5F:A2:2E:52:FA:16:81:17:CB:C3:95:F4:4D:0F:A6:26:64
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 08E79AC7
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iFR4X6IuUvoWgRfLw5X0TQ-mJmQ.roa
Signing time: Sat 01 Jan 2022 07:53:00 +0000
ROA not before: Sat 01 Jan 2022 07:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.29.0/24 maxlen: 25
178.20.31.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149396167 (0x8e79ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 1 07:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8854785fa22e52fa168117cbc395f44d0fa62664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:e0:82:08:35:95:0c:14:78:e0:eb:5b:0b:
5b:0c:eb:9c:85:a6:8e:57:3f:fe:d3:8e:a8:a6:12:
16:f9:72:fa:81:8f:d4:2a:c2:d8:67:36:0b:93:24:
d6:dc:f4:d8:4f:15:f2:d9:83:df:5a:a7:3b:42:2e:
0c:8c:18:4b:e7:90:bb:88:61:1b:d6:25:f4:3d:af:
5a:d4:ee:63:5d:4b:06:be:d5:7e:68:40:54:51:c0:
85:19:66:6d:41:51:58:29:b0:58:00:80:7d:ec:3e:
2b:a9:81:4f:cd:d0:b8:0e:0d:cc:bc:87:be:75:e4:
b0:5f:9a:81:0d:4f:01:b9:24:2c:4f:04:84:03:45:
50:f4:7f:d2:66:f9:82:68:34:d3:c4:80:99:b1:07:
ee:69:f5:ea:6d:bb:2f:4e:2f:05:0a:ee:79:43:6f:
b9:f5:37:e5:28:4e:d7:a4:07:f3:73:2f:70:e2:31:
b9:0a:53:6f:1b:e3:ce:50:16:63:70:a1:27:9f:6a:
d6:6e:fe:b8:e8:7a:1c:e1:cb:c9:0e:34:77:52:a4:
9e:e5:bb:05:ce:ac:7a:6d:71:9b:7f:89:47:3e:e7:
77:e9:b3:bd:d8:5b:86:6a:95:d4:f9:6c:41:a9:05:
42:32:5c:17:51:1b:49:b4:6a:14:0f:6c:9c:e0:f3:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:78:5F:A2:2E:52:FA:16:81:17:CB:C3:95:F4:4D:0F:A6:26:64
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iFR4X6IuUvoWgRfLw5X0TQ-mJmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.29.0/24
178.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
36:23:f5:1c:b5:ae:24:7b:bc:75:33:65:47:83:8b:57:95:6e:
39:4f:db:77:b4:7b:a2:95:97:57:7c:2c:ff:37:83:09:a5:25:
3f:46:aa:e3:be:ad:a5:25:25:79:f3:c2:f0:80:b5:e1:63:cb:
f5:81:9c:4a:02:3c:38:46:31:d4:8e:e3:e6:ec:a0:59:df:5d:
22:1c:52:c3:e8:3a:0b:89:9d:3b:f3:d1:f4:1f:33:3a:44:72:
4a:88:d3:e4:5a:62:ab:7a:c4:2f:91:0f:12:2e:55:da:8d:4c:
4f:a2:5e:3b:92:f3:90:8c:27:63:93:aa:d7:8f:fc:31:47:de:
9d:60:05:c5:68:d8:7b:7c:8f:a9:f3:39:ae:30:8d:c7:bf:a3:
64:58:57:25:7d:88:e2:9a:73:da:d6:58:89:d2:1d:51:f8:fe:
8e:d5:4f:3e:f9:9c:1d:ec:b4:15:6a:27:59:62:bd:c6:45:47:
5a:38:05:9f:ed:a6:24:12:ab:2c:1f:aa:af:01:65:2e:b8:80:
60:55:d6:b6:a3:4e:9e:7d:76:90:15:4c:31:a2:3e:15:95:25:
d8:eb:c0:2e:27:93:f6:a7:dd:71:bb:7c:52:c4:42:aa:48:ee:
89:9f:2f:64:60:99:ea:18:32:9a:6e:db:f9:e9:95:85:12:95:
d1:51:8c:e8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECOeaxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjY2OTdjOWVmZGE5NTVjYmEzZTZmODk3MGQ3MmU5OTZiZjNjMTY1MB4XDTIyMDEw
MTA3NTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODg1NDc4NWZhMjJl
NTJmYTE2ODExN2NiYzM5NWY0NGQwZmE2MjY2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ974IIINZUMFHjg61sLWwzrnIWmjlc//tOOqKYSFvly+oGP
1CrC2Gc2C5Mk1tz02E8V8tmD31qnO0IuDIwYS+eQu4hhG9Yl9D2vWtTuY11LBr7V
fmhAVFHAhRlmbUFRWCmwWACAfew+K6mBT83QuA4NzLyHvnXksF+agQ1PAbkkLE8E
hANFUPR/0mb5gmg008SAmbEH7mn16m27L04vBQrueUNvufU35ShO16QH83MvcOIx
uQpTbxvjzlAWY3ChJ59q1m7+uOh6HOHLyQ40d1KknuW7Bc6sem1xm3+JRz7nd+mz
vdhbhmqV1PlsQakFQjJcF1EbSbRqFA9snODzpEUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSIVHhfoi5S+haBF8vDlfRND6YmZDAfBgNVHSMEGDAWgBSSZpfJ79qVXLo+
b4lw1y6Za/PBZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ttYVh5ZV9hbFZ5NlBtLUpjTmN1bVd2endXVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvMGM0ZmJkLWUwN2YtNGY1OS1iOGY0LTJhNDcxM2VlYmZmMy8x
L2lGUjRYNkl1VXZvV2dSZkx3NVgwVFEtbUptUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
MGM0ZmJkLWUwN2YtNGY1OS1iOGY0LTJhNDcxM2VlYmZmMy8xL2ttYVh5ZV9hbFZ5
NlBtLUpjTmN1bVd2endXVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALIUHQMEALIUHzANBgkqhkiG9w0B
AQsFAAOCAQEANiP1HLWuJHu8dTNlR4OLV5VuOU/bd7R7opWXV3ws/zeDCaUlP0aq
476tpSUlefPC8IC14WPL9YGcSgI8OEYx1I7j5uygWd9dIhxSw+g6C4mdO/PR9B8z
OkRySojT5Fpiq3rEL5EPEi5V2o1MT6JeO5LzkIwnY5Oq14/8MUfenWAFxWjYe3yP
qfM5rjCNx7+jZFhXJX2I4ppz2tZYidIdUfj+jtVPPvmcHey0FWonWWK9xkVHWjgF
n+2mJBKrLB+qrwFlLriAYFXWtqNOnn12kBVMMaI+FZUl2OvALieT9qfdcbt8UsRC
qkjuiZ8vZGCZ6hgymm7b+emVhRKV0VGM6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org