Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/7nAXT1RnpjIu9ENhxRvQYdzqGs8.roa
File: 7nAXT1RnpjIu9ENhxRvQYdzqGs8.roa (raw, json)
Hash identifier: mnBuqnqH87vr05UncSYL6vXKaxZcibusP7oxsZnd6UM=
Subject key identifier: EE:70:17:4F:54:67:A6:32:2E:F4:43:61:C5:1B:D0:61:DC:EA:1A:CF
Certificate issuer: /CN=b4b4068b321f40232356de541bd68bd444906ba5
Certificate serial: 01882086796A3B709CE6ED3EF59BC4815B5C
Authority key identifier: B4:B4:06:8B:32:1F:40:23:23:56:DE:54:1B:D6:8B:D4:44:90:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLQGizIfQCMjVt5UG9aL1ESQa6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/7nAXT1RnpjIu9ENhxRvQYdzqGs8.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.62.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:79:6a:3b:70:9c:e6:ed:3e:f5:9b:c4:81:5b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b4068b321f40232356de541bd68bd444906ba5
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee70174f5467a6322ef44361c51bd061dcea1acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:29:ed:94:b6:33:a4:e0:ff:4e:c6:dc:be:
96:ee:14:e4:f4:da:42:dc:d5:20:4b:98:58:25:17:
1e:76:df:83:fc:5c:31:c4:5e:27:6a:2a:7f:05:52:
64:96:13:e2:47:9e:2e:dd:b6:fb:f7:b5:e8:8f:a9:
67:21:4e:6a:44:3b:27:d3:28:6d:d5:3a:a3:d7:e7:
ce:8d:64:63:16:5c:9a:80:b2:0d:01:8a:e9:76:38:
4f:b7:a2:f4:32:3e:c9:96:2c:a7:dd:6b:78:9c:3b:
0f:9e:c6:c0:d4:34:58:84:2d:57:5a:03:39:c3:46:
89:41:b2:88:1b:6f:dd:2b:db:d5:b9:2c:a1:54:07:
26:7e:29:00:64:2a:30:45:e0:92:d4:68:7a:22:cd:
46:e8:08:cf:62:21:0f:6f:b1:3a:c5:30:0d:a2:e9:
33:c5:ab:9e:6d:5b:40:01:95:72:b6:8c:ac:7d:c6:
d8:55:4a:c6:10:55:ce:5c:0c:a5:19:04:bf:be:37:
cb:a9:76:97:5e:70:7c:e6:26:f8:d8:2f:3f:73:2b:
c3:4a:1c:53:4e:b8:65:61:73:a6:74:26:13:ff:72:
3d:09:3c:12:4b:07:64:7f:a1:c3:37:a6:65:36:8e:
02:7b:f0:41:79:57:75:22:ea:1e:f6:df:5e:55:0c:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:17:4F:54:67:A6:32:2E:F4:43:61:C5:1B:D0:61:DC:EA:1A:CF
X509v3 Authority Key Identifier:
keyid:B4:B4:06:8B:32:1F:40:23:23:56:DE:54:1B:D6:8B:D4:44:90:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLQGizIfQCMjVt5UG9aL1ESQa6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/7nAXT1RnpjIu9ENhxRvQYdzqGs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/tLQGizIfQCMjVt5UG9aL1ESQa6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:59:1a:38:da:73:e5:d1:99:3e:0a:33:5f:5d:ea:86:99:7e:
fa:4d:93:ed:8d:d5:13:1c:4c:98:69:2b:0e:e8:62:fd:70:d3:
1b:67:f9:77:aa:73:70:39:ce:3e:55:df:ab:1e:0d:8d:08:2a:
98:36:71:57:8c:59:f7:25:ca:29:57:fd:62:ff:d0:f2:9a:fe:
9c:cc:7b:be:3f:20:4c:ce:74:6c:c7:ef:21:2c:77:24:0e:5f:
85:7b:40:c7:ce:89:87:02:8e:08:69:45:c6:1e:a5:89:ed:07:
5f:ce:4e:a3:95:2c:af:7b:b4:14:b4:2b:6d:ff:77:f8:1d:b5:
bd:fb:1a:7d:5a:13:2c:0e:01:70:6a:34:02:e5:ef:24:22:3c:
f6:96:40:c7:69:fd:48:96:2d:46:e5:e8:b0:26:1c:e6:24:ec:
98:9c:b1:23:3f:95:e5:8d:02:fd:b5:66:09:0c:32:fd:ba:92:
89:4b:a5:2e:81:51:b7:74:7f:cc:06:da:36:e3:ad:95:bc:60:
eb:01:71:5e:40:04:83:5e:ea:14:2d:a7:01:8a:9e:ee:99:b7:
39:af:c0:6b:0a:54:fc:94:e6:32:4d:1f:5d:b0:5b:ce:f5:60:
19:cc:64:71:19:c2:44:21:4a:b2:c1:74:93:fb:38:6c:c7:d1:
63:8a:e7:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnlqO3Cc5u0+9ZvEgVtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjQwNjhiMzIxZjQwMjMyMzU2ZGU1NDFiZDY4YmQ0NDQ5
MDZiYTUwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTcwMTc0ZjU0NjdhNjMyMmVmNDQzNjFjNTFiZDA2MWRjZWExYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wp7ZS2M6Tg/07G3L6W7hTk9NpC
3NUgS5hYJRcedt+D/FwxxF4naip/BVJklhPiR54u3bb797Xoj6lnIU5qRDsn0yht
1Tqj1+fOjWRjFlyagLINAYrpdjhPt6L0Mj7Jliyn3Wt4nDsPnsbA1DRYhC1XWgM5
w0aJQbKIG2/dK9vVuSyhVAcmfikAZCowReCS1Gh6Is1G6AjPYiEPb7E6xTANoukz
xauebVtAAZVytoysfcbYVUrGEFXOXAylGQS/vjfLqXaXXnB85ib42C8/cyvDShxT
TrhlYXOmdCYT/3I9CTwSSwdkf6HDN6ZlNo4Ce/BBeVd1Iuoe9t9eVQwZuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5wF09UZ6YyLvRDYcUb0GHc6hrPMB8GA1UdIwQY
MBaAFLS0BosyH0AjI1beVBvWi9REkGulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExRR2l6SWZRQ01qVnQ1VUc5YUwxRVNRYTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZTEwY2EtMGZiNS00YjYxLThhZTYt
NTRiNjY5MjU4ZWIyLzEvN25BWFQxUm5wakl1OUVOaHhSdlFZZHpxR3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84ZTEwY2EtMGZiNS00YjYxLThhZTYtNTRiNjY5MjU4ZWIy
LzEvdExRR2l6SWZRQ01qVnQ1VUc5YUwxRVNRYTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5oMA0G
CSqGSIb3DQEBCwUAA4IBAQC2WRo42nPl0Zk+CjNfXeqGmX76TZPtjdUTHEyYaSsO
6GL9cNMbZ/l3qnNwOc4+Vd+rHg2NCCqYNnFXjFn3JcopV/1i/9Dymv6czHu+PyBM
znRsx+8hLHckDl+Fe0DHzomHAo4IaUXGHqWJ7Qdfzk6jlSyve7QUtCtt/3f4HbW9
+xp9WhMsDgFwajQC5e8kIjz2lkDHaf1Ili1G5eiwJhzmJOyYnLEjP5XljQL9tWYJ
DDL9upKJS6UugVG3dH/MBto2462VvGDrAXFeQASDXuoULacBip7umbc5r8BrClT8
lOYyTR9dsFvO9WAZzGRxGcJEIUqywXST+zhsx9FjiucD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:37 2024 by rpki-client on console-ams.rpki-client.org