Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/9xwCOzat6K2X0ahk6wGB7BxZcCs.roa
File: 9xwCOzat6K2X0ahk6wGB7BxZcCs.roa (raw, json)
Hash identifier: bAO5BAV6aG4yIq+Cfsr5SlmqtPj3hD3U/qA9XSrBWzI=
Subject key identifier: F7:1C:02:3B:36:AD:E8:AD:97:D1:A8:64:EB:01:81:EC:1C:59:70:2B
Certificate issuer: /CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Certificate serial: 018CC56DDEE438D48EFDB30DD2CD482AE5C2
Authority key identifier: 9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/9xwCOzat6K2X0ahk6wGB7BxZcCs.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211183
IP address blocks: 94.154.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:de:e4:38:d4:8e:fd:b3:0d:d2:cd:48:2a:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71c023b36ade8ad97d1a864eb0181ec1c59702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:f8:18:71:45:d9:8d:ca:c6:b0:11:67:ba:
81:88:33:ed:36:1d:b8:23:c8:98:3a:99:06:22:9b:
4d:c1:18:6e:f8:cb:ae:63:c4:f5:70:f9:4e:d2:55:
f2:a2:d1:e4:24:46:60:74:5a:a7:38:46:5a:49:c0:
3d:4a:74:83:c5:76:19:47:5b:9a:30:d6:3b:8b:77:
e4:73:c1:44:87:d2:73:20:89:8e:1b:86:e1:4d:e7:
84:be:c6:d1:3c:bf:e8:e2:9d:ee:11:68:13:b8:2f:
57:2b:b8:b5:b3:4b:44:50:ff:96:74:c9:3b:36:38:
42:08:b4:6d:55:ae:7f:4e:4b:86:48:d6:1c:61:7d:
a8:64:00:41:12:28:eb:3e:44:0c:96:3c:89:07:20:
b7:8d:a8:13:30:78:4e:73:09:9a:64:f6:14:35:46:
cd:63:ba:be:e0:d7:71:1c:db:a0:20:9f:36:93:19:
a2:ee:8f:65:ef:f8:45:45:4d:5e:e2:82:8e:3a:83:
49:15:80:d2:b8:70:76:7e:ad:05:c2:c6:d4:e6:a4:
1b:bc:4b:05:9f:a4:77:df:58:e9:3d:dc:12:7d:a9:
97:3c:0b:f0:36:f9:dc:ab:b7:76:34:0b:69:66:74:
c8:2d:7f:dc:5b:03:bb:87:b4:c5:e5:f7:5a:20:6f:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:02:3B:36:AD:E8:AD:97:D1:A8:64:EB:01:81:EC:1C:59:70:2B
X509v3 Authority Key Identifier:
keyid:9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/9xwCOzat6K2X0ahk6wGB7BxZcCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.11.0/24
Signature Algorithm: sha256WithRSAEncryption
23:53:eb:10:4f:c0:d4:63:75:ef:ae:94:84:fe:d2:ff:bd:5e:
e6:d6:d3:bb:9e:44:da:64:67:d6:3f:56:95:c1:f0:40:d5:48:
bd:3b:a8:8c:10:81:a3:7e:5a:90:7c:4a:a6:c6:72:df:43:cd:
0c:86:90:5a:cc:c0:aa:c4:dd:ce:1e:5b:24:e8:08:ac:8f:26:
38:a7:b6:72:d7:86:0e:8e:d4:ee:8b:ba:35:ca:b7:be:6c:97:
42:d2:ae:78:98:0a:4a:3d:36:f6:d8:2f:f8:e5:a2:74:a0:8a:
61:52:b2:7b:41:65:8a:6b:02:7c:40:f3:97:14:88:1b:cb:c0:
52:87:c5:be:93:60:a5:a9:cb:4c:db:1c:0e:f5:81:8d:0a:15:
6d:c2:98:7c:63:5d:76:d7:15:f3:0b:44:a1:4d:9b:4a:4c:89:
be:3d:6c:4c:67:f1:77:14:dc:4c:39:b2:3d:d7:12:b3:a9:53:
09:2c:44:21:d7:4c:56:92:95:61:c6:97:d4:6d:6e:a4:b4:23:
b4:4c:f3:38:0e:ba:40:58:14:5d:f1:93:15:22:64:0e:5d:c5:
41:e4:e0:80:83:d5:f5:3b:20:d1:b8:d7:39:f7:cb:bc:6e:cc:
76:dc:d0:a3:01:5f:90:e9:09:31:52:7d:ca:cd:1b:3c:db:50:
3e:f4:66:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbd7kONSO/bMN0s1IKuXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmRmNGViNmZmNzkxMjNlMTdkZGYzZjUwMTgxMzNmNDFj
MWQxYjQwHhcNMjQwMTAxMTQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFjMDIzYjM2YWRlOGFkOTdkMWE4NjRlYjAxODFlYzFjNTk3MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj/4GHFF2Y3KxrARZ7qBiDPtNh24
I8iYOpkGIptNwRhu+MuuY8T1cPlO0lXyotHkJEZgdFqnOEZaScA9SnSDxXYZR1ua
MNY7i3fkc8FEh9JzIImOG4bhTeeEvsbRPL/o4p3uEWgTuC9XK7i1s0tEUP+WdMk7
NjhCCLRtVa5/TkuGSNYcYX2oZABBEijrPkQMljyJByC3jagTMHhOcwmaZPYUNUbN
Y7q+4NdxHNugIJ82kxmi7o9l7/hFRU1e4oKOOoNJFYDSuHB2fq0FwsbU5qQbvEsF
n6R331jpPdwSfamXPAvwNvncq7d2NAtpZnTILX/cWwO7h7TF5fdaIG/pCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPccAjs2reitl9GoZOsBgewcWXArMB8GA1UdIwQY
MBaAFJ699Otv95Ej4X3fP1AYEz9BwdG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnIzMDYyXzNrU1BoZmQ4X1VCZ1RQMEhCMGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iODFjYjAtZDE1Ny00NTMzLTk2Mzct
ZjlmZGQzMTMyNDA2LzEvOXh3Q096YXQ2SzJYMGFoazZ3R0I3QnhaY0NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iODFjYjAtZDE1Ny00NTMzLTk2MzctZjlmZGQzMTMyNDA2
LzEvbnIzMDYyXzNrU1BoZmQ4X1VCZ1RQMEhCMGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpoLMA0G
CSqGSIb3DQEBCwUAA4IBAQAjU+sQT8DUY3XvrpSE/tL/vV7m1tO7nkTaZGfWP1aV
wfBA1Ui9O6iMEIGjflqQfEqmxnLfQ80MhpBazMCqxN3OHlsk6AisjyY4p7Zy14YO
jtTui7o1yre+bJdC0q54mApKPTb22C/45aJ0oIphUrJ7QWWKawJ8QPOXFIgby8BS
h8W+k2ClqctM2xwO9YGNChVtwph8Y1121xXzC0ShTZtKTIm+PWxMZ/F3FNxMObI9
1xKzqVMJLEQh10xWkpVhxpfUbW6ktCO0TPM4DrpAWBRd8ZMVImQOXcVB5OCAg9X1
OyDRuNc598u8bsx23NCjAV+Q6QkxUn3KzRs821A+9Gbh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org