Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/CMHzieTat1vsvMSMj5yGI2e4l0g.roa
File: CMHzieTat1vsvMSMj5yGI2e4l0g.roa (raw, json)
Hash identifier: h4ZAQOj3P7nHZDsUbAFG5hRChgeTsPe62fGFgvROjQk=
Subject key identifier: 08:C1:F3:89:E4:DA:B7:5B:EC:BC:C4:8C:8F:9C:86:23:67:B8:97:48
Certificate issuer: /CN=8115992494f84b601f919431d123614149babaee
Certificate serial: 01856F9DD61465CCEC820EA11CD85119DA13
Authority key identifier: 81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/CMHzieTat1vsvMSMj5yGI2e4l0g.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57783
IP address blocks: 91.231.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d6:14:65:cc:ec:82:0e:a1:1c:d8:51:19:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115992494f84b601f919431d123614149babaee
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c1f389e4dab75becbcc48c8f9c862367b89748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:23:ef:da:9b:9e:8f:eb:e3:a8:0e:68:52:
2f:ae:34:fc:91:30:fc:7e:fb:4e:3b:65:f4:cd:31:
6c:fe:a0:fa:13:93:1f:97:01:0c:c2:a0:82:39:b3:
cf:ac:e2:93:56:a0:3d:20:97:7b:7b:79:c1:24:83:
45:02:97:a4:d5:48:57:dc:c9:01:3f:bb:5c:09:6b:
73:61:74:55:97:4d:95:c1:df:67:ee:29:5f:e3:ea:
a9:bf:c7:80:4e:45:45:1f:af:be:62:18:42:3f:9c:
81:67:73:c7:25:09:1a:f7:a5:fa:4f:b6:25:f0:dd:
59:dd:1e:15:49:24:bf:76:41:ab:d7:c8:1c:87:e5:
ea:b1:21:95:f5:c5:57:56:24:83:09:e4:90:ab:d1:
bf:c5:3d:00:f0:e9:58:28:6c:2f:fe:10:c6:02:51:
c9:5a:37:63:05:ac:07:aa:26:c6:fd:c0:dc:2a:6f:
6d:6e:21:b4:55:f0:57:93:33:d1:81:3f:34:57:d0:
39:58:38:7a:7a:c5:65:a3:10:75:a5:72:0d:d9:88:
63:d9:75:b8:ad:e3:ba:03:0d:96:a5:b5:18:37:39:
67:26:ad:d3:24:e1:6d:10:1d:81:62:aa:cf:f4:24:
fd:98:2f:ef:e2:79:77:61:0c:a6:ab:1b:8e:f5:8f:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:F3:89:E4:DA:B7:5B:EC:BC:C4:8C:8F:9C:86:23:67:B8:97:48
X509v3 Authority Key Identifier:
keyid:81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/CMHzieTat1vsvMSMj5yGI2e4l0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/gRWZJJT4S2AfkZQx0SNhQUm6uu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.243.0/24
Signature Algorithm: sha256WithRSAEncryption
78:13:98:1e:c9:36:bc:59:00:f6:6d:8d:3a:f9:c3:5a:20:2b:
3d:5b:0a:9a:78:7b:3e:15:70:27:3a:2d:06:11:fb:e0:85:a6:
13:ae:e7:cb:4d:d9:10:ef:6e:bd:9f:28:70:c7:bd:13:58:20:
04:fc:9f:ec:b7:4c:cc:9e:53:fc:41:87:19:18:3c:1a:fc:38:
3b:f5:8d:99:41:30:c8:f0:76:13:97:fd:65:7c:96:78:b2:cd:
94:10:36:9e:33:54:0e:42:29:4b:b5:d4:e1:65:41:21:3b:ef:
a1:18:7f:6a:db:bc:31:81:e1:2a:ce:1d:58:b6:4e:29:50:f6:
9b:0b:2d:5e:ef:94:f6:5b:b1:0b:cd:da:88:7a:ed:08:6e:8a:
10:d3:7d:1c:32:a7:1e:31:9d:55:24:bc:4f:31:34:56:37:52:
af:f2:df:82:26:4c:ba:85:a5:6d:da:27:e0:dd:c8:01:ac:24:
a9:67:5d:05:9b:fd:c0:b8:cb:07:74:8e:e6:92:88:e9:46:e6:
9d:d8:af:eb:40:77:47:31:d5:4f:02:0b:8c:43:37:36:47:f9:
7f:b0:56:2f:36:39:aa:d7:7d:c5:17:64:1e:11:87:88:79:f5:
a3:98:2a:a4:35:90:5b:da:cc:0c:5e:e6:7d:9b:e0:39:c5:74:
7e:d2:7c:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvndYUZczsgg6hHNhRGdoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMTU5OTI0OTRmODRiNjAxZjkxOTQzMWQxMjM2MTQxNDli
YWJhZWUwHhcNMjMwMTAxMjMxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGMxZjM4OWU0ZGFiNzViZWNiY2M0OGM4ZjljODYyMzY3Yjg5NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnoj79qbno/r46gOaFIvrjT8kTD8
fvtOO2X0zTFs/qD6E5MflwEMwqCCObPPrOKTVqA9IJd7e3nBJINFApek1UhX3MkB
P7tcCWtzYXRVl02Vwd9n7ilf4+qpv8eATkVFH6++YhhCP5yBZ3PHJQka96X6T7Yl
8N1Z3R4VSSS/dkGr18gch+XqsSGV9cVXViSDCeSQq9G/xT0A8OlYKGwv/hDGAlHJ
WjdjBawHqibG/cDcKm9tbiG0VfBXkzPRgT80V9A5WDh6esVloxB1pXIN2Yhj2XW4
reO6Aw2WpbUYNzlnJq3TJOFtEB2BYqrP9CT9mC/v4nl3YQymqxuO9Y9iPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjB84nk2rdb7LzEjI+chiNnuJdIMB8GA1UdIwQY
MBaAFIEVmSSU+EtgH5GUMdEjYUFJurruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JXWkpKVDRTMkFma1pReDBTTmhRVW02dXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWE2NmYtZWEzYi00ZDEwLTllMmQt
ZjVkOWMyYzI3ZmUzLzEvQ01IemllVGF0MXZzdk1TTWo1eUdJMmU0bDBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMWE2NmYtZWEzYi00ZDEwLTllMmQtZjVkOWMyYzI3ZmUz
LzEvZ1JXWkpKVDRTMkFma1pReDBTTmhRVW02dXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+fzMA0G
CSqGSIb3DQEBCwUAA4IBAQB4E5geyTa8WQD2bY06+cNaICs9WwqaeHs+FXAnOi0G
EfvghaYTrufLTdkQ7269nyhwx70TWCAE/J/st0zMnlP8QYcZGDwa/Dg79Y2ZQTDI
8HYTl/1lfJZ4ss2UEDaeM1QOQilLtdThZUEhO++hGH9q27wxgeEqzh1Ytk4pUPab
Cy1e75T2W7ELzdqIeu0IbooQ030cMqceMZ1VJLxPMTRWN1Kv8t+CJky6haVt2ifg
3cgBrCSpZ10Fm/3AuMsHdI7mkojpRuad2K/rQHdHMdVPAguMQzc2R/l/sFYvNjmq
133FF2QeEYeIefWjmCqkNZBb2swMXuZ9m+A5xXR+0nzL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:16 2024 by rpki-client on console-ams.rpki-client.org