Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/562cd8mZHQNVzBuR1iBVLoHSVJM.roa
File: 562cd8mZHQNVzBuR1iBVLoHSVJM.roa (raw, json)
Hash identifier: eB2fox6OsPN+XTn4LktTjPPk9Qx+VPo9yXjCpyCuq/A=
Subject key identifier: E7:AD:9C:77:C9:99:1D:03:55:CC:1B:91:D6:20:55:2E:81:D2:54:93
Certificate issuer: /CN=2d927ce7ba520307ea147c34f13287db76b930fe
Certificate serial: C9735F
Authority key identifier: 2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZJ857pSAwfqFHw08TKH23a5MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/562cd8mZHQNVzBuR1iBVLoHSVJM.roa
Signing time: Sat 01 Jan 2022 02:56:32 +0000
ROA not before: Sat 01 Jan 2022 02:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 213.109.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13202271 (0xc9735f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d927ce7ba520307ea147c34f13287db76b930fe
Validity
Not Before: Jan 1 02:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7ad9c77c9991d0355cc1b91d620552e81d25493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:4a:77:d4:8e:57:dc:85:fe:38:d3:28:58:
4e:ad:b8:29:80:82:ef:9e:03:96:3a:b1:75:9a:88:
d4:10:0c:8b:ac:d0:28:a6:87:14:5b:1e:b5:5f:66:
bc:fb:14:0f:ed:47:f6:ce:8a:b2:46:70:d7:93:7c:
e6:25:a8:b3:0d:8a:c4:ef:5c:c0:6a:fc:7f:2e:24:
49:a3:19:db:46:d0:1d:93:d1:54:7b:8e:7b:c6:e0:
c5:8e:6e:f7:fa:83:4a:34:c3:e8:50:9b:e5:d1:b7:
1f:ab:cd:d9:48:e1:6f:3a:13:06:b6:e9:a8:fc:31:
cf:e6:2e:d5:4f:02:33:52:43:80:77:38:c7:d4:8f:
2f:e9:b0:fe:bb:c5:89:59:1a:65:09:46:59:7e:21:
f4:cd:7f:19:0c:2e:e0:94:49:ee:47:94:3d:30:d7:
39:17:11:88:61:b4:fa:37:17:23:2d:c3:d7:a4:ca:
31:53:98:3c:7b:99:1c:c1:0a:bd:1e:94:1e:3a:b3:
6d:f4:10:87:04:b5:7a:d7:c3:81:55:fe:bb:a3:78:
e1:ee:ab:36:df:e2:58:61:5d:10:29:d5:9a:ed:98:
9a:b8:3d:84:91:cd:6a:81:56:49:3d:39:da:4b:77:
5c:e5:f8:97:ee:eb:31:a4:68:9a:5b:72:19:10:91:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:9C:77:C9:99:1D:03:55:CC:1B:91:D6:20:55:2E:81:D2:54:93
X509v3 Authority Key Identifier:
keyid:2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZJ857pSAwfqFHw08TKH23a5MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/562cd8mZHQNVzBuR1iBVLoHSVJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/LZJ857pSAwfqFHw08TKH23a5MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
47:14:d5:78:bb:ff:8d:94:60:61:d9:35:72:e2:fe:2e:67:86:
35:37:fa:a0:3e:0f:5b:c8:b5:20:fc:20:59:a4:ca:b7:9c:b4:
8f:e7:d9:0b:34:c8:70:7f:47:08:0b:2b:7b:79:41:c7:eb:0a:
87:e2:c8:33:7c:b2:4e:15:3a:9d:c6:83:1c:60:99:d4:ee:58:
f4:37:a6:52:f6:17:f2:b1:5e:c3:f6:20:ed:ce:4a:88:9f:17:
cc:49:ad:3c:12:8f:37:7c:e0:67:2e:ef:70:6e:4b:92:f8:97:
a9:2e:8d:6f:d6:ab:b4:e1:33:37:e7:85:52:83:22:d5:c8:97:
7e:13:be:d2:71:70:71:d5:4b:f2:c9:6d:dc:2e:18:fe:6e:29:
6f:9f:1c:81:bf:2c:1a:ca:ad:4c:5b:c1:68:e4:60:ac:a1:cb:
60:c7:83:26:5f:0d:d6:9d:d6:c1:10:a9:20:46:55:2d:33:bc:
b2:2c:cd:4d:51:a7:49:be:ca:38:57:87:17:eb:f9:07:f9:97:
f8:fc:16:29:c9:9e:08:ba:a6:9f:bc:4f:48:e8:a3:85:9e:06:
b0:9e:0e:0b:1f:bb:a2:39:f6:df:3c:e9:e8:87:10:2f:0c:32:
ea:7b:48:dd:3d:28:11:ad:8e:3d:39:80:01:14:37:64:8d:42:
f9:eb:70:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMlzXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDkyN2NlN2JhNTIwMzA3ZWExNDdjMzRmMTMyODdkYjc2YjkzMGZlMB4XDTIyMDEw
MTAyNTYzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdhZDljNzdjOTk5
MWQwMzU1Y2MxYjkxZDYyMDU1MmU4MWQyNTQ5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKj7SnfUjlfchf440yhYTq24KYCC754DljqxdZqI1BAMi6zQ
KKaHFFsetV9mvPsUD+1H9s6KskZw15N85iWosw2KxO9cwGr8fy4kSaMZ20bQHZPR
VHuOe8bgxY5u9/qDSjTD6FCb5dG3H6vN2UjhbzoTBrbpqPwxz+Yu1U8CM1JDgHc4
x9SPL+mw/rvFiVkaZQlGWX4h9M1/GQwu4JRJ7keUPTDXORcRiGG0+jcXIy3D16TK
MVOYPHuZHMEKvR6UHjqzbfQQhwS1etfDgVX+u6N44e6rNt/iWGFdECnVmu2Ymrg9
hJHNaoFWST052kt3XOX4l+7rMaRomltyGRCR580CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTnrZx3yZkdA1XMG5HWIFUugdJUkzAfBgNVHSMEGDAWgBQtknznulIDB+oU
fDTxMofbdrkw/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xaSjg1N3BTQXdmcUZIdzA4VEtIMjNhNU1QNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvZTQ0YTdhLWY1NjktNGQ1YS1iYzhiLWM4ODg0ZmM5YzI2ZS8x
LzU2MmNkOG1aSFFOVnpCdVIxaUJWTG9IU1ZKTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
ZTQ0YTdhLWY1NjktNGQ1YS1iYzhiLWM4ODg0ZmM5YzI2ZS8xL0xaSjg1N3BTQXdm
cUZIdzA4VEtIMjNhNU1QNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtzTANBgkqhkiG9w0BAQsFAAOC
AQEARxTVeLv/jZRgYdk1cuL+LmeGNTf6oD4PW8i1IPwgWaTKt5y0j+fZCzTIcH9H
CAsre3lBx+sKh+LIM3yyThU6ncaDHGCZ1O5Y9DemUvYX8rFew/Yg7c5KiJ8XzEmt
PBKPN3zgZy7vcG5LkviXqS6Nb9artOEzN+eFUoMi1ciXfhO+0nFwcdVL8slt3C4Y
/m4pb58cgb8sGsqtTFvBaORgrKHLYMeDJl8N1p3WwRCpIEZVLTO8sizNTVGnSb7K
OFeHF+v5B/mX+PwWKcmeCLqmn7xPSOijhZ4GsJ4OCx+7ojn23zzp6IcQLwwy6ntI
3T0oEa2OPTmAARQ3ZI1C+etwNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org