Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/KyVorNsg-fgo0yTbJK4mk__D58w.roa
File: KyVorNsg-fgo0yTbJK4mk__D58w.roa (raw, json)
Hash identifier: JGPHwFUi0riwmzMD98m/7pNer/cR8zHw8YTtpiWTNZ4=
Subject key identifier: 2B:25:68:AC:DB:20:F9:F8:28:D3:24:DB:24:AE:26:93:FF:C3:E7:CC
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0CAC6A53
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/KyVorNsg-fgo0yTbJK4mk__D58w.roa
Signing time: Sat 01 Jan 2022 05:57:31 +0000
ROA not before: Sat 01 Jan 2022 05:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202712
IP address blocks: 212.7.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212626003 (0xcac6a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 1 05:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2568acdb20f9f828d324db24ae2693ffc3e7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:ad:f3:94:4b:64:ea:52:4b:f5:ac:15:97:
9d:4f:9d:c9:b0:01:3f:a9:ee:8a:33:1d:c0:c6:58:
f5:e7:68:5f:79:19:13:c7:a2:bd:27:77:83:fa:eb:
07:53:cb:57:83:b7:0e:25:0c:bf:e7:07:a5:4e:9f:
06:7a:ca:f2:ea:d0:7a:3a:be:02:cf:cc:54:c3:f4:
9c:81:72:12:6f:eb:38:1d:1f:32:fc:1f:34:bf:d2:
31:02:8a:c6:e7:eb:d4:b1:c6:d3:6f:f8:a8:2f:91:
33:ba:0c:73:e9:94:74:59:3f:8e:45:3f:2c:9e:bc:
a0:92:fb:e3:3c:97:8c:5f:a3:40:a6:1e:8a:6e:ee:
51:45:5f:64:b2:dd:30:7a:a5:1f:1e:5f:d4:49:6f:
a7:5b:7d:98:6d:04:ca:9f:08:bd:94:0a:9b:ba:98:
6a:44:85:ea:94:04:88:32:23:de:d3:21:40:6a:a5:
4c:c3:78:53:81:25:d3:c5:08:6a:0f:b7:f7:ce:2d:
df:c8:d8:52:de:cc:76:d5:50:b4:a4:41:55:26:69:
8e:be:47:f0:ae:8f:a6:a4:e1:a5:f4:76:a2:84:13:
53:d3:1a:f9:26:c0:b5:1d:4f:67:01:4c:8b:27:a6:
64:98:dc:b3:9f:48:dd:83:c0:9a:4a:a0:f4:b5:18:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:68:AC:DB:20:F9:F8:28:D3:24:DB:24:AE:26:93:FF:C3:E7:CC
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/KyVorNsg-fgo0yTbJK4mk__D58w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:c9:3c:6e:70:82:0d:66:ba:7b:e4:88:24:a7:91:32:ae:
d2:65:af:d6:5e:c3:00:0b:b4:84:a6:8d:56:c7:5a:d4:d2:fc:
55:aa:08:6f:e3:28:66:0d:ea:21:1d:5c:43:0e:ae:d0:ef:bc:
eb:f2:46:c2:09:88:a1:98:31:5e:95:7a:83:08:bd:44:89:20:
ac:d2:b6:db:d5:90:99:3f:ed:8b:aa:99:3c:25:0b:c5:e9:7b:
e7:e7:2d:ea:01:1d:40:2b:e1:0e:ff:31:bd:7d:f4:1f:dd:bd:
ec:7a:76:c4:c6:f9:6f:1c:a6:ef:72:3f:6a:e9:fb:ef:f5:d6:
f7:43:73:5c:e3:3d:74:0f:c0:3e:0d:ac:51:17:75:72:51:a8:
d2:d6:f4:2d:69:1b:44:75:86:99:17:c7:55:bc:cf:bb:72:08:
95:10:c4:27:a5:4f:2f:1a:c3:30:6c:a8:33:81:7a:f9:4c:df:
32:6b:c0:c7:1a:44:11:db:9d:4f:6a:12:ab:a3:2d:9d:fb:97:
f0:d7:67:e7:85:e3:97:2e:d0:5c:04:5d:29:fb:b4:b0:1e:34:
2d:c9:e5:f9:bc:d2:e3:85:18:bb:cd:2d:00:e7:17:9a:26:f3:
10:69:24:27:8c:bc:25:ba:f4:27:28:08:fd:0b:a3:e5:85:33:
a9:9b:79:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDKxqUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDI5YTQxZTZmNTA3YTM3NDU4YTQ5NjQzYTdiZTU3OTA3NThmNzI2MB4XDTIyMDEw
MTA1NTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmIyNTY4YWNkYjIw
ZjlmODI4ZDMyNGRiMjRhZTI2OTNmZmMzZTdjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKYrfOUS2TqUkv1rBWXnU+dybABP6nuijMdwMZY9edoX3kZ
E8eivSd3g/rrB1PLV4O3DiUMv+cHpU6fBnrK8urQejq+As/MVMP0nIFyEm/rOB0f
MvwfNL/SMQKKxufr1LHG02/4qC+RM7oMc+mUdFk/jkU/LJ68oJL74zyXjF+jQKYe
im7uUUVfZLLdMHqlHx5f1Elvp1t9mG0Eyp8IvZQKm7qYakSF6pQEiDIj3tMhQGql
TMN4U4El08UIag+3984t38jYUt7MdtVQtKRBVSZpjr5H8K6PpqThpfR2ooQTU9Ma
+SbAtR1PZwFMiyemZJjcs59I3YPAmkqg9LUYHGECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQrJWis2yD5+CjTJNskriaT/8PnzDAfBgNVHSMEGDAWgBSNKaQeb1B6N0WK
SWQ6e+V5B1j3JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pTbWtIbTlRZWpkRmlrbGtPbnZsZVFkWTl5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvYjViNDVkLTc3ODAtNDM0Yi1hOTEyLWVmYjlhMDRkM2NhYS8x
L0t5Vm9yTnNnLWZnbzB5VGJKSzRta19fRDU4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
YjViNDVkLTc3ODAtNDM0Yi1hOTEyLWVmYjlhMDRkM2NhYS8xL2pTbWtIbTlRZWpk
RmlrbGtPbnZsZVFkWTl5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQH1zANBgkqhkiG9w0BAQsFAAOC
AQEAfqvJPG5wgg1munvkiCSnkTKu0mWv1l7DAAu0hKaNVsda1NL8VaoIb+MoZg3q
IR1cQw6u0O+86/JGwgmIoZgxXpV6gwi9RIkgrNK229WQmT/ti6qZPCULxel75+ct
6gEdQCvhDv8xvX30H9297Hp2xMb5bxym73I/aun77/XW90NzXOM9dA/APg2sURd1
clGo0tb0LWkbRHWGmRfHVbzPu3IIlRDEJ6VPLxrDMGyoM4F6+UzfMmvAxxpEEdud
T2oSq6MtnfuX8Ndn54Xjly7QXARdKfu0sB40Lcnl+bzS44UYu80tAOcXmibzEGkk
J4y8Jbr0JygI/Quj5YUzqZt5jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org