Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jxF6JrhxGTXaRE0yiIgcn19LCtg.roa
File: jxF6JrhxGTXaRE0yiIgcn19LCtg.roa (raw, json)
Hash identifier: 5RsZhlFsw8Yz67xN4L9UibzcEmzkFFfPAYSnqz4iY98=
Subject key identifier: 8F:11:7A:26:B8:71:19:35:DA:44:4D:32:88:88:1C:9F:5F:4B:0A:D8
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC87073A25311780AD4DED93B583A6ED7
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jxF6JrhxGTXaRE0yiIgcn19LCtg.roa
Signing time: Tue 02 Jan 2024 04:31:01 +0000
ROA not before: Tue 02 Jan 2024 04:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:73:a2:53:11:78:0a:d4:de:d9:3b:58:3a:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f117a26b8711935da444d3288881c9f5f4b0ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:7c:3d:66:4a:d8:46:a6:69:1b:21:87:31:
13:d2:18:43:06:a4:19:b5:b9:0a:bf:fa:86:1e:bd:
bd:c5:c9:0c:57:f7:96:29:3d:ec:1a:4c:ed:6e:99:
ae:63:b5:1c:7e:1e:ab:31:5e:9a:e8:47:6a:d3:a8:
58:34:41:e2:1a:a2:c2:4d:31:0b:83:e6:67:2e:98:
0f:68:e2:9a:10:12:fa:b1:90:b3:7b:02:67:6e:af:
c8:37:cb:2c:3f:14:2c:c1:73:a1:82:c8:0b:79:7f:
8a:99:cd:a5:ba:20:07:53:1d:6e:f3:cb:35:35:27:
04:ae:58:75:62:45:eb:ad:52:18:1b:b8:28:b9:b8:
1a:7b:4e:28:c8:e5:be:a4:72:8b:72:85:2f:5c:87:
71:1b:70:0c:cf:01:16:d8:78:e5:6f:fc:18:1d:31:
88:f4:57:f7:a3:19:34:b9:97:24:ee:d4:e3:14:59:
fa:aa:81:05:18:5f:12:9b:1e:3f:93:45:f7:ac:23:
9a:8f:11:39:8f:08:77:e5:65:2f:0d:48:f2:cd:a5:
24:d0:0c:2e:ee:83:e0:2d:0d:e7:ec:c9:13:d4:a0:
b5:d5:57:8d:76:ad:be:70:8d:c9:1b:e5:2d:37:33:
98:ce:a2:99:f5:a3:e5:c6:a7:9a:54:b0:a5:f5:72:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:7A:26:B8:71:19:35:DA:44:4D:32:88:88:1C:9F:5F:4B:0A:D8
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/jxF6JrhxGTXaRE0yiIgcn19LCtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
18:cc:58:a0:96:45:b2:f4:99:97:62:d7:73:c6:6b:34:35:6a:
a7:7e:0b:aa:6f:9f:93:1b:4b:98:f1:d9:7f:10:a1:52:6d:23:
22:b2:0a:eb:1e:aa:f1:33:81:ec:77:65:49:85:94:a5:1e:f5:
fb:b4:8a:df:1c:6b:5f:21:b5:9c:96:ff:8c:38:ed:08:a6:25:
bd:00:45:6f:e8:f7:14:0e:c7:1a:1a:f9:0d:0f:c5:70:7f:09:
4d:d6:5a:8a:1b:97:b6:76:9d:0d:74:63:37:ab:bc:d3:e5:52:
f4:68:18:dd:62:ad:ac:cd:af:ce:5c:7e:e0:e4:5b:fa:ea:8b:
6e:44:91:aa:76:85:f2:45:61:3a:b7:85:1d:fd:ae:57:55:5f:
2b:13:d7:36:b9:7b:72:3f:47:0e:81:25:a9:16:ec:b3:51:3c:
01:6f:04:9c:7a:d5:e2:2e:27:d5:fb:d3:96:9c:16:3c:f9:b8:
a4:60:43:43:9b:09:f8:b2:c8:94:e5:15:5b:b5:bc:c4:48:f2:
7d:8c:2f:0e:87:85:4e:2b:77:03:60:ac:69:64:c4:81:b3:b6:
01:85:89:0e:c0:a4:ba:21:bf:63:20:57:6c:64:a0:08:21:c0:
a2:d2:21:82:09:bf:6c:81:c4:cc:9e:88:56:aa:ec:c6:76:b8:
89:81:92:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcHOiUxF4CtTe2TtYOm7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjQwMTAyMDQzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjExN2EyNmI4NzExOTM1ZGE0NDRkMzI4ODg4MWM5ZjVmNGIwYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH18PWZK2EamaRshhzET0hhDBqQZ
tbkKv/qGHr29xckMV/eWKT3sGkztbpmuY7Ucfh6rMV6a6Edq06hYNEHiGqLCTTEL
g+ZnLpgPaOKaEBL6sZCzewJnbq/IN8ssPxQswXOhgsgLeX+Kmc2luiAHUx1u88s1
NScErlh1YkXrrVIYG7goubgae04oyOW+pHKLcoUvXIdxG3AMzwEW2Hjlb/wYHTGI
9Ff3oxk0uZck7tTjFFn6qoEFGF8Smx4/k0X3rCOajxE5jwh35WUvDUjyzaUk0Awu
7oPgLQ3n7MkT1KC11VeNdq2+cI3JG+UtNzOYzqKZ9aPlxqeaVLCl9XIx7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8Reia4cRk12kRNMoiIHJ9fSwrYMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvanhGNkpyaHhHVFhhUkUweWlJZ2NuMTlMQ3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNcMA0G
CSqGSIb3DQEBCwUAA4IBAQAYzFiglkWy9JmXYtdzxms0NWqnfguqb5+TG0uY8dl/
EKFSbSMisgrrHqrxM4Hsd2VJhZSlHvX7tIrfHGtfIbWclv+MOO0IpiW9AEVv6PcU
DscaGvkND8VwfwlN1lqKG5e2dp0NdGM3q7zT5VL0aBjdYq2sza/OXH7g5Fv66otu
RJGqdoXyRWE6t4Ud/a5XVV8rE9c2uXtyP0cOgSWpFuyzUTwBbwScetXiLifV+9OW
nBY8+bikYENDmwn4ssiU5RVbtbzESPJ9jC8Oh4VOK3cDYKxpZMSBs7YBhYkOwKS6
Ib9jIFdsZKAIIcCi0iGCCb9sgcTMnohWquzGdriJgZIZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org