Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/QilY5i7Y_7irVoga3CrIEyaNvK0.roa
File: QilY5i7Y_7irVoga3CrIEyaNvK0.roa (raw, json)
Hash identifier: LqyO0RKmYN4E8Bbujov+HCZJC51Sn3Di8bY786G0U74=
Subject key identifier: 42:29:58:E6:2E:D8:FF:B8:AB:56:88:1A:DC:2A:C8:13:26:8D:BC:AD
Certificate issuer: /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial: 01CA8CAC
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/QilY5i7Y_7irVoga3CrIEyaNvK0.roa
Signing time: Sat 01 Jan 2022 13:03:54 +0000
ROA not before: Sat 01 Jan 2022 13:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213030
IP address blocks: 193.200.102.0/23 maxlen: 24
193.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30051500 (0x1ca8cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Validity
Not Before: Jan 1 13:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422958e62ed8ffb8ab56881adc2ac813268dbcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:9c:82:61:20:f7:d2:12:9e:6e:78:e7:1b:
1d:d6:a7:9b:3d:fa:e8:b5:6a:d5:68:50:50:cf:36:
cb:a2:c2:8d:c6:6d:07:c5:93:a1:09:0b:ee:6f:f9:
71:0b:be:96:6e:71:67:48:6a:fa:46:b7:26:98:29:
59:86:66:bf:c5:8a:8e:28:ca:bc:ba:18:a3:73:e8:
22:74:a7:a4:dc:74:77:f1:0f:e0:2a:ae:27:3c:5d:
1f:ac:93:61:15:6f:a7:ec:ac:92:6e:cb:69:39:f2:
ce:20:1f:78:9d:b0:c6:51:71:43:2d:30:15:82:c5:
4a:ad:7d:5d:02:a5:bd:9e:9d:38:25:db:f8:b3:3f:
d9:13:33:c6:51:31:0a:81:d0:93:bf:ce:42:fb:9c:
5a:c9:27:37:29:03:38:b6:05:10:ae:8d:24:71:0c:
7a:bb:16:f3:f6:ab:c6:11:91:c0:e7:04:cc:5d:a9:
8c:48:69:8b:67:9d:93:ec:55:c5:4b:e4:13:12:78:
4c:a9:a5:ea:48:a3:72:50:ba:1f:8f:d2:22:ec:e8:
6d:ec:f0:eb:c3:6b:7d:eb:49:85:83:67:a8:b2:09:
96:9b:86:e2:a2:a6:90:a4:1e:ce:1a:3a:54:da:51:
5d:fc:f4:a1:ad:e9:1d:c8:70:0c:7b:10:ff:48:e2:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:58:E6:2E:D8:FF:B8:AB:56:88:1A:DC:2A:C8:13:26:8D:BC:AD
X509v3 Authority Key Identifier:
keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/QilY5i7Y_7irVoga3CrIEyaNvK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
193.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
65:1b:d2:7a:bf:1a:4c:5a:d1:9a:41:8c:f2:c0:10:27:f5:5e:
3b:8b:46:2b:ee:8a:53:42:d0:7a:11:b2:06:76:49:7b:75:96:
7d:e4:5d:1f:1f:dd:29:4a:dc:4a:14:74:d0:c5:9c:28:49:cf:
cd:02:1c:db:db:ab:48:38:5e:a7:c1:bd:a9:87:fe:f5:9b:51:
d2:8e:dd:1b:b3:3c:ad:96:52:f3:e5:3a:10:be:78:98:32:a6:
67:d8:74:e4:b4:3a:a2:60:da:a1:c1:5e:95:38:1d:69:d6:36:
1d:51:f9:4b:dd:3b:f6:2b:8b:81:bf:20:77:5e:28:93:56:4d:
a2:82:41:54:67:3e:3c:98:ca:76:14:d2:8f:89:0e:b5:a3:e8:
61:79:d1:8c:07:82:98:58:d4:80:55:0c:5c:63:d3:cd:d3:a3:
c5:e9:3d:f7:09:67:bf:54:d6:e5:b6:d1:3d:67:34:93:05:b4:
34:92:01:29:a9:3f:14:61:68:3d:cf:ed:57:b3:5f:44:d1:c9:
d5:ec:d4:95:09:7e:7d:82:3e:e2:ff:dd:67:59:e1:0b:49:0a:
12:7b:63:7e:15:de:52:57:05:bc:e6:52:cd:d4:02:17:ec:c8:
df:62:dd:fa:45:8a:a5:07:38:09:76:cb:a3:b8:db:bc:b3:04:
af:36:13:e2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAcqMrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWJjYWU1ZmQzNzUzNzMxYjAwZTllMjUxZmNkNjNjYzFmYWVhNTY3MB4XDTIyMDEw
MTEzMDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDIyOTU4ZTYyZWQ4
ZmZiOGFiNTY4ODFhZGMyYWM4MTMyNjhkYmNhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZlnIJhIPfSEp5ueOcbHdanmz366LVq1WhQUM82y6LCjcZt
B8WToQkL7m/5cQu+lm5xZ0hq+ka3JpgpWYZmv8WKjijKvLoYo3PoInSnpNx0d/EP
4CquJzxdH6yTYRVvp+yskm7LaTnyziAfeJ2wxlFxQy0wFYLFSq19XQKlvZ6dOCXb
+LM/2RMzxlExCoHQk7/OQvucWsknNykDOLYFEK6NJHEMersW8/arxhGRwOcEzF2p
jEhpi2edk+xVxUvkExJ4TKml6kijclC6H4/SIuzobezw68NrfetJhYNnqLIJlpuG
4qKmkKQezho6VNpRXfz0oa3pHchwDHsQ/0jiT/MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRCKVjmLtj/uKtWiBrcKsgTJo28rTAfBgNVHSMEGDAWgBQqvK5f03U3MbAO
niUfzWPMH66lZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tyeXVYOU4xTnpHd0RwNGxIODFqekItdXBXYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvYzVlMDE5LTcxNzYtNGM3OS1iNDUwLTk1ZjJiY2M1YWFhMC8x
L1FpbFk1aTdZXzdpclZvZ2EzQ3JJRXlhTnZLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
YzVlMDE5LTcxNzYtNGM3OS1iNDUwLTk1ZjJiY2M1YWFhMC8xL0tyeXVYOU4xTnpH
d0RwNGxIODFqekItdXBXYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcHIZgMEAcHJSDANBgkqhkiG9w0B
AQsFAAOCAQEAZRvSer8aTFrRmkGM8sAQJ/VeO4tGK+6KU0LQehGyBnZJe3WWfeRd
Hx/dKUrcShR00MWcKEnPzQIc29urSDhep8G9qYf+9ZtR0o7dG7M8rZZS8+U6EL54
mDKmZ9h05LQ6omDaocFelTgdadY2HVH5S9079iuLgb8gd14ok1ZNooJBVGc+PJjK
dhTSj4kOtaPoYXnRjAeCmFjUgFUMXGPTzdOjxek99wlnv1TW5bbRPWc0kwW0NJIB
Kak/FGFoPc/tV7NfRNHJ1ezUlQl+fYI+4v/dZ1nhC0kKEntjfhXeUlcFvOZSzdQC
F+zI32Ld+kWKpQc4CXbLo7jbvLMErzYT4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:49 2024 by rpki-client on console-ams.rpki-client.org