Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/qLhYwsdtRHNrSjJElEkzUNKf0Sw.roa
File: qLhYwsdtRHNrSjJElEkzUNKf0Sw.roa (raw, json)
Hash identifier: +7L0KbiLolXi3aA9d4YoyrZQvyWTd3K0VPw3lf71jUY=
Subject key identifier: A8:B8:58:C2:C7:6D:44:73:6B:4A:32:44:94:49:33:50:D2:9F:D1:2C
Certificate issuer: /CN=09a861d281e0456cad92e39359751d9d728021c8
Certificate serial: 0184427E62D8A20ECF3307C4EE9B231F06BD
Authority key identifier: 09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cahh0oHgRWytkuOTWXUdnXKAIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/qLhYwsdtRHNrSjJElEkzUNKf0Sw.roa
Signing time: Fri 04 Nov 2022 11:54:49 +0000
ROA not before: Fri 04 Nov 2022 11:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 193.243.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:7e:62:d8:a2:0e:cf:33:07:c4:ee:9b:23:1f:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a861d281e0456cad92e39359751d9d728021c8
Validity
Not Before: Nov 4 11:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8b858c2c76d44736b4a324494493350d29fd12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:3a:4b:c4:47:73:72:af:40:2b:91:ec:8c:
e7:e0:52:70:6f:00:74:36:9b:85:30:43:e4:1a:33:
43:ec:8f:63:d5:93:54:cb:08:37:a1:c3:c5:3b:68:
e8:7b:3e:08:b0:86:63:77:f8:95:f6:59:d5:b3:27:
6b:6c:61:16:ed:30:c0:2d:27:18:99:27:19:c5:21:
c4:ce:2a:7d:f8:b6:b5:52:97:72:7e:9a:be:e3:a9:
76:22:c6:e2:d5:ff:f6:55:45:65:06:26:19:90:02:
88:e8:96:e4:8d:f0:08:d6:8f:88:1b:40:5b:ea:07:
77:2e:87:89:b4:50:21:c7:ad:b2:be:ce:fa:8d:1c:
c3:ad:c6:38:cb:28:a7:af:85:60:3a:6b:45:22:87:
89:9a:8c:d8:35:a0:31:e2:92:f2:32:ab:5d:2e:e7:
d2:23:84:57:9a:99:2c:ec:d6:ee:98:7d:93:69:cf:
06:92:e3:81:fd:32:24:b3:a2:b5:24:ba:68:8a:25:
8b:2f:f3:05:10:30:8e:24:8b:df:13:64:1b:0f:34:
fe:85:b0:4e:3f:10:7f:19:b3:62:d6:01:d6:f2:84:
b4:2b:2d:f9:c0:3d:f4:9d:2e:58:61:95:12:c7:02:
1e:c7:20:1e:7a:3a:19:b1:d7:64:45:ad:69:03:85:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:58:C2:C7:6D:44:73:6B:4A:32:44:94:49:33:50:D2:9F:D1:2C
X509v3 Authority Key Identifier:
keyid:09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cahh0oHgRWytkuOTWXUdnXKAIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/qLhYwsdtRHNrSjJElEkzUNKf0Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Cahh0oHgRWytkuOTWXUdnXKAIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.164.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ce:b5:a2:64:96:bf:0a:a5:64:b2:4b:ac:aa:4c:32:b6:9d:
7a:17:7c:50:ed:28:aa:ca:a1:9f:9a:96:18:fc:44:9b:2a:12:
df:cd:da:ec:51:43:b4:fd:a2:04:8c:b7:b1:b6:07:20:e1:ea:
a2:ab:70:ee:ab:86:28:ee:fa:cd:7f:8d:fb:26:5b:5d:23:96:
6b:61:80:aa:3f:0b:9a:99:9f:63:e1:8c:c9:70:3b:57:2f:9f:
59:c6:75:bd:fb:a4:d7:aa:c7:8a:cf:49:ff:02:dc:74:df:66:
42:95:1d:ea:7f:8e:23:d5:eb:2c:dc:6a:86:2f:2a:9a:1a:19:
ee:00:99:2b:9f:fd:db:17:eb:cb:6f:d5:46:a1:a7:6a:23:5c:
32:c1:87:4c:ba:c0:06:ea:85:e5:24:c1:2f:1c:0f:27:6f:e5:
63:e4:5d:8b:b1:8f:23:02:ca:ac:36:f1:52:e6:9d:2c:39:3f:
87:0e:4b:e6:61:ef:1a:e1:e1:6b:3d:2e:be:c5:ee:74:59:ce:
17:0e:7f:f3:e0:5f:b6:b1:5d:95:79:11:28:26:56:7a:35:40:
fc:b1:0b:94:d1:66:d0:33:22:73:0b:06:7f:ad:34:9b:b1:9a:
10:c9:44:88:51:b3:6c:2b:83:83:7c:7d:07:3a:94:be:20:99:
97:5f:7e:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRCfmLYog7PMwfE7psjHwa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTg2MWQyODFlMDQ1NmNhZDkyZTM5MzU5NzUxZDlkNzI4
MDIxYzgwHhcNMjIxMTA0MTE1NDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGI4NThjMmM3NmQ0NDczNmI0YTMyNDQ5NDQ5MzM1MGQyOWZkMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimA6S8RHc3KvQCuR7Izn4FJwbwB0
NpuFMEPkGjND7I9j1ZNUywg3ocPFO2joez4IsIZjd/iV9lnVsydrbGEW7TDALScY
mScZxSHEzip9+La1Updyfpq+46l2Isbi1f/2VUVlBiYZkAKI6JbkjfAI1o+IG0Bb
6gd3LoeJtFAhx62yvs76jRzDrcY4yyinr4VgOmtFIoeJmozYNaAx4pLyMqtdLufS
I4RXmpks7NbumH2Tac8GkuOB/TIks6K1JLpoiiWLL/MFEDCOJIvfE2QbDzT+hbBO
PxB/GbNi1gHW8oS0Ky35wD30nS5YYZUSxwIexyAeejoZsddkRa1pA4WyiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKi4WMLHbURza0oyRJRJM1DSn9EsMB8GA1UdIwQY
MBaAFAmoYdKB4EVsrZLjk1l1HZ1ygCHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FoaDBvSGdSV3l0a3VPVFdYVWRuWEtBSWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iYzkyYWItMjQzZi00Njg3LWEwNjkt
Yzk3NmRlMTNlMWVmLzEvcUxoWXdzZHRSSE5yU2pKRWxFa3pVTktmMFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iYzkyYWItMjQzZi00Njg3LWEwNjktYzk3NmRlMTNlMWVm
LzEvQ2FoaDBvSGdSV3l0a3VPVFdYVWRuWEtBSWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfOkMA0G
CSqGSIb3DQEBCwUAA4IBAQCAzrWiZJa/CqVkskusqkwytp16F3xQ7SiqyqGfmpYY
/ESbKhLfzdrsUUO0/aIEjLextgcg4eqiq3Duq4Yo7vrNf437JltdI5ZrYYCqPwua
mZ9j4YzJcDtXL59ZxnW9+6TXqseKz0n/Atx032ZClR3qf44j1ess3GqGLyqaGhnu
AJkrn/3bF+vLb9VGoadqI1wywYdMusAG6oXlJMEvHA8nb+Vj5F2LsY8jAsqsNvFS
5p0sOT+HDkvmYe8a4eFrPS6+xe50Wc4XDn/z4F+2sV2VeREoJlZ6NUD8sQuU0WbQ
MyJzCwZ/rTSbsZoQyUSIUbNsK4ODfH0HOpS+IJmXX34q
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client