Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/UB7Ie14KAQG3urB9q7CAf-TE7LM.roa
File: UB7Ie14KAQG3urB9q7CAf-TE7LM.roa (raw, json)
Hash identifier: 4UUXiHcGRW6zpOt07vFhAcOH7Ojdbb5qh24MQFXxElU=
Subject key identifier: 50:1E:C8:7B:5E:0A:01:01:B7:BA:B0:7D:AB:B0:80:7F:E4:C4:EC:B3
Certificate issuer: /CN=05655ac2275e6b8a0286022037c7f8594af58b84
Certificate serial: 01856F392F4B073E2721A063F174849933AC
Authority key identifier: 05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWVawidea4oChgIgN8f4WUr1i4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/UB7Ie14KAQG3urB9q7CAf-TE7LM.roa
Signing time: Sun 01 Jan 2023 21:24:56 +0000
ROA not before: Sun 01 Jan 2023 21:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.97.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:2f:4b:07:3e:27:21:a0:63:f1:74:84:99:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05655ac2275e6b8a0286022037c7f8594af58b84
Validity
Not Before: Jan 1 21:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501ec87b5e0a0101b7bab07dabb0807fe4c4ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:73:da:a4:78:3e:51:b7:ee:07:d5:9e:fc:
1b:c5:a9:97:85:cd:80:ac:36:37:3d:68:e2:4b:21:
d1:2b:6c:0a:5a:5c:31:f8:db:72:77:f6:cf:a6:21:
42:b8:82:3d:17:35:8f:78:2e:9b:af:e2:9a:f0:25:
d5:73:68:99:d4:64:56:02:43:62:28:d8:16:4b:ca:
58:0a:1b:79:60:cb:28:31:c4:16:54:3a:cd:f3:7b:
3e:80:c1:a3:49:25:0d:fa:11:ee:5d:3f:52:f0:28:
a1:d0:71:fa:3c:82:8a:81:1d:b4:c0:07:68:6c:12:
44:e0:9f:07:79:7f:cd:9e:a2:e6:c0:d6:cd:6c:4d:
19:c1:46:85:85:ed:1a:0c:bb:f1:12:0f:b9:61:17:
03:cb:8a:74:31:6a:43:6c:0e:e0:b3:3b:34:e9:1f:
38:f6:b6:c1:d9:02:79:5b:25:ba:d3:dc:c3:b2:53:
8c:6b:3b:1c:56:19:86:e5:96:2d:6e:e1:c8:48:30:
16:7a:b9:d9:9b:d9:37:b5:bc:f5:16:1f:0b:f9:98:
ab:ea:fe:1f:1a:38:fd:53:05:65:69:f0:62:87:73:
89:ea:19:39:01:e1:d4:70:74:98:e6:54:ac:4e:83:
96:c0:bd:78:19:f9:00:c8:43:5d:ca:34:66:12:ee:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:C8:7B:5E:0A:01:01:B7:BA:B0:7D:AB:B0:80:7F:E4:C4:EC:B3
X509v3 Authority Key Identifier:
keyid:05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWVawidea4oChgIgN8f4WUr1i4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/UB7Ie14KAQG3urB9q7CAf-TE7LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/BWVawidea4oChgIgN8f4WUr1i4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.200.0/24
Signature Algorithm: sha256WithRSAEncryption
88:df:00:8a:9c:dc:5f:32:02:63:49:90:48:6d:47:8b:90:98:
66:57:7b:e0:ab:17:d9:31:94:fa:6b:64:ed:34:65:6f:a6:5e:
55:e3:45:b1:91:79:23:61:c1:8b:1d:fa:18:c1:16:8c:8d:d1:
35:29:73:a5:d1:65:c8:35:0f:22:db:9d:34:24:1c:67:21:68:
ab:22:31:10:63:e6:49:c5:db:7b:ee:ce:df:62:1e:db:f7:a1:
33:aa:be:bb:57:85:ce:9c:b5:2d:47:15:99:9f:99:54:79:2b:
9e:37:93:84:92:cb:65:85:1d:85:20:b8:c5:ae:3d:68:f3:e6:
8e:aa:d1:a3:19:33:df:70:b3:3b:f6:4d:4d:cf:a2:33:5e:13:
5c:46:6d:e0:39:23:ca:99:8c:48:23:3d:ba:ab:1f:07:c6:e1:
34:cc:04:42:c7:a9:1f:68:c2:35:fa:cf:10:5b:d1:5c:40:66:
15:fc:59:d0:dc:88:85:60:17:49:8f:29:ca:19:76:94:90:88:
65:2b:05:61:c0:a5:eb:69:83:0c:89:5e:af:52:69:f1:2f:4e:
97:e4:c1:3e:5a:e4:f3:60:da:f0:1f:7f:f8:f1:90:43:15:91:
1c:eb:f1:e2:86:8f:21:20:b1:2a:f2:a2:2d:c4:f2:b5:da:8d:
da:70:45:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvOS9LBz4nIaBj8XSEmTOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjU1YWMyMjc1ZTZiOGEwMjg2MDIyMDM3YzdmODU5NGFm
NThiODQwHhcNMjMwMTAxMjEyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDFlYzg3YjVlMGEwMTAxYjdiYWIwN2RhYmIwODA3ZmU0YzRlY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Rz2qR4PlG37gfVnvwbxamXhc2A
rDY3PWjiSyHRK2wKWlwx+Ntyd/bPpiFCuII9FzWPeC6br+Ka8CXVc2iZ1GRWAkNi
KNgWS8pYCht5YMsoMcQWVDrN83s+gMGjSSUN+hHuXT9S8Cih0HH6PIKKgR20wAdo
bBJE4J8HeX/NnqLmwNbNbE0ZwUaFhe0aDLvxEg+5YRcDy4p0MWpDbA7gszs06R84
9rbB2QJ5WyW609zDslOMazscVhmG5ZYtbuHISDAWernZm9k3tbz1Fh8L+Zir6v4f
Gjj9UwVlafBih3OJ6hk5AeHUcHSY5lSsToOWwL14GfkAyENdyjRmEu7z7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFAeyHteCgEBt7qwfauwgH/kxOyzMB8GA1UdIwQY
MBaAFAVlWsInXmuKAoYCIDfH+FlK9YuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldWYXdpZGVhNG9DaGdJZ044ZjRXVXIxaTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMDE0MzItNjcxOC00Y2I4LWFjYjQt
NjBhYmM0NTI3N2M1LzEvVUI3SWUxNEtBUUczdXJCOXE3Q0FmLVRFN0xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMDE0MzItNjcxOC00Y2I4LWFjYjQtNjBhYmM0NTI3N2M1
LzEvQldWYXdpZGVhNG9DaGdJZ044ZjRXVXIxaTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHIMA0G
CSqGSIb3DQEBCwUAA4IBAQCI3wCKnNxfMgJjSZBIbUeLkJhmV3vgqxfZMZT6a2Tt
NGVvpl5V40WxkXkjYcGLHfoYwRaMjdE1KXOl0WXINQ8i2500JBxnIWirIjEQY+ZJ
xdt77s7fYh7b96Ezqr67V4XOnLUtRxWZn5lUeSueN5OEkstlhR2FILjFrj1o8+aO
qtGjGTPfcLM79k1Nz6IzXhNcRm3gOSPKmYxIIz26qx8HxuE0zARCx6kfaMI1+s8Q
W9FcQGYV/FnQ3IiFYBdJjynKGXaUkIhlKwVhwKXraYMMiV6vUmnxL06X5ME+WuTz
YNrwH3/48ZBDFZEc6/Hiho8hILEq8qItxPK12o3acEUk
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:23 2025 by rpki-client