Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/u1rbAh7RmDmJV3viGM73as8XGYI.roa
File: u1rbAh7RmDmJV3viGM73as8XGYI.roa (raw, json)
Hash identifier: sz80X3onaf2D42Uz1ORKSdRs+xe0DbxcSp5wgH1Mmhk=
Subject key identifier: BB:5A:DB:02:1E:D1:98:39:89:57:7B:E2:18:CE:F7:6A:CF:17:19:82
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0E2E704D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/u1rbAh7RmDmJV3viGM73as8XGYI.roa
Signing time: Wed 23 Feb 2022 19:59:18 +0000
ROA not before: Wed 23 Feb 2022 19:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198335
IP address blocks: 213.198.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237924429 (0xe2e704d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Feb 23 19:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb5adb021ed1983989577be218cef76acf171982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:0a:9f:bb:27:a0:10:d5:16:22:f7:4b:f9:
87:d3:bf:f4:83:bf:16:cc:b8:83:5e:4f:30:7a:5f:
94:56:ed:0b:3f:1e:f1:2d:59:be:43:a6:bc:be:dd:
20:1f:49:cf:bc:eb:e6:6b:6a:5b:66:3b:08:91:32:
29:3f:8f:1b:45:c6:38:65:97:cb:fc:5e:c0:c5:40:
bc:27:c5:64:05:1b:9a:9d:30:61:28:18:fe:c2:c2:
8c:7e:b3:5b:40:71:a9:fc:fa:ec:46:a1:79:55:b0:
20:48:60:fa:6e:63:9b:83:73:48:39:7d:f4:cf:54:
d2:79:71:bf:76:be:34:d0:02:02:90:2a:db:ec:f1:
14:be:bb:9c:55:dd:bf:f6:db:c5:d2:eb:19:f6:41:
28:d2:5c:5e:73:bd:a0:f0:b0:14:03:06:6f:ed:1d:
17:e6:7f:dc:c5:00:ac:b7:4f:d9:be:da:93:c2:8d:
32:a8:0f:ef:36:a9:48:45:41:a8:05:21:da:79:a8:
6f:39:11:9f:92:bd:5a:55:98:49:be:d1:92:d4:84:
cc:ac:15:d5:5d:b8:78:ff:59:86:d6:8f:1b:af:68:
8d:9d:3f:e5:63:9c:4b:69:2b:33:82:f4:92:56:f5:
bd:4d:25:18:d0:8e:0d:87:9f:90:4c:14:ec:b7:34:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:DB:02:1E:D1:98:39:89:57:7B:E2:18:CE:F7:6A:CF:17:19:82
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/u1rbAh7RmDmJV3viGM73as8XGYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:72:3f:b0:48:63:68:2c:93:ce:ef:06:7c:84:97:21:84:
49:c3:d1:3a:e5:38:94:cc:29:1b:44:75:0a:45:e2:82:6c:5f:
46:aa:4d:da:63:1f:b1:8d:b2:fa:bb:30:2c:f3:15:a7:3d:2e:
61:36:0e:14:13:4a:67:29:d7:15:db:10:bc:8e:d2:33:69:55:
b0:2f:38:d4:40:b8:bd:63:76:ec:9b:49:77:e7:c2:72:99:44:
fc:a3:60:c8:35:ee:58:6c:e7:42:4c:85:57:76:29:4f:f0:7f:
cd:78:75:10:e3:91:e0:a8:9b:90:1b:d5:be:da:0b:41:9d:82:
36:89:bb:46:c2:9a:2e:23:42:81:ec:18:ff:92:2e:76:dc:f1:
74:6e:b4:05:09:11:c0:64:b4:13:54:b2:14:27:2b:3b:d5:a0:
f7:44:9d:11:92:67:ac:ab:97:78:5f:5a:43:2d:4a:ca:7b:1d:
06:dc:da:2d:0b:3b:31:2a:dd:6c:af:47:19:b5:c3:12:0a:cb:
c8:72:c7:92:f9:4a:d3:be:02:41:1a:76:fa:c1:a7:c3:23:ce:
4a:0a:c0:7b:00:30:0e:e6:49:88:ad:c9:99:65:3f:3c:58:c5:
e2:41:51:32:3f:d1:c6:82:53:05:b2:82:f7:f2:40:ed:7c:e6:
a6:02:49:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDi5wTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWRhYjUwN2MwODk3NmNjMjlkMTc3MzczZGU2MjdhMWNlODZlZmFlMB4XDTIyMDIy
MzE5NTkxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmI1YWRiMDIxZWQx
OTgzOTg5NTc3YmUyMThjZWY3NmFjZjE3MTk4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKeBCp+7J6AQ1RYi90v5h9O/9IO/Fsy4g15PMHpflFbtCz8e
8S1ZvkOmvL7dIB9Jz7zr5mtqW2Y7CJEyKT+PG0XGOGWXy/xewMVAvCfFZAUbmp0w
YSgY/sLCjH6zW0Bxqfz67EaheVWwIEhg+m5jm4NzSDl99M9U0nlxv3a+NNACApAq
2+zxFL67nFXdv/bbxdLrGfZBKNJcXnO9oPCwFAMGb+0dF+Z/3MUArLdP2b7ak8KN
MqgP7zapSEVBqAUh2nmobzkRn5K9WlWYSb7RktSEzKwV1V24eP9ZhtaPG69ojZ0/
5WOcS2krM4L0klb1vU0lGNCODYefkEwU7Lc0bpECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS7WtsCHtGYOYlXe+IYzvdqzxcZgjAfBgNVHSMEGDAWgBRF2rUHwIl2zCnR
dzc95iehzobvrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JkcTFCOENKZHN3cDBYYzNQZVlub2M2Rzc2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8x
L3UxcmJBaDdSbURtSlYzdmlHTTczYXM4WEdZSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8xL1JkcTFCOENKZHN3
cDBYYzNQZVlub2M2Rzc2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXGaDANBgkqhkiG9w0BAQsFAAOC
AQEAPgJyP7BIY2gsk87vBnyElyGEScPROuU4lMwpG0R1CkXigmxfRqpN2mMfsY2y
+rswLPMVpz0uYTYOFBNKZynXFdsQvI7SM2lVsC841EC4vWN27JtJd+fCcplE/KNg
yDXuWGznQkyFV3YpT/B/zXh1EOOR4KibkBvVvtoLQZ2CNom7RsKaLiNCgewY/5Iu
dtzxdG60BQkRwGS0E1SyFCcrO9Wg90SdEZJnrKuXeF9aQy1KynsdBtzaLQs7MSrd
bK9HGbXDEgrLyHLHkvlK074CQRp2+sGnwyPOSgrAewAwDuZJiK3JmWU/PFjF4kFR
Mj/RxoJTBbKC9/JA7XzmpgJJow==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org