Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/1TztD-_IZZiy5Ii8j7hPKyiR_YE.roa
File: 1TztD-_IZZiy5Ii8j7hPKyiR_YE.roa (raw, json)
Hash identifier: 7OFACht6eTZz1fYLOcpk1HoMkKy3H+CrPYuPxbwtUHk=
Subject key identifier: D5:3C:ED:0F:EF:C8:65:98:B2:E4:88:BC:8F:B8:4F:2B:28:91:FD:81
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 01856CCAFD3F2D667950C40229C8570968AF
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/1TztD-_IZZiy5Ii8j7hPKyiR_YE.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25393
IP address blocks: 193.178.144.0/22 maxlen: 22
193.178.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fd:3f:2d:66:79:50:c4:02:29:c8:57:09:68:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d53ced0fefc86598b2e488bc8fb84f2b2891fd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:49:6d:91:c4:9d:19:7a:e6:2b:9f:98:57:
56:9f:5e:97:99:39:27:8d:93:f3:4d:af:2e:fc:bf:
b9:e2:dc:6e:e4:a3:d0:2a:26:0f:a9:c9:f5:11:74:
a4:98:c7:52:bd:3a:73:f5:5d:b6:4c:a7:85:ae:75:
1f:1a:ba:a8:cc:3a:5b:24:9d:eb:4d:03:82:43:b6:
7d:cb:8b:3b:ed:05:97:44:94:44:15:09:2b:0f:86:
56:69:6c:cf:98:19:a2:e8:d2:47:3a:96:db:c2:54:
64:8f:d1:e2:7f:b2:8c:6f:a3:95:80:37:b6:50:77:
1b:8e:af:22:c6:8b:74:7a:32:aa:0b:b3:e7:29:fb:
22:05:56:42:e6:5a:03:2a:d6:6f:f2:7e:36:16:8a:
6d:40:a3:dd:28:03:24:cf:b6:80:99:cb:1d:27:fa:
04:8a:5c:ba:a6:30:d2:2d:bd:84:c8:7c:d7:a7:0b:
11:38:a8:3c:0f:d8:cf:ba:ab:4b:78:dd:00:2c:8e:
da:01:9f:22:03:18:53:10:cb:ac:fa:9f:09:d8:ea:
b7:5f:0e:16:1a:92:30:9a:5e:81:44:5c:91:4f:dd:
06:26:cf:47:db:e8:10:f1:f9:9d:cf:3a:db:b6:bc:
1e:5d:0b:68:7f:db:7d:80:81:dd:e7:da:70:cf:b0:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:ED:0F:EF:C8:65:98:B2:E4:88:BC:8F:B8:4F:2B:28:91:FD:81
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/1TztD-_IZZiy5Ii8j7hPKyiR_YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:31:65:29:0a:fc:2f:c0:d8:77:0a:59:9f:d8:b9:af:84:f1:
35:a1:38:23:ab:83:6c:19:59:59:48:4c:c4:61:32:9b:8e:0b:
f6:71:20:68:7b:f5:a3:9e:9a:05:0e:ce:9d:33:6f:0d:ee:d3:
9e:2d:da:31:43:0b:9c:24:35:e3:26:09:a3:62:64:fd:8e:38:
76:bd:9d:7d:e1:3d:9d:de:fb:53:08:e3:14:b1:fa:0c:3d:ed:
7a:d1:7b:1b:8e:ca:dd:0d:f3:d5:01:6d:aa:8c:f6:5a:69:2b:
d1:80:8e:5b:5d:20:5c:10:6f:e9:f5:a2:75:f3:2c:c5:42:af:
1f:1f:9a:ef:a3:91:a0:64:4e:ef:5f:f3:88:0c:27:c9:cd:66:
1b:ef:ea:e2:8a:e4:54:cc:73:24:4a:92:e4:ce:3c:b9:76:c0:
49:81:63:01:fc:ff:b3:9b:f8:40:b8:cd:ad:91:e3:0a:40:aa:
6d:3b:5a:29:ea:6d:44:83:17:8e:26:ca:55:9c:16:1c:fe:9c:
92:c9:e1:fa:31:fe:9a:07:c7:70:be:06:86:2a:0b:80:2f:ef:
cf:71:4b:ce:aa:18:77:71:ca:e6:7c:a9:c3:4f:19:72:54:63:
8e:28:9e:27:88:61:fa:61:29:88:e3:a1:e8:9c:8e:cf:c6:46:
c8:94:25:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyv0/LWZ5UMQCKchXCWivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZDZmYzUxNThlZTNlYzIxYTQyMWQ3MTgyMzRjOGQ4YTMz
NjFmYTYwHhcNMjMwMTAxMTAwNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTNjZWQwZmVmYzg2NTk4YjJlNDg4YmM4ZmI4NGYyYjI4OTFmZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6FJbZHEnRl65iufmFdWn16XmTkn
jZPzTa8u/L+54txu5KPQKiYPqcn1EXSkmMdSvTpz9V22TKeFrnUfGrqozDpbJJ3r
TQOCQ7Z9y4s77QWXRJREFQkrD4ZWaWzPmBmi6NJHOpbbwlRkj9Hif7KMb6OVgDe2
UHcbjq8ixot0ejKqC7PnKfsiBVZC5loDKtZv8n42FoptQKPdKAMkz7aAmcsdJ/oE
ily6pjDSLb2EyHzXpwsROKg8D9jPuqtLeN0ALI7aAZ8iAxhTEMus+p8J2Oq3Xw4W
GpIwml6BRFyRT90GJs9H2+gQ8fmdzzrbtrweXQtof9t9gIHd59pwz7AERQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNU87Q/vyGWYsuSIvI+4Tysokf2BMB8GA1UdIwQY
MBaAFOvW/FFY7j7CGkIdcYI0yNijNh+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAt
Nzg5OTYyNGE0ZjU4LzEvMVR6dEQtX0laWml5NUlpOGo3aFBLeWlSX1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAtNzg5OTYyNGE0ZjU4
LzEvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbKQMA0G
CSqGSIb3DQEBCwUAA4IBAQCOMWUpCvwvwNh3Clmf2LmvhPE1oTgjq4NsGVlZSEzE
YTKbjgv2cSBoe/WjnpoFDs6dM28N7tOeLdoxQwucJDXjJgmjYmT9jjh2vZ194T2d
3vtTCOMUsfoMPe160XsbjsrdDfPVAW2qjPZaaSvRgI5bXSBcEG/p9aJ18yzFQq8f
H5rvo5GgZE7vX/OIDCfJzWYb7+riiuRUzHMkSpLkzjy5dsBJgWMB/P+zm/hAuM2t
keMKQKptO1op6m1EgxeOJspVnBYc/pySyeH6Mf6aB8dwvgaGKguAL+/PcUvOqhh3
ccrmfKnDTxlyVGOOKJ4niGH6YSmI46HonI7PxkbIlCXf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org