Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/KEujlXGbGAvoIv8x0YqqPr0jukw.roa
File: KEujlXGbGAvoIv8x0YqqPr0jukw.roa (raw, json)
Hash identifier: yvNRnwaEnyJKrYzlyGrxvmPMVkmDeWfNSUiJ9n+lZd8=
Subject key identifier: 28:4B:A3:95:71:9B:18:0B:E8:22:FF:31:D1:8A:AA:3E:BD:23:BA:4C
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A4E9998BC1D5A1162487B894B09EF
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/KEujlXGbGAvoIv8x0YqqPr0jukw.roa
Signing time: Wed 31 May 2023 10:46:12 +0000
ROA not before: Wed 31 May 2023 10:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198961
IP address blocks: 178.254.171.0/24 maxlen: 24
178.254.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:4e:99:98:bc:1d:5a:11:62:48:7b:89:4b:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=284ba395719b180be822ff31d18aaa3ebd23ba4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:dc:75:9e:aa:68:f9:fc:82:81:ec:ff:1a:
3b:32:2b:b6:27:fc:08:c3:2b:ee:e3:3b:30:a8:40:
d1:da:76:d9:81:35:bb:ab:1c:b5:42:40:d7:38:96:
cb:e5:62:18:af:e9:25:e4:38:b6:b2:a0:76:43:51:
bd:35:25:9a:67:92:f6:67:45:f1:3b:9a:db:f0:da:
4a:cc:e3:22:be:e4:27:f1:48:e1:cf:31:81:b6:3e:
23:d5:32:27:23:07:aa:ae:11:03:13:f5:fd:10:a4:
2f:b9:30:18:ce:fa:64:75:ba:e9:3f:2d:79:7f:c7:
ea:b5:f5:26:a4:eb:d2:36:27:2c:60:7a:24:ab:04:
77:f9:81:ae:03:d2:a0:9e:85:e4:67:b5:04:96:7e:
46:d4:0b:d9:b6:cd:28:df:8d:7e:9a:51:b3:0f:7f:
66:72:af:4b:49:02:87:ce:e9:6e:ee:34:bd:18:dd:
a6:90:83:36:25:7f:5e:aa:8b:2f:ed:74:65:18:09:
78:72:95:78:9c:b0:39:00:34:d3:3c:46:52:ca:5d:
07:50:3a:21:c5:d8:87:e8:cf:87:5e:bd:cd:70:b9:
62:81:9e:73:ce:c9:54:02:11:8e:4a:6a:44:33:61:
b0:8f:cb:55:b0:f0:da:84:21:37:22:a5:5f:24:86:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:A3:95:71:9B:18:0B:E8:22:FF:31:D1:8A:AA:3E:BD:23:BA:4C
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/KEujlXGbGAvoIv8x0YqqPr0jukw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.171.0/24
178.254.179.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a3:5a:71:a1:3c:1a:cf:0b:d5:49:88:ab:27:2e:cf:0e:6a:
00:18:64:ff:5e:79:07:65:2f:f3:ad:1b:3b:66:05:4c:10:6f:
90:d2:61:35:00:26:e0:87:9a:e3:87:14:1d:60:52:38:27:4c:
98:a5:f0:0e:c3:7b:2b:bb:e8:79:c9:0c:03:0c:7a:cd:40:3f:
0f:8e:cc:4e:25:84:d0:0c:5d:b4:a2:ce:fc:a1:3b:e2:f2:a8:
4d:2e:af:97:f2:0d:29:29:10:10:f6:e2:e3:cd:ac:a6:9b:69:
b8:31:45:47:20:67:3c:ae:11:fb:4a:67:8e:3d:1f:28:6b:cb:
0a:80:a3:cb:d8:92:09:5d:87:b3:3a:a1:e6:7e:3a:bf:ce:03:
8d:f2:f2:61:fe:85:84:c5:ce:f7:6a:99:0a:c4:a5:2a:2b:f3:
fb:c2:5e:70:6d:dd:85:6c:0d:f7:16:91:23:5a:8a:8f:4a:a3:
de:01:9f:da:cf:f0:73:99:61:c6:ab:1c:6a:f0:8b:ff:96:73:
13:c7:57:57:2d:f4:c7:22:0d:af:44:2d:f5:fd:58:51:fb:fc:
da:56:10:85:88:8b:58:5a:f1:e6:83:51:74:b0:20:e1:d9:13:
12:7e:d1:9e:01:4b:e9:7e:92:4e:fc:b3:8e:e1:d8:d4:5f:47:
d8:58:1a:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhxak6ZmLwdWhFiSHuJSwnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzNiNWU5N2M0NmE5M2JjM2EzNWNjNzEwNTVjNGYwZGZj
NmM0NTEwHhcNMjMwNTMxMTA0NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODRiYTM5NTcxOWIxODBiZTgyMmZmMzFkMThhYWEzZWJkMjNiYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt/cdZ6qaPn8goHs/xo7Miu2J/wI
wyvu4zswqEDR2nbZgTW7qxy1QkDXOJbL5WIYr+kl5Di2sqB2Q1G9NSWaZ5L2Z0Xx
O5rb8NpKzOMivuQn8UjhzzGBtj4j1TInIweqrhEDE/X9EKQvuTAYzvpkdbrpPy15
f8fqtfUmpOvSNicsYHokqwR3+YGuA9KgnoXkZ7UEln5G1AvZts0o341+mlGzD39m
cq9LSQKHzulu7jS9GN2mkIM2JX9eqosv7XRlGAl4cpV4nLA5ADTTPEZSyl0HUDoh
xdiH6M+HXr3NcLligZ5zzslUAhGOSmpEM2Gwj8tVsPDahCE3IqVfJIbc6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFChLo5VxmxgL6CL/MdGKqj69I7pMMB8GA1UdIwQY
MBaAFMLDtel8Rqk7w6NcxxBVxPDfxsRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NPMTZYeEdxVHZEbzF6SEVGWEU4Tl9HeEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNjUxYjUtY2RlNS00Y2RmLWEyOWYt
NDJiNGZiODM0ZjE1LzEvS0V1amxYR2JHQXZvSXY4eDBZcXFQcjBqdWt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNjUxYjUtY2RlNS00Y2RmLWEyOWYtNDJiNGZiODM0ZjE1
LzEvd3NPMTZYeEdxVHZEbzF6SEVGWEU4Tl9HeEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv6rAwQA
sv6zMA0GCSqGSIb3DQEBCwUAA4IBAQBJo1pxoTwazwvVSYirJy7PDmoAGGT/XnkH
ZS/zrRs7ZgVMEG+Q0mE1ACbgh5rjhxQdYFI4J0yYpfAOw3sru+h5yQwDDHrNQD8P
jsxOJYTQDF20os78oTvi8qhNLq+X8g0pKRAQ9uLjzaymm2m4MUVHIGc8rhH7SmeO
PR8oa8sKgKPL2JIJXYezOqHmfjq/zgON8vJh/oWExc73apkKxKUqK/P7wl5wbd2F
bA33FpEjWoqPSqPeAZ/az/BzmWHGqxxq8Iv/lnMTx1dXLfTHIg2vRC31/VhR+/za
VhCFiItYWvHmg1F0sCDh2RMSftGeAUvpfpJO/LOO4djUX0fYWBr6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org