Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/4X2yY757MDNr4ujq88lZNpia1aY.roa
File: 4X2yY757MDNr4ujq88lZNpia1aY.roa (raw, json)
Hash identifier: J2Fa2HFEgj623Gkf2bFIpSqed0qmU64tbjV69Qq1DSc=
Subject key identifier: E1:7D:B2:63:BE:7B:30:33:6B:E2:E8:EA:F3:C9:59:36:98:9A:D5:A6
Certificate issuer: /CN=6baf3b452946e4950993c3ca78e24fc455b37379
Certificate serial: 0181F103D83784025946A91B0F0523B89773
Authority key identifier: 6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/4X2yY757MDNr4ujq88lZNpia1aY.roa
Signing time: Tue 12 Jul 2022 06:06:09 +0000
ROA not before: Tue 12 Jul 2022 06:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 193.203.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:03:d8:37:84:02:59:46:a9:1b:0f:05:23:b8:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf3b452946e4950993c3ca78e24fc455b37379
Validity
Not Before: Jul 12 06:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e17db263be7b30336be2e8eaf3c95936989ad5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:1b:32:1c:a9:09:08:48:c1:b9:6e:8b:a6:
ad:e4:de:ec:a0:a3:7a:98:d4:2d:8e:c1:aa:ef:df:
de:8b:0a:f0:1b:7b:dc:81:52:b0:cd:16:05:c7:45:
9a:16:25:31:6b:fd:79:a4:1f:b0:1b:36:bc:fc:79:
64:a1:0a:28:7f:40:c5:65:40:ec:11:dc:88:7f:a1:
b4:0e:b7:3a:04:5e:ad:d1:36:d1:a1:5b:5b:69:84:
86:02:1d:91:56:2f:1e:49:4c:0e:1c:89:b6:2d:7c:
77:b3:36:08:bf:66:7c:37:20:11:d8:6d:a3:52:e7:
19:aa:ac:7d:64:b6:7c:be:24:50:c9:a8:52:69:db:
28:6b:85:bd:cc:f3:d3:6d:07:14:3f:6b:5a:df:80:
4f:4a:c0:57:db:be:1a:40:72:80:37:bc:a9:f1:e9:
6c:d3:74:ee:be:75:9d:fb:91:5e:2c:5a:6a:85:4c:
d9:8a:93:8c:21:78:10:14:2b:38:55:23:cb:28:33:
21:ab:f7:1a:a0:bc:c8:15:ac:2b:50:cc:72:a7:77:
3b:7f:82:7a:1b:40:52:68:9a:61:5e:cb:77:3f:89:
8e:cc:03:dd:be:f1:35:16:fd:04:f8:85:d0:b0:2a:
de:78:0b:f1:4a:27:54:8c:3f:f0:21:0f:24:5f:0f:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:B2:63:BE:7B:30:33:6B:E2:E8:EA:F3:C9:59:36:98:9A:D5:A6
X509v3 Authority Key Identifier:
keyid:6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/4X2yY757MDNr4ujq88lZNpia1aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/a687RSlG5JUJk8PKeOJPxFWzc3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ac:55:43:69:a5:c2:f6:71:ca:19:81:8f:7b:cf:30:63:4b:
da:9f:22:50:d9:1a:47:bd:36:5c:a6:20:94:eb:84:45:a7:2d:
7f:4c:8c:55:88:28:27:d6:ce:4a:40:a3:5f:c0:9e:b0:a0:d7:
a7:65:ae:d1:91:fa:b4:0f:68:8c:93:7a:d2:79:3c:2c:c1:0e:
5e:37:b8:96:1a:13:64:1d:15:56:2b:2c:54:fb:0a:a1:35:73:
ec:02:ac:7e:0b:52:e5:c9:80:13:b8:ee:81:69:76:73:7a:da:
3a:99:1c:c7:45:60:a4:a5:9e:d4:ae:d2:8b:a5:2c:0b:e0:22:
af:a5:30:c6:bd:31:7b:79:ac:5b:c2:1d:ab:e4:75:58:78:28:
22:04:0e:90:5e:98:da:31:75:2f:0d:00:0d:1b:78:ab:c9:ff:
8d:39:cd:d6:46:be:22:1a:48:11:8d:a0:05:a1:66:c5:05:75:
79:e7:99:95:35:10:6b:6a:6c:c6:c9:88:6f:d9:06:5b:fb:e2:
72:d9:b7:db:21:2f:ad:32:00:46:c4:54:a3:6a:b5:7e:47:d3:
e5:42:5e:c4:d8:3e:b7:23:e8:62:fb:27:9b:8d:1c:5e:c9:b5:
4e:ad:f8:1f:f9:46:8f:53:54:2a:13:9a:40:8e:c7:4b:f0:89:
2f:a6:47:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHxA9g3hAJZRqkbDwUjuJdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWYzYjQ1Mjk0NmU0OTUwOTkzYzNjYTc4ZTI0ZmM0NTVi
MzczNzkwHhcNMjIwNzEyMDYwNjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTdkYjI2M2JlN2IzMDMzNmJlMmU4ZWFmM2M5NTkzNjk4OWFkNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfUbMhypCQhIwblui6at5N7soKN6
mNQtjsGq79/eiwrwG3vcgVKwzRYFx0WaFiUxa/15pB+wGza8/HlkoQoof0DFZUDs
EdyIf6G0Drc6BF6t0TbRoVtbaYSGAh2RVi8eSUwOHIm2LXx3szYIv2Z8NyAR2G2j
UucZqqx9ZLZ8viRQyahSadsoa4W9zPPTbQcUP2ta34BPSsBX274aQHKAN7yp8els
03TuvnWd+5FeLFpqhUzZipOMIXgQFCs4VSPLKDMhq/caoLzIFawrUMxyp3c7f4J6
G0BSaJphXst3P4mOzAPdvvE1Fv0E+IXQsCreeAvxSidUjD/wIQ8kXw86eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOF9smO+ezAza+Lo6vPJWTaYmtWmMB8GA1UdIwQY
MBaAFGuvO0UpRuSVCZPDynjiT8RVs3N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTY4N1JTbEc1SlVKazhQS2VPSlB4Rld6YzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWQzNzgtOWM1Ni00MDI1LWFlOGYt
MTM0MWJjZTIzZWRkLzEvNFgyeVk3NTdNRE5yNHVqcTg4bFpOcGlhMWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWQzNzgtOWM1Ni00MDI1LWFlOGYtMTM0MWJjZTIzZWRk
LzEvYTY4N1JTbEc1SlVKazhQS2VPSlB4Rld6YzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcswMA0G
CSqGSIb3DQEBCwUAA4IBAQDRrFVDaaXC9nHKGYGPe88wY0vanyJQ2RpHvTZcpiCU
64RFpy1/TIxViCgn1s5KQKNfwJ6woNenZa7Rkfq0D2iMk3rSeTwswQ5eN7iWGhNk
HRVWKyxU+wqhNXPsAqx+C1LlyYATuO6BaXZzeto6mRzHRWCkpZ7UrtKLpSwL4CKv
pTDGvTF7eaxbwh2r5HVYeCgiBA6QXpjaMXUvDQANG3iryf+NOc3WRr4iGkgRjaAF
oWbFBXV555mVNRBramzGyYhv2QZb++Jy2bfbIS+tMgBGxFSjarV+R9PlQl7E2D63
I+hi+yebjRxeybVOrfgf+UaPU1QqE5pAjsdL8Ikvpkc3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org