Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ef634b-3431-4987-9164-604ca7fe0821/1/5Fgl9wqtSPxs0I_a_RIYejN-O1c.roa
File: 5Fgl9wqtSPxs0I_a_RIYejN-O1c.roa (raw, json)
Hash identifier: dMo82IIsIWmFH13xAHzLSjfYDscbIEY0bVmCrpp6M9Q=
Subject key identifier: E4:58:25:F7:0A:AD:48:FC:6C:D0:8F:DA:FD:12:18:7A:33:7E:3B:57
Certificate issuer: /CN=c178233a2d3094cb7db1a9d7f02bd454ec8e349c
Certificate serial: 01856EC2126CCD41C97E72F38330A32DCB76
Authority key identifier: C1:78:23:3A:2D:30:94:CB:7D:B1:A9:D7:F0:2B:D4:54:EC:8E:34:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXgjOi0wlMt9sanX8CvUVOyONJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ef634b-3431-4987-9164-604ca7fe0821/1/5Fgl9wqtSPxs0I_a_RIYejN-O1c.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39016
IP address blocks: 94.154.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:12:6c:cd:41:c9:7e:72:f3:83:30:a3:2d:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178233a2d3094cb7db1a9d7f02bd454ec8e349c
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45825f70aad48fc6cd08fdafd12187a337e3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:9e:54:90:0b:bb:93:c4:34:41:09:12:47:
8c:8d:46:e2:55:fa:0e:6e:5f:47:1f:e6:90:15:8f:
31:9f:b4:71:55:91:83:bb:72:73:37:df:56:86:73:
d6:ae:7d:dc:ab:19:63:58:f3:48:71:35:78:09:de:
1e:fe:31:c5:6e:fb:da:c2:0d:d3:df:ce:b7:9a:48:
61:b3:62:00:d9:20:bd:a8:c4:a7:bc:62:2e:d8:f8:
9d:31:52:c5:43:54:89:2b:4b:c2:8e:26:01:94:67:
c2:11:7b:b1:6e:ed:ad:5f:02:6a:dc:eb:bb:fd:be:
6c:c4:7e:4c:6f:bc:4a:3b:ba:15:41:63:72:8d:d3:
50:be:73:9d:df:90:e6:98:cd:4b:44:e3:48:a6:09:
f9:9d:e3:30:4a:38:aa:44:4d:c6:ee:fd:50:be:21:
31:ce:69:3c:12:8c:03:99:ab:fb:27:a1:de:64:5c:
20:ca:50:ad:cc:50:d1:b8:a4:6e:e0:ac:92:4f:61:
dc:64:98:3e:8c:e6:e8:48:48:f5:67:77:a4:13:f0:
85:b3:3a:dd:62:36:3d:56:1c:c9:05:d8:a2:d8:1d:
ad:af:4d:c9:61:da:da:44:f7:0e:ac:aa:23:99:d8:
34:33:37:1b:24:63:1e:60:49:43:39:ba:ca:58:8d:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:25:F7:0A:AD:48:FC:6C:D0:8F:DA:FD:12:18:7A:33:7E:3B:57
X509v3 Authority Key Identifier:
keyid:C1:78:23:3A:2D:30:94:CB:7D:B1:A9:D7:F0:2B:D4:54:EC:8E:34:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXgjOi0wlMt9sanX8CvUVOyONJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ef634b-3431-4987-9164-604ca7fe0821/1/5Fgl9wqtSPxs0I_a_RIYejN-O1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ef634b-3431-4987-9164-604ca7fe0821/1/wXgjOi0wlMt9sanX8CvUVOyONJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.122.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0e:34:a4:71:00:68:28:32:70:dd:47:91:a1:86:e4:16:d9:
4a:5a:4d:50:15:3e:d8:8c:ca:34:e0:45:49:c8:56:a8:fa:97:
a5:2f:db:58:77:4a:be:f6:f5:39:d6:9a:cb:4d:b8:88:b1:c8:
7e:41:6f:17:38:80:34:91:b7:d0:84:ea:90:84:fb:04:29:0f:
ac:ce:5e:90:4b:94:61:ac:24:3c:7a:28:eb:5c:fd:5d:63:ef:
ff:70:c8:aa:54:1c:c4:d5:04:5d:6f:36:2c:ef:f4:e9:9b:a1:
f4:0e:3f:c4:c8:16:0a:ff:f2:9e:e9:55:ea:df:bb:d4:bf:8c:
e3:d8:12:79:e0:b0:ff:36:89:6a:37:4d:f0:25:13:95:3d:d7:
69:47:1b:a3:ed:cc:41:c8:5d:f3:5d:e7:f7:66:f4:29:4e:27:
46:5d:0e:0a:9b:84:b9:f5:c3:fe:c1:df:10:c4:b8:24:4d:f2:
97:c6:37:2c:a9:07:ef:cb:d5:c3:94:b3:e8:1a:99:db:30:3c:
53:3f:dd:31:c0:78:2d:fa:e8:49:a0:a4:b7:53:23:66:cc:29:
b1:4d:28:92:e9:73:be:45:63:79:63:07:90:42:5d:6c:e7:29:
81:86:27:1e:5a:ca:77:62:bb:8d:ff:01:3a:33:30:04:bb:6b:
2a:04:58:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwhJszUHJfnLzgzCjLct2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzgyMzNhMmQzMDk0Y2I3ZGIxYTlkN2YwMmJkNDU0ZWM4
ZTM0OWMwHhcNMjMwMTAxMTkxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDU4MjVmNzBhYWQ0OGZjNmNkMDhmZGFmZDEyMTg3YTMzN2UzYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj82eVJALu5PENEEJEkeMjUbiVfoO
bl9HH+aQFY8xn7RxVZGDu3JzN99WhnPWrn3cqxljWPNIcTV4Cd4e/jHFbvvawg3T
3863mkhhs2IA2SC9qMSnvGIu2PidMVLFQ1SJK0vCjiYBlGfCEXuxbu2tXwJq3Ou7
/b5sxH5Mb7xKO7oVQWNyjdNQvnOd35DmmM1LRONIpgn5neMwSjiqRE3G7v1QviEx
zmk8EowDmav7J6HeZFwgylCtzFDRuKRu4KyST2HcZJg+jOboSEj1Z3ekE/CFszrd
YjY9VhzJBdii2B2tr03JYdraRPcOrKojmdg0MzcbJGMeYElDObrKWI3TEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORYJfcKrUj8bNCP2v0SGHozfjtXMB8GA1UdIwQY
MBaAFMF4IzotMJTLfbGp1/Ar1FTsjjScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hnak9pMHdsTXQ5c2FuWDhDdlVWT3lPTkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lZjYzNGItMzQzMS00OTg3LTkxNjQt
NjA0Y2E3ZmUwODIxLzEvNUZnbDl3cXRTUHhzMElfYV9SSVllak4tTzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lZjYzNGItMzQzMS00OTg3LTkxNjQtNjA0Y2E3ZmUwODIx
LzEvd1hnak9pMHdsTXQ5c2FuWDhDdlVWT3lPTkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp6MA0G
CSqGSIb3DQEBCwUAA4IBAQBUDjSkcQBoKDJw3UeRoYbkFtlKWk1QFT7YjMo04EVJ
yFao+pelL9tYd0q+9vU51prLTbiIsch+QW8XOIA0kbfQhOqQhPsEKQ+szl6QS5Rh
rCQ8eijrXP1dY+//cMiqVBzE1QRdbzYs7/Tpm6H0Dj/EyBYK//Ke6VXq37vUv4zj
2BJ54LD/NolqN03wJROVPddpRxuj7cxByF3zXef3ZvQpTidGXQ4Km4S59cP+wd8Q
xLgkTfKXxjcsqQfvy9XDlLPoGpnbMDxTP90xwHgt+uhJoKS3UyNmzCmxTSiS6XO+
RWN5YweQQl1s5ymBhiceWsp3YruN/wE6MzAEu2sqBFhw
-----END CERTIFICATE-----
Generated at Thu Dec 14 10:48:03 2023 by rpki-client on console-ams.rpki-client.org