Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/UXdKk91BtpFq1Y-B5ga6RDgA_PU.roa
File: UXdKk91BtpFq1Y-B5ga6RDgA_PU.roa (raw, json)
Hash identifier: pxEXC4B6bvP6sk14KZqvIxsUnC6ADio2h16WLXmPKRk=
Subject key identifier: 51:77:4A:93:DD:41:B6:91:6A:D5:8F:81:E6:06:BA:44:38:00:FC:F5
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D066C2ED0BB0DD87F435C94D90AAC
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/UXdKk91BtpFq1Y-B5ga6RDgA_PU.roa
Signing time: Sun 01 Jan 2023 13:54:45 +0000
ROA not before: Sun 01 Jan 2023 13:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:06:6c:2e:d0:bb:0d:d8:7f:43:5c:94:d9:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51774a93dd41b6916ad58f81e606ba443800fcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:ee:1a:e0:5a:43:58:79:5a:64:3b:22:f8:
b8:aa:1e:6b:8e:b4:75:a0:95:b6:68:51:eb:74:b6:
ae:40:a8:ac:2a:25:6b:42:ed:99:1d:6e:fc:6a:34:
5d:26:54:3c:0f:b4:bd:5f:ff:86:5a:d2:aa:df:45:
bb:d0:aa:c8:49:32:ca:50:ec:cb:ff:94:0b:53:bd:
88:0e:e0:ef:b5:d1:39:fe:04:cc:1e:27:75:45:3c:
66:38:9e:94:9f:7c:7d:9a:cc:f9:1b:9e:da:c6:b4:
49:91:5d:cc:0b:e1:9b:90:39:a0:f6:40:ef:09:b2:
56:8c:6b:c7:01:5b:51:84:fa:86:99:89:37:e2:41:
67:d2:ad:a6:fd:6a:0a:c6:40:27:fb:7e:c8:58:53:
4e:8e:15:b5:40:9a:d6:50:dc:18:dd:19:55:63:04:
82:ad:20:79:02:50:48:45:24:45:58:65:66:0f:9b:
ba:84:58:93:3f:fa:48:73:2c:f8:1b:4a:39:61:dd:
ab:0a:bf:cb:10:80:19:0b:18:4f:0e:bc:be:ae:e7:
eb:f1:d5:33:2f:6a:70:7b:0f:48:c5:1c:ac:d1:ce:
ac:38:fa:8a:b1:35:37:e9:de:97:63:13:e0:66:0b:
7e:58:62:98:99:86:36:f3:f6:9a:86:c4:d9:00:4e:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:4A:93:DD:41:B6:91:6A:D5:8F:81:E6:06:BA:44:38:00:FC:F5
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/UXdKk91BtpFq1Y-B5ga6RDgA_PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:f7:3d:a2:2a:00:13:6e:93:26:fd:f7:c8:d5:af:34:0e:0f:
26:27:17:50:d2:ea:bf:4d:98:fb:b9:49:a7:e5:9b:eb:33:80:
ad:ba:5b:62:75:88:b9:1c:57:42:0e:78:45:1f:ed:b7:34:d0:
57:12:3c:e6:74:e6:9a:11:7f:3c:3f:4f:f3:03:d7:d3:47:4d:
b5:d9:52:64:5e:a5:41:b8:85:0b:a9:76:49:d3:a1:0a:77:20:
6f:64:d4:80:e9:df:15:d6:41:6a:1c:51:00:f1:e0:e9:44:83:
12:12:3f:58:55:40:d4:a0:18:17:c9:64:d8:fe:4d:ad:f0:c3:
3c:94:d5:e5:0f:02:68:a6:01:9c:0d:2f:92:ae:9c:29:54:5d:
0f:45:9b:e0:3d:df:0e:e9:38:13:6b:2f:eb:a2:c1:5c:32:88:
9a:ee:fa:88:f4:c2:81:5d:60:be:7e:fd:73:4a:76:e3:44:7b:
94:34:24:56:ce:04:42:28:1b:e3:3e:c8:b9:9e:18:5e:88:fa:
3b:14:76:cf:38:70:5f:49:f4:a5:80:c1:c3:20:ec:b9:cc:6c:
d4:aa:c6:05:03:cb:19:c2:26:4b:a8:cc:75:e0:2f:44:75:0e:
99:20:13:ef:a9:a2:01:8d:22:90:f6:26:2d:fa:ff:08:2f:46:
dc:71:3c:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnQZsLtC7Ddh/Q1yU2QqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTc3NGE5M2RkNDFiNjkxNmFkNThmODFlNjA2YmE0NDM4MDBmY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5vuGuBaQ1h5WmQ7Ivi4qh5rjrR1
oJW2aFHrdLauQKisKiVrQu2ZHW78ajRdJlQ8D7S9X/+GWtKq30W70KrISTLKUOzL
/5QLU72IDuDvtdE5/gTMHid1RTxmOJ6Un3x9msz5G57axrRJkV3MC+GbkDmg9kDv
CbJWjGvHAVtRhPqGmYk34kFn0q2m/WoKxkAn+37IWFNOjhW1QJrWUNwY3RlVYwSC
rSB5AlBIRSRFWGVmD5u6hFiTP/pIcyz4G0o5Yd2rCr/LEIAZCxhPDry+rufr8dUz
L2pwew9IxRys0c6sOPqKsTU36d6XYxPgZgt+WGKYmYY28/aahsTZAE6HBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFF3SpPdQbaRatWPgeYGukQ4APz1MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvVVhkS2s5MUJ0cEZxMVktQjVnYTZSRGdBX1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjWJIMA0G
CSqGSIb3DQEBCwUAA4IBAQDD9z2iKgATbpMm/ffI1a80Dg8mJxdQ0uq/TZj7uUmn
5ZvrM4CtultidYi5HFdCDnhFH+23NNBXEjzmdOaaEX88P0/zA9fTR0212VJkXqVB
uIULqXZJ06EKdyBvZNSA6d8V1kFqHFEA8eDpRIMSEj9YVUDUoBgXyWTY/k2t8MM8
lNXlDwJopgGcDS+SrpwpVF0PRZvgPd8O6TgTay/rosFcMoia7vqI9MKBXWC+fv1z
SnbjRHuUNCRWzgRCKBvjPsi5nhheiPo7FHbPOHBfSfSlgMHDIOy5zGzUqsYFA8sZ
wiZLqMx14C9EdQ6ZIBPvqaIBjSKQ9iYt+v8IL0bccTyJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org