Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/cu0xfhAv8b8Mwu24WGMFQIdWGKs.roa
File: cu0xfhAv8b8Mwu24WGMFQIdWGKs.roa (raw, json)
Hash identifier: m2IJbr+IMFyADf3+0by9C2fl0OkZvUi+ErHnzA0dH0Q=
Subject key identifier: 72:ED:31:7E:10:2F:F1:BF:0C:C2:ED:B8:58:63:05:40:87:56:18:AB
Certificate issuer: /CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Certificate serial: 01856DC19BA22933A4CC2605D63C18978CBA
Authority key identifier: FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/cu0xfhAv8b8Mwu24WGMFQIdWGKs.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9b:a2:29:33:a4:cc:26:05:d6:3c:18:97:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72ed317e102ff1bf0cc2edb858630540875618ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:2a:3d:ad:16:0d:bf:fc:eb:20:78:f2:34:
37:f3:16:42:3c:44:5e:c5:70:30:fa:1c:b9:1f:97:
93:e5:31:1e:df:c8:c5:ee:8b:41:cc:50:3d:e5:12:
68:5a:3c:ff:a6:35:38:d4:05:ba:33:bb:54:85:2f:
a5:5e:7f:1c:47:3b:64:3b:bd:5f:88:d6:06:fa:11:
9c:2a:d6:52:5f:0f:7a:4b:93:13:d4:54:6d:ea:20:
a7:b5:50:6c:02:49:4c:3e:4a:33:40:1f:19:a7:20:
03:5e:22:2e:51:d3:43:95:f4:21:dd:f3:ec:19:fe:
3c:e6:a0:3b:2a:2c:07:66:15:14:a8:cd:b1:43:45:
b0:b9:59:2c:2f:c1:71:c4:e3:ee:61:4e:c0:c8:6b:
6e:3c:49:d5:33:af:56:9d:79:bb:a0:97:a5:e5:ea:
8f:de:3e:66:26:c4:da:5c:ee:4f:5e:66:27:70:ba:
85:0c:da:95:de:a0:fc:72:56:c3:5c:6f:48:d3:4f:
cb:4e:35:32:09:69:e9:b8:56:46:80:db:8e:68:b5:
d2:dd:e3:1c:46:c2:40:b8:5d:53:30:cf:29:92:de:
4b:30:bf:23:e0:77:1e:85:bd:46:ff:97:96:ae:06:
f9:a6:a2:d3:8f:68:5b:b4:1a:80:7d:fd:20:93:c7:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:31:7E:10:2F:F1:BF:0C:C2:ED:B8:58:63:05:40:87:56:18:AB
X509v3 Authority Key Identifier:
keyid:FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/cu0xfhAv8b8Mwu24WGMFQIdWGKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/_58RG7oyvBQ5dD3yPhTd2HEB610.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.192.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5c:fd:e2:23:a4:37:1f:72:66:11:12:18:11:32:75:1b:58:
bb:c6:95:b5:c8:b2:b7:ba:02:49:e8:d4:aa:38:40:e3:b1:e9:
21:22:d4:84:fc:1f:11:79:27:6c:05:f8:f7:76:27:1a:4e:5b:
18:0b:91:29:e2:84:03:1a:09:6b:8e:b0:49:1c:66:92:46:ca:
b8:01:c7:84:f3:ba:9f:7c:7c:47:1a:c9:09:99:c0:a4:af:4e:
4a:83:c3:84:7c:21:be:9b:2d:52:89:ff:93:70:47:e9:a9:17:
6f:eb:40:37:d7:9c:41:95:a0:19:2e:65:90:37:70:68:4d:7c:
58:23:a3:9c:d1:87:35:de:54:86:cd:88:7c:d9:12:ef:58:79:
36:e2:1e:15:70:5f:25:63:a3:bd:85:d5:a8:8a:19:94:1d:e7:
21:25:ad:0f:38:a9:e2:f0:61:0e:7d:1c:7a:3f:b5:39:7a:26:
18:77:01:05:4f:bc:51:2f:53:08:93:a7:22:e0:03:b2:9a:c5:
14:5a:a4:f2:27:3f:c1:83:69:e0:63:f5:97:e7:21:d3:b4:2c:
93:43:68:1f:c9:c0:f7:ab:7e:67:8d:1b:d7:37:f0:ff:54:11:
3c:ee:b1:c1:c1:c7:df:5f:2a:77:d5:7c:5c:28:b9:d8:3d:b7:
55:c1:12:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwZuiKTOkzCYF1jwYl4y6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOWYxMTFiYmEzMmJjMTQzOTc0M2RmMjNlMTRkZGQ4NzEw
MWViNWQwHhcNMjMwMTAxMTQzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmVkMzE3ZTEwMmZmMWJmMGNjMmVkYjg1ODYzMDU0MDg3NTYxOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+8qPa0WDb/86yB48jQ38xZCPERe
xXAw+hy5H5eT5TEe38jF7otBzFA95RJoWjz/pjU41AW6M7tUhS+lXn8cRztkO71f
iNYG+hGcKtZSXw96S5MT1FRt6iCntVBsAklMPkozQB8ZpyADXiIuUdNDlfQh3fPs
Gf485qA7KiwHZhUUqM2xQ0WwuVksL8FxxOPuYU7AyGtuPEnVM69WnXm7oJel5eqP
3j5mJsTaXO5PXmYncLqFDNqV3qD8clbDXG9I00/LTjUyCWnpuFZGgNuOaLXS3eMc
RsJAuF1TMM8pkt5LML8j4Hcehb1G/5eWrgb5pqLTj2hbtBqAff0gk8fmZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLtMX4QL/G/DMLtuFhjBUCHVhirMB8GA1UdIwQY
MBaAFP+fERu6MrwUOXQ98j4U3dhxAetdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzU4Ukc3b3l2QlE1ZEQzeVBoVGQySEVCNjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9mNWJlZTctZWY3NS00YzdmLTgxNTkt
NWZhYzcxZDc0YTM1LzEvY3UweGZoQXY4YjhNd3UyNFdHTUZRSWRXR0tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9mNWJlZTctZWY3NS00YzdmLTgxNTktNWZhYzcxZDc0YTM1
LzEvXzU4Ukc3b3l2QlE1ZEQzeVBoVGQySEVCNjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPAMA0G
CSqGSIb3DQEBCwUAA4IBAQA2XP3iI6Q3H3JmERIYETJ1G1i7xpW1yLK3ugJJ6NSq
OEDjsekhItSE/B8ReSdsBfj3dicaTlsYC5Ep4oQDGglrjrBJHGaSRsq4AceE87qf
fHxHGskJmcCkr05Kg8OEfCG+my1Sif+TcEfpqRdv60A315xBlaAZLmWQN3BoTXxY
I6Oc0Yc13lSGzYh82RLvWHk24h4VcF8lY6O9hdWoihmUHechJa0POKni8GEOfRx6
P7U5eiYYdwEFT7xRL1MIk6ci4AOymsUUWqTyJz/Bg2ngY/WX5yHTtCyTQ2gfycD3
q35njRvXN/D/VBE87rHBwcffXyp31XxcKLnYPbdVwRJg
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:53 2024 by rpki-client on console-ams.rpki-client.org