Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/kVyiBhcahIvD-zFLvPcQtvXzFwY.roa
File: kVyiBhcahIvD-zFLvPcQtvXzFwY.roa (raw, json)
Hash identifier: V5Ei79hpNOVJFL42zc983XojJvMNp8oB+fYMtBVkixs=
Subject key identifier: 91:5C:A2:06:17:1A:84:8B:C3:FB:31:4B:BC:F7:10:B6:F5:F3:17:06
Certificate issuer: /CN=711466992b4444b1a2f06d01381caf28986e7689
Certificate serial: 01856CC14A365C8552C68C85984AE8E64B7A
Authority key identifier: 71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRRmmStERLGi8G0BOByvKJhudok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/kVyiBhcahIvD-zFLvPcQtvXzFwY.roa
Signing time: Sun 01 Jan 2023 09:54:44 +0000
ROA not before: Sun 01 Jan 2023 09:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25591
IP address blocks: 92.118.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:4a:36:5c:85:52:c6:8c:85:98:4a:e8:e6:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711466992b4444b1a2f06d01381caf28986e7689
Validity
Not Before: Jan 1 09:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=915ca206171a848bc3fb314bbcf710b6f5f31706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:9d:d8:f8:aa:21:4c:3a:13:9a:7c:d8:dc:
86:e0:9d:64:7d:84:67:ee:2c:d6:c8:35:bd:29:a0:
9a:a7:6e:73:b3:5b:c6:e6:dd:a5:2b:b5:e1:d3:fe:
40:9b:b4:38:8d:20:e3:5e:d4:a1:c2:b6:a3:f8:26:
af:da:45:ff:a2:f0:a0:d0:63:ab:52:a0:dc:6b:0a:
d7:3f:3e:a5:70:88:75:20:dd:b7:9a:7a:f0:a8:f7:
7a:2a:f2:07:a4:b3:00:5e:dc:7c:c5:a8:72:bd:5e:
16:83:85:78:80:02:15:e9:b5:ac:da:3d:0f:af:a6:
b4:e3:0c:2a:cb:2d:e7:53:0d:2c:13:ba:20:c4:21:
43:1e:f1:60:94:dc:ed:8f:22:a3:2e:01:99:70:98:
38:54:15:5a:98:5c:13:6c:a9:35:ee:b0:f2:e6:49:
59:80:a2:27:b7:1c:61:c6:d9:bd:0d:d1:17:30:bf:
0a:ba:80:86:4f:58:54:37:32:2c:cd:74:c2:de:19:
8c:10:5a:2b:7f:9b:e6:4f:ec:1b:c1:b7:ec:a9:29:
0e:13:4a:92:37:f1:6c:5e:eb:5c:28:25:69:74:f2:
b6:d3:bd:7f:f3:be:84:83:c7:24:64:a3:b4:e7:0a:
18:ff:ca:bd:92:c1:3d:d6:b0:cb:24:20:0f:c1:97:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5C:A2:06:17:1A:84:8B:C3:FB:31:4B:BC:F7:10:B6:F5:F3:17:06
X509v3 Authority Key Identifier:
keyid:71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRRmmStERLGi8G0BOByvKJhudok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/kVyiBhcahIvD-zFLvPcQtvXzFwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/cRRmmStERLGi8G0BOByvKJhudok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
17:74:67:65:99:7b:f7:a2:f8:f8:55:99:e3:f6:7f:9c:f0:81:
da:36:ce:ff:28:60:26:e2:28:1f:9e:c1:32:7a:c9:5f:bf:64:
1e:27:58:76:95:1a:e8:d2:1d:f2:fc:a9:4b:56:3b:52:e1:84:
e9:cd:ad:ae:b0:73:29:48:f6:c5:ae:12:ae:a2:c6:98:e0:eb:
6a:2b:32:cc:8d:b9:d3:0a:af:5a:9f:d1:bd:1b:96:de:81:04:
68:f0:af:d4:e0:43:c1:12:33:a5:48:3b:32:39:c9:20:fd:4d:
a0:78:68:91:04:ab:5b:ef:77:0a:7a:b2:e0:51:d8:40:7f:01:
77:f0:ea:c3:a7:27:a6:64:c7:5e:df:3f:53:6d:4f:6c:78:de:
67:c9:69:e5:ea:0f:91:16:ae:81:0b:3d:26:0b:80:be:15:43:
f7:16:3f:22:60:b4:38:7d:9d:5e:bb:7e:3f:40:71:07:18:8a:
de:79:4c:6e:a0:f0:24:53:d1:0a:04:7e:40:2e:04:4c:c6:fb:
99:15:a8:8e:ad:1c:e2:bf:71:25:e7:23:0f:ce:73:3d:ac:49:
c6:dd:07:15:67:43:e1:ce:f0:e1:f7:e6:0a:fa:50:06:75:5b:
ab:db:5d:4e:56:b8:e6:89:48:e5:bc:8c:03:6d:78:51:ba:fb:
63:18:e0:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswUo2XIVSxoyFmEro5kt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTQ2Njk5MmI0NDQ0YjFhMmYwNmQwMTM4MWNhZjI4OTg2
ZTc2ODkwHhcNMjMwMTAxMDk1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVjYTIwNjE3MWE4NDhiYzNmYjMxNGJiY2Y3MTBiNmY1ZjMxNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVud2PiqIUw6E5p82NyG4J1kfYRn
7izWyDW9KaCap25zs1vG5t2lK7Xh0/5Am7Q4jSDjXtShwraj+Cav2kX/ovCg0GOr
UqDcawrXPz6lcIh1IN23mnrwqPd6KvIHpLMAXtx8xahyvV4Wg4V4gAIV6bWs2j0P
r6a04wwqyy3nUw0sE7ogxCFDHvFglNztjyKjLgGZcJg4VBVamFwTbKk17rDy5klZ
gKIntxxhxtm9DdEXML8KuoCGT1hUNzIszXTC3hmMEForf5vmT+wbwbfsqSkOE0qS
N/FsXutcKCVpdPK2071/876Eg8ckZKO05woY/8q9ksE91rDLJCAPwZf/eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFcogYXGoSLw/sxS7z3ELb18xcGMB8GA1UdIwQY
MBaAFHEUZpkrRESxovBtATgcryiYbnaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JSbW1TdEVSTEdpOEcwQk9CeXZLSmh1ZG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81M2U1NTQtNzZlYy00ZDU3LThkMTUt
ODk3Yjk0MTE2YTNmLzEva1Z5aUJoY2FoSXZELXpGTHZQY1F0dlh6RndZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81M2U1NTQtNzZlYy00ZDU3LThkMTUtODk3Yjk0MTE2YTNm
LzEvY1JSbW1TdEVSTEdpOEcwQk9CeXZLSmh1ZG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHbIMA0G
CSqGSIb3DQEBCwUAA4IBAQAXdGdlmXv3ovj4VZnj9n+c8IHaNs7/KGAm4igfnsEy
eslfv2QeJ1h2lRro0h3y/KlLVjtS4YTpza2usHMpSPbFrhKuosaY4OtqKzLMjbnT
Cq9an9G9G5begQRo8K/U4EPBEjOlSDsyOckg/U2geGiRBKtb73cKerLgUdhAfwF3
8OrDpyemZMde3z9TbU9seN5nyWnl6g+RFq6BCz0mC4C+FUP3Fj8iYLQ4fZ1eu34/
QHEHGIreeUxuoPAkU9EKBH5ALgRMxvuZFaiOrRziv3El5yMPznM9rEnG3QcVZ0Ph
zvDh9+YK+lAGdVur211OVrjmiUjlvIwDbXhRuvtjGOD2
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:58 2024 by rpki-client on console-ams.rpki-client.org