Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa
File: HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa (raw, json)
Hash identifier: RicpQBtJkI9PHaIHcV49nTjSHfOb+vUT60hFn7+oNUs=
Subject key identifier: 1C:08:DA:57:DE:1F:DF:23:E5:A5:59:1B:E8:CE:8B:F6:26:72:17:D4
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 018225F92CFC6BFAC01C0A045BCC3138E2C8
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa
Signing time: Fri 22 Jul 2022 12:54:23 +0000
ROA not before: Fri 22 Jul 2022 12:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 213.139.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:f9:2c:fc:6b:fa:c0:1c:0a:04:5b:cc:31:38:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jul 22 12:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c08da57de1fdf23e5a5591be8ce8bf6267217d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:e0:ce:f6:95:e7:39:83:5b:aa:c7:a8:39:
a7:ca:ab:68:27:72:3d:cb:2f:95:d2:f9:0e:88:0e:
2a:37:22:81:fe:30:ce:88:0f:f3:a2:ed:f8:eb:20:
3c:db:1a:dd:bc:43:db:4c:10:28:3c:e5:dc:d1:d4:
c8:39:7c:cb:42:b5:3d:63:cf:5e:52:fa:a0:96:14:
80:b4:01:69:ed:f4:7a:95:ef:3f:68:23:c4:42:56:
57:a3:05:53:90:c9:42:9d:8c:08:16:88:0a:84:f7:
3f:42:b5:4d:9f:9a:ca:27:ef:93:17:f2:92:cf:2b:
aa:a8:9c:d0:c4:8d:b2:a8:66:7b:b5:76:61:12:b9:
b2:f7:18:f2:8e:fe:54:a6:5a:02:68:76:b2:ad:ff:
e1:07:c9:da:12:c9:f2:76:f1:f9:6d:72:85:95:64:
62:56:84:34:db:63:0e:ba:a2:6d:59:c0:42:7f:fc:
88:eb:bf:44:db:8c:93:d7:e8:6d:a3:9c:2b:c4:76:
02:0f:af:07:91:3e:78:01:16:32:77:21:e0:99:3f:
7a:7d:8d:71:6a:82:64:83:ec:03:19:a2:b7:c1:05:
60:2b:61:4c:75:2f:c3:6a:de:99:db:07:3a:cb:af:
8c:0c:75:47:59:ae:2a:43:fd:77:e8:53:4a:a8:29:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:DA:57:DE:1F:DF:23:E5:A5:59:1B:E8:CE:8B:F6:26:72:17:D4
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
59:25:e2:b0:27:04:c6:f4:e1:3f:0b:6b:88:17:f5:45:65:c3:
60:ea:75:88:cf:12:c9:a1:a5:af:cf:ff:44:ad:57:9c:2e:71:
c0:0d:f1:89:e0:f9:f5:5a:8b:af:82:1d:9c:8a:89:ec:11:b1:
ca:b8:cd:df:5f:b5:c8:26:ac:24:55:d7:9c:5a:71:57:0a:0b:
a7:22:7d:a8:b3:c0:a2:95:0b:e2:42:71:c0:c8:b8:c5:e6:80:
84:bc:63:00:1b:66:3e:b8:d7:47:54:e4:3b:ca:4c:fa:e1:23:
fc:f0:da:6f:94:22:e2:95:25:d8:4c:ef:67:4c:49:33:1b:f3:
f7:8f:4e:1c:7a:69:75:47:63:8d:8f:0e:9a:f4:1d:15:94:09:
b9:11:33:eb:77:ba:74:5b:83:2e:fa:c5:aa:15:ba:46:e9:ca:
61:6c:11:e4:d8:68:1d:df:3a:b7:91:29:e2:53:00:01:37:a8:
00:ac:0e:6b:88:78:71:15:03:d5:19:da:79:43:c9:90:9b:dd:
66:ea:e2:52:3d:b8:ce:2d:e9:f2:92:f3:10:91:f4:20:de:4b:
b9:5b:70:3a:b4:58:12:c4:ae:96:8e:72:10:94:f6:ee:83:1e:
d1:5a:bd:92:04:60:38:67:fe:c7:b6:a2:0b:0d:e4:bf:0a:aa:
18:c7:d3:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIl+Sz8a/rAHAoEW8wxOOLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFl
NzEyZWUwHhcNMjIwNzIyMTI1NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA4ZGE1N2RlMWZkZjIzZTVhNTU5MWJlOGNlOGJmNjI2NzIxN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQrgzvaV5zmDW6rHqDmnyqtoJ3I9
yy+V0vkOiA4qNyKB/jDOiA/zou346yA82xrdvEPbTBAoPOXc0dTIOXzLQrU9Y89e
UvqglhSAtAFp7fR6le8/aCPEQlZXowVTkMlCnYwIFogKhPc/QrVNn5rKJ++TF/KS
zyuqqJzQxI2yqGZ7tXZhErmy9xjyjv5UploCaHayrf/hB8naEsnydvH5bXKFlWRi
VoQ022MOuqJtWcBCf/yI679E24yT1+hto5wrxHYCD68HkT54ARYydyHgmT96fY1x
aoJkg+wDGaK3wQVgK2FMdS/Dat6Z2wc6y6+MDHVHWa4qQ/136FNKqClUlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwI2lfeH98j5aVZG+jOi/YmchfUMB8GA1UdIwQY
MBaAFAlIdfQGeV20KgF53x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUt
ODY0NTgwZDAyZjgxLzEvSEFqYVY5NGYzeVBscFZrYjZNNkw5aVp5RjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgx
LzEvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YtAMA0G
CSqGSIb3DQEBCwUAA4IBAQBZJeKwJwTG9OE/C2uIF/VFZcNg6nWIzxLJoaWvz/9E
rVecLnHADfGJ4Pn1Wouvgh2cionsEbHKuM3fX7XIJqwkVdecWnFXCgunIn2os8Ci
lQviQnHAyLjF5oCEvGMAG2Y+uNdHVOQ7ykz64SP88NpvlCLilSXYTO9nTEkzG/P3
j04ceml1R2ONjw6a9B0VlAm5ETPrd7p0W4Mu+sWqFbpG6cphbBHk2Ggd3zq3kSni
UwABN6gArA5riHhxFQPVGdp5Q8mQm91m6uJSPbjOLenykvMQkfQg3ku5W3A6tFgS
xK6WjnIQlPbugx7RWr2SBGA4Z/7HtqILDeS/CqoYx9OW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:03 2023 by rpki-client on console-fra.rpki-client.org