Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/Rxo5G0_kkL0za3nEAWqcH4zPd1k.roa
File: Rxo5G0_kkL0za3nEAWqcH4zPd1k.roa (raw, json)
Hash identifier: SUABFTfGU/ZkPj1t+PcBceAm4affquu4M81kFuRuoK0=
Subject key identifier: 47:1A:39:1B:4F:E4:90:BD:33:6B:79:C4:01:6A:9C:1F:8C:CF:77:59
Certificate issuer: /CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Certificate serial: 018573719248164B057F2B47F3753C1036B7
Authority key identifier: A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/Rxo5G0_kkL0za3nEAWqcH4zPd1k.roa
Signing time: Mon 02 Jan 2023 17:05:00 +0000
ROA not before: Mon 02 Jan 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43618
IP address blocks: 194.147.23.0/24 maxlen: 24
194.147.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:92:48:16:4b:05:7f:2b:47:f3:75:3c:10:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Validity
Not Before: Jan 2 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471a391b4fe490bd336b79c4016a9c1f8ccf7759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:8c:9c:05:6a:6b:e7:6c:bf:b4:0a:3e:00:
31:17:64:04:a0:d1:7d:a3:f4:12:30:1c:c9:ac:cf:
96:3c:d4:6f:75:89:58:e2:38:04:a5:17:7d:93:ae:
d8:78:cc:ad:bc:b9:f0:0b:14:42:62:68:f1:38:45:
7e:d0:64:85:50:5d:c2:6c:65:72:ae:89:57:b8:56:
d5:f5:c5:2d:8e:83:4a:52:bd:3b:05:dc:4d:9e:dd:
c2:58:b2:2d:51:f6:82:01:c2:87:f5:4a:76:6f:f4:
60:2c:71:98:8a:5c:ae:c6:90:7a:3c:25:cc:d0:0a:
8e:6e:1e:01:7c:93:33:f1:b6:94:10:33:22:9b:cd:
9b:12:38:14:60:63:e6:d2:57:6b:1d:fc:6c:3b:4a:
ce:ce:50:e1:69:83:47:2a:b3:05:af:09:86:3c:d6:
ef:5c:9f:8f:9c:2f:1b:d9:95:09:58:47:58:c6:db:
07:0b:8e:d3:04:60:45:92:a3:54:01:04:88:da:22:
63:08:cc:bd:26:06:f2:11:a2:6a:ce:6a:82:33:36:
83:07:6e:d8:da:c5:e6:69:66:86:2e:bc:0a:a0:17:
c0:77:51:50:6f:68:3c:f3:c2:75:52:89:4c:4f:4a:
d7:d8:73:a7:ab:da:47:9b:1d:0a:ec:88:3d:26:68:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:39:1B:4F:E4:90:BD:33:6B:79:C4:01:6A:9C:1F:8C:CF:77:59
X509v3 Authority Key Identifier:
keyid:A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/Rxo5G0_kkL0za3nEAWqcH4zPd1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.22.0/23
Signature Algorithm: sha256WithRSAEncryption
24:c3:b1:8b:ce:a3:de:55:c5:d3:5b:f7:0d:19:59:07:54:fe:
f5:33:48:a0:36:49:11:5a:4e:d3:58:fc:34:5c:b1:9e:93:07:
2d:af:98:16:8b:96:ca:4d:7b:f1:0f:a8:1c:dd:9a:d1:8d:b4:
ef:5f:e6:cb:d8:14:42:2a:c0:27:8b:77:6d:40:4f:a3:b1:4a:
45:d1:2d:75:88:d8:3e:be:c3:34:b0:cc:29:da:f7:f5:c6:8a:
e5:fe:e5:61:4a:72:1a:ac:a4:18:c7:c4:59:9d:4d:67:26:77:
82:15:69:4a:23:89:28:d0:b1:59:ac:af:e6:3b:75:ff:a2:56:
2d:76:b1:03:a8:f8:53:a1:5c:f3:4b:11:7e:ed:7b:b8:49:5d:
2a:f5:59:0d:0a:2a:46:3b:96:bf:72:53:59:75:96:91:65:35:
02:f9:c1:e4:89:20:55:7f:ee:75:81:e6:bf:aa:56:0f:b7:fd:
a0:d7:97:7a:07:62:f2:a1:ef:13:6f:69:a9:c0:38:61:86:5c:
6f:52:fe:ea:e7:6d:35:f9:cf:09:59:ea:04:f8:c8:a7:0a:48:
2d:3f:0c:95:11:0b:95:f7:dc:c3:1a:af:f9:18:51:0d:05:8f:
7f:be:60:c6:36:d3:82:b7:6b:d2:36:09:a2:a8:82:2d:2a:20:
86:9d:6d:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzcZJIFksFfytH83U8EDa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3M2ZiNTA4YzhlYjNkMTM4YzUwNTU3NjllYzIxNDgzNjll
ODY5YmMwHhcNMjMwMTAyMTcwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFhMzkxYjRmZTQ5MGJkMzM2Yjc5YzQwMTZhOWMxZjhjY2Y3NzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUWMnAVqa+dsv7QKPgAxF2QEoNF9
o/QSMBzJrM+WPNRvdYlY4jgEpRd9k67YeMytvLnwCxRCYmjxOEV+0GSFUF3CbGVy
rolXuFbV9cUtjoNKUr07BdxNnt3CWLItUfaCAcKH9Up2b/RgLHGYilyuxpB6PCXM
0AqObh4BfJMz8baUEDMim82bEjgUYGPm0ldrHfxsO0rOzlDhaYNHKrMFrwmGPNbv
XJ+PnC8b2ZUJWEdYxtsHC47TBGBFkqNUAQSI2iJjCMy9JgbyEaJqzmqCMzaDB27Y
2sXmaWaGLrwKoBfAd1FQb2g888J1UolMT0rX2HOnq9pHmx0K7Ig9JmiDAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEcaORtP5JC9M2t5xAFqnB+Mz3dZMB8GA1UdIwQY
MBaAFKc/tQjI6z0TjFBVdp7CFINp6Gm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHotMUNNanJQUk9NVUZWMm5zSVVnMm5vYWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82N2EwYjktZTE2Yy00ZDIyLWI5ZDAt
MDM3ZTk5ZjFhNmFiLzEvUnhvNUcwX2trTDB6YTNuRUFXcWNINHpQZDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82N2EwYjktZTE2Yy00ZDIyLWI5ZDAtMDM3ZTk5ZjFhNmFi
LzEvcHotMUNNanJQUk9NVUZWMm5zSVVnMm5vYWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpMWMA0G
CSqGSIb3DQEBCwUAA4IBAQAkw7GLzqPeVcXTW/cNGVkHVP71M0igNkkRWk7TWPw0
XLGekwctr5gWi5bKTXvxD6gc3ZrRjbTvX+bL2BRCKsAni3dtQE+jsUpF0S11iNg+
vsM0sMwp2vf1xorl/uVhSnIarKQYx8RZnU1nJneCFWlKI4ko0LFZrK/mO3X/olYt
drEDqPhToVzzSxF+7Xu4SV0q9VkNCipGO5a/clNZdZaRZTUC+cHkiSBVf+51gea/
qlYPt/2g15d6B2Lyoe8Tb2mpwDhhhlxvUv7q5201+c8JWeoE+MinCkgtPwyVEQuV
99zDGq/5GFENBY9/vmDGNtOCt2vSNgmiqIItKiCGnW0Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:20 2024 by rpki-client on console-ams.rpki-client.org