Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/ircH2xB7n-V_ADkWziFpXJ7awcM.roa
File: ircH2xB7n-V_ADkWziFpXJ7awcM.roa (raw, json)
Hash identifier: rcI1an4oqWi9dLU8lSj56reV7hgVd0UsapdvvLyn6dc=
Subject key identifier: 8A:B7:07:DB:10:7B:9F:E5:7F:00:39:16:CE:21:69:5C:9E:DA:C1:C3
Certificate issuer: /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial: 01837AB0C6273BA66145ABAE7B5805030CA7
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/ircH2xB7n-V_ADkWziFpXJ7awcM.roa
Signing time: Mon 26 Sep 2022 16:45:48 +0000
ROA not before: Mon 26 Sep 2022 16:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209982
IP address blocks: 193.163.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:b0:c6:27:3b:a6:61:45:ab:ae:7b:58:05:03:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
Validity
Not Before: Sep 26 16:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab707db107b9fe57f003916ce21695c9edac1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:81:00:33:4c:ca:a7:aa:f2:a6:c1:16:b8:
e6:a7:1c:ff:82:10:d9:df:23:22:d9:e4:09:d5:99:
a2:5f:82:0a:bc:2a:ef:6f:9d:a8:92:50:61:1a:0e:
7f:1b:3c:3e:47:a6:b3:bd:85:bc:bd:32:fa:d7:58:
27:e5:9d:7b:de:73:18:1f:47:f1:63:59:fc:10:a6:
ec:c7:6a:e6:a2:f7:b5:67:73:1c:70:fe:5c:0c:a8:
d3:88:8c:05:0a:46:aa:9c:5d:c3:c9:df:95:19:89:
23:a2:c1:f8:5d:1d:df:2e:5c:59:7f:a8:87:e9:08:
15:45:8b:2d:f6:29:6b:32:0b:3c:83:24:be:ee:15:
55:54:b8:b0:36:ef:a8:35:0a:14:a9:70:3f:1d:45:
db:27:d4:08:a0:e8:4a:dc:38:fa:32:44:94:d1:b2:
c5:da:f7:35:0e:fa:c6:54:c9:c4:ed:1f:ed:ad:32:
f8:b0:0a:0b:32:2c:a8:40:69:ed:e9:1b:96:46:be:
9f:a4:32:07:39:04:f8:b2:fa:d7:25:85:6b:6c:d5:
a6:82:8e:10:d7:f6:90:e0:e2:d6:a9:05:19:c0:6d:
07:cb:74:0d:11:5e:80:0e:b0:1b:f4:aa:cc:01:a8:
e5:ac:42:ca:b0:da:f2:3d:2f:a0:37:a3:6b:1e:8e:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:07:DB:10:7B:9F:E5:7F:00:39:16:CE:21:69:5C:9E:DA:C1:C3
X509v3 Authority Key Identifier:
keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/ircH2xB7n-V_ADkWziFpXJ7awcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:45:7d:15:6b:b6:1e:74:f8:69:55:8f:6c:e6:b4:98:36:fb:
46:59:f2:dc:ef:d1:3c:dc:fb:a1:c5:04:e2:d5:ba:b7:09:89:
b2:23:6b:16:11:e8:b0:f6:7f:89:9b:74:d1:d4:82:2c:2e:a4:
53:d9:4d:09:45:4d:42:51:59:1c:9d:6c:ec:39:ea:2a:f9:e2:
3e:40:2d:7c:ae:cd:bd:6a:3e:1d:4c:43:6e:d1:99:82:08:2f:
99:92:be:2d:88:56:91:ae:a6:63:2e:4e:e7:f7:83:be:c1:e0:
4a:a9:26:18:9c:d0:19:62:bc:4e:75:d7:79:5d:5b:14:21:f0:
22:50:87:65:58:f3:2c:e8:a5:61:53:04:04:c8:c5:8a:40:b9:
23:47:ed:e1:ef:79:68:8c:8c:88:58:8b:79:56:e7:d2:64:af:
e4:94:a8:d9:e8:5e:4e:23:b5:f7:f3:2f:82:8b:38:40:7f:f2:
be:7d:9c:3f:77:cf:ed:04:2b:6d:2d:ca:ff:d1:4b:b3:08:e4:
64:fa:98:65:f5:f5:36:49:2d:86:13:67:d9:c8:cf:f7:8a:8a:
3f:4a:a5:03:c4:e3:fb:88:a9:82:ee:85:99:74:6d:d3:a4:7d:
28:23:55:9e:09:ec:9c:7f:8a:e0:3b:93:87:82:73:d3:d5:9c:
e9:3a:dd:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN6sMYnO6ZhRauue1gFAwynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzJiZTBhMTc0YzZhOTM3M2MyNTA5YmE4ZmIxNDYyNjBi
MDQ0MzAwHhcNMjIwOTI2MTY0NTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWI3MDdkYjEwN2I5ZmU1N2YwMDM5MTZjZTIxNjk1YzllZGFjMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9yBADNMyqeq8qbBFrjmpxz/ghDZ
3yMi2eQJ1ZmiX4IKvCrvb52oklBhGg5/Gzw+R6azvYW8vTL611gn5Z173nMYH0fx
Y1n8EKbsx2rmove1Z3MccP5cDKjTiIwFCkaqnF3Dyd+VGYkjosH4XR3fLlxZf6iH
6QgVRYst9ilrMgs8gyS+7hVVVLiwNu+oNQoUqXA/HUXbJ9QIoOhK3Dj6MkSU0bLF
2vc1DvrGVMnE7R/trTL4sAoLMiyoQGnt6RuWRr6fpDIHOQT4svrXJYVrbNWmgo4Q
1/aQ4OLWqQUZwG0Hy3QNEV6ADrAb9KrMAajlrELKsNryPS+gN6NrHo5z1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIq3B9sQe5/lfwA5Fs4haVye2sHDMB8GA1UdIwQY
MBaAFAZyvgoXTGqTc8JQm6j7FGJgsEQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5LLUNoZE1hcE56d2xDYnFQc1VZbUN3UkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zODgyZDEtNzI2NC00Y2Y1LTg2Nzkt
Y2I5OGE3YjRkZGY2LzEvaXJjSDJ4QjduLVZfQURrV3ppRnBYSjdhd2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zODgyZDEtNzI2NC00Y2Y1LTg2NzktY2I5OGE3YjRkZGY2
LzEvQm5LLUNoZE1hcE56d2xDYnFQc1VZbUN3UkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMtMA0G
CSqGSIb3DQEBCwUAA4IBAQCnRX0Va7YedPhpVY9s5rSYNvtGWfLc79E83PuhxQTi
1bq3CYmyI2sWEeiw9n+Jm3TR1IIsLqRT2U0JRU1CUVkcnWzsOeoq+eI+QC18rs29
aj4dTENu0ZmCCC+Zkr4tiFaRrqZjLk7n94O+weBKqSYYnNAZYrxOddd5XVsUIfAi
UIdlWPMs6KVhUwQEyMWKQLkjR+3h73lojIyIWIt5VufSZK/klKjZ6F5OI7X38y+C
izhAf/K+fZw/d8/tBCttLcr/0UuzCORk+phl9fU2SS2GE2fZyM/3ioo/SqUDxOP7
iKmC7oWZdG3TpH0oI1WeCeycf4rgO5OHgnPT1ZzpOt3q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:11 2023 by rpki-client on console-fra.rpki-client.org