Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa
File: xj73gop0nXzrZ0nteEm8_9Gl0_o.roa (raw, json)
Hash identifier: i3rpnxykw4VTLM3brCLfbs66ov5O98pIiuthEHguD5U=
Subject key identifier: C6:3E:F7:82:8A:74:9D:7C:EB:67:49:ED:78:49:BC:FF:D1:A5:D3:FA
Certificate issuer: /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial: 041C69
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa
Signing time: Thu 03 Feb 2022 16:40:53 +0000
ROA not before: Thu 03 Feb 2022 16:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209982
IP address blocks: 193.163.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269417 (0x41c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
Validity
Not Before: Feb 3 16:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c63ef7828a749d7ceb6749ed7849bcffd1a5d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:a9:37:5b:55:52:bc:51:03:f4:19:9c:f6:
01:85:4b:3d:30:38:9d:fe:3f:7f:db:93:ea:2b:fa:
af:18:83:7c:54:da:2e:32:ea:2b:96:2f:ab:5a:d0:
57:cf:38:b3:9f:4a:b5:32:65:74:11:bc:34:68:10:
61:f0:12:ad:f9:88:c2:c4:ca:87:22:bf:ea:71:56:
a3:d0:be:99:de:bb:bd:78:88:d1:82:ec:13:c5:f9:
ca:6a:2d:39:41:28:b0:c7:a3:af:8b:57:48:39:e6:
38:94:af:8d:d6:7a:f4:5d:58:4c:06:69:a4:8c:bb:
47:77:18:45:a0:35:c3:97:6e:bb:24:b0:72:c9:cc:
25:af:e6:c5:cf:7e:60:48:33:61:f2:41:ae:e3:46:
83:2e:6f:f5:9a:97:dd:ad:1f:ab:32:47:0b:1a:7a:
36:ec:69:a0:67:1f:04:9d:7b:29:0d:23:aa:3f:f4:
9c:fe:44:9a:fd:21:41:d8:db:9c:21:a0:87:91:37:
fd:38:0d:e5:6e:e7:ce:cf:46:06:31:19:dc:54:0c:
c3:28:c2:23:39:08:88:d0:05:f7:f9:d0:33:df:c1:
26:a9:7f:79:04:dc:da:46:ff:1e:e5:28:eb:c9:c2:
61:23:21:60:d8:bf:f1:a5:21:33:8d:20:34:3b:0f:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:F7:82:8A:74:9D:7C:EB:67:49:ED:78:49:BC:FF:D1:A5:D3:FA
X509v3 Authority Key Identifier:
keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/xj73gop0nXzrZ0nteEm8_9Gl0_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:43:06:1b:f8:13:2c:bd:92:b0:8b:36:5e:aa:58:e0:27:97:
be:4d:cc:b6:2d:04:96:8e:65:3e:f9:0c:01:c0:d4:49:af:8d:
d2:3a:a1:f5:12:d3:40:ed:07:ec:07:78:be:fe:39:81:c2:96:
59:8c:8f:aa:01:79:dc:3d:0b:7b:8f:9c:95:90:cc:65:13:eb:
28:ad:1e:e2:89:5e:c1:e1:01:2f:b6:69:74:f2:05:22:2a:98:
05:f0:8d:f5:97:f3:90:2a:c8:fa:0a:cf:a8:ca:9d:e9:2a:cd:
0b:d3:32:01:4c:1b:da:2d:ee:1a:32:39:9d:4c:84:fb:79:91:
d9:a6:8b:4c:9f:17:e1:2b:05:2e:15:fd:6f:93:66:31:0e:a1:
64:d8:a4:72:0f:f2:6c:6b:be:c2:3b:e5:51:54:9b:2a:74:b3:
54:1c:14:b3:b5:3e:ec:3e:26:47:84:c7:12:73:44:79:8f:9d:
aa:80:1c:89:8f:a0:b8:38:20:7d:05:b7:3e:71:75:4b:c5:fa:
e6:d8:85:00:fb:89:81:9a:43:2f:67:2d:31:f5:a9:76:9a:ac:
51:f8:f9:f1:de:0a:76:fc:25:4b:b8:d7:84:1e:aa:57:bd:e7:
35:27:31:f3:d3:9a:c4:76:d6:6c:73:0b:60:71:3e:3a:f0:b7:
df:b5:3e:ae
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDBBxpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2
NzJiZTBhMTc0YzZhOTM3M2MyNTA5YmE4ZmIxNDYyNjBiMDQ0MzAwHhcNMjIwMjAz
MTY0MDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNjNlZjc4MjhhNzQ5
ZDdjZWI2NzQ5ZWQ3ODQ5YmNmZmQxYTVkM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApnipN1tVUrxRA/QZnPYBhUs9MDid/j9/25PqK/qvGIN8VNou
Muorli+rWtBXzzizn0q1MmV0Ebw0aBBh8BKt+YjCxMqHIr/qcVaj0L6Z3ru9eIjR
guwTxfnKai05QSiwx6Ovi1dIOeY4lK+N1nr0XVhMBmmkjLtHdxhFoDXDl267JLBy
ycwlr+bFz35gSDNh8kGu40aDLm/1mpfdrR+rMkcLGno27GmgZx8EnXspDSOqP/Sc
/kSa/SFB2NucIaCHkTf9OA3lbufOz0YGMRncVAzDKMIjOQiI0AX3+dAz38EmqX95
BNzaRv8e5SjrycJhIyFg2L/xpSEzjSA0Ow8M9wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMY+94KKdJ1862dJ7XhJvP/RpdP6MB8GA1UdIwQYMBaAFAZyvgoXTGqTc8JQ
m6j7FGJgsEQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Qm5LLUNoZE1hcE56d2xDYnFQc1VZbUN3UkRBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yMS8zODgyZDEtNzI2NC00Y2Y1LTg2NzktY2I5OGE3YjRkZGY2LzEv
eGo3M2dvcDBuWHpyWjBudGVFbThfOUdsMF9vLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8z
ODgyZDEtNzI2NC00Y2Y1LTg2NzktY2I5OGE3YjRkZGY2LzEvQm5LLUNoZE1hcE56
d2xDYnFQc1VZbUN3UkRBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMtMA0GCSqGSIb3DQEBCwUAA4IB
AQCrQwYb+BMsvZKwizZeqljgJ5e+Tcy2LQSWjmU++QwBwNRJr43SOqH1EtNA7Qfs
B3i+/jmBwpZZjI+qAXncPQt7j5yVkMxlE+sorR7iiV7B4QEvtml08gUiKpgF8I31
l/OQKsj6Cs+oyp3pKs0L0zIBTBvaLe4aMjmdTIT7eZHZpotMnxfhKwUuFf1vk2Yx
DqFk2KRyD/Jsa77CO+VRVJsqdLNUHBSztT7sPiZHhMcSc0R5j52qgByJj6C4OCB9
Bbc+cXVLxfrm2IUA+4mBmkMvZy0x9al2mqxR+Pnx3gp2/CVLuNeEHqpXvec1JzHz
05rEdtZscwtgcT468LfftT6u
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-ams.rpki-client.org