Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/Lbptm5rV1roqZ5Fhc4YhOupRvTo.roa
File: Lbptm5rV1roqZ5Fhc4YhOupRvTo.roa (raw, json)
Hash identifier: /iA/2GIwv9KJgxo+XWwjdPuXbq3iLnnwB1nVwd/yZig=
Subject key identifier: 2D:BA:6D:9B:9A:D5:D6:BA:2A:67:91:61:73:86:21:3A:EA:51:BD:3A
Certificate issuer: /CN=8c9b33abf5c3e94d48435792703eed71a4e29995
Certificate serial: 018964C13ACEAAE4A76094D2E80DC497DED1
Authority key identifier: 8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/Lbptm5rV1roqZ5Fhc4YhOupRvTo.roa
Signing time: Mon 17 Jul 2023 16:48:52 +0000
ROA not before: Mon 17 Jul 2023 16:48:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 217.8.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c1:3a:ce:aa:e4:a7:60:94:d2:e8:0d:c4:97:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9b33abf5c3e94d48435792703eed71a4e29995
Validity
Not Before: Jul 17 16:48:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dba6d9b9ad5d6ba2a6791617386213aea51bd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:6e:06:32:57:dc:3a:1d:4e:28:0d:a6:98:
fd:12:d0:1f:d5:c1:50:08:da:fe:90:83:5d:d3:60:
80:d7:03:ca:61:0d:67:54:8c:af:b1:ca:06:8d:b9:
46:6d:ea:91:83:29:d4:1f:ff:7f:cf:53:c0:05:12:
be:3b:ce:76:37:e1:e5:a5:e4:92:a3:e3:f8:e1:2b:
91:c5:22:9d:ee:0e:27:67:8f:9d:8d:93:6d:c3:e8:
ca:26:69:14:41:bd:9e:9f:9c:6e:48:5d:2e:31:6a:
4b:57:71:61:09:4e:c2:ec:1b:b3:0c:fc:f8:3d:d5:
a6:26:7d:78:08:4b:ae:8f:7c:d3:a0:44:81:98:71:
0d:48:78:a9:2d:65:37:37:92:d7:74:ff:19:e6:40:
11:66:f4:d6:74:3d:99:fc:52:cd:52:3e:c1:da:68:
e2:c3:a7:33:4e:6a:c7:45:03:a6:21:f6:3b:32:c0:
17:e4:13:eb:0a:40:ca:50:3e:b9:c9:fb:3f:76:7c:
be:fa:0f:57:e0:0e:19:d4:1a:cd:e1:cd:10:f5:52:
66:e5:2b:02:a7:6d:fb:3c:00:b4:29:a0:e1:d2:04:
e8:b9:ce:54:e9:3d:87:87:17:da:a4:05:9b:46:5d:
53:cc:3c:3d:d6:e6:aa:85:54:a4:1c:dc:49:18:72:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BA:6D:9B:9A:D5:D6:BA:2A:67:91:61:73:86:21:3A:EA:51:BD:3A
X509v3 Authority Key Identifier:
keyid:8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/Lbptm5rV1roqZ5Fhc4YhOupRvTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ec:0e:73:7e:6a:e5:98:b1:b8:e6:1a:1b:5b:f7:a3:50:9f:
ad:a9:2c:9d:02:4b:8a:ef:1b:65:97:5f:12:7b:a4:74:f6:94:
ec:3a:e2:e2:dc:9f:8d:fb:f1:bb:d4:87:a0:83:93:b6:62:2f:
ae:e6:39:e9:ca:03:2a:e1:f5:23:d7:8c:59:d1:c5:fb:68:90:
54:31:e0:1b:45:ab:51:d9:ca:6e:1e:29:f1:31:db:17:f5:0d:
d2:e4:53:4e:7f:e9:3c:51:b3:42:c8:73:a5:8a:fa:0d:04:c5:
7b:68:e5:ad:1b:ce:0e:e1:4e:ca:90:11:64:20:f2:22:88:fc:
9c:64:0a:ab:77:fb:3b:0d:74:ae:58:c4:ab:a1:9a:e2:53:10:
ff:17:92:2d:df:3d:71:2b:4f:bc:22:5c:6b:f8:21:f0:84:be:
12:54:d6:7c:4f:9d:b5:ab:91:7c:12:3e:64:3c:5b:0c:15:f7:
e7:8b:37:c8:46:0e:d6:1e:2d:e2:a3:e5:a7:ee:0b:f5:c5:e3:
11:10:b3:52:f0:55:3a:2f:f7:12:a9:dc:04:55:b7:d4:36:ba:
de:e3:72:47:ab:76:61:72:32:62:d5:a4:2d:a7:33:80:bd:67:
00:4a:4e:34:ef:0b:20:2e:4e:50:09:ef:56:e6:84:90:78:69:
ad:ee:ae:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwTrOquSnYJTS6A3El97RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWIzM2FiZjVjM2U5NGQ0ODQzNTc5MjcwM2VlZDcxYTRl
Mjk5OTUwHhcNMjMwNzE3MTY0ODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGJhNmQ5YjlhZDVkNmJhMmE2NzkxNjE3Mzg2MjEzYWVhNTFiZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqluBjJX3DodTigNppj9EtAf1cFQ
CNr+kINd02CA1wPKYQ1nVIyvscoGjblGbeqRgynUH/9/z1PABRK+O852N+HlpeSS
o+P44SuRxSKd7g4nZ4+djZNtw+jKJmkUQb2en5xuSF0uMWpLV3FhCU7C7BuzDPz4
PdWmJn14CEuuj3zToESBmHENSHipLWU3N5LXdP8Z5kARZvTWdD2Z/FLNUj7B2mji
w6czTmrHRQOmIfY7MsAX5BPrCkDKUD65yfs/dny++g9X4A4Z1BrN4c0Q9VJm5SsC
p237PAC0KaDh0gTouc5U6T2HhxfapAWbRl1TzDw91uaqhVSkHNxJGHLajwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC26bZua1da6KmeRYXOGITrqUb06MB8GA1UdIwQY
MBaAFIybM6v1w+lNSENXknA+7XGk4pmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpzenFfWEQ2VTFJUTFlU2NEN3RjYVRpbVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS84NjZiYzctNTcwMy00NzYwLWI5ZDQt
MmU0ZWY2ODc5MjM4LzEvTGJwdG01clYxcm9xWjVGaGM0WWhPdXBSdlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS84NjZiYzctNTcwMy00NzYwLWI5ZDQtMmU0ZWY2ODc5MjM4
LzEvakpzenFfWEQ2VTFJUTFlU2NEN3RjYVRpbVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Qh1MA0G
CSqGSIb3DQEBCwUAA4IBAQBU7A5zfmrlmLG45hobW/ejUJ+tqSydAkuK7xtll18S
e6R09pTsOuLi3J+N+/G71Iegg5O2Yi+u5jnpygMq4fUj14xZ0cX7aJBUMeAbRatR
2cpuHinxMdsX9Q3S5FNOf+k8UbNCyHOlivoNBMV7aOWtG84O4U7KkBFkIPIiiPyc
ZAqrd/s7DXSuWMSroZriUxD/F5It3z1xK0+8Ilxr+CHwhL4SVNZ8T521q5F8Ej5k
PFsMFffnizfIRg7WHi3io+Wn7gv1xeMRELNS8FU6L/cSqdwEVbfUNrre43JHq3Zh
cjJi1aQtpzOAvWcASk407wsgLk5QCe9W5oSQeGmt7q4S
-----END CERTIFICATE-----
Generated at Tue Dec 5 15:08:39 2023 by rpki-client on console-ams.rpki-client.org