Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/uYipBMwbX3Ye6NtHwbOzqxPvu90.roa
File: uYipBMwbX3Ye6NtHwbOzqxPvu90.roa (raw, json)
Hash identifier: 7bEAbl8fYZwR8LX0J6BZWT2UM6Q/Vj2JC17fmh8wQyY=
Subject key identifier: B9:88:A9:04:CC:1B:5F:76:1E:E8:DB:47:C1:B3:B3:AB:13:EF:BB:DD
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 01DBC9E4
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/uYipBMwbX3Ye6NtHwbOzqxPvu90.roa
Signing time: Fri 08 Apr 2022 16:22:41 +0000
ROA not before: Fri 08 Apr 2022 16:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210761
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31181284 (0x1dbc9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Apr 8 16:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b988a904cc1b5f761ee8db47c1b3b3ab13efbbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:85:25:49:bf:51:24:77:06:b7:7a:57:f8:
9c:78:fa:56:94:0e:3e:1a:ac:00:b0:a5:9b:9c:85:
ff:74:db:42:70:6d:33:ec:72:e5:2d:8a:df:97:3e:
cd:19:82:53:4d:1b:68:fe:64:36:8e:3d:4a:00:85:
d5:02:93:71:46:f3:c7:24:69:bd:b0:96:3a:54:6c:
5b:bc:bd:db:f8:c3:26:89:35:16:bb:7e:9f:24:16:
bb:4a:73:f3:e9:ab:82:95:3b:55:d3:54:9e:b5:06:
91:55:ca:0f:f3:92:86:ec:d1:e1:d2:da:af:91:87:
bc:2c:5b:0f:b7:f2:2c:47:37:ea:2a:7b:c1:d1:be:
ab:25:34:c2:54:59:a5:89:81:70:1c:84:d4:80:84:
49:ba:ea:43:b9:4b:35:fe:e1:32:ce:c7:f7:97:92:
d5:67:bd:97:4c:f1:4e:9f:8f:26:d0:af:d8:77:5a:
07:7a:39:a9:fd:9b:94:5e:6a:da:1c:c0:e9:b1:c8:
3e:be:c3:87:5c:96:aa:b5:b4:c1:aa:05:73:4d:c7:
e4:ac:19:90:ae:46:22:cb:b8:ef:06:b7:c6:ee:a0:
7c:20:bf:0e:62:55:b1:71:e1:01:c3:40:01:02:44:
9d:51:8d:9b:87:4a:ff:a4:c0:0e:cd:09:85:72:b0:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:A9:04:CC:1B:5F:76:1E:E8:DB:47:C1:B3:B3:AB:13:EF:BB:DD
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/uYipBMwbX3Ye6NtHwbOzqxPvu90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
9d:14:39:d3:8c:ac:69:69:c2:2e:fe:39:5b:8b:72:b4:c3:ec:
3d:01:f9:c5:95:d7:5c:fc:60:63:c5:39:eb:72:aa:1a:7a:65:
05:ea:65:90:75:ff:17:47:26:e0:0f:ac:0e:24:8c:e2:3e:95:
f1:3c:16:4f:1a:fa:cc:5e:6b:29:f6:a2:bd:b8:27:da:86:b2:
06:28:93:ab:27:a1:ce:2a:eb:7c:3f:20:d2:a3:a8:45:36:cb:
ef:80:59:6d:21:a7:1c:a0:6c:e2:c0:6d:f5:85:d1:1b:55:98:
f6:ed:de:2d:14:0c:36:85:2b:98:c3:6a:7b:bb:6c:e0:00:3e:
28:5c:28:6d:70:c0:14:1a:d7:d9:e7:94:cf:0a:44:eb:bc:8b:
fe:02:91:bf:97:00:1b:16:d0:05:a3:e2:89:b0:4b:7d:7b:c5:
3e:04:dd:08:ee:02:ce:da:5b:ab:e2:7e:41:ab:88:ab:8c:88:
dd:38:97:07:6e:7c:7f:0d:8a:7d:28:67:0a:85:df:ba:75:67:
58:93:9c:d1:d8:57:8f:db:2c:f3:08:7c:9d:54:aa:05:8a:fc:
b6:36:16:e8:dd:28:a6:f8:9d:d1:c4:ce:79:1a:a3:4a:3c:d9:
b2:ff:74:11:80:be:99:6a:26:42:1e:52:d7:b2:e2:1c:35:bd:
76:c6:6c:4e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEAdvJ5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NjliMzViMDg0NjA4Y2QxYzI1OTRiYmFhNWU0NjkzNzYwMDUwMDM3MB4XDTIyMDQw
ODE2MjI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjk4OGE5MDRjYzFi
NWY3NjFlZThkYjQ3YzFiM2IzYWIxM2VmYmJkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKIhSVJv1Ekdwa3elf4nHj6VpQOPhqsALClm5yF/3TbQnBt
M+xy5S2K35c+zRmCU00baP5kNo49SgCF1QKTcUbzxyRpvbCWOlRsW7y92/jDJok1
Frt+nyQWu0pz8+mrgpU7VdNUnrUGkVXKD/OShuzR4dLar5GHvCxbD7fyLEc36ip7
wdG+qyU0wlRZpYmBcByE1ICESbrqQ7lLNf7hMs7H95eS1We9l0zxTp+PJtCv2Hda
B3o5qf2blF5q2hzA6bHIPr7Dh1yWqrW0waoFc03H5KwZkK5GIsu47wa3xu6gfCC/
DmJVsXHhAcNAAQJEnVGNm4dK/6TADs0JhXKwNiUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBS5iKkEzBtfdh7o20fBs7OrE++73TAfBgNVHSMEGDAWgBT2mzWwhGCM0cJZ
S7ql5Gk3YAUANzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlwczFzSVJnak5IQ1dVdTZwZVJwTjJBRkFEYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvNmQzOGVlLTBjYTYtNGUxZi05YTg3LTY0NTA5ODUxMjlhYS8x
L3VZaXBCTXdiWDNZZTZOdEh3Yk96cXhQdnU5MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
NmQzOGVlLTBjYTYtNGUxZi05YTg3LTY0NTA5ODUxMjlhYS8xLzlwczFzSVJnak5I
Q1dVdTZwZVJwTjJBRkFEYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAUC70AMEAFvBcjANBAIAAjAHAwUD
KgajQDANBgkqhkiG9w0BAQsFAAOCAQEAnRQ504ysaWnCLv45W4tytMPsPQH5xZXX
XPxgY8U563KqGnplBeplkHX/F0cm4A+sDiSM4j6V8TwWTxr6zF5rKfaivbgn2oay
BiiTqyehzirrfD8g0qOoRTbL74BZbSGnHKBs4sBt9YXRG1WY9u3eLRQMNoUrmMNq
e7ts4AA+KFwobXDAFBrX2eeUzwpE67yL/gKRv5cAGxbQBaPiibBLfXvFPgTdCO4C
ztpbq+J+QauIq4yI3TiXB258fw2KfShnCoXfunVnWJOc0dhXj9ss8wh8nVSqBYr8
tjYW6N0opvid0cTOeRqjSjzZsv90EYC+mWomQh5S17LiHDW9dsZsTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org