Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/vLq822V91fCyZ7P8gWkerNM4PKw.roa
File: vLq822V91fCyZ7P8gWkerNM4PKw.roa (raw, json)
Hash identifier: d8nLSoWf0+LX6mqa080m02F7oXPpZ2uqNEgJiVjlTWE=
Subject key identifier: BC:BA:BC:DB:65:7D:D5:F0:B2:67:B3:FC:81:69:1E:AC:D3:38:3C:AC
Certificate issuer: /CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Certificate serial: 018B6BF05AEF20E935741EA2FB9FA6981A40
Authority key identifier: D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/vLq822V91fCyZ7P8gWkerNM4PKw.roa
Signing time: Thu 26 Oct 2023 12:23:15 +0000
ROA not before: Thu 26 Oct 2023 12:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212147
IP address blocks: 194.26.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:f0:5a:ef:20:e9:35:74:1e:a2:fb:9f:a6:98:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Validity
Not Before: Oct 26 12:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcbabcdb657dd5f0b267b3fc81691eacd3383cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:92:2d:35:0d:02:94:0a:e6:69:44:50:de:
4f:db:a6:e5:68:6a:4d:c4:02:c7:e0:12:7b:44:94:
d0:0d:28:88:bb:34:82:74:af:b5:ac:64:b6:0c:9a:
7d:41:75:4d:70:87:0e:42:4e:74:6f:10:ee:89:5a:
2d:b6:62:bd:01:c2:4d:71:62:8b:4c:d1:b0:bf:71:
ee:90:7f:07:85:74:7e:fe:eb:6f:ca:4c:51:22:3e:
0b:e4:f8:fd:a6:1a:25:ff:82:09:1d:81:c9:ed:57:
62:c0:12:4d:07:df:01:5d:65:65:0f:e0:2e:ed:43:
9f:52:f8:5b:aa:85:61:82:e4:cc:a4:87:72:2e:18:
dc:9f:76:e7:e1:b8:ad:af:bd:fe:76:68:36:87:44:
8f:8c:2f:a4:e9:0d:b5:5f:46:2b:ba:d2:54:d5:aa:
c3:b9:1d:a4:6e:ee:5a:66:8e:37:73:a5:a7:69:d3:
fa:fe:d5:bd:d3:86:08:3a:ff:5a:0b:e9:f4:b4:91:
79:bc:df:87:8c:4b:75:20:85:f9:4c:ed:92:a7:1a:
b7:12:77:7f:08:83:08:74:93:aa:63:96:70:6f:6e:
f2:1c:a9:86:80:75:d2:23:dd:09:f1:5b:02:fe:88:
86:d2:0f:3d:62:e3:be:31:84:51:75:ff:e6:42:66:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:BC:DB:65:7D:D5:F0:B2:67:B3:FC:81:69:1E:AC:D3:38:3C:AC
X509v3 Authority Key Identifier:
keyid:D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/vLq822V91fCyZ7P8gWkerNM4PKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.137.0/24
Signature Algorithm: sha256WithRSAEncryption
49:be:40:f3:c1:67:27:44:36:d2:90:d1:d2:9c:a2:f1:4e:78:
b5:83:88:92:b6:d0:2c:b7:68:00:00:b6:f1:91:70:a8:3d:fd:
5b:1e:0c:47:20:a8:ff:7f:69:fc:3e:4b:3f:4a:eb:4d:99:28:
6b:06:a1:8d:1d:a9:27:dd:dc:6c:97:ee:3a:b1:04:d3:93:e9:
df:84:77:9a:8a:48:4e:cb:c1:6a:39:82:fa:51:01:49:43:cb:
6b:aa:ec:a0:44:0b:fe:ae:24:a8:66:d3:98:ba:e9:20:15:0b:
a1:e5:65:f9:c4:5b:30:08:db:9e:76:c1:82:ee:b3:13:27:ac:
05:f9:a4:95:3c:bc:be:e3:ac:1a:0b:77:49:0c:ca:7a:32:1e:
0b:0a:5b:6d:cb:93:c8:af:64:d4:6b:03:2b:bb:47:2c:80:4b:
85:f1:d6:43:61:fb:80:b1:31:4f:78:0b:6c:c7:96:ca:33:09:
97:07:dd:4d:03:44:28:33:5c:cc:87:cc:57:b8:bb:14:07:00:
14:d9:4e:45:78:5c:63:51:9a:46:8c:da:b7:24:a6:e1:ad:f1:
d8:05:62:af:20:5d:38:60:25:dd:23:24:31:b0:19:31:9a:84:
80:58:99:6a:dc:f8:af:19:02:08:95:8c:ff:46:4c:14:9d:79:
92:c3:4a:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtr8FrvIOk1dB6i+5+mmBpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDYyZTRjYzI2ZjJkZjc2ZWYzMDhjZTdhNmUzYzgzNDRj
OWQwMzEwHhcNMjMxMDI2MTIyMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2JhYmNkYjY1N2RkNWYwYjI2N2IzZmM4MTY5MWVhY2QzMzgzY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheSSLTUNApQK5mlEUN5P26blaGpN
xALH4BJ7RJTQDSiIuzSCdK+1rGS2DJp9QXVNcIcOQk50bxDuiVottmK9AcJNcWKL
TNGwv3HukH8HhXR+/utvykxRIj4L5Pj9phol/4IJHYHJ7VdiwBJNB98BXWVlD+Au
7UOfUvhbqoVhguTMpIdyLhjcn3bn4bitr73+dmg2h0SPjC+k6Q21X0YrutJU1arD
uR2kbu5aZo43c6WnadP6/tW904YIOv9aC+n0tJF5vN+HjEt1IIX5TO2Spxq3End/
CIMIdJOqY5Zwb27yHKmGgHXSI90J8VsC/oiG0g89YuO+MYRRdf/mQmaUfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLy6vNtlfdXwsmez/IFpHqzTODysMB8GA1UdIwQY
MBaAFNgGLkzCby33bvMIznpuPINEydAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFZdVRNSnZMZmR1OHdqT2VtNDhnMFRKMERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Nzc0YjUtNTcxMC00ZTMyLTk4NTAt
NGUyNjVkODk2NWVhLzEvdkxxODIyVjkxZkN5WjdQOGdXa2VyTk00UEt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84Nzc0YjUtNTcxMC00ZTMyLTk4NTAtNGUyNjVkODk2NWVh
LzEvMkFZdVRNSnZMZmR1OHdqT2VtNDhnMFRKMERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhqJMA0G
CSqGSIb3DQEBCwUAA4IBAQBJvkDzwWcnRDbSkNHSnKLxTni1g4iSttAst2gAALbx
kXCoPf1bHgxHIKj/f2n8Pks/SutNmShrBqGNHakn3dxsl+46sQTTk+nfhHeaikhO
y8FqOYL6UQFJQ8trquygRAv+riSoZtOYuukgFQuh5WX5xFswCNuedsGC7rMTJ6wF
+aSVPLy+46waC3dJDMp6Mh4LCltty5PIr2TUawMru0csgEuF8dZDYfuAsTFPeAts
x5bKMwmXB91NA0QoM1zMh8xXuLsUBwAU2U5FeFxjUZpGjNq3JKbhrfHYBWKvIF04
YCXdIyQxsBkxmoSAWJlq3PivGQIIlYz/RkwUnXmSw0oO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org