Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0xxTYVzu0FN_cXglKmATVW9OUZA.roa
File: 0xxTYVzu0FN_cXglKmATVW9OUZA.roa (raw, json)
Hash identifier: jxd0CT3vMJrO2ObRoFMpTGy2utxESvoQRx4uW5hfKos=
Subject key identifier: D3:1C:53:61:5C:EE:D0:53:7F:71:78:25:2A:60:13:55:6F:4E:51:90
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0408F3F3
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0xxTYVzu0FN_cXglKmATVW9OUZA.roa
Signing time: Mon 28 Mar 2022 16:21:01 +0000
ROA not before: Mon 28 Mar 2022 16:21:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 193.164.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67695603 (0x408f3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 28 16:21:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d31c53615ceed0537f7178252a6013556f4e5190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:28:93:1d:a2:20:39:ba:91:28:b0:10:89:
93:26:77:06:fb:2b:71:9c:96:44:37:2c:a6:6e:54:
13:af:ea:bf:96:64:f7:c8:74:9d:02:4c:ad:2d:43:
9b:47:6e:7e:b8:e0:8f:d3:4a:5d:b5:90:b6:ca:47:
31:5b:16:82:98:8f:cd:88:89:ed:34:02:51:31:ea:
5f:c5:8f:19:8e:61:9f:92:ae:f4:1d:ed:ee:50:94:
f8:b3:b8:20:6a:b5:01:e2:6f:c8:c5:87:a8:87:95:
48:b3:05:cb:96:7f:50:c7:41:be:a7:c1:14:3a:9b:
d9:24:9b:fe:a4:46:8e:77:07:7a:f6:8c:b4:4c:0f:
78:61:f0:8a:84:c6:ec:26:16:1f:1c:4a:03:ae:e0:
f2:52:30:3f:ce:b1:23:d2:ad:35:91:37:e9:56:bd:
2c:77:1c:7a:56:45:b9:e4:18:23:53:a2:57:e5:9c:
91:06:79:33:8f:e2:ae:90:46:88:e1:13:ff:09:a1:
3f:f7:34:92:63:ab:4d:bb:c1:7d:a8:d6:48:80:b4:
ec:cc:91:88:09:9d:90:c5:c8:6c:9e:6a:23:64:ed:
25:0f:ce:f7:b4:8f:e6:58:40:db:19:8d:26:93:73:
bc:bd:94:2a:59:e0:10:2c:ef:09:22:db:40:33:12:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1C:53:61:5C:EE:D0:53:7F:71:78:25:2A:60:13:55:6F:4E:51:90
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0xxTYVzu0FN_cXglKmATVW9OUZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:1c:6a:96:b5:43:0d:e6:91:f3:11:02:18:36:e8:59:01:
5e:c2:94:16:3f:60:c8:1c:22:20:2c:ae:4d:99:8f:7f:1c:31:
a9:00:c0:b2:71:2a:38:9e:36:56:17:ea:4a:3f:ba:42:fd:3a:
00:d1:86:51:ad:08:bc:b0:8b:eb:c9:0f:cb:4b:cb:04:f6:c1:
0c:74:d6:69:ef:32:7d:9b:b9:08:5c:a2:75:b8:d9:93:19:e6:
7f:55:05:c4:e6:d3:0a:ff:a0:83:e3:fd:32:86:e4:da:b6:86:
ce:63:9d:a7:79:c9:6b:ab:b0:5e:da:70:86:02:93:a9:8b:30:
c1:26:dd:99:36:67:86:5b:bf:3f:b1:f2:a2:f1:8e:95:8b:b4:
f3:e5:6c:92:ca:b0:ee:14:ea:bb:93:a7:04:f9:0c:cc:65:d6:
dd:d0:7b:ae:49:59:fb:8a:ed:31:16:18:7d:10:71:71:79:8a:
25:ed:ee:35:79:a5:c0:ac:57:be:1f:02:60:e5:de:f5:9a:c7:
0b:5a:2e:5a:35:a8:53:51:5f:fd:bd:4d:b2:5c:a2:34:94:e4:
74:51:44:a3:6c:77:af:07:89:42:b0:06:9e:9d:80:ba:72:63:
6b:2a:9f:0e:bb:ec:df:05:b3:d7:4d:1f:28:8f:0f:cf:40:31:
dd:f6:94:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAjz8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDMy
ODE2MjEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDMxYzUzNjE1Y2Vl
ZDA1MzdmNzE3ODI1MmE2MDEzNTU2ZjRlNTE5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKEWKJMdoiA5upEosBCJkyZ3BvsrcZyWRDcspm5UE6/qv5Zk
98h0nQJMrS1Dm0dufrjgj9NKXbWQtspHMVsWgpiPzYiJ7TQCUTHqX8WPGY5hn5Ku
9B3t7lCU+LO4IGq1AeJvyMWHqIeVSLMFy5Z/UMdBvqfBFDqb2SSb/qRGjncHevaM
tEwPeGHwioTG7CYWHxxKA67g8lIwP86xI9KtNZE36Va9LHccelZFueQYI1OiV+Wc
kQZ5M4/irpBGiOET/wmhP/c0kmOrTbvBfajWSIC07MyRiAmdkMXIbJ5qI2TtJQ/O
97SP5lhA2xmNJpNzvL2UKlngECzvCSLbQDMSXLsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTHFNhXO7QU39xeCUqYBNVb05RkDAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
LzB4eFRZVnp1MEZOX2NYZ2xLbUFUVlc5T1VaQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGkCjANBgkqhkiG9w0BAQsFAAOC
AQEAuKccapa1Qw3mkfMRAhg26FkBXsKUFj9gyBwiICyuTZmPfxwxqQDAsnEqOJ42
VhfqSj+6Qv06ANGGUa0IvLCL68kPy0vLBPbBDHTWae8yfZu5CFyidbjZkxnmf1UF
xObTCv+gg+P9Mobk2raGzmOdp3nJa6uwXtpwhgKTqYswwSbdmTZnhlu/P7HyovGO
lYu08+Vsksqw7hTqu5OnBPkMzGXW3dB7rklZ+4rtMRYYfRBxcXmKJe3uNXmlwKxX
vh8CYOXe9ZrHC1ouWjWoU1Ff/b1NslyiNJTkdFFEo2x3rweJQrAGnp2AunJjayqf
Drvs3wWz100fKI8Pz0Ax3faUXw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org