Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F2zVshgYfUSgMnCw1YCKBUZel4M.roa
File: F2zVshgYfUSgMnCw1YCKBUZel4M.roa (raw, json)
Hash identifier: VQD+Hh61xPkwcykI8riEHl8+7owGiGWdzh76F0ZBGOU=
Subject key identifier: 17:6C:D5:B2:18:18:7D:44:A0:32:70:B0:D5:80:8A:05:46:5E:97:83
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03145FC0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F2zVshgYfUSgMnCw1YCKBUZel4M.roa
Signing time: Sat 01 Jan 2022 07:53:55 +0000
ROA not before: Sat 01 Jan 2022 07:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.199.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51666880 (0x3145fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 1 07:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=176cd5b218187d44a03270b0d5808a05465e9783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:dc:4d:86:b4:65:5e:7a:ea:95:fd:5b:a7:
92:bb:b7:a6:f2:ef:3b:86:07:73:3a:ab:02:db:36:
d0:b4:cc:6f:35:04:23:5f:55:13:68:e9:51:06:1b:
53:ec:f4:fb:22:6e:f0:8b:9e:7f:02:91:f2:56:c7:
ec:c3:47:30:57:0d:80:3f:20:a3:a6:03:ab:9b:b9:
49:3d:c6:58:e0:5e:35:e1:90:b3:c1:c7:44:6b:68:
f8:c7:2e:71:da:73:67:13:54:bf:a1:b2:ec:76:9a:
1f:df:fa:0d:0f:79:cd:a8:a7:0f:10:fb:d3:b6:52:
06:ce:55:66:7b:d7:35:54:45:fc:e6:4e:cb:a4:cc:
37:45:0f:5e:42:7b:1c:e4:48:89:83:d4:c0:4c:e2:
a5:2e:e3:6c:a8:91:b3:1b:0e:ae:03:5d:95:3a:07:
77:cf:d5:11:43:ec:8c:20:48:6f:0a:f6:ca:40:6d:
4e:79:de:34:f1:21:bd:28:b3:5b:40:28:f2:cf:ce:
06:29:58:7a:3f:12:91:19:36:ec:ee:e2:e2:7c:a1:
57:d7:0d:dd:8b:9a:db:ba:53:91:ad:e0:df:98:93:
d8:4b:44:b8:f2:fb:db:2b:5e:77:a3:39:11:36:ef:
78:f2:d8:6c:81:a9:9e:b3:2d:ad:51:95:12:25:40:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:D5:B2:18:18:7D:44:A0:32:70:B0:D5:80:8A:05:46:5E:97:83
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F2zVshgYfUSgMnCw1YCKBUZel4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:82:6a:eb:1f:e5:48:1f:cb:09:df:38:60:b6:4f:42:30:12:
3c:0e:87:29:b2:e3:e8:b7:9d:a0:fe:54:ef:bb:d8:61:37:d9:
5b:6b:bd:7c:3b:3f:4b:7e:eb:15:8c:cf:7b:20:f3:90:73:d3:
2c:05:28:ac:b1:e3:dd:50:5d:ad:cf:31:01:93:17:b5:0c:ef:
a6:bb:d5:b5:bf:d1:56:5d:7d:80:97:0d:17:f8:c8:1b:44:e6:
d9:fe:32:2d:ed:80:9c:15:7b:b5:71:29:36:8f:3f:de:4f:b3:
09:54:04:da:aa:4d:0a:28:13:f2:96:da:2c:03:70:34:c3:87:
4f:59:4b:64:1c:6a:a0:d7:03:6a:c6:a6:03:87:6a:f0:1c:fa:
cc:c1:38:8f:14:c1:93:6c:7e:27:e5:ec:ca:0b:93:08:4a:79:
8d:f7:23:1a:1c:5f:0d:f2:f3:2b:06:16:f0:a8:a2:58:b2:d8:
00:51:dc:de:7c:f1:44:84:cb:eb:6c:5d:ac:bb:be:b4:1a:1a:
4f:ed:2f:29:c3:e9:ac:44:2c:3e:1d:2c:d5:ee:a0:4d:bd:f8:
f5:48:c0:d7:63:a0:6e:de:4c:ee:48:e8:00:98:72:0d:3c:43:
5a:33:aa:b8:16:69:88:fc:e6:d9:fb:c7:3d:1a:a7:d8:b8:4f:
29:96:e1:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxRfwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDEw
MTA3NTM1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc2Y2Q1YjIxODE4
N2Q0NGEwMzI3MGIwZDU4MDhhMDU0NjVlOTc4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhv3E2GtGVeeuqV/Vunkru3pvLvO4YHczqrAts20LTMbzUE
I19VE2jpUQYbU+z0+yJu8IuefwKR8lbH7MNHMFcNgD8go6YDq5u5ST3GWOBeNeGQ
s8HHRGto+McucdpzZxNUv6Gy7HaaH9/6DQ95zainDxD707ZSBs5VZnvXNVRF/OZO
y6TMN0UPXkJ7HORIiYPUwEzipS7jbKiRsxsOrgNdlToHd8/VEUPsjCBIbwr2ykBt
TnneNPEhvSizW0Ao8s/OBilYej8SkRk27O7i4nyhV9cN3Yua27pTka3g35iT2EtE
uPL72yted6M5ETbvePLYbIGpnrMtrVGVEiVAhqcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXbNWyGBh9RKAycLDVgIoFRl6XgzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L0YyelZzaGdZZlVTZ01uQ3cxWUNLQlVaZWw0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHrDANBgkqhkiG9w0BAQsFAAOC
AQEAToJq6x/lSB/LCd84YLZPQjASPA6HKbLj6LedoP5U77vYYTfZW2u9fDs/S37r
FYzPeyDzkHPTLAUorLHj3VBdrc8xAZMXtQzvprvVtb/RVl19gJcNF/jIG0Tm2f4y
Le2AnBV7tXEpNo8/3k+zCVQE2qpNCigT8pbaLANwNMOHT1lLZBxqoNcDasamA4dq
8Bz6zME4jxTBk2x+J+XsyguTCEp5jfcjGhxfDfLzKwYW8KiiWLLYAFHc3nzxRITL
62xdrLu+tBoaT+0vKcPprEQsPh0s1e6gTb349UjA12Ogbt5M7kjoAJhyDTxDWjOq
uBZpiPzm2fvHPRqn2LhPKZbh5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org