Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F_vw7GOLm1RTNmz-dJw4SxHVxqs.roa
File: F_vw7GOLm1RTNmz-dJw4SxHVxqs.roa (raw, json)
Hash identifier: GHVpzDWhjZeIIANrn2340Cul1nu1FpovTPSsZeGZzkU=
Subject key identifier: 17:FB:F0:EC:63:8B:9B:54:53:36:6C:FE:74:9C:38:4B:11:D5:C6:AB
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01825A91DFCE4F10668FFF2E40011B41EA07
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F_vw7GOLm1RTNmz-dJw4SxHVxqs.roa
Signing time: Mon 01 Aug 2022 18:01:25 +0000
ROA not before: Mon 01 Aug 2022 18:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 193.29.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:91:df:ce:4f:10:66:8f:ff:2e:40:01:1b:41:ea:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 1 18:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17fbf0ec638b9b5453366cfe749c384b11d5c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:1b:0e:09:ce:b7:4b:e1:83:83:72:99:9b:
cc:03:11:af:2d:ea:10:a9:eb:81:34:0a:6f:2d:46:
b9:ae:63:5c:d0:75:f1:8a:6e:ac:6a:50:94:27:2e:
fd:b8:eb:85:2b:08:bb:ea:16:c3:72:81:66:a5:ba:
27:cb:99:cf:7e:de:85:2a:ef:65:19:5b:e4:8d:7f:
b3:a2:1c:98:08:16:78:54:41:a0:88:91:22:97:79:
9a:f3:12:cf:fe:70:ba:33:f8:5c:a4:f0:dc:b7:09:
ca:27:86:7e:99:ab:7e:3e:99:d1:05:2e:ec:cd:56:
31:93:fd:8a:e2:03:28:ed:9d:6e:df:e3:da:9c:1a:
0e:be:45:1a:e8:fe:81:ef:eb:83:e9:c6:ec:0e:42:
99:99:bd:c0:b1:8f:62:b9:33:a6:2e:80:6e:11:5c:
2c:c2:8e:cd:90:3a:28:d0:cc:81:2b:31:39:8d:d4:
d4:dc:33:18:20:19:5e:a9:f4:b6:05:6d:ad:74:5c:
ad:f5:40:f8:6a:7f:17:64:1e:6d:bc:c4:e0:f8:e2:
6c:92:b1:cc:18:b5:7f:ff:23:62:19:c2:b8:25:28:
d5:dc:5a:63:19:4c:5f:d8:90:cf:84:f3:28:89:46:
14:39:2d:cf:85:1d:76:2a:ef:c4:d6:c2:c0:47:03:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:F0:EC:63:8B:9B:54:53:36:6C:FE:74:9C:38:4B:11:D5:C6:AB
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/F_vw7GOLm1RTNmz-dJw4SxHVxqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.98.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:f9:d4:87:6a:4a:59:cd:b9:f9:fc:e1:d3:2f:71:63:8d:91:
32:26:72:94:43:83:71:8c:bd:cb:78:01:b8:cb:5d:bd:2a:36:
ee:74:ce:3e:27:05:c2:7e:b9:5f:13:41:dd:b8:27:d1:56:a6:
b7:78:e0:83:81:94:11:aa:a7:f0:28:83:dc:ae:12:e9:cf:36:
03:66:58:a0:c7:68:85:a3:04:a8:fa:85:4c:02:76:ae:4b:fa:
e9:eb:be:c8:42:d5:00:6c:1a:7e:bf:bc:3b:35:f1:05:4c:ba:
c9:f1:2f:32:75:46:18:b0:0b:90:c4:ad:de:26:51:d3:ff:08:
77:c1:e4:51:2e:50:96:bf:00:ec:45:29:fb:44:68:cd:c8:0b:
93:cd:3f:9d:ad:e8:2e:d4:d6:2d:f6:55:8e:79:23:14:ff:61:
02:a0:1e:9d:62:ea:bf:77:28:4b:e1:b0:6b:f1:aa:1d:4a:16:
27:a3:6d:03:32:bf:5e:eb:2f:62:91:d2:56:c8:0c:05:a5:4e:
d1:b6:c7:9d:a8:00:13:06:a9:84:e6:12:77:14:57:e9:2c:da:
7f:ca:bb:15:4e:9e:43:c6:6d:88:55:65:2a:09:cf:51:a2:f1:
42:92:2c:a1:b3:94:20:96:e7:9a:9a:fc:90:87:6d:fb:8e:b3:
43:8d:c9:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJakd/OTxBmj/8uQAEbQeoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwODAxMTgwMTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2ZiZjBlYzYzOGI5YjU0NTMzNjZjZmU3NDljMzg0YjExZDVjNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLsbDgnOt0vhg4NymZvMAxGvLeoQ
qeuBNApvLUa5rmNc0HXxim6salCUJy79uOuFKwi76hbDcoFmpbony5nPft6FKu9l
GVvkjX+zohyYCBZ4VEGgiJEil3ma8xLP/nC6M/hcpPDctwnKJ4Z+mat+PpnRBS7s
zVYxk/2K4gMo7Z1u3+PanBoOvkUa6P6B7+uD6cbsDkKZmb3AsY9iuTOmLoBuEVws
wo7NkDoo0MyBKzE5jdTU3DMYIBleqfS2BW2tdFyt9UD4an8XZB5tvMTg+OJskrHM
GLV//yNiGcK4JSjV3FpjGUxf2JDPhPMoiUYUOS3PhR12Ku/E1sLARwM35QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBf78Oxji5tUUzZs/nScOEsR1carMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvRl92dzdHT0xtMVJUTm16LWRKdzRTeEhWeHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR1iMA0G
CSqGSIb3DQEBCwUAA4IBAQAL+dSHakpZzbn5/OHTL3FjjZEyJnKUQ4NxjL3LeAG4
y129KjbudM4+JwXCfrlfE0HduCfRVqa3eOCDgZQRqqfwKIPcrhLpzzYDZligx2iF
owSo+oVMAnauS/rp677IQtUAbBp+v7w7NfEFTLrJ8S8ydUYYsAuQxK3eJlHT/wh3
weRRLlCWvwDsRSn7RGjNyAuTzT+dregu1NYt9lWOeSMU/2ECoB6dYuq/dyhL4bBr
8aodShYno20DMr9e6y9ikdJWyAwFpU7RtsedqAATBqmE5hJ3FFfpLNp/yrsVTp5D
xm2IVWUqCc9RovFCkiyhs5QglueamvyQh237jrNDjcnG
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:55 2025 by rpki-client