Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KsHbuH_8MZ-djSKaLyLg_D6yzWQ.roa
File: KsHbuH_8MZ-djSKaLyLg_D6yzWQ.roa (raw, json)
Hash identifier: MxMBoeaUJaJhpzA1jut/8UVAAurS6Sv0WRKdW0xT6yk=
Subject key identifier: 2A:C1:DB:B8:7F:FC:31:9F:9D:8D:22:9A:2F:22:E0:FC:3E:B2:CD:64
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04D36ACA
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KsHbuH_8MZ-djSKaLyLg_D6yzWQ.roa
Signing time: Wed 08 Jun 2022 05:12:02 +0000
ROA not before: Wed 08 Jun 2022 05:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80964298 (0x4d36aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jun 8 05:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ac1dbb87ffc319f9d8d229a2f22e0fc3eb2cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:af:7b:aa:a5:57:e9:b9:50:41:0b:45:34:
6b:25:f0:28:8a:ba:a1:11:ef:17:cc:b1:e4:2c:72:
17:9f:ae:cc:64:fc:2a:0e:80:ad:51:6b:c0:16:2f:
84:02:f6:a5:2a:ae:cb:99:c3:07:f9:da:1b:d0:c3:
ac:65:eb:30:0d:2c:80:f4:fb:4c:4b:bf:fc:a8:34:
30:f8:41:da:74:37:b7:e7:b4:91:0c:31:f9:13:43:
97:6d:8a:ac:4d:ae:41:a2:cc:ef:8c:c4:8d:38:d6:
29:18:8e:53:6a:18:eb:44:12:50:06:b7:21:62:57:
bc:fe:de:1c:74:ae:25:15:c3:87:37:bb:35:11:6d:
54:0c:09:28:a8:d0:e8:8f:e4:36:f7:e3:88:13:a2:
11:27:b5:9d:8c:b9:9e:c4:7c:d7:0a:c0:d9:70:8c:
7c:aa:12:48:43:b6:9c:36:18:50:60:a4:be:4c:d1:
cc:b0:2c:fd:e9:cd:f9:71:b2:42:14:55:1a:fd:18:
a4:3d:5f:f4:a4:fb:d3:3b:cd:4c:4c:ee:6c:2c:94:
ba:d9:39:97:9f:33:dd:d9:b0:2c:25:06:d7:0e:3a:
e4:b4:89:f1:34:2e:ab:27:08:a9:c4:85:fa:dd:da:
0c:b9:a3:68:86:54:8a:1b:36:56:2d:71:fe:a2:26:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:DB:B8:7F:FC:31:9F:9D:8D:22:9A:2F:22:E0:FC:3E:B2:CD:64
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KsHbuH_8MZ-djSKaLyLg_D6yzWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cf:98:fc:a4:22:30:69:4d:0d:f1:64:61:21:dc:46:b2:63:
9e:54:2c:50:6e:0f:f0:c5:64:45:8a:1a:88:53:0b:63:18:bb:
a7:d6:2e:71:63:33:ea:9c:e1:a0:04:c6:44:99:3b:c1:fa:ec:
50:a6:53:3d:35:36:9c:78:3a:0f:5e:d5:8f:d3:98:ee:83:2a:
f7:cf:77:e9:d5:05:dd:fe:99:b7:d7:b7:01:78:b2:d3:29:3e:
d5:59:78:62:35:8a:fa:b6:9a:a1:42:38:c4:15:be:f7:d9:f7:
06:a5:a3:00:bf:3d:7e:a9:be:a3:9f:2d:f6:2e:8f:9c:7b:57:
6d:74:45:19:0b:2e:ab:88:96:92:24:cd:59:03:06:41:5f:21:
8f:d3:cf:e9:16:42:78:2f:44:5a:8c:b8:25:51:94:9a:8e:a5:
8d:ba:bd:fe:c7:72:54:87:94:a7:78:71:a2:1d:60:95:00:0f:
0d:f4:ee:b9:4b:b3:0f:1c:7d:b5:c7:dd:21:2a:f6:f7:df:4b:
11:20:dc:7d:eb:b9:72:d8:c7:b3:14:8d:66:24:74:80:74:86:
4d:5d:07:aa:ad:b2:59:10:f2:6d:b5:e8:98:9f:d4:70:1c:5f:
be:8c:cd:2c:8a:f6:c6:f9:97:be:1f:96:f9:3c:42:43:95:30:
d3:af:c5:f0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBNNqyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDYw
ODA1MTIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmFjMWRiYjg3ZmZj
MzE5ZjlkOGQyMjlhMmYyMmUwZmMzZWIyY2Q2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM3or3uqpVfpuVBBC0U0ayXwKIq6oRHvF8yx5CxyF5+uzGT8
Kg6ArVFrwBYvhAL2pSquy5nDB/naG9DDrGXrMA0sgPT7TEu//Kg0MPhB2nQ3t+e0
kQwx+RNDl22KrE2uQaLM74zEjTjWKRiOU2oY60QSUAa3IWJXvP7eHHSuJRXDhze7
NRFtVAwJKKjQ6I/kNvfjiBOiESe1nYy5nsR81wrA2XCMfKoSSEO2nDYYUGCkvkzR
zLAs/enN+XGyQhRVGv0YpD1f9KT70zvNTEzubCyUutk5l58z3dmwLCUG1w465LSJ
8TQuqycIqcSF+t3aDLmjaIZUihs2Vi1x/qIm3csCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqwdu4f/wxn52NIpovIuD8PrLNZDAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L0tzSGJ1SF84TVotZGpTS2FMeUxnX0Q2eXpXUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCmcjANBgkqhkiG9w0BAQsFAAOC
AQEASs+Y/KQiMGlNDfFkYSHcRrJjnlQsUG4P8MVkRYoaiFMLYxi7p9YucWMz6pzh
oATGRJk7wfrsUKZTPTU2nHg6D17Vj9OY7oMq98936dUF3f6Zt9e3AXiy0yk+1Vl4
YjWK+raaoUI4xBW+99n3BqWjAL89fqm+o58t9i6PnHtXbXRFGQsuq4iWkiTNWQMG
QV8hj9PP6RZCeC9EWoy4JVGUmo6ljbq9/sdyVIeUp3hxoh1glQAPDfTuuUuzDxx9
tcfdISr2999LESDcfeu5ctjHsxSNZiR0gHSGTV0Hqq2yWRDybbXomJ/UcBxfvozN
LIr2xvmXvh+W+TxCQ5Uw06/F8A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org