Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aFL43aMtoBINI2MTmz8lHTBTMAQ.roa
File: aFL43aMtoBINI2MTmz8lHTBTMAQ.roa (raw, json)
Hash identifier: WxC6JQyA9LXQx1F08NWYFjdHdYCk1fyxuHSKyto9Bd0=
Subject key identifier: 68:52:F8:DD:A3:2D:A0:12:0D:23:63:13:9B:3F:25:1D:30:53:30:04
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01821012493F3997C5505524554773D33C02
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aFL43aMtoBINI2MTmz8lHTBTMAQ.roa
Signing time: Mon 18 Jul 2022 06:50:10 +0000
ROA not before: Mon 18 Jul 2022 06:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 194.147.6.0/24 maxlen: 24
194.147.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:12:49:3f:39:97:c5:50:55:24:55:47:73:d3:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 18 06:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6852f8dda32da0120d2363139b3f251d30533004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:21:54:4f:af:20:46:da:42:a6:d8:0f:a0:
32:56:7c:ff:f8:da:f9:a2:7d:af:c1:f3:9d:ca:44:
df:1c:8a:67:18:32:ff:33:66:2b:80:45:3e:ae:90:
25:67:16:80:e7:4f:7a:36:fa:f3:61:3b:53:27:cc:
e2:68:15:ef:a8:19:26:60:4a:a5:90:92:21:f7:b2:
fd:1b:1f:06:9e:bd:47:90:5e:8d:35:1c:6d:17:ef:
17:3e:5e:fe:15:a6:39:12:d6:0b:26:ea:f7:68:b6:
a5:20:f9:99:fd:f0:d6:0e:f7:c3:85:07:16:17:76:
68:51:19:1a:da:c5:11:b3:cc:27:f4:37:2b:78:36:
e1:6d:7d:91:59:7d:a3:38:d1:47:11:31:c6:99:fe:
c0:3b:aa:74:89:a6:9a:0b:e9:e1:97:9c:40:7b:33:
d5:a4:a2:03:16:31:a0:9b:cf:dd:48:f1:63:cf:21:
d5:1a:27:17:57:e5:59:3a:ed:3d:f8:48:00:72:c3:
82:dc:b5:f9:db:73:ec:d6:de:b2:7e:1e:4e:a5:d0:
09:a3:94:71:c4:3b:65:24:a7:fd:f0:f6:04:aa:08:
d2:bd:76:4f:47:62:88:cb:6a:78:cd:ad:d7:be:b4:
9c:06:11:28:6b:7a:32:3b:7e:5d:99:41:93:dd:94:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:F8:DD:A3:2D:A0:12:0D:23:63:13:9B:3F:25:1D:30:53:30:04
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/aFL43aMtoBINI2MTmz8lHTBTMAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:f2:9d:d2:69:23:17:1b:3c:55:97:d1:c2:96:43:65:9a:ae:
c1:f6:d6:a3:25:89:88:f9:1a:4a:de:f9:6c:a2:92:2d:91:5c:
78:54:aa:71:1b:18:e4:fb:eb:6b:17:78:f5:93:02:72:03:df:
f0:5a:c0:2e:10:a2:ce:e8:c9:0e:fa:07:69:a8:17:4b:3d:21:
68:34:53:2c:51:3b:ee:2c:1b:d7:3e:92:10:0c:9a:46:60:d3:
e7:f6:b1:ec:f3:0c:de:ef:7a:f0:c2:cb:8c:53:9c:54:63:38:
79:47:51:22:86:9e:c0:c7:27:db:2c:f0:0e:eb:78:b1:df:d6:
2a:ed:79:33:fa:af:d8:a6:16:ae:66:36:47:ba:15:cb:3e:68:
09:ff:dd:98:87:b1:17:bc:9f:c8:06:63:8b:00:30:f7:82:15:
18:06:54:4b:a3:07:91:b2:d6:95:66:18:f1:7f:46:9f:a3:12:
65:5d:bb:4d:84:e3:a5:11:0d:85:7e:53:7d:d7:73:d0:07:c7:
0f:67:32:05:7c:a4:e5:ef:ba:02:69:8f:49:c7:a6:50:5b:c8:
29:07:7d:30:cb:cb:be:99:00:ca:8d:2d:41:c9:f4:ba:d3:21:
34:ec:eb:78:e0:0e:72:55:e4:95:7c:b0:01:ba:0c:b0:af:52:
fc:17:83:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIQEkk/OZfFUFUkVUdz0zwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwNzE4MDY1MDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODUyZjhkZGEzMmRhMDEyMGQyMzYzMTM5YjNmMjUxZDMwNTMzMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH0hVE+vIEbaQqbYD6AyVnz/+Nr5
on2vwfOdykTfHIpnGDL/M2YrgEU+rpAlZxaA5096NvrzYTtTJ8ziaBXvqBkmYEql
kJIh97L9Gx8Gnr1HkF6NNRxtF+8XPl7+FaY5EtYLJur3aLalIPmZ/fDWDvfDhQcW
F3ZoURka2sURs8wn9DcreDbhbX2RWX2jONFHETHGmf7AO6p0iaaaC+nhl5xAezPV
pKIDFjGgm8/dSPFjzyHVGicXV+VZOu09+EgAcsOC3LX523Ps1t6yfh5OpdAJo5Rx
xDtlJKf98PYEqgjSvXZPR2KIy2p4za3XvrScBhEoa3oyO35dmUGT3ZRZ+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhS+N2jLaASDSNjE5s/JR0wUzAEMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvYUZMNDNhTXRvQklOSTJNVG16OGxIVEJUTUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpMGMA0G
CSqGSIb3DQEBCwUAA4IBAQDR8p3SaSMXGzxVl9HClkNlmq7B9tajJYmI+RpK3vls
opItkVx4VKpxGxjk++trF3j1kwJyA9/wWsAuEKLO6MkO+gdpqBdLPSFoNFMsUTvu
LBvXPpIQDJpGYNPn9rHs8wze73rwwsuMU5xUYzh5R1Eihp7AxyfbLPAO63ix39Yq
7Xkz+q/YphauZjZHuhXLPmgJ/92Yh7EXvJ/IBmOLADD3ghUYBlRLoweRstaVZhjx
f0afoxJlXbtNhOOlEQ2FflN913PQB8cPZzIFfKTl77oCaY9Jx6ZQW8gpB30wy8u+
mQDKjS1ByfS60yE07Ot44A5yVeSVfLABugywr1L8F4Nb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org