Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pl2dls1IEDV-hnEqM5lFooX0mRg.roa
File: pl2dls1IEDV-hnEqM5lFooX0mRg.roa (raw, json)
Hash identifier: nL0c8H7B0cG+mB6FOk4BJ8EB1JIMkrnOwoJh9WtbjyE=
Subject key identifier: A6:5D:9D:96:CD:48:10:35:7E:86:71:2A:33:99:45:A2:85:F4:99:18
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0331E0B1
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pl2dls1IEDV-hnEqM5lFooX0mRg.roa
Signing time: Wed 12 Jan 2022 18:21:19 +0000
ROA not before: Wed 12 Jan 2022 18:21:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62068
IP address blocks: 91.199.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53600433 (0x331e0b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 12 18:21:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a65d9d96cd4810357e86712a339945a285f49918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:75:ef:61:61:3d:37:83:1e:29:81:5e:89:
57:8e:1e:e0:c8:bb:05:b2:86:b3:5e:78:34:7e:ce:
f8:ad:ff:c1:8c:ab:ef:3c:2f:4a:dd:c0:69:bd:b2:
8e:a6:b9:f5:bc:96:67:e3:ed:d9:75:b6:94:31:82:
45:81:df:1c:5a:ba:14:66:83:60:98:85:61:38:67:
a8:94:c4:3b:00:62:61:86:c4:9d:0f:d6:11:21:f5:
17:94:2b:d4:d4:a6:9c:c2:87:0a:7d:9e:48:ac:df:
28:b7:20:d3:d0:d9:1d:3d:eb:28:eb:ea:6a:82:01:
f7:dc:f1:f5:04:5c:e7:05:07:d1:81:1c:f8:fc:91:
50:33:16:41:12:c7:6f:1e:e9:83:07:39:0b:e6:7f:
34:fa:48:94:d1:28:04:fc:89:13:ad:82:6d:e2:bf:
21:ce:e6:7d:a5:b3:18:42:81:bf:2d:4d:cb:69:48:
d5:cb:af:2a:29:5e:0d:d7:59:cf:21:a8:3b:70:d6:
f4:61:8c:7f:95:1e:91:83:e3:4b:69:58:6d:45:4e:
36:3d:5f:31:05:2c:b1:ae:c6:ca:30:5f:dc:49:83:
8c:8b:bf:55:52:52:04:2a:94:be:fb:d0:01:d8:fa:
1c:3f:fb:20:ca:bf:63:97:ec:78:82:ad:0c:03:3f:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:9D:96:CD:48:10:35:7E:86:71:2A:33:99:45:A2:85:F4:99:18
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pl2dls1IEDV-hnEqM5lFooX0mRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5e:02:d8:eb:d6:1e:2b:53:8b:37:56:b4:69:cf:53:35:ff:
91:a0:90:a2:22:e0:f2:ae:52:9f:8f:6c:08:d5:b3:5b:03:72:
43:b8:85:c4:9b:c7:ee:87:94:26:3e:a9:b4:0e:30:2a:b3:b2:
db:a7:56:1a:e2:ca:bb:35:84:18:63:25:c3:a0:58:f0:3c:e6:
f5:a2:84:03:eb:7c:bf:16:fd:7f:b0:2e:94:f0:b1:9b:9f:f7:
bb:f8:3c:98:06:2d:5e:49:ca:17:55:e1:f1:33:e9:7c:be:9e:
dd:f8:36:e0:5e:4d:57:36:ce:58:56:35:09:ff:34:2b:fc:fc:
bf:2d:a4:7c:ba:c9:75:df:9f:af:7b:e4:88:51:19:82:72:db:
67:f1:31:cb:10:38:fe:c0:1f:11:b1:b4:1a:73:09:1a:74:a2:
4a:3f:4a:a9:d2:2f:0e:06:d6:00:29:0f:da:31:5e:c7:bb:7e:
77:d3:c3:b9:d0:ce:61:ac:9f:87:3d:eb:5b:80:f6:cf:97:30:
ff:02:b9:99:29:cb:2f:ab:db:20:28:27:43:58:1b:e6:c0:d2:
09:28:2c:93:f1:37:24:91:5e:37:52:42:6d:de:3e:4d:4d:2b:
6d:f0:62:22:d4:be:1f:63:2a:cb:83:2c:6f:22:7e:70:00:b0:
a1:b0:0a:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzHgsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDEx
MjE4MjExOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTY1ZDlkOTZjZDQ4
MTAzNTdlODY3MTJhMzM5OTQ1YTI4NWY0OTkxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSxde9hYT03gx4pgV6JV44e4Mi7BbKGs154NH7O+K3/wYyr
7zwvSt3Aab2yjqa59byWZ+Pt2XW2lDGCRYHfHFq6FGaDYJiFYThnqJTEOwBiYYbE
nQ/WESH1F5Qr1NSmnMKHCn2eSKzfKLcg09DZHT3rKOvqaoIB99zx9QRc5wUH0YEc
+PyRUDMWQRLHbx7pgwc5C+Z/NPpIlNEoBPyJE62CbeK/Ic7mfaWzGEKBvy1Ny2lI
1cuvKileDddZzyGoO3DW9GGMf5UekYPjS2lYbUVONj1fMQUssa7GyjBf3EmDjIu/
VVJSBCqUvvvQAdj6HD/7IMq/Y5fseIKtDAM/EXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSmXZ2WzUgQNX6GcSozmUWihfSZGDAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L3BsMmRsczFJRURWLWhuRXFNNWxGb29YMG1SZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHrDANBgkqhkiG9w0BAQsFAAOC
AQEAPF4C2OvWHitTizdWtGnPUzX/kaCQoiLg8q5Sn49sCNWzWwNyQ7iFxJvH7oeU
Jj6ptA4wKrOy26dWGuLKuzWEGGMlw6BY8Dzm9aKEA+t8vxb9f7AulPCxm5/3u/g8
mAYtXknKF1Xh8TPpfL6e3fg24F5NVzbOWFY1Cf80K/z8vy2kfLrJdd+fr3vkiFEZ
gnLbZ/ExyxA4/sAfEbG0GnMJGnSiSj9KqdIvDgbWACkP2jFex7t+d9PDudDOYayf
hz3rW4D2z5cw/wK5mSnLL6vbICgnQ1gb5sDSCSgsk/E3JJFeN1JCbd4+TU0rbfBi
ItS+H2Mqy4MsbyJ+cACwobAKbA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org