Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rp4AhhYdq2E5CNcli6kah0DpAn8.roa
File: rp4AhhYdq2E5CNcli6kah0DpAn8.roa (raw, json)
Hash identifier: Dacp4gQlzvraF12ZO8/lNrC6ZYiEbH+djbAumBcXfz8=
Subject key identifier: AE:9E:00:86:16:1D:AB:61:39:08:D7:25:8B:A9:1A:87:40:E9:02:7F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 044B6440
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rp4AhhYdq2E5CNcli6kah0DpAn8.roa
Signing time: Thu 21 Apr 2022 13:04:54 +0000
ROA not before: Thu 21 Apr 2022 13:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72049728 (0x44b6440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Apr 21 13:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae9e0086161dab613908d7258ba91a8740e9027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:f2:a1:53:57:0d:fe:8a:cf:7e:19:24:32:
e8:2a:8d:a8:96:21:f9:36:4b:cd:37:e5:10:6c:83:
9e:4d:83:91:f7:0b:4c:93:6d:30:39:ca:86:9f:f4:
4a:b9:fc:24:7e:a7:8f:76:de:69:19:5e:26:ec:ca:
1e:49:d9:43:5e:b1:18:0d:5e:5e:8e:6d:1f:49:ca:
83:45:6b:e5:41:03:4e:80:81:e5:1b:b8:5c:75:78:
95:f9:94:07:16:65:62:76:ac:72:27:42:5a:fd:af:
d5:a7:96:95:ad:89:23:76:23:de:db:d4:76:d3:58:
0c:e4:2e:31:a0:a5:b8:83:b0:c8:ec:d1:41:93:27:
be:0f:c1:78:a4:9f:5a:65:34:5c:65:68:a0:25:a8:
f1:83:50:92:46:8e:d3:e3:05:54:9c:a3:43:8b:68:
8e:07:9e:e6:0e:14:c0:1c:9a:61:dc:8a:e2:0a:a7:
1c:41:d6:ef:3f:70:6a:2d:cc:2a:ac:f3:5b:00:85:
51:cd:b5:e2:9d:11:bd:0a:77:7b:c9:b5:49:36:59:
6e:9e:78:46:21:f7:88:27:4d:a7:de:11:ae:a5:28:
ce:a2:38:57:d1:ce:b8:0a:b9:98:fd:5c:a0:5b:2f:
df:a9:b1:29:9e:e1:76:35:87:3c:d8:2e:bf:9b:05:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:00:86:16:1D:AB:61:39:08:D7:25:8B:A9:1A:87:40:E9:02:7F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rp4AhhYdq2E5CNcli6kah0DpAn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a1:86:40:a7:25:5a:60:29:87:2f:ec:9f:3e:b1:2a:88:99:
d1:f4:a2:1a:93:e0:2d:7a:51:47:31:81:77:24:f7:52:76:e9:
28:e2:4c:3e:a1:a4:ac:7e:33:40:f7:a7:4e:21:96:14:32:9e:
f9:b7:dc:71:d3:3d:08:ef:55:36:3c:d0:db:31:ec:3d:92:ef:
b0:67:ff:38:e7:33:f0:65:4e:aa:cd:26:da:be:b5:01:71:5b:
15:3a:da:e5:c9:21:6c:90:80:37:d4:7c:3c:41:01:5c:b3:73:
d8:89:ef:e0:fb:02:58:b8:35:e6:bf:b2:a1:38:70:83:82:f4:
42:e5:bc:6f:5f:a7:69:1f:f0:8e:96:c0:87:f2:8d:a8:6a:0f:
88:58:a4:e7:ce:38:39:fd:71:dd:80:e1:60:a9:c2:d0:d0:f4:
3e:97:09:3a:49:06:99:c6:3d:56:9b:49:8f:0b:d2:e6:10:e3:
ee:ed:22:b7:0a:e3:4c:fa:ab:ba:ae:55:47:4d:9c:53:5a:85:
e9:5b:0b:c4:39:06:55:bd:e3:c3:ea:be:2c:ec:82:94:a8:a4:
a3:a3:0d:13:d1:bb:ef:25:14:87:78:7b:9e:85:be:66:31:3c:
6b:73:ac:b7:d7:1f:84:08:8f:1c:27:bd:8a:19:ac:e9:79:7f:
24:c4:f0:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBEtkQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDQy
MTEzMDQ1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWU5ZTAwODYxNjFk
YWI2MTM5MDhkNzI1OGJhOTFhODc0MGU5MDI3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFr8qFTVw3+is9+GSQy6CqNqJYh+TZLzTflEGyDnk2DkfcL
TJNtMDnKhp/0Srn8JH6nj3beaRleJuzKHknZQ16xGA1eXo5tH0nKg0Vr5UEDToCB
5Ru4XHV4lfmUBxZlYnascidCWv2v1aeWla2JI3Yj3tvUdtNYDOQuMaCluIOwyOzR
QZMnvg/BeKSfWmU0XGVooCWo8YNQkkaO0+MFVJyjQ4tojgee5g4UwByaYdyK4gqn
HEHW7z9wai3MKqzzWwCFUc214p0RvQp3e8m1STZZbp54RiH3iCdNp94RrqUozqI4
V9HOuAq5mP1coFsv36mxKZ7hdjWHPNguv5sFdBUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSungCGFh2rYTkI1yWLqRqHQOkCfzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L3JwNEFoaFlkcTJFNUNOY2xpNmthaDBEcEFuOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHozANBgkqhkiG9w0BAQsFAAOC
AQEAjqGGQKclWmAphy/snz6xKoiZ0fSiGpPgLXpRRzGBdyT3UnbpKOJMPqGkrH4z
QPenTiGWFDKe+bfccdM9CO9VNjzQ2zHsPZLvsGf/OOcz8GVOqs0m2r61AXFbFTra
5ckhbJCAN9R8PEEBXLNz2Inv4PsCWLg15r+yoThwg4L0QuW8b1+naR/wjpbAh/KN
qGoPiFik5844Of1x3YDhYKnC0ND0PpcJOkkGmcY9VptJjwvS5hDj7u0itwrjTPqr
uq5VR02cU1qF6VsLxDkGVb3jw+q+LOyClKiko6MNE9G77yUUh3h7noW+ZjE8a3Os
t9cfhAiPHCe9ihms6Xl/JMTwtA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org