Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tG49RfVx27EMiYpow4rWyHt4JLk.roa
File: tG49RfVx27EMiYpow4rWyHt4JLk.roa (raw, json)
Hash identifier: duzv46ZqDbPLTVlMsvIX2ce/SbKPrQHIDmp03I6zeKg=
Subject key identifier: B4:6E:3D:45:F5:71:DB:B1:0C:89:8A:68:C3:8A:D6:C8:7B:78:24:B9
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0495F805
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tG49RfVx27EMiYpow4rWyHt4JLk.roa
Signing time: Tue 17 May 2022 09:45:30 +0000
ROA not before: Tue 17 May 2022 09:45:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 192.166.83.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76937221 (0x495f805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 17 09:45:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b46e3d45f571dbb10c898a68c38ad6c87b7824b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:1a:42:97:f4:0a:61:85:13:29:d2:99:77:
9f:5b:d6:94:87:6f:db:7d:d7:00:26:3e:42:ba:67:
37:6f:c6:7e:39:b7:ce:6d:02:87:c5:6d:61:8a:36:
34:9b:80:e0:1f:90:df:19:e3:35:32:49:a7:2a:22:
f5:f1:2d:b7:6b:14:82:b1:c1:54:de:28:3d:5f:b4:
b8:43:32:da:04:08:5d:b1:d1:9a:95:9a:a7:11:50:
a5:30:60:19:fc:8e:2f:35:50:5a:98:62:0e:35:7a:
50:c8:89:57:59:46:46:6d:4e:fc:16:93:b5:23:b3:
5c:04:ee:14:fb:9e:e0:4a:59:0c:c6:f2:0a:7e:14:
8f:87:7c:e1:b4:44:91:9f:d0:a3:e7:11:dc:8e:d8:
40:98:8e:bc:1c:34:fe:5b:1a:cd:91:2f:92:a8:e4:
b3:27:19:4d:59:e0:f0:98:cb:2a:c9:8e:5b:9c:ad:
73:52:84:0d:b2:80:7e:52:f2:fc:da:8e:3b:cc:7f:
8e:44:35:61:bc:67:3f:62:51:d1:0a:42:2f:34:e4:
6b:4b:bb:04:69:bc:ca:e6:58:6f:ae:c0:e9:42:b9:
3e:ee:89:58:04:de:a9:ae:95:6b:89:d8:fe:1a:6b:
7b:e2:0c:18:a8:15:ff:9c:5b:d0:08:b7:8c:85:3f:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:3D:45:F5:71:DB:B1:0C:89:8A:68:C3:8A:D6:C8:7B:78:24:B9
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tG49RfVx27EMiYpow4rWyHt4JLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.82.0/23
Signature Algorithm: sha256WithRSAEncryption
04:50:b0:0c:2c:fe:8f:23:db:38:d9:e5:59:5d:9a:4f:d8:74:
e6:33:68:4f:21:5f:74:62:60:fc:9d:fd:4c:4b:1d:23:d2:5b:
8b:e7:d9:7b:71:32:01:a3:5f:db:1c:4d:c2:d0:54:f4:6f:6b:
8b:c2:af:07:4b:c6:ae:b0:22:f0:4d:c3:01:2a:5d:ca:1b:a6:
9f:9c:5b:d6:9a:66:34:fa:36:8a:41:fa:56:dc:7e:79:6b:51:
7c:e6:5b:69:76:34:11:6b:c5:1e:2e:9f:0e:7a:f1:d7:50:73:
cf:ad:d2:dd:5d:88:f0:14:fe:74:67:14:30:7a:d6:64:76:0a:
d8:96:13:e6:a4:73:6b:34:ce:8a:97:21:dd:1c:ac:a7:cb:65:
99:27:1f:b3:34:f8:70:49:13:b9:8c:9b:33:fc:e3:21:10:c6:
ba:a1:c2:8e:ae:7e:64:4e:3e:92:ff:16:ab:ef:78:c3:f6:3d:
c8:3c:16:be:b8:e0:64:f2:50:df:d2:47:23:d6:c9:8d:7d:89:
b4:e9:39:7a:08:b1:14:bb:b4:a2:a2:37:93:4d:f6:2a:fd:4a:
0a:87:ac:91:94:5a:bd:39:f2:e3:5a:44:d4:74:d4:c7:5c:ed:
f9:81:69:fc:a9:f6:e9:1d:bc:4c:77:2d:27:3a:6e:12:b2:b6:
1f:9e:d4:40
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBJX4BTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDUx
NzA5NDUzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQ2ZTNkNDVmNTcx
ZGJiMTBjODk4YTY4YzM4YWQ2Yzg3Yjc4MjRiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKK7GkKX9AphhRMp0pl3n1vWlIdv233XACY+QrpnN2/Gfjm3
zm0Ch8VtYYo2NJuA4B+Q3xnjNTJJpyoi9fEtt2sUgrHBVN4oPV+0uEMy2gQIXbHR
mpWapxFQpTBgGfyOLzVQWphiDjV6UMiJV1lGRm1O/BaTtSOzXATuFPue4EpZDMby
Cn4Uj4d84bREkZ/Qo+cR3I7YQJiOvBw0/lsazZEvkqjksycZTVng8JjLKsmOW5yt
c1KEDbKAflLy/NqOO8x/jkQ1YbxnP2JR0QpCLzTka0u7BGm8yuZYb67A6UK5Pu6J
WATeqa6Va4nY/hpre+IMGKgV/5xb0Ai3jIU/ja8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS0bj1F9XHbsQyJimjDitbIe3gkuTAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L3RHNDlSZlZ4MjdFTWlZcG93NHJXeUh0NEpMay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCmUjANBgkqhkiG9w0BAQsFAAOC
AQEABFCwDCz+jyPbONnlWV2aT9h05jNoTyFfdGJg/J39TEsdI9Jbi+fZe3EyAaNf
2xxNwtBU9G9ri8KvB0vGrrAi8E3DASpdyhumn5xb1ppmNPo2ikH6Vtx+eWtRfOZb
aXY0EWvFHi6fDnrx11Bzz63S3V2I8BT+dGcUMHrWZHYK2JYT5qRzazTOipch3Rys
p8tlmScfszT4cEkTuYybM/zjIRDGuqHCjq5+ZE4+kv8Wq+94w/Y9yDwWvrjgZPJQ
39JHI9bJjX2JtOk5egixFLu0oqI3k032Kv1KCoeskZRavTny41pE1HTUx1zt+YFp
/Kn26R28THctJzpuErK2H57UQA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org