Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa
File: XIFCxt9Teli_YvIM9pP0Qo98RSo.roa (raw, json)
Hash identifier: 39r978Oh911CYuI9tt4W6zriGjC0gx5rUiNrRX7MRbo=
Subject key identifier: 5C:81:42:C6:DF:53:7A:58:BF:62:F2:0C:F6:93:F4:42:8F:7C:45:2A
Certificate issuer: /CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
Certificate serial: 018570671CE4549B33459E9B927546870F2C
Authority key identifier: D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa
Signing time: Mon 02 Jan 2023 02:54:43 +0000
ROA not before: Mon 02 Jan 2023 02:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201435
IP address blocks: 193.39.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:1c:e4:54:9b:33:45:9e:9b:92:75:46:87:0f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
Validity
Not Before: Jan 2 02:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8142c6df537a58bf62f20cf693f4428f7c452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:78:ba:a7:57:63:c2:e7:62:ea:97:2b:8a:
5a:6d:3d:0f:af:4d:17:be:17:50:4f:98:5e:e5:e2:
da:f4:a8:df:92:33:db:77:82:b0:3f:1c:2b:16:aa:
2a:1e:82:1e:ba:ec:e4:76:9b:84:14:8d:4e:40:91:
74:e9:39:43:7f:3d:cf:8d:1d:f9:52:26:f9:2d:50:
61:80:c3:51:2b:f9:2f:f5:0b:46:b7:01:4f:19:96:
bd:b1:21:0d:bd:f2:65:f1:5e:b7:a2:72:65:be:4b:
44:68:e0:5d:d5:28:29:e8:7a:a9:cb:aa:0a:35:6e:
46:3b:85:e1:29:b9:7b:b5:35:23:e7:72:3e:60:06:
13:fb:3e:85:e3:eb:b6:16:3f:9c:13:75:cd:9f:21:
96:48:cd:dc:45:71:30:91:c7:df:69:2a:b2:d8:ee:
a9:65:47:03:84:6d:ff:1c:76:f0:2f:71:35:5d:5f:
33:58:fb:c7:f3:1b:b1:90:ee:d8:cf:10:f4:3e:59:
6d:98:d3:96:79:1e:fb:ce:ac:28:e6:85:07:47:1f:
04:13:88:11:fc:7d:98:62:80:01:c2:4a:34:46:c1:
5a:43:93:54:ac:1c:67:70:39:ef:49:56:65:e3:a6:
3a:5c:a9:f7:9f:04:10:fc:f2:28:68:f0:95:c9:df:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:42:C6:DF:53:7A:58:BF:62:F2:0C:F6:93:F4:42:8F:7C:45:2A
X509v3 Authority Key Identifier:
keyid:D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/XIFCxt9Teli_YvIM9pP0Qo98RSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
66:24:8d:c7:0c:77:52:20:56:70:91:57:77:99:e1:af:85:e6:
19:a4:df:6b:31:bb:12:24:6c:cd:1d:d5:ed:42:3f:ea:51:5a:
03:b7:89:27:a1:3b:34:37:c7:02:87:97:80:20:3c:24:b5:46:
c3:d2:b2:28:88:58:14:3c:c5:ae:fc:32:68:ec:21:97:a4:b3:
86:61:21:ed:83:4b:cf:c8:fa:14:0d:cf:3d:02:54:a0:88:e7:
10:8c:fd:ab:b3:b7:04:68:7f:6b:e2:da:2f:47:7e:d2:9c:5e:
22:82:61:c6:86:13:76:9c:ab:af:56:a5:37:40:7a:5f:51:89:
a0:c9:39:b4:60:70:ef:1a:b9:75:95:1e:09:b1:ea:10:1b:bc:
d0:f5:30:f9:15:d2:96:21:38:94:82:f7:e4:69:36:d4:91:a6:
a0:dd:ab:3b:ae:7c:03:3c:47:95:dd:31:cb:e4:b4:14:d2:19:
5c:3e:e7:3c:c1:e5:ea:2c:8e:4a:95:df:f1:4a:14:19:c5:f3:
2c:c9:a6:ed:06:40:80:3b:74:5d:7b:7c:42:40:ce:e7:24:9a:
31:eb:35:ad:3a:88:57:27:4c:40:f7:b6:a2:ed:60:d5:46:d6:
74:0e:3a:93:2d:05:ea:07:f9:a9:9c:d9:01:30:c4:ad:55:3c:
e8:fe:3a:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZxzkVJszRZ6bknVGhw8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNTk0M2U3ZDNjZWNhNDUzMjc5Y2JiNTEyN2JkOTc0NzEy
OWMzZWUwHhcNMjMwMTAyMDI1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzgxNDJjNmRmNTM3YTU4YmY2MmYyMGNmNjkzZjQ0MjhmN2M0NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwp4uqdXY8LnYuqXK4pabT0Pr00X
vhdQT5he5eLa9KjfkjPbd4KwPxwrFqoqHoIeuuzkdpuEFI1OQJF06TlDfz3PjR35
Uib5LVBhgMNRK/kv9QtGtwFPGZa9sSENvfJl8V63onJlvktEaOBd1Sgp6Hqpy6oK
NW5GO4XhKbl7tTUj53I+YAYT+z6F4+u2Fj+cE3XNnyGWSM3cRXEwkcffaSqy2O6p
ZUcDhG3/HHbwL3E1XV8zWPvH8xuxkO7YzxD0PlltmNOWeR77zqwo5oUHRx8EE4gR
/H2YYoABwko0RsFaQ5NUrBxncDnvSVZl46Y6XKn3nwQQ/PIoaPCVyd+SLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyBQsbfU3pYv2LyDPaT9EKPfEUqMB8GA1UdIwQY
MBaAFNFZQ+fTzspFMnnLtRJ72XRxKcPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZsRDU5UE95a1V5ZWN1MUVudlpkSEVwdy00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81NDAzZDktYmM3Ni00ZTQzLWE2NTgt
ZDQ4YzkxYTY1MDA3LzEvWElGQ3h0OVRlbGlfWXZJTTlwUDBRbzk4UlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81NDAzZDktYmM3Ni00ZTQzLWE2NTgtZDQ4YzkxYTY1MDA3
LzEvMFZsRDU5UE95a1V5ZWN1MUVudlpkSEVwdy00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSfYMA0G
CSqGSIb3DQEBCwUAA4IBAQBmJI3HDHdSIFZwkVd3meGvheYZpN9rMbsSJGzNHdXt
Qj/qUVoDt4knoTs0N8cCh5eAIDwktUbD0rIoiFgUPMWu/DJo7CGXpLOGYSHtg0vP
yPoUDc89AlSgiOcQjP2rs7cEaH9r4tovR37SnF4igmHGhhN2nKuvVqU3QHpfUYmg
yTm0YHDvGrl1lR4JseoQG7zQ9TD5FdKWITiUgvfkaTbUkaag3as7rnwDPEeV3THL
5LQU0hlcPuc8weXqLI5Kld/xShQZxfMsyabtBkCAO3Rde3xCQM7nJJox6zWtOohX
J0xA97ai7WDVRtZ0DjqTLQXqB/mpnNkBMMStVTzo/jpB
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:34 2025 by rpki-client