Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/dsV72QDMML0afN13jrtXOlxW2lQ.roa
File: dsV72QDMML0afN13jrtXOlxW2lQ.roa (raw, json)
Hash identifier: SwWO0dDfI17QDHj1wwjsOirWV5Z9rpjW0PoSXLzUSYw=
Subject key identifier: 76:C5:7B:D9:00:CC:30:BD:1A:7C:DD:77:8E:BB:57:3A:5C:56:DA:54
Certificate issuer: /CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Certificate serial: 01856DCAF131534613792998F162DB9B44EE
Authority key identifier: 4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/dsV72QDMML0afN13jrtXOlxW2lQ.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196924
IP address blocks: 195.191.126.0/24 maxlen: 24
195.191.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f1:31:53:46:13:79:29:98:f1:62:db:9b:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c57bd900cc30bd1a7cdd778ebb573a5c56da54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:d9:fa:63:20:32:d6:0d:d3:9b:69:76:12:
ad:4a:de:3a:75:3e:e9:66:87:be:33:de:82:af:03:
66:78:ee:ac:60:3b:92:70:1b:f8:f7:2d:87:56:72:
8f:4f:bb:97:3d:af:06:00:94:50:f5:24:ba:a5:5a:
ba:48:4b:1f:e5:01:c7:21:ed:e5:d4:4b:09:40:4e:
37:02:d6:5e:c3:eb:51:e8:9d:67:20:6a:ab:82:85:
03:ab:08:1b:fa:02:5f:88:46:7c:fd:82:7d:71:11:
bf:2a:b6:4e:39:db:88:1f:24:44:88:a4:89:e7:18:
63:80:96:f1:8e:b4:4f:30:3b:c3:10:a4:b8:60:8d:
a9:26:db:c7:5c:01:7a:50:3d:88:0f:dc:a9:46:49:
23:ed:c9:76:08:68:bb:e1:79:3a:5c:9c:db:fb:70:
5a:92:b5:47:49:ed:f8:ac:ff:12:d8:14:65:ee:a3:
7e:0a:b1:1e:13:19:07:17:3b:f8:98:63:14:13:1e:
59:d0:84:1b:e5:da:2e:81:01:ee:5d:4f:c3:d3:71:
4b:f4:f8:0e:df:7a:80:e0:51:8c:c5:3d:47:b8:bc:
48:de:99:f2:39:e6:8e:73:32:a7:68:ad:ca:a2:ff:
b8:10:0f:b3:fa:7f:1f:01:01:b6:17:9c:11:5a:d7:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:7B:D9:00:CC:30:BD:1A:7C:DD:77:8E:BB:57:3A:5C:56:DA:54
X509v3 Authority Key Identifier:
keyid:4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/dsV72QDMML0afN13jrtXOlxW2lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:8a:8c:53:37:70:4d:10:3b:58:23:b1:11:f1:0e:17:0c:ce:
a5:dd:ac:a3:84:63:46:bd:f3:17:5e:46:13:f8:36:ba:6e:35:
df:1b:eb:03:1a:18:1f:f1:24:b5:9f:58:36:dc:76:4e:77:84:
25:11:3f:c9:53:2c:71:68:8b:16:10:0f:64:ee:09:40:0e:08:
07:91:53:49:e0:18:86:75:fe:fc:8e:28:b2:53:ca:9c:c9:51:
b8:69:b9:f9:40:e2:b4:2b:0b:7c:9b:be:f6:10:8d:7f:37:0b:
9c:e6:c9:23:d3:3b:b9:2f:66:83:36:17:d9:e1:3a:14:10:68:
84:1f:89:4b:8a:22:a5:d2:97:ed:c9:b2:aa:e2:f9:31:28:1f:
57:39:75:ad:f7:76:e3:68:93:e1:83:c1:b9:97:14:04:c8:09:
bf:76:60:84:e3:df:80:75:11:57:0e:12:23:de:4d:c1:14:a7:
75:15:76:69:fa:ad:13:88:f1:ae:45:ca:cb:ae:4f:12:53:80:
79:07:7a:eb:2d:0e:9f:f5:cc:a5:44:f1:d5:a0:c5:c4:fe:86:
10:31:c6:d5:fb:15:44:ed:e9:8c:67:de:6a:ff:2f:e8:f8:88:
48:7f:20:7c:7d:dc:dc:b6:65:89:94:32:20:2c:22:b4:b2:03:
ee:4b:f6:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyvExU0YTeSmY8WLbm0TuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWM3MTgyZmI0OWIyZDk4ZTA2MDM4Y2I0ZjhkYzIxYzcx
NzFiODUwHhcNMjMwMTAxMTQ0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmM1N2JkOTAwY2MzMGJkMWE3Y2RkNzc4ZWJiNTczYTVjNTZkYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXzZ+mMgMtYN05tpdhKtSt46dT7p
Zoe+M96CrwNmeO6sYDuScBv49y2HVnKPT7uXPa8GAJRQ9SS6pVq6SEsf5QHHIe3l
1EsJQE43AtZew+tR6J1nIGqrgoUDqwgb+gJfiEZ8/YJ9cRG/KrZOOduIHyREiKSJ
5xhjgJbxjrRPMDvDEKS4YI2pJtvHXAF6UD2ID9ypRkkj7cl2CGi74Xk6XJzb+3Ba
krVHSe34rP8S2BRl7qN+CrEeExkHFzv4mGMUEx5Z0IQb5dougQHuXU/D03FL9PgO
33qA4FGMxT1HuLxI3pnyOeaOczKnaK3Kov+4EA+z+n8fAQG2F5wRWtdRiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbFe9kAzDC9Gnzdd467VzpcVtpUMB8GA1UdIwQY
MBaAFE+ccYL7SbLZjgYDjLT43CHHFxuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDV4eGd2dEpzdG1PQmdPTXRQamNJY2NYRzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNDliY2EtNjhmZS00Y2Q1LWFkZmIt
NjRlNTc4MzhhZjYwLzEvZHNWNzJRRE1NTDBhZk4xM2pydFhPbHhXMmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yNDliY2EtNjhmZS00Y2Q1LWFkZmItNjRlNTc4MzhhZjYw
LzEvVDV4eGd2dEpzdG1PQmdPTXRQamNJY2NYRzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79+MA0G
CSqGSIb3DQEBCwUAA4IBAQC1ioxTN3BNEDtYI7ER8Q4XDM6l3ayjhGNGvfMXXkYT
+Da6bjXfG+sDGhgf8SS1n1g23HZOd4QlET/JUyxxaIsWEA9k7glADggHkVNJ4BiG
df78jiiyU8qcyVG4abn5QOK0Kwt8m772EI1/Nwuc5skj0zu5L2aDNhfZ4ToUEGiE
H4lLiiKl0pftybKq4vkxKB9XOXWt93bjaJPhg8G5lxQEyAm/dmCE49+AdRFXDhIj
3k3BFKd1FXZp+q0TiPGuRcrLrk8SU4B5B3rrLQ6f9cylRPHVoMXE/oYQMcbV+xVE
7emMZ95q/y/o+IhIfyB8fdzctmWJlDIgLCK0sgPuS/ax
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:29 2024 by rpki-client on console-fra.rpki-client.org