Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/UHH85G1bVy1ph4y6QNW0FrpgGuc.roa
File: UHH85G1bVy1ph4y6QNW0FrpgGuc.roa (raw, json)
Hash identifier: YHfxaz+wHg5recc2kfKZRfudwK23jl/xH/0QJLAVtQ4=
Subject key identifier: 50:71:FC:E4:6D:5B:57:2D:69:87:8C:BA:40:D5:B4:16:BA:60:1A:E7
Certificate issuer: /CN=fedc87c4c22e4a6c431246d4acd64c51c32fae5c
Certificate serial: 095A43E5
Authority key identifier: FE:DC:87:C4:C2:2E:4A:6C:43:12:46:D4:AC:D6:4C:51:C3:2F:AE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tyHxMIuSmxDEkbUrNZMUcMvrlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/UHH85G1bVy1ph4y6QNW0FrpgGuc.roa
Signing time: Sat 01 Jan 2022 15:01:10 +0000
ROA not before: Sat 01 Jan 2022 15:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44306
IP address blocks: 91.233.36.0/24 maxlen: 24
91.233.36.0/23 maxlen: 23
91.233.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156910565 (0x95a43e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedc87c4c22e4a6c431246d4acd64c51c32fae5c
Validity
Not Before: Jan 1 15:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5071fce46d5b572d69878cba40d5b416ba601ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:00:d4:25:60:2c:a2:5a:d9:d6:33:04:da:
61:77:ca:64:33:c1:c5:ee:d4:b8:ca:25:e5:25:57:
dc:ca:d2:12:fa:34:08:2e:f7:a3:86:fd:67:0a:a7:
4a:02:a5:00:a7:66:a8:89:84:91:27:17:46:3b:31:
0f:61:ae:52:25:d7:1f:06:af:06:eb:23:e5:98:42:
1c:14:a7:ad:de:82:3c:4b:d4:96:c5:21:d6:57:2f:
9b:b0:83:f6:ca:d0:3f:a1:50:6f:fd:b5:cf:d2:c2:
a2:82:86:e3:c6:3a:75:20:86:a2:e7:20:8a:5e:a6:
a3:0b:2f:88:53:00:af:b2:fc:99:b4:49:5c:4b:5d:
e9:2c:7f:2d:8a:a0:b5:b7:09:ff:94:70:8a:b8:c0:
4f:09:99:2d:27:a0:99:62:da:3e:73:ab:50:2e:4d:
ff:c5:d4:6b:af:9d:49:c2:42:6e:db:08:fa:dc:bb:
e9:31:94:21:10:75:de:d8:9c:fc:6b:b8:d3:71:43:
e8:01:7f:78:54:6f:82:4e:ad:57:13:37:da:ab:f5:
98:c6:2e:ed:c7:33:93:2b:89:48:ec:e3:97:79:72:
c9:06:ad:0b:94:ea:fa:aa:f6:59:bb:80:03:3a:49:
97:c9:c8:01:0c:fa:1d:27:72:72:90:f6:ea:3c:df:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:71:FC:E4:6D:5B:57:2D:69:87:8C:BA:40:D5:B4:16:BA:60:1A:E7
X509v3 Authority Key Identifier:
keyid:FE:DC:87:C4:C2:2E:4A:6C:43:12:46:D4:AC:D6:4C:51:C3:2F:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tyHxMIuSmxDEkbUrNZMUcMvrlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/UHH85G1bVy1ph4y6QNW0FrpgGuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/_tyHxMIuSmxDEkbUrNZMUcMvrlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.36.0/23
Signature Algorithm: sha256WithRSAEncryption
08:49:a5:9b:4f:1e:ed:4a:d4:f3:e9:80:3a:42:95:61:10:bf:
7e:7f:db:f7:83:f7:a6:82:4b:b2:46:ac:c5:29:48:7d:d1:3c:
66:9d:b8:0f:fd:a9:c0:9c:81:2f:e3:b7:75:12:3c:27:04:32:
4c:b4:a3:b8:78:8a:42:b8:aa:88:96:7a:dd:49:71:b9:09:d9:
8c:38:eb:11:e7:0d:3e:47:fd:71:e1:ad:35:f7:fb:1b:b8:8f:
7d:70:15:41:6b:86:25:61:33:f8:91:41:dd:81:c0:9f:ff:03:
87:34:98:2a:db:5b:99:ec:3c:bc:39:d2:fb:fe:c7:6b:32:f5:
8f:d4:61:9c:29:7e:94:6d:39:8a:e0:c3:53:17:71:30:66:05:
64:30:ff:d2:67:9b:11:1d:13:41:0e:ff:74:f1:d0:df:bf:30:
77:ff:d7:07:42:ea:a1:65:14:16:2a:2a:1f:79:78:9e:16:62:
b4:93:98:e1:ff:44:0a:b4:03:ba:4a:3a:68:2a:5c:50:37:df:
44:a1:62:9f:45:98:e2:d6:44:60:f2:2e:09:5e:53:ab:28:60:
34:96:42:72:d4:6f:1e:50:96:04:be:fd:30:e0:d2:66:41:b5:
01:da:a7:d0:7b:b5:62:4b:15:9b:09:7a:1d:3f:b6:27:c4:98:
b0:1d:cd:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECVpD5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWRjODdjNGMyMmU0YTZjNDMxMjQ2ZDRhY2Q2NGM1MWMzMmZhZTVjMB4XDTIyMDEw
MTE1MDExMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTA3MWZjZTQ2ZDVi
NTcyZDY5ODc4Y2JhNDBkNWI0MTZiYTYwMWFlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJRaANQlYCyiWtnWMwTaYXfKZDPBxe7UuMol5SVX3MrSEvo0
CC73o4b9ZwqnSgKlAKdmqImEkScXRjsxD2GuUiXXHwavBusj5ZhCHBSnrd6CPEvU
lsUh1lcvm7CD9srQP6FQb/21z9LCooKG48Y6dSCGoucgil6mowsviFMAr7L8mbRJ
XEtd6Sx/LYqgtbcJ/5RwirjATwmZLSegmWLaPnOrUC5N/8XUa6+dScJCbtsI+ty7
6TGUIRB13tic/Gu403FD6AF/eFRvgk6tVxM32qv1mMYu7cczkyuJSOzjl3lyyQat
C5Tq+qr2WbuAAzpJl8nIAQz6HSdycpD26jzfiXUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQcfzkbVtXLWmHjLpA1bQWumAa5zAfBgNVHSMEGDAWgBT+3IfEwi5KbEMS
RtSs1kxRwy+uXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L190eUh4TUl1U214REVrYlVyTlpNVWNNdnJsdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvOThkYzlhLWQ3NjYtNDRmOS05NGUxLTk0NDUzNTI3NWU1Zi8x
L1VISDg1RzFiVnkxcGg0eTZRTlcwRnJwZ0d1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
OThkYzlhLWQ3NjYtNDRmOS05NGUxLTk0NDUzNTI3NWU1Zi8xL190eUh4TUl1U214
REVrYlVyTlpNVWNNdnJsdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvpJDANBgkqhkiG9w0BAQsFAAOC
AQEACEmlm08e7UrU8+mAOkKVYRC/fn/b94P3poJLskasxSlIfdE8Zp24D/2pwJyB
L+O3dRI8JwQyTLSjuHiKQriqiJZ63UlxuQnZjDjrEecNPkf9ceGtNff7G7iPfXAV
QWuGJWEz+JFB3YHAn/8DhzSYKttbmew8vDnS+/7HazL1j9RhnCl+lG05iuDDUxdx
MGYFZDD/0mebER0TQQ7/dPHQ378wd//XB0LqoWUUFioqH3l4nhZitJOY4f9ECrQD
uko6aCpcUDffRKFin0WY4tZEYPIuCV5TqyhgNJZCctRvHlCWBL79MODSZkG1Adqn
0Hu1YksVmwl6HT+2J8SYsB3NIg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:22 2023 by rpki-client on console-ams.rpki-client.org