Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/xM_xcu1l8Kcm7h8CMMhT9QfnFeM.roa
File: xM_xcu1l8Kcm7h8CMMhT9QfnFeM.roa (raw, json)
Hash identifier: d09mZMP9BklB9H/icDFpVuD8fF/AEL7Yj/a0EzlQGjs=
Subject key identifier: C4:CF:F1:72:ED:65:F0:A7:26:EE:1F:02:30:C8:53:F5:07:E7:15:E3
Certificate issuer: /CN=b4b58721100907bf34f0d93fa54973fd2f4df707
Certificate serial: 0185735EFD9C4D7449B0D7218558A732DA23
Authority key identifier: B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLWHIRAJB7808Nk_pUlz_S9N9wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/xM_xcu1l8Kcm7h8CMMhT9QfnFeM.roa
Signing time: Mon 02 Jan 2023 16:44:43 +0000
ROA not before: Mon 02 Jan 2023 16:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62453
IP address blocks: 94.103.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5e:fd:9c:4d:74:49:b0:d7:21:85:58:a7:32:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b58721100907bf34f0d93fa54973fd2f4df707
Validity
Not Before: Jan 2 16:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4cff172ed65f0a726ee1f0230c853f507e715e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:d9:ed:e1:55:00:c9:e5:65:ce:e5:03:ff:
9b:9b:cd:21:a9:80:6f:5f:88:57:c5:78:b8:4d:40:
79:86:3e:a7:cf:a1:d9:ca:b6:f8:c7:f7:91:7b:cb:
98:7f:f8:03:9b:3a:3c:0a:1e:f3:a2:cf:05:23:31:
74:e3:f2:81:66:82:04:98:0d:84:a9:99:dc:a4:1c:
e2:b0:45:32:3c:f7:b1:b2:f1:b4:5e:5f:66:49:a5:
e9:cf:6e:ea:2f:fc:c0:f1:7c:8a:85:96:f3:63:87:
b8:19:a7:71:c2:52:04:20:22:3b:30:91:3f:cb:4c:
da:24:a5:6f:77:74:f1:fc:7a:3a:94:f8:45:fc:8b:
38:29:ee:98:e6:68:38:d9:0c:7c:09:92:43:ee:14:
fe:0f:89:cc:c5:ad:77:02:df:cf:75:e8:2f:11:96:
f8:7b:37:cb:0d:cf:82:ad:b1:e7:d5:51:e7:c6:8e:
bf:e2:48:03:0e:b3:1f:c4:6a:35:58:76:6d:0a:15:
6f:35:4e:87:47:7c:a1:bc:05:ae:55:5e:8b:25:7c:
c6:29:fa:b6:53:32:ff:b9:3e:fc:a6:7f:07:22:d3:
32:fc:bc:fe:fd:97:03:8d:f1:24:ed:c8:97:cc:ba:
1d:b7:70:1f:ef:15:ff:45:cc:db:90:a8:c4:13:2b:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:F1:72:ED:65:F0:A7:26:EE:1F:02:30:C8:53:F5:07:E7:15:E3
X509v3 Authority Key Identifier:
keyid:B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLWHIRAJB7808Nk_pUlz_S9N9wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/xM_xcu1l8Kcm7h8CMMhT9QfnFeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.48.0/20
Signature Algorithm: sha256WithRSAEncryption
39:76:0b:f5:ed:10:a0:bd:b6:64:6f:f5:de:62:ee:75:31:78:
a7:dd:b5:eb:e1:6b:b6:71:95:fc:8b:8a:67:c6:cc:d1:8b:4a:
af:3f:91:e3:f3:8b:5a:50:12:81:fe:cb:e2:56:31:db:d3:28:
7a:95:da:f1:a3:6d:32:1f:d6:70:67:22:19:c1:31:89:ac:04:
b3:2d:a7:68:1e:c6:fa:64:93:c5:26:17:a3:f0:2a:dc:19:68:
3b:a6:1b:d9:50:b4:c3:17:a5:90:0e:0c:3d:4e:93:dd:35:0f:
88:71:de:94:6a:c5:26:ec:2b:92:9e:69:88:ce:e1:29:93:f9:
f2:ba:15:bb:af:9f:b2:04:8a:8b:88:70:ad:f5:f3:7f:34:be:
48:fd:43:b5:b7:f7:89:0d:4a:4c:1f:1f:4b:9f:8c:90:62:ad:
25:da:0c:7f:44:e2:a5:ab:2f:8a:cf:d5:04:c0:d6:0a:b5:b8:
33:82:1c:15:c2:78:20:62:9f:5e:96:c2:8e:f8:e8:2d:16:fc:
6a:2c:86:fe:c3:f8:30:ef:56:1c:be:e6:85:6a:75:13:23:5b:
23:5e:9e:db:9f:18:87:b5:87:90:33:6a:65:cd:d6:91:5f:5c:
ef:cc:bc:31:1c:f1:ab:5d:a3:98:3b:cc:32:19:4f:42:27:a9:
71:37:ef:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzXv2cTXRJsNchhVinMtojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjU4NzIxMTAwOTA3YmYzNGYwZDkzZmE1NDk3M2ZkMmY0
ZGY3MDcwHhcNMjMwMTAyMTY0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGNmZjE3MmVkNjVmMGE3MjZlZTFmMDIzMGM4NTNmNTA3ZTcxNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt93Z7eFVAMnlZc7lA/+bm80hqYBv
X4hXxXi4TUB5hj6nz6HZyrb4x/eRe8uYf/gDmzo8Ch7zos8FIzF04/KBZoIEmA2E
qZncpBzisEUyPPexsvG0Xl9mSaXpz27qL/zA8XyKhZbzY4e4GadxwlIEICI7MJE/
y0zaJKVvd3Tx/Ho6lPhF/Is4Ke6Y5mg42Qx8CZJD7hT+D4nMxa13At/PdegvEZb4
ezfLDc+CrbHn1VHnxo6/4kgDDrMfxGo1WHZtChVvNU6HR3yhvAWuVV6LJXzGKfq2
UzL/uT78pn8HItMy/Lz+/ZcDjfEk7ciXzLodt3Af7xX/RczbkKjEEytEqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTP8XLtZfCnJu4fAjDIU/UH5xXjMB8GA1UdIwQY
MBaAFLS1hyEQCQe/NPDZP6VJc/0vTfcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExXSElSQUpCNzgwOE5rX3BVbHpfUzlOOXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85Y2FlM2EtMDhiYS00NjZhLTlhOWEt
YzczMGM0OTE2ODc5LzEveE1feGN1MWw4S2NtN2g4Q01NaFQ5UWZuRmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85Y2FlM2EtMDhiYS00NjZhLTlhOWEtYzczMGM0OTE2ODc5
LzEvdExXSElSQUpCNzgwOE5rX3BVbHpfUzlOOXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXmcwMA0G
CSqGSIb3DQEBCwUAA4IBAQA5dgv17RCgvbZkb/XeYu51MXin3bXr4Wu2cZX8i4pn
xszRi0qvP5Hj84taUBKB/sviVjHb0yh6ldrxo20yH9ZwZyIZwTGJrASzLadoHsb6
ZJPFJhej8CrcGWg7phvZULTDF6WQDgw9TpPdNQ+Icd6UasUm7CuSnmmIzuEpk/ny
uhW7r5+yBIqLiHCt9fN/NL5I/UO1t/eJDUpMHx9Ln4yQYq0l2gx/ROKlqy+Kz9UE
wNYKtbgzghwVwnggYp9elsKO+OgtFvxqLIb+w/gw71YcvuaFanUTI1sjXp7bnxiH
tYeQM2plzdaRX1zvzLwxHPGrXaOYO8wyGU9CJ6lxN+/G
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-fra.rpki-client.org