Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/j_Rv-dM6LSxgYF9EI7c6ePyGweU.roa
File: j_Rv-dM6LSxgYF9EI7c6ePyGweU.roa (raw, json)
Hash identifier: g9h4fDViTqR2YfVwmqZU+WOgE/wRRha/CNd+onsXS+c=
Subject key identifier: 8F:F4:6F:F9:D3:3A:2D:2C:60:60:5F:44:23:B7:3A:78:FC:86:C1:E5
Certificate issuer: /CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Certificate serial: 01863A9A7C02EC660EF7CA15D26B8424E94E
Authority key identifier: 05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/j_Rv-dM6LSxgYF9EI7c6ePyGweU.roa
Signing time: Fri 10 Feb 2023 09:14:07 +0000
ROA not before: Fri 10 Feb 2023 09:14:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209529
IP address blocks: 185.228.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:9a:7c:02:ec:66:0e:f7:ca:15:d2:6b:84:24:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Validity
Not Before: Feb 10 09:14:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ff46ff9d33a2d2c60605f4423b73a78fc86c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:82:05:35:d3:fc:58:a3:94:fe:9b:78:d7:
25:3c:60:6f:7d:23:a0:7a:ae:63:fe:d7:63:58:a7:
d2:a1:8b:d8:67:f4:d5:c0:27:fa:38:bf:ec:28:44:
57:7e:eb:03:01:e9:19:f7:8a:57:a7:01:2c:e3:81:
89:d1:ce:41:84:bc:28:39:95:ee:ad:01:fc:82:49:
6e:fc:f2:89:b0:74:14:5d:bf:32:db:81:db:f1:70:
4c:22:5c:40:e7:f8:5d:f2:68:51:6c:ef:29:b2:96:
ae:6c:fa:6b:a3:f5:31:11:11:6b:64:f7:6e:89:18:
5e:60:5a:9b:e7:d5:6f:f6:11:62:bf:9a:c7:1e:c3:
0b:92:0e:e1:a9:40:9b:ec:9d:66:53:64:d6:15:c5:
3c:55:4c:59:f2:05:93:c8:7a:80:61:fc:8f:eb:c3:
57:c3:fd:ff:3c:7f:9e:e4:df:68:27:e0:1c:2b:37:
04:33:bd:4d:6e:4b:5b:48:b6:dd:d0:8b:fc:d3:a7:
8b:88:a6:29:f9:17:26:23:b6:f8:83:d9:5f:fa:84:
61:dc:64:31:84:97:15:55:37:de:cf:9b:5d:af:1a:
5e:99:25:d6:66:0a:7b:4b:22:7e:f4:55:75:79:ab:
7d:19:06:c9:8d:6b:aa:fa:ad:b2:eb:51:17:25:38:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:6F:F9:D3:3A:2D:2C:60:60:5F:44:23:B7:3A:78:FC:86:C1:E5
X509v3 Authority Key Identifier:
keyid:05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/j_Rv-dM6LSxgYF9EI7c6ePyGweU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:1a:b6:b0:e9:0e:98:6f:10:f6:aa:e0:50:e5:11:ba:75:28:
b7:91:fb:c6:6c:f8:09:03:55:29:9b:7b:7e:73:9b:a8:4e:f7:
01:74:1b:ea:24:2f:6e:71:70:9f:79:a0:99:fc:84:42:4c:70:
2e:54:db:b0:90:ed:c4:a0:9f:d8:15:00:28:35:cb:1b:5f:2a:
85:06:45:98:dc:ba:39:81:69:96:cf:65:1d:8b:08:1d:cd:d1:
53:09:83:a8:0d:d4:ea:41:99:14:d1:52:11:2d:56:7e:c5:ef:
63:0d:dd:81:40:67:9e:ee:e3:31:b9:fa:76:ba:1c:9a:50:50:
24:85:6f:80:2e:7e:a3:95:7a:f8:dc:05:a7:dd:1c:96:c3:5b:
22:8a:f3:d6:90:3b:cc:02:85:74:9a:0c:d6:1e:30:c5:12:4b:
9e:56:1e:c2:a4:ec:ac:b1:e1:36:50:db:29:cb:32:67:08:a4:
89:65:34:10:25:74:32:c3:53:52:9c:8e:47:65:cf:26:6b:f4:
38:1b:24:c4:08:cc:88:e1:87:7b:20:ba:44:15:87:ae:95:b3:
45:94:b8:58:56:ee:b5:3c:72:52:70:7e:a3:a9:ab:d8:f5:55:
72:4c:fd:9c:d0:7e:ad:50:ba:31:cb:79:b7:ed:cb:bf:ab:10:
0a:43:5c:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY6mnwC7GYO98oV0muEJOlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjY0Nzc1MGJmNTJmNzdhOWM5MWMyZDY4NjRlODcxYzFh
YWZhOWYwHhcNMjMwMjEwMDkxNDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY0NmZmOWQzM2EyZDJjNjA2MDVmNDQyM2I3M2E3OGZjODZjMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h2CBTXT/FijlP6beNclPGBvfSOg
eq5j/tdjWKfSoYvYZ/TVwCf6OL/sKERXfusDAekZ94pXpwEs44GJ0c5BhLwoOZXu
rQH8gklu/PKJsHQUXb8y24Hb8XBMIlxA5/hd8mhRbO8pspaubPpro/UxERFrZPdu
iRheYFqb59Vv9hFiv5rHHsMLkg7hqUCb7J1mU2TWFcU8VUxZ8gWTyHqAYfyP68NX
w/3/PH+e5N9oJ+AcKzcEM71NbktbSLbd0Iv806eLiKYp+RcmI7b4g9lf+oRh3GQx
hJcVVTfez5tdrxpemSXWZgp7SyJ+9FV1eat9GQbJjWuq+q2y61EXJThPiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/0b/nTOi0sYGBfRCO3Onj8hsHlMB8GA1UdIwQY
MBaAFAVmR3UL9S93qckcLWhk6HHBqvqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldaSGRRdjFMM2VweVJ3dGFHVG9jY0dxLXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lZGY3OTUtZWM5Mi00MGQ2LWI0NmQt
YWZiMWQ4NWM5NWE4LzEval9Sdi1kTTZMU3hnWUY5RUk3YzZlUHlHd2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lZGY3OTUtZWM5Mi00MGQ2LWI0NmQtYWZiMWQ4NWM5NWE4
LzEvQldaSGRRdjFMM2VweVJ3dGFHVG9jY0dxLXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueTcMA0G
CSqGSIb3DQEBCwUAA4IBAQBOGraw6Q6YbxD2quBQ5RG6dSi3kfvGbPgJA1Upm3t+
c5uoTvcBdBvqJC9ucXCfeaCZ/IRCTHAuVNuwkO3EoJ/YFQAoNcsbXyqFBkWY3Lo5
gWmWz2UdiwgdzdFTCYOoDdTqQZkU0VIRLVZ+xe9jDd2BQGee7uMxufp2uhyaUFAk
hW+ALn6jlXr43AWn3RyWw1siivPWkDvMAoV0mgzWHjDFEkueVh7CpOysseE2UNsp
yzJnCKSJZTQQJXQyw1NSnI5HZc8ma/Q4GyTECMyI4Yd7ILpEFYeulbNFlLhYVu61
PHJScH6jqavY9VVyTP2c0H6tULoxy3m37cu/qxAKQ1wM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-fra.rpki-client.org