Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa
File: mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa (raw, json)
Hash identifier: QGQBzQw8tI7IQ0ysvVGKLEJwY9qLBMQI0p/WhF3JttY=
Subject key identifier: 99:16:22:5D:CA:34:CB:35:8E:8F:CC:60:6C:07:35:47:90:F5:07:F6
Certificate issuer: /CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Certificate serial: 01882086B178F3ADEB4D98F427790A22ED4B
Authority key identifier: BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.161.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:78:f3:ad:eb:4d:98:f4:27:79:0a:22:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9916225dca34cb358e8fcc606c07354790f507f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:bc:22:1c:9d:db:52:03:c5:b4:db:58:ba:
28:de:f1:ab:dc:57:85:36:54:18:68:06:d1:3d:71:
68:ab:0d:ca:a1:06:08:e9:52:19:ee:30:0d:97:12:
15:16:41:6d:dd:21:c2:85:0a:95:09:f2:a9:4d:12:
f5:1b:d6:87:1b:5d:6d:cd:3b:07:7c:a6:c7:4b:87:
05:11:4f:02:0c:3d:9f:f8:aa:71:50:2f:5e:cf:25:
ef:c0:67:8d:e2:6a:57:00:91:c3:dc:dc:ed:a0:28:
04:06:7f:f5:a2:ac:8c:15:f3:03:0e:5f:e1:92:fc:
ec:d3:5e:d4:b0:0e:25:84:11:b5:c8:6c:53:4c:d9:
f9:a7:cb:cc:d2:8e:f8:c1:37:a5:3a:1e:61:a8:ea:
18:74:0d:52:09:83:e4:50:84:24:4b:a7:48:3c:84:
51:64:03:d9:34:b9:32:4d:74:fb:2c:75:92:5a:3c:
a0:16:ae:ca:fe:17:e9:d8:ea:d2:4d:62:04:11:09:
03:94:d8:8a:34:14:d8:5b:84:f0:cb:6a:18:6c:af:
47:3c:fc:b2:e0:ba:d8:12:bd:59:32:28:6e:77:f4:
96:b5:94:f3:6d:cc:4b:f4:e0:a0:32:b7:68:05:85:
0f:16:d2:ea:9e:e0:b5:5f:78:78:b1:c6:5a:d7:a7:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:22:5D:CA:34:CB:35:8E:8F:CC:60:6C:07:35:47:90:F5:07:F6
X509v3 Authority Key Identifier:
keyid:BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fa:7c:87:5b:68:e0:26:7c:b3:8e:24:dd:4f:b9:d4:1b:3d:
c9:99:97:7e:11:02:5a:6b:b8:9f:49:af:d4:90:17:cd:ba:dd:
ad:b8:51:38:cd:5f:ca:09:be:ca:80:0f:25:5b:bb:ad:e9:96:
92:66:f8:8f:fa:a1:7d:72:da:cc:a0:e6:d6:db:41:8e:17:b2:
f5:03:c1:c0:11:79:78:a6:ff:30:d6:92:3f:41:b4:a4:e8:24:
06:6b:32:c7:ce:e7:25:5a:98:a3:1f:83:97:01:d6:c0:15:32:
cf:17:24:c8:73:ac:75:89:ef:a9:1a:ac:d5:97:35:c4:4b:2c:
bc:c1:ea:23:71:ae:98:a6:3b:13:46:1a:6a:1b:bb:55:6b:92:
43:27:5c:1d:22:e0:47:03:e8:b8:ed:2b:3d:7c:f0:a8:51:b7:
2e:7c:fe:4b:f1:6e:d7:e2:8e:fe:a1:fb:5d:5a:d6:06:c2:f5:
fe:26:13:16:87:b0:20:61:96:09:b1:ba:78:7d:8f:be:e2:3e:
d8:22:f1:05:47:7d:41:3e:63:51:66:ca:5e:80:34:89:16:c3:
7b:32:c6:c1:c4:0e:56:5b:39:fd:84:34:d3:58:1b:37:90:7e:
3b:67:e8:26:73:d0:8e:1c:c8:4e:40:3a:8b:bb:0b:a0:b6:01:
47:55:26:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrF4863rTZj0J3kKIu1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmMxMmM0OTljZWIxYzYxMjA0NjI1MzI2ZjAwZWRhN2I1
MjU3ZDAwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTE2MjI1ZGNhMzRjYjM1OGU4ZmNjNjA2YzA3MzU0NzkwZjUwN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK68Ihyd21IDxbTbWLoo3vGr3FeF
NlQYaAbRPXFoqw3KoQYI6VIZ7jANlxIVFkFt3SHChQqVCfKpTRL1G9aHG11tzTsH
fKbHS4cFEU8CDD2f+KpxUC9ezyXvwGeN4mpXAJHD3NztoCgEBn/1oqyMFfMDDl/h
kvzs017UsA4lhBG1yGxTTNn5p8vM0o74wTelOh5hqOoYdA1SCYPkUIQkS6dIPIRR
ZAPZNLkyTXT7LHWSWjygFq7K/hfp2OrSTWIEEQkDlNiKNBTYW4Twy2oYbK9HPPyy
4LrYEr1ZMihud/SWtZTzbcxL9OCgMrdoBYUPFtLqnuC1X3h4scZa16cVTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkWIl3KNMs1jo/MYGwHNUeQ9Qf2MB8GA1UdIwQY
MBaAFLz8EsSZzrHGEgRiUybwDtp7UlfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlB3U3hKbk9zY1lTQkdKVEp2QU8ybnRTVjlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82MGI0NTgtMTMxZC00NTgxLWE4NDAt
NmMwM2ZkYmQ4ZDE3LzEvbVJZaVhjbzB5eldPajh4Z2JBYzFSNUQxQl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82MGI0NTgtMTMxZC00NTgxLWE4NDAtNmMwM2ZkYmQ4ZDE3
LzEvdlB3U3hKbk9zY1lTQkdKVEp2QU8ybnRTVjlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaF7MA0G
CSqGSIb3DQEBCwUAA4IBAQBh+nyHW2jgJnyzjiTdT7nUGz3JmZd+EQJaa7ifSa/U
kBfNut2tuFE4zV/KCb7KgA8lW7ut6ZaSZviP+qF9ctrMoObW20GOF7L1A8HAEXl4
pv8w1pI/QbSk6CQGazLHzuclWpijH4OXAdbAFTLPFyTIc6x1ie+pGqzVlzXESyy8
weojca6YpjsTRhpqG7tVa5JDJ1wdIuBHA+i47Ss9fPCoUbcufP5L8W7X4o7+oftd
WtYGwvX+JhMWh7AgYZYJsbp4fY++4j7YIvEFR31BPmNRZspegDSJFsN7MsbBxA5W
Wzn9hDTTWBs3kH47Z+gmc9COHMhOQDqLuwugtgFHVSZC
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org