Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/MARZcn3PxDCZs_fJzDqq1QpAfbI.roa
File: MARZcn3PxDCZs_fJzDqq1QpAfbI.roa (raw, json)
Hash identifier: W7m8BkJVfkm5Q3Tmr85+vFPPUJ8F6Bmq5nlauyDoQ1E=
Subject key identifier: 30:04:59:72:7D:CF:C4:30:99:B3:F7:C9:CC:3A:AA:D5:0A:40:7D:B2
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF444393ACEF53BD7E9AC22552586E0
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/MARZcn3PxDCZs_fJzDqq1QpAfbI.roa
Signing time: Fri 08 Dec 2023 19:42:51 +0000
ROA not before: Fri 08 Dec 2023 19:42:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8289
IP address blocks: 5.157.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f4:44:39:3a:ce:f5:3b:d7:e9:ac:22:55:25:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:42:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300459727dcfc43099b3f7c9cc3aaad50a407db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:9e:a3:4b:56:1e:63:02:a0:eb:e6:af:fd:
ae:05:b8:8b:ee:e7:99:d0:9f:56:09:ce:48:6f:7f:
e0:08:aa:22:f5:77:2e:ec:ba:f4:a0:95:78:da:50:
f6:89:9f:2c:0c:5e:d1:78:aa:4e:42:ba:f0:0c:23:
a9:54:3f:e3:ee:ca:e4:b0:34:27:8a:4f:ab:34:a5:
d4:14:bf:b2:fc:c2:d7:73:85:34:b0:4a:a7:a6:9a:
6c:93:34:30:e4:fb:0d:6c:08:ef:7a:87:34:c8:b0:
67:0f:56:64:e6:f4:22:39:a1:d7:cf:9c:56:e1:10:
05:a0:a8:ad:d5:b5:8a:f6:bc:e0:c8:80:9e:67:54:
ab:f7:d4:35:1c:8d:f4:e1:30:92:0c:dc:d1:b9:86:
7a:a1:88:56:42:55:77:90:52:11:a3:60:f7:48:54:
d4:60:ab:43:0d:87:5a:a9:f6:1c:31:89:3c:cb:ca:
39:ac:5b:e9:49:e1:e5:2b:fb:28:df:e3:e4:e9:d5:
c6:f9:44:b7:a0:d3:8d:51:15:e4:b9:45:4b:a5:b0:
77:5d:0e:c1:d0:d5:19:3c:ca:69:51:ae:c5:51:5e:
20:21:b9:bc:71:50:5c:97:14:f0:e1:cc:90:e2:83:
f2:69:16:bf:a0:17:5e:b6:0e:1e:8b:1e:ac:a3:68:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:59:72:7D:CF:C4:30:99:B3:F7:C9:CC:3A:AA:D5:0A:40:7D:B2
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/MARZcn3PxDCZs_fJzDqq1QpAfbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1f:1b:56:40:50:83:22:06:b7:a5:78:c4:1e:4c:61:42:84:
cc:58:81:f7:ce:7a:27:66:37:ab:b9:a1:6a:72:4a:77:88:75:
71:4b:fd:e7:e9:ab:cf:37:98:16:5f:c5:8c:9d:66:6c:8e:5b:
38:5a:e7:25:c5:dd:3e:62:5e:fb:48:c2:bb:55:01:e7:dc:23:
74:a1:1c:16:ba:37:a7:98:c4:0f:3d:61:81:09:73:ca:4d:b2:
6b:91:b7:3d:52:f2:00:ab:1f:5d:b2:b0:8f:3e:64:26:f9:99:
3c:f1:f7:94:84:9a:76:93:61:67:e9:50:6b:7a:5d:ca:9b:6e:
31:35:1f:55:34:d9:8b:d3:f5:ac:9b:dd:0b:ca:9b:31:2d:0b:
d4:1e:4f:85:71:41:3b:66:6a:1a:83:44:8c:cd:df:25:0c:9b:
a6:54:5d:d8:76:fa:42:76:61:f5:98:3a:2b:11:cc:0e:ab:df:
b6:bf:1d:d8:a2:92:30:77:c1:c9:56:f8:91:4d:02:b2:85:d7:
7e:52:4e:a2:63:25:68:59:aa:12:09:08:96:f7:ca:b4:a7:0b:
57:a9:c6:96:7c:3e:52:cf:aa:55:b7:41:87:05:86:5e:29:1c:
55:6e:e7:a0:6b:d0:3e:47:c9:77:20:95:c4:9f:3d:25:34:e5:
1c:90:6c:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxK9EQ5Os71O9fprCJVJYbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMjc2MDc1NjM0OTMzMzc2ODdhZDY5Y2UxMDY0ZTYzNjI2
NWJlM2YwHhcNMjMxMjA4MTk0MjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDA0NTk3MjdkY2ZjNDMwOTliM2Y3YzljYzNhYWFkNTBhNDA3ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4+eo0tWHmMCoOvmr/2uBbiL7ueZ
0J9WCc5Ib3/gCKoi9Xcu7Lr0oJV42lD2iZ8sDF7ReKpOQrrwDCOpVD/j7srksDQn
ik+rNKXUFL+y/MLXc4U0sEqnpppskzQw5PsNbAjveoc0yLBnD1Zk5vQiOaHXz5xW
4RAFoKit1bWK9rzgyICeZ1Sr99Q1HI304TCSDNzRuYZ6oYhWQlV3kFIRo2D3SFTU
YKtDDYdaqfYcMYk8y8o5rFvpSeHlK/so3+Pk6dXG+US3oNONURXkuUVLpbB3XQ7B
0NUZPMppUa7FUV4gIbm8cVBclxTw4cyQ4oPyaRa/oBdetg4eix6so2juMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAEWXJ9z8QwmbP3ycw6qtUKQH2yMB8GA1UdIwQY
MBaAFGMnYHVjSTM3aHrWnOEGTmNiZb4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXlkZ2RXTkpNemRvZXRhYzRRWk9ZMkpsdmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83MmE2N2ItMWQxYy00MjM1LWE0ODct
ZmM5MDkzZmVkYjFiLzEvTUFSWmNuM1B4RENac19mSnpEcXExUXBBZmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83MmE2N2ItMWQxYy00MjM1LWE0ODctZmM5MDkzZmVkYjFi
LzEvWXlkZ2RXTkpNemRvZXRhYzRRWk9ZMkpsdmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ0EMA0G
CSqGSIb3DQEBCwUAA4IBAQBrHxtWQFCDIga3pXjEHkxhQoTMWIH3znonZjeruaFq
ckp3iHVxS/3n6avPN5gWX8WMnWZsjls4Wuclxd0+Yl77SMK7VQHn3CN0oRwWujen
mMQPPWGBCXPKTbJrkbc9UvIAqx9dsrCPPmQm+Zk88feUhJp2k2Fn6VBrel3Km24x
NR9VNNmL0/Wsm90LypsxLQvUHk+FcUE7Zmoag0SMzd8lDJumVF3YdvpCdmH1mDor
EcwOq9+2vx3YopIwd8HJVviRTQKyhdd+Uk6iYyVoWaoSCQiW98q0pwtXqcaWfD5S
z6pVt0GHBYZeKRxVbuega9A+R8l3IJXEnz0lNOUckGzp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org