Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UcCAvJbTeEwYEEwfea-V5qkpsGU.roa
File: UcCAvJbTeEwYEEwfea-V5qkpsGU.roa (raw, json)
Hash identifier: +ebbYiGVCueL/9los0vH8Z9MFWypmlJOYVAyBS+d23s=
Subject key identifier: 51:C0:80:BC:96:D3:78:4C:18:10:4C:1F:79:AF:95:E6:A9:29:B0:65
Certificate issuer: /CN=bf174a5833bde6aa7824c34099762d00978857ff
Certificate serial: 01855E891AEAD772F30B7BB44F93E02336A2
Authority key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UcCAvJbTeEwYEEwfea-V5qkpsGU.roa
Signing time: Thu 29 Dec 2022 15:38:41 +0000
ROA not before: Thu 29 Dec 2022 15:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25384
IP address blocks: 193.163.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:89:1a:ea:d7:72:f3:0b:7b:b4:4f:93:e0:23:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf174a5833bde6aa7824c34099762d00978857ff
Validity
Not Before: Dec 29 15:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c080bc96d3784c18104c1f79af95e6a929b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:c6:8f:90:e2:1c:34:82:38:75:ba:38:71:
c5:04:5a:b3:cb:17:67:71:e0:4c:8d:87:a8:3e:14:
a0:9c:3b:90:e0:bb:b4:cf:f7:69:8b:82:c2:cb:a3:
3e:46:ae:d4:4c:af:dd:85:fd:43:4f:eb:88:c8:3f:
d6:d6:06:79:c6:11:7d:9e:dc:14:f8:0d:d5:c6:1b:
d3:e5:f3:5f:01:93:c0:b6:b2:a6:19:4b:cf:56:8b:
c7:80:7e:e1:3c:59:8b:b8:57:64:1b:25:13:75:ec:
b9:ec:8d:bf:05:5c:14:42:06:74:a7:c0:29:4c:f2:
5f:c7:92:e6:c4:9a:22:8b:10:62:8d:2e:3e:ab:b9:
4a:6d:66:01:82:10:3e:e9:bf:be:9c:55:46:e4:78:
61:30:8a:b8:3a:c9:b6:78:cd:62:6e:ab:75:73:d5:
d9:6e:a4:48:75:ad:4c:94:a0:b9:c0:72:10:83:9d:
5e:d5:2d:10:70:e3:12:1d:71:70:5b:fd:1e:18:ab:
c4:8c:75:24:18:04:8b:0c:3b:63:70:be:e3:eb:f7:
d7:a0:4c:90:2d:73:d3:df:d0:3c:46:ca:13:95:38:
ae:d6:ec:d2:d5:3d:2a:7c:fc:fd:d8:fd:ad:3b:85:
f6:35:c1:24:14:2c:5f:9e:fa:0e:ce:f5:80:18:ea:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:80:BC:96:D3:78:4C:18:10:4C:1F:79:AF:95:E6:A9:29:B0:65
X509v3 Authority Key Identifier:
keyid:BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/UcCAvJbTeEwYEEwfea-V5qkpsGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fd:54:72:0e:47:6e:be:5d:4b:c0:fa:c4:39:97:f4:8b:7d:
01:6d:a0:df:7e:76:22:b4:ec:12:34:d1:3f:42:dd:29:7b:f9:
74:9d:c7:a1:a3:21:92:96:e7:2d:ab:a7:2c:96:03:e5:af:53:
28:f9:e1:28:69:5d:1b:44:44:47:38:8a:dc:d0:3d:fc:9d:68:
19:b4:b7:fd:38:c2:d2:bc:55:6e:c9:d1:03:bc:b5:2f:02:b1:
ad:64:73:c2:6e:44:7f:8b:f7:3c:0c:f8:da:9b:db:95:09:32:
2b:1b:28:06:57:4d:35:65:d3:90:b8:5b:d5:80:ee:69:e9:8c:
af:16:cc:9f:5e:52:dc:9b:5d:3d:09:cb:3d:94:db:a1:81:d4:
05:81:08:02:89:15:88:cc:22:25:2e:ff:44:f5:f4:a3:39:1c:
d4:c7:8f:c3:d4:c4:ed:2f:99:d3:d9:88:9e:9a:08:d9:4b:cf:
f9:79:6f:1d:c0:0e:d5:19:cd:ee:a4:e5:58:86:d0:8a:08:07:
f3:06:78:40:66:ce:94:62:ab:b9:f3:48:5d:b9:b3:ab:d9:ec:
a6:0c:01:2d:3c:a6:4d:45:90:e2:1d:53:f7:44:6e:a9:88:52:
49:ec:66:0b:a1:b9:17:a1:9e:bd:69:62:e8:cb:2f:de:fe:db:
d6:71:ac:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVeiRrq13LzC3u0T5PgIzaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMTc0YTU4MzNiZGU2YWE3ODI0YzM0MDk5NzYyZDAwOTc4
ODU3ZmYwHhcNMjIxMjI5MTUzODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWMwODBiYzk2ZDM3ODRjMTgxMDRjMWY3OWFmOTVlNmE5MjliMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk7Gj5DiHDSCOHW6OHHFBFqzyxdn
ceBMjYeoPhSgnDuQ4Lu0z/dpi4LCy6M+Rq7UTK/dhf1DT+uIyD/W1gZ5xhF9ntwU
+A3VxhvT5fNfAZPAtrKmGUvPVovHgH7hPFmLuFdkGyUTdey57I2/BVwUQgZ0p8Ap
TPJfx5LmxJoiixBijS4+q7lKbWYBghA+6b++nFVG5HhhMIq4Osm2eM1ibqt1c9XZ
bqRIda1MlKC5wHIQg51e1S0QcOMSHXFwW/0eGKvEjHUkGASLDDtjcL7j6/fXoEyQ
LXPT39A8RsoTlTiu1uzS1T0qfPz92P2tO4X2NcEkFCxfnvoOzvWAGOq2vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFHAgLyW03hMGBBMH3mvleapKbBlMB8GA1UdIwQY
MBaAFL8XSlgzveaqeCTDQJl2LQCXiFf/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnhkS1dETzk1cXA0Sk1OQW1YWXRBSmVJVl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kYWYyNWMtMWI0OS00NzE5LTkyMDMt
MzI1NGU0ZDcxMjJlLzEvVWNDQXZKYlRlRXdZRUV3ZmVhLVY1cWtwc0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kYWYyNWMtMWI0OS00NzE5LTkyMDMtMzI1NGU0ZDcxMjJl
LzEvdnhkS1dETzk1cXA0Sk1OQW1YWXRBSmVJVl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaP/MA0G
CSqGSIb3DQEBCwUAA4IBAQAO/VRyDkduvl1LwPrEOZf0i30BbaDffnYitOwSNNE/
Qt0pe/l0ncehoyGSluctq6cslgPlr1Mo+eEoaV0bRERHOIrc0D38nWgZtLf9OMLS
vFVuydEDvLUvArGtZHPCbkR/i/c8DPjam9uVCTIrGygGV001ZdOQuFvVgO5p6Yyv
FsyfXlLcm109Ccs9lNuhgdQFgQgCiRWIzCIlLv9E9fSjORzUx4/D1MTtL5nT2Yie
mgjZS8/5eW8dwA7VGc3upOVYhtCKCAfzBnhAZs6UYqu580hdubOr2eymDAEtPKZN
RZDiHVP3RG6piFJJ7GYLobkXoZ69aWLoyy/e/tvWcazs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:33 2024 by rpki-client on console-ams.rpki-client.org