Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/u1gOBr_qVYtM-sNuXebmOSjQr1s.roa
File: u1gOBr_qVYtM-sNuXebmOSjQr1s.roa (raw, json)
Hash identifier: xAs0tbgi+HzZpQoG9iZDFPYMGvnI99/mh+WCSc6OntI=
Subject key identifier: BB:58:0E:06:BF:EA:55:8B:4C:FA:C3:6E:5D:E6:E6:39:28:D0:AF:5B
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 01856C413F6EE3249FCD2F06C6565749D1A8
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/u1gOBr_qVYtM-sNuXebmOSjQr1s.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.239.146.0/24 maxlen: 24
193.239.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3f:6e:e3:24:9f:cd:2f:06:c6:56:57:49:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb580e06bfea558b4cfac36e5de6e63928d0af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:6c:92:dc:79:9c:50:b5:09:ee:a5:98:fb:
fe:34:6b:b5:2c:28:67:a4:33:af:aa:6a:cb:aa:77:
f8:80:93:55:c0:a9:32:c0:64:1a:9c:7c:98:1e:c3:
54:5b:0a:39:cf:2a:4a:bd:75:22:0e:ae:63:14:72:
e0:74:2b:ff:b5:4e:01:f6:60:77:fc:a1:df:a4:e4:
78:a6:dd:cd:21:3f:1d:c0:ac:d3:41:6a:d2:06:3b:
d1:6a:ed:83:13:38:e2:57:f1:be:dd:fc:71:a2:7f:
0d:06:68:7b:a4:b1:32:fb:dd:17:15:a8:30:86:e6:
52:d1:e4:df:04:8f:a9:d7:13:44:70:23:9d:b4:17:
1c:0d:23:88:e6:33:98:c2:e7:78:30:91:77:dd:79:
c6:7e:e2:20:40:72:bc:05:60:eb:7e:ac:10:8d:ec:
db:d0:62:ae:64:d9:f3:31:79:76:11:e5:98:83:bf:
a0:7c:f8:33:e8:7f:af:77:d4:a6:ea:cd:28:f1:b9:
29:ac:16:ab:13:22:d2:df:85:51:3f:60:c9:39:58:
53:f9:8a:17:ca:f1:82:4f:58:42:63:90:51:1a:e1:
14:cb:3b:ea:3f:45:b3:a7:31:9c:c4:df:5b:4a:0a:
63:93:07:1d:e4:5f:7e:43:68:86:45:3a:48:e5:a2:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:0E:06:BF:EA:55:8B:4C:FA:C3:6E:5D:E6:E6:39:28:D0:AF:5B
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/u1gOBr_qVYtM-sNuXebmOSjQr1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:c1:01:7b:17:1f:e9:85:28:0d:5c:bc:76:92:4d:3a:ec:c8:
68:25:f9:95:a9:59:9f:59:2a:99:aa:19:8b:5a:db:da:c0:e8:
76:64:ab:9f:4e:e7:68:07:d1:1a:ce:35:18:83:60:2c:ec:87:
67:03:2d:2c:62:f8:b1:f2:a9:2f:c1:dc:4f:81:72:42:6d:12:
ed:5c:73:b9:06:95:0b:41:89:96:06:9f:39:12:e3:77:16:3e:
fc:af:01:ae:32:04:fe:cd:ad:a6:b9:66:21:cc:48:6f:05:98:
af:4c:ee:8c:aa:17:5a:e2:b8:36:cc:1a:73:76:b7:8d:c4:80:
d6:38:03:0f:c7:86:61:1b:c1:52:3a:40:34:7e:b2:e3:16:36:
35:6d:1e:fa:2f:0c:24:bf:95:4d:5b:ba:1f:50:a7:3e:50:22:
2b:8c:97:54:25:4a:c2:f4:a5:22:26:c0:e2:0d:d8:65:b9:d3:
c3:bf:69:20:a8:eb:aa:c0:ce:fc:70:df:7a:10:a9:0e:e0:29:
a3:8c:f7:14:9e:ed:6c:7c:3b:24:db:62:8d:07:49:af:91:36:
b4:b8:b2:a8:2b:cf:9e:85:4a:5b:64:fd:b4:2b:a0:59:a8:97:
68:24:59:6a:cc:0e:08:bb:67:20:f8:88:31:d7:06:b6:27:63:
58:a1:d0:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsQT9u4ySfzS8GxlZXSdGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MzI1NmE4MTkxMWQxM2NkODBjNTM2NzNlMDUxN2ZmMjI1
YzZkMDgwHhcNMjMwMTAxMDczNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjU4MGUwNmJmZWE1NThiNGNmYWMzNmU1ZGU2ZTYzOTI4ZDBhZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP5sktx5nFC1Ce6lmPv+NGu1LChn
pDOvqmrLqnf4gJNVwKkywGQanHyYHsNUWwo5zypKvXUiDq5jFHLgdCv/tU4B9mB3
/KHfpOR4pt3NIT8dwKzTQWrSBjvRau2DEzjiV/G+3fxxon8NBmh7pLEy+90XFagw
huZS0eTfBI+p1xNEcCOdtBccDSOI5jOYwud4MJF33XnGfuIgQHK8BWDrfqwQjezb
0GKuZNnzMXl2EeWYg7+gfPgz6H+vd9Sm6s0o8bkprBarEyLS34VRP2DJOVhT+YoX
yvGCT1hCY5BRGuEUyzvqP0WzpzGcxN9bSgpjkwcd5F9+Q2iGRTpI5aL1BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtYDga/6lWLTPrDbl3m5jko0K9bMB8GA1UdIwQY
MBaAFMQyVqgZEdE82AxTZz4FF/8iXG0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveERKV3FCa1IwVHpZREZOblBnVVhfeUpjYlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNWQzZmItYzhjNy00MmU0LTlmZjgt
NjAxOGZhZjQ2NGZiLzEvdTFnT0JyX3FWWXRNLXNOdVhlYm1PU2pRcjFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNWQzZmItYzhjNy00MmU0LTlmZjgtNjAxOGZhZjQ2NGZi
LzEveERKV3FCa1IwVHpZREZOblBnVVhfeUpjYlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+SMA0G
CSqGSIb3DQEBCwUAA4IBAQDPwQF7Fx/phSgNXLx2kk067MhoJfmVqVmfWSqZqhmL
WtvawOh2ZKufTudoB9EazjUYg2As7IdnAy0sYvix8qkvwdxPgXJCbRLtXHO5BpUL
QYmWBp85EuN3Fj78rwGuMgT+za2muWYhzEhvBZivTO6Mqhda4rg2zBpzdreNxIDW
OAMPx4ZhG8FSOkA0frLjFjY1bR76Lwwkv5VNW7ofUKc+UCIrjJdUJUrC9KUiJsDi
DdhludPDv2kgqOuqwM78cN96EKkO4CmjjPcUnu1sfDsk22KNB0mvkTa0uLKoK8+e
hUpbZP20K6BZqJdoJFlqzA4Iu2cg+Igx1wa2J2NYodBY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org