Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/9pjavNKTj9rrvDhaWgpW6Ux4FDw.roa
File: 9pjavNKTj9rrvDhaWgpW6Ux4FDw.roa (raw, json)
Hash identifier: 2DHWwJWFTnP5+Fwp1eT+7B+YUTNlQAfM77gVlb5P4i8=
Subject key identifier: F6:98:DA:BC:D2:93:8F:DA:EB:BC:38:5A:5A:0A:56:E9:4C:78:14:3C
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018A31CD67956ABF8429A8CAB85DDE7496F8
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/9pjavNKTj9rrvDhaWgpW6Ux4FDw.roa
Signing time: Sat 26 Aug 2023 12:24:19 +0000
ROA not before: Sat 26 Aug 2023 12:24:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:cd:67:95:6a:bf:84:29:a8:ca:b8:5d:de:74:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Aug 26 12:24:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f698dabcd2938fdaebbc385a5a0a56e94c78143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:ad:dd:a4:c2:80:9c:d3:91:3b:e7:4b:50:
b2:f7:1b:2e:5a:91:50:2c:a3:2d:4c:ff:2d:f4:94:
0c:df:ea:0e:77:8e:a3:01:10:62:30:ea:25:52:ed:
1b:e0:1d:21:54:15:6f:e2:f8:30:90:b0:8d:a8:f0:
91:de:dc:95:24:80:bd:c2:07:4b:98:51:e5:b7:bd:
93:cc:39:dc:2d:44:30:33:b4:b2:95:86:0d:37:24:
d3:70:2e:92:41:46:97:b7:4b:48:30:d3:23:64:51:
93:0f:4b:19:1c:79:7b:f0:cd:f4:3e:f3:06:1f:9a:
f8:42:25:d5:60:3a:83:03:44:e5:75:9e:44:5e:8d:
85:45:51:05:99:b2:55:1f:d7:32:b4:5d:6d:04:2c:
1c:9f:25:a3:2c:8e:37:03:4b:f6:9f:be:f2:72:1b:
b0:c2:b7:50:13:cf:48:fd:ec:a6:2b:32:27:3c:43:
5d:e6:d6:12:ab:97:57:25:95:69:bd:b9:ef:c9:88:
98:19:7f:17:45:0d:0d:22:67:10:12:ce:97:26:5d:
30:c3:f0:4f:b2:8d:ee:37:f1:d5:fa:13:0e:78:43:
3d:63:4f:0d:81:eb:95:02:9d:fe:b4:05:82:ff:70:
6a:bf:a5:86:92:c7:9f:b6:04:4b:70:3a:86:e8:9b:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:DA:BC:D2:93:8F:DA:EB:BC:38:5A:5A:0A:56:E9:4C:78:14:3C
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/9pjavNKTj9rrvDhaWgpW6Ux4FDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
50:de:71:8a:8e:02:ed:89:97:12:03:61:43:57:8d:73:1e:da:
d9:1a:38:74:57:e1:d8:46:dd:27:4c:4d:3c:bb:75:e6:3b:1c:
78:19:4b:31:87:a1:1b:7b:89:b0:9d:fb:a4:49:0b:29:0c:ae:
cf:97:e2:7f:03:40:f0:f4:12:d9:8e:26:fb:2a:20:a6:3f:c2:
f8:7a:ce:86:d6:c4:dd:f0:fd:12:47:88:c7:6c:be:34:df:db:
54:46:05:42:c7:38:5d:cb:46:85:51:56:1b:62:d1:c6:f2:2b:
a5:9a:d5:15:67:0c:26:fd:ee:45:dc:d5:ee:15:1b:7e:9b:57:
99:09:cf:20:f9:fa:31:77:bb:53:a9:1b:91:85:c9:5c:c1:e8:
97:7f:1c:7c:80:45:92:f0:99:50:6f:d9:94:11:87:2f:13:97:
46:b7:c5:7c:74:19:58:12:8a:bb:04:7a:14:8f:f3:48:69:a9:
99:a1:c2:e5:4b:80:62:a7:7d:47:bd:15:55:f6:fd:3b:12:3e:
f8:93:66:d2:bd:69:02:65:99:3f:2f:b5:60:60:0b:7d:87:97:
ff:17:b3:e3:f7:67:b8:ae:e4:e7:81:cc:5d:bc:46:e5:67:28:
ce:4e:b8:9e:94:b3:c2:38:c8:96:9b:91:74:61:0a:75:4d:e7:
5a:5f:0e:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoxzWeVar+EKajKuF3edJb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2RlOTc4Y2RjMmViMDVjM2YwODkwNjFiMGFiZTNjNWY2
OThhZWUwHhcNMjMwODI2MTIyNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk4ZGFiY2QyOTM4ZmRhZWJiYzM4NWE1YTBhNTZlOTRjNzgxNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Kt3aTCgJzTkTvnS1Cy9xsuWpFQ
LKMtTP8t9JQM3+oOd46jARBiMOolUu0b4B0hVBVv4vgwkLCNqPCR3tyVJIC9wgdL
mFHlt72TzDncLUQwM7SylYYNNyTTcC6SQUaXt0tIMNMjZFGTD0sZHHl78M30PvMG
H5r4QiXVYDqDA0TldZ5EXo2FRVEFmbJVH9cytF1tBCwcnyWjLI43A0v2n77ychuw
wrdQE89I/eymKzInPENd5tYSq5dXJZVpvbnvyYiYGX8XRQ0NImcQEs6XJl0ww/BP
so3uN/HV+hMOeEM9Y08NgeuVAp3+tAWC/3Bqv6WGkseftgRLcDqG6JuoiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaY2rzSk4/a67w4WloKVulMeBQ8MB8GA1UdIwQY
MBaAFGJ96XjNwusFw/CJBhsKvjxfaYruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW4zcGVNM0M2d1hEOElrR0d3cS1QRjlwaXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZDYwZTgtNDYwOS00ZDQzLTg5ZmYt
ZTNjMmY0ZDJhYjNiLzEvOXBqYXZOS1RqOXJydkRoYVdncFc2VXg0RkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hZDYwZTgtNDYwOS00ZDQzLTg5ZmYtZTNjMmY0ZDJhYjNi
LzEvWW4zcGVNM0M2d1hEOElrR0d3cS1QRjlwaXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaIdMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ3nGKjgLtiZcSA2FDV41zHtrZGjh0V+HYRt0nTE08
u3XmOxx4GUsxh6Ebe4mwnfukSQspDK7Pl+J/A0Dw9BLZjib7KiCmP8L4es6G1sTd
8P0SR4jHbL4039tURgVCxzhdy0aFUVYbYtHG8iulmtUVZwwm/e5F3NXuFRt+m1eZ
Cc8g+foxd7tTqRuRhclcweiXfxx8gEWS8JlQb9mUEYcvE5dGt8V8dBlYEoq7BHoU
j/NIaamZocLlS4Bip31HvRVV9v07Ej74k2bSvWkCZZk/L7VgYAt9h5f/F7Pj92e4
ruTngcxdvEblZyjOTrielLPCOMiWm5F0YQp1TedaXw7j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org