Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa
File: J7skXYpvBRIHw6ZxYogcHln-c78.roa (raw, json)
Hash identifier: Qimr8LwhVuOF6rj6vBoaA1gEYdPlRIil79m9ICT8GRI=
Subject key identifier: 27:BB:24:5D:8A:6F:05:12:07:C3:A6:71:62:88:1C:1E:59:FE:73:BF
Certificate issuer: /CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Certificate serial: 50F405
Authority key identifier: 3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa
Signing time: Thu 28 Apr 2022 10:16:25 +0000
ROA not before: Thu 28 Apr 2022 10:16:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.203.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5305349 (0x50f405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Validity
Not Before: Apr 28 10:16:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27bb245d8a6f051207c3a67162881c1e59fe73bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:8f:e7:15:bc:fd:5e:31:05:a3:f2:50:70:
56:10:03:86:b8:c4:a6:b8:bb:80:36:ce:f3:62:b5:
8b:a0:34:b9:1e:13:cd:0d:5e:79:45:aa:22:23:77:
ad:8f:0b:cf:87:c4:e4:0d:ee:31:2b:08:6c:45:65:
dc:6a:94:5a:58:c4:02:94:e6:23:ec:54:71:18:e5:
eb:f5:7f:85:b4:42:4b:15:c1:ee:87:ad:45:b7:df:
26:d2:6a:08:dd:20:62:68:b1:7d:5c:7a:bd:2e:7d:
0e:8e:84:5b:2e:cd:23:64:20:cc:7f:a0:f9:d0:30:
6a:c7:bb:fb:5c:a0:b5:cd:00:55:c5:46:27:7e:7b:
90:66:08:7e:0f:7f:6c:2e:92:aa:3b:06:32:ad:27:
9b:02:2e:eb:29:5a:de:0a:43:c5:8b:b2:8a:e9:78:
cf:71:19:3e:98:c9:b7:87:01:21:ee:00:80:d7:d8:
39:26:7f:e4:c9:04:13:0d:ca:a0:52:5d:47:6f:51:
0b:7a:d0:e4:92:fa:03:33:e5:d9:f4:d9:11:e3:e1:
af:76:af:bc:60:39:5d:66:f4:69:73:53:f2:e8:31:
47:1a:58:43:26:7d:6f:77:4d:d0:84:07:05:85:28:
77:37:f7:fe:2a:f4:aa:af:31:e1:8c:6f:86:e0:b1:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:24:5D:8A:6F:05:12:07:C3:A6:71:62:88:1C:1E:59:FE:73:BF
X509v3 Authority Key Identifier:
keyid:3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d5:19:17:1b:aa:a7:eb:58:c1:6e:e3:8f:92:97:0c:f2:d9:
ba:fc:ca:bb:59:61:0c:ea:44:d9:50:e4:26:c6:b6:6c:ae:4d:
87:2d:56:1a:ee:1d:c5:63:1f:01:77:f7:3e:f6:d6:3e:78:58:
5e:b0:0d:e0:dd:62:93:e2:82:2d:da:2a:98:c9:d1:b1:f2:84:
91:2c:c5:b0:7b:82:4d:6a:8f:b7:d9:b0:f1:4b:31:8c:05:fc:
c1:2f:57:d3:67:ae:52:bf:d8:94:cc:a0:f0:22:6e:df:64:10:
80:d0:15:2d:9b:75:6d:1c:d8:42:f2:4f:a2:b6:96:e4:27:a3:
89:31:da:17:0f:6a:d5:6e:4f:f3:8d:d5:04:28:3b:f1:fb:01:
d0:d2:95:a4:a0:47:13:d4:2f:c7:27:e8:07:5f:e3:d2:9a:37:
72:45:de:1a:32:9b:60:f1:cc:14:39:1e:0b:88:8a:0b:dd:2d:
ad:2c:01:17:64:63:36:fe:be:34:80:bb:67:96:7a:1b:3c:0c:
da:77:e3:c4:37:21:ef:50:91:14:12:e1:5b:df:32:2c:63:6f:
f1:75:92:cb:dd:5a:15:1d:9c:e2:d6:45:d1:46:3c:65:00:84:
f5:a9:6f:fb:fa:d5:d5:44:37:aa:2b:35:fe:20:ff:c8:65:df:
3b:8d:ec:cf
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDUPQFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNj
N2QzMzQxODFjYzZhMzU1M2Y3NThiN2I3MGUzNzBmMmQ4YjFjMGEwHhcNMjIwNDI4
MTAxNjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyN2JiMjQ1ZDhhNmYw
NTEyMDdjM2E2NzE2Mjg4MWMxZTU5ZmU3M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAueuP5xW8/V4xBaPyUHBWEAOGuMSmuLuANs7zYrWLoDS5HhPN
DV55RaoiI3etjwvPh8TkDe4xKwhsRWXcapRaWMQClOYj7FRxGOXr9X+FtEJLFcHu
h61Ft98m0moI3SBiaLF9XHq9Ln0OjoRbLs0jZCDMf6D50DBqx7v7XKC1zQBVxUYn
fnuQZgh+D39sLpKqOwYyrSebAi7rKVreCkPFi7KK6XjPcRk+mMm3hwEh7gCA19g5
Jn/kyQQTDcqgUl1Hb1ELetDkkvoDM+XZ9NkR4+Gvdq+8YDldZvRpc1Py6DFHGlhD
Jn1vd03QhAcFhSh3N/f+KvSqrzHhjG+G4LGu3wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCe7JF2KbwUSB8OmcWKIHB5Z/nO/MB8GA1UdIwQYMBaAFDx9M0GBzGo1U/dY
t7cONw8tixwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UEgwelFZSE1halZUOTFpM3R3NDNEeTJMSEFvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80OC81ZjkzYTQtOTM0MC00ZWE5LTlhODAtOGEwOTliZTA4OTliLzEv
Sjdza1hZcHZCUklIdzZaeFlvZ2NIbG4tYzc4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81
ZjkzYTQtOTM0MC00ZWE5LTlhODAtOGEwOTliZTA4OTliLzEvUEgwelFZSE1halZU
OTFpM3R3NDNEeTJMSEFvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwct/MA0GCSqGSIb3DQEBCwUAA4IB
AQCa1RkXG6qn61jBbuOPkpcM8tm6/Mq7WWEM6kTZUOQmxrZsrk2HLVYa7h3FYx8B
d/c+9tY+eFhesA3g3WKT4oIt2iqYydGx8oSRLMWwe4JNao+32bDxSzGMBfzBL1fT
Z65Sv9iUzKDwIm7fZBCA0BUtm3VtHNhC8k+itpbkJ6OJMdoXD2rVbk/zjdUEKDvx
+wHQ0pWkoEcT1C/HJ+gHX+PSmjdyRd4aMptg8cwUOR4LiIoL3S2tLAEXZGM2/r40
gLtnlnobPAzad+PENyHvUJEUEuFb3zIsY2/xdZLL3VoVHZzi1kXRRjxlAIT1qW/7
+tXVRDeqKzX+IP/IZd87jezP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org