Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/577UAYNp-u6DL_Yjoz6yr0XafCM.roa
File: 577UAYNp-u6DL_Yjoz6yr0XafCM.roa (raw, json)
Hash identifier: c+TQGm3OUkfujeFEfLn2Veoe5gtiGF9aj9Y4dOibOJA=
Subject key identifier: E7:BE:D4:01:83:69:FA:EE:83:2F:F6:23:A3:3E:B2:AF:45:DA:7C:23
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 018281C580E8AC6D9DBA54C0D10825B1073D
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/577UAYNp-u6DL_Yjoz6yr0XafCM.roa
Signing time: Tue 09 Aug 2022 08:43:00 +0000
ROA not before: Tue 09 Aug 2022 08:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.31.127.0/24 maxlen: 24
193.56.20.0/24 maxlen: 24
194.99.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:c5:80:e8:ac:6d:9d:ba:54:c0:d1:08:25:b1:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Aug 9 08:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7bed4018369faee832ff623a33eb2af45da7c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:99:e9:fe:64:b4:f4:3a:5a:25:ba:37:e1:
83:54:40:30:b1:16:5d:e0:85:a1:ac:ee:7f:13:46:
37:05:94:47:57:f2:91:7e:eb:2a:20:65:af:4a:ab:
09:2d:e1:3f:8f:bd:54:f7:bf:63:28:64:1a:d6:3c:
2b:90:62:07:f4:11:1e:cc:30:61:de:a8:c4:c2:82:
09:f9:9d:65:88:a6:d5:9f:24:90:f5:f0:38:32:7f:
6e:80:5d:a1:56:2a:15:e2:f2:98:03:c3:f1:34:ad:
c9:1f:98:2c:0c:34:b7:52:ab:3b:58:98:ac:2b:8b:
49:25:8b:5e:bd:d5:c7:a7:2c:e3:86:cd:2c:52:a6:
94:48:29:2e:75:61:ac:0e:c2:ad:b8:6b:4e:03:bf:
ef:82:82:7a:32:df:50:66:39:c2:a7:31:f1:ab:c4:
70:70:4e:b0:26:eb:d9:ac:67:ba:56:d6:fb:cf:dc:
58:ff:23:18:9a:36:40:4d:1e:21:0c:96:78:82:6d:
c7:d8:2d:77:1a:0a:b1:e8:41:88:5d:dd:96:5b:b2:
84:f9:67:55:0d:e8:3d:03:23:98:81:40:a8:32:b9:
32:b4:7c:1a:74:ea:73:f3:3a:33:88:36:0c:9c:46:
e2:c7:55:06:52:d5:d0:cd:5a:ed:2e:17:c4:02:6b:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:D4:01:83:69:FA:EE:83:2F:F6:23:A3:3E:B2:AF:45:DA:7C:23
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/577UAYNp-u6DL_Yjoz6yr0XafCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.127.0/24
193.56.20.0/24
194.99.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6e:c1:f9:ed:1f:f5:02:d2:32:f7:08:54:e8:18:f9:e3:53:
86:81:bc:69:df:43:e7:0f:7b:1b:19:76:ac:31:cc:f3:49:57:
64:73:82:b7:69:36:c0:8f:e1:38:4c:ef:dc:b7:d5:d1:2d:69:
63:66:3c:c9:ba:d9:4e:e4:79:5f:a2:a2:9e:3e:36:a1:bc:64:
d4:b7:88:27:d8:1c:80:14:62:d1:38:b4:4b:0c:a7:40:2e:09:
34:4f:36:5c:cf:76:23:0c:29:87:0d:b1:40:29:59:31:6d:4f:
e8:ff:08:69:60:ff:49:6d:94:21:57:1e:ff:65:81:b8:b1:8f:
72:93:08:f9:82:f2:0b:d7:d4:8f:e4:52:c6:c0:6a:d8:5c:6e:
b0:1e:a7:80:62:e2:bb:c0:f8:51:77:82:1a:66:68:72:92:9a:
db:a9:88:6d:c7:fb:4d:03:e5:e1:8b:9f:f2:2f:64:fd:2d:9d:
24:fb:15:a5:ad:bd:71:23:23:3f:01:2c:b1:37:6f:8a:d9:89:
d3:7f:97:aa:a5:9a:0d:0b:7a:60:07:29:9d:de:aa:9d:3d:89:
99:d0:20:72:bb:e1:ea:ab:85:f3:13:b5:23:41:bb:c4:a4:1b:
92:8e:75:93:22:b3:51:10:f9:79:36:1e:14:2b:a7:cd:36:25:
cc:51:c7:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKBxYDorG2dulTA0QglsQc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzQ3NDgxZjJjOThmYmI3MGRjYThkNjVjMjNkZTRmY2Ez
NzU4M2QwHhcNMjIwODA5MDg0MzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2JlZDQwMTgzNjlmYWVlODMyZmY2MjNhMzNlYjJhZjQ1ZGE3YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp+Z6f5ktPQ6WiW6N+GDVEAwsRZd
4IWhrO5/E0Y3BZRHV/KRfusqIGWvSqsJLeE/j71U979jKGQa1jwrkGIH9BEezDBh
3qjEwoIJ+Z1liKbVnySQ9fA4Mn9ugF2hVioV4vKYA8PxNK3JH5gsDDS3Uqs7WJis
K4tJJYtevdXHpyzjhs0sUqaUSCkudWGsDsKtuGtOA7/vgoJ6Mt9QZjnCpzHxq8Rw
cE6wJuvZrGe6Vtb7z9xY/yMYmjZATR4hDJZ4gm3H2C13Ggqx6EGIXd2WW7KE+WdV
Deg9AyOYgUCoMrkytHwadOpz8zoziDYMnEbix1UGUtXQzVrtLhfEAmt9tQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOe+1AGDafrugy/2I6M+sq9F2nwjMB8GA1UdIwQY
MBaAFI50dIHyyY+7cNyo1lwj3k/KN1g9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgt
NjUyMWQzOTVmMTMyLzEvNTc3VUFZTnAtdTZETF9Zam96NnlyMFhhZkNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgtNjUyMWQzOTVmMTMy
LzEvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwR9/AwQA
wTgUAwQAwmMZMA0GCSqGSIb3DQEBCwUAA4IBAQCdbsH57R/1AtIy9whU6Bj541OG
gbxp30PnD3sbGXasMczzSVdkc4K3aTbAj+E4TO/ct9XRLWljZjzJutlO5HlfoqKe
PjahvGTUt4gn2ByAFGLROLRLDKdALgk0TzZcz3YjDCmHDbFAKVkxbU/o/whpYP9J
bZQhVx7/ZYG4sY9ykwj5gvIL19SP5FLGwGrYXG6wHqeAYuK7wPhRd4IaZmhykprb
qYhtx/tNA+Xhi5/yL2T9LZ0k+xWlrb1xIyM/ASyxN2+K2YnTf5eqpZoNC3pgBymd
3qqdPYmZ0CByu+Hqq4XzE7UjQbvEpBuSjnWTIrNREPl5Nh4UK6fNNiXMUcdg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org