Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/r4oYhZr9v74BGaxQEj_gZdyNUrk.roa
File: r4oYhZr9v74BGaxQEj_gZdyNUrk.roa (raw, json)
Hash identifier: vQkzNYNblfX4Iznb5ke5U/Sb8VRuwyZBGRiI2sLqA4I=
Subject key identifier: AF:8A:18:85:9A:FD:BF:BE:01:19:AC:50:12:3F:E0:65:DC:8D:52:B9
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01837DD0EF977BA1E3C803E0A7EB6E490764
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/r4oYhZr9v74BGaxQEj_gZdyNUrk.roa
Signing time: Tue 27 Sep 2022 07:19:48 +0000
ROA not before: Tue 27 Sep 2022 07:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:d0:ef:97:7b:a1:e3:c8:03:e0:a7:eb:6e:49:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Sep 27 07:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af8a18859afdbfbe0119ac50123fe065dc8d52b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:aa:68:41:75:22:64:b4:c3:5b:e0:35:10:
12:78:33:de:a4:b8:53:b7:2b:1e:e0:9b:aa:ee:63:
40:8d:eb:37:e2:c4:f7:e2:d7:5b:55:86:ac:c6:d8:
07:ca:20:c3:3c:7b:6a:d2:74:24:ba:b1:4a:b9:cd:
f1:a6:92:e4:d5:24:17:e4:46:b9:c3:c1:4c:4f:79:
db:38:fb:a5:f8:2d:5d:53:72:17:a3:58:98:ad:48:
c5:36:a8:33:8c:96:4c:d6:7f:d6:87:b1:66:6e:43:
e2:c0:c2:f5:73:bc:1b:7c:9e:bf:65:80:b6:1f:0a:
5d:cb:77:6d:05:c7:94:e1:2e:ab:76:99:80:2f:5e:
3d:0e:12:18:f9:d2:15:6a:07:cc:a6:5d:1c:19:38:
45:be:39:8a:e6:2e:ec:f2:eb:fb:8f:59:92:e9:83:
86:a6:28:5e:ba:f2:e3:40:b5:c6:5a:2f:2e:dc:47:
df:8c:4b:74:86:bd:cf:ca:a3:0b:2e:fc:5d:7a:9f:
ba:d9:f9:48:9b:af:02:f0:27:ad:29:83:64:65:d8:
db:ec:95:06:bc:e4:79:36:d4:21:6d:f7:1e:1a:ff:
0b:72:d7:f0:aa:09:47:53:e9:83:a8:1a:bb:e1:a5:
32:d2:69:47:ae:1a:d6:78:62:4c:49:63:2b:2c:38:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:18:85:9A:FD:BF:BE:01:19:AC:50:12:3F:E0:65:DC:8D:52:B9
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/r4oYhZr9v74BGaxQEj_gZdyNUrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:55:80:b1:c0:b7:9b:13:4b:ef:97:d5:f9:3c:a3:03:a8:
e9:a9:35:6b:d4:24:1e:60:60:fe:fe:48:63:6b:08:41:6c:05:
1c:ff:c1:4e:97:d8:ae:a9:a8:de:22:6b:d8:a4:56:bd:7e:79:
0d:9c:3f:d9:05:59:83:f8:c4:24:98:5d:a5:23:48:6b:29:64:
df:79:04:45:0a:9c:06:4a:5e:af:3d:8c:44:47:5e:4a:ca:d0:
16:37:b0:22:0a:ce:75:e6:9e:ac:5c:99:34:0d:3b:42:a3:e3:
de:dc:48:14:e7:ee:73:38:83:77:e2:f7:c2:b1:e5:c4:d3:20:
d9:7d:06:52:9a:c0:ca:57:7a:d4:11:67:c6:b1:51:5c:a3:8b:
71:79:58:a4:b5:b4:ec:67:4f:44:48:4a:b1:d3:51:e9:bd:72:
3d:2f:5a:61:3f:c8:ad:dc:5f:5a:e5:18:1e:6a:bc:ce:3c:19:
54:01:c1:b6:2f:9b:d3:fa:69:7e:42:16:b5:b1:b2:d4:11:41:
f1:3d:e7:07:1c:15:e1:b1:c1:61:7f:43:9d:f8:f4:45:0d:2f:
bf:6a:21:ce:5d:21:18:d9:3d:2d:7a:01:4e:6d:68:32:08:e7:
d0:47:45:0a:d4:65:e8:f5:ac:3a:ac:44:41:d5:33:60:91:fd:
9b:f7:25:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN90O+Xe6HjyAPgp+tuSQdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIwOTI3MDcxOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjhhMTg4NTlhZmRiZmJlMDExOWFjNTAxMjNmZTA2NWRjOGQ1MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YmqaEF1ImS0w1vgNRASeDPepLhT
tyse4Juq7mNAjes34sT34tdbVYasxtgHyiDDPHtq0nQkurFKuc3xppLk1SQX5Ea5
w8FMT3nbOPul+C1dU3IXo1iYrUjFNqgzjJZM1n/Wh7FmbkPiwML1c7wbfJ6/ZYC2
Hwpdy3dtBceU4S6rdpmAL149DhIY+dIVagfMpl0cGThFvjmK5i7s8uv7j1mS6YOG
piheuvLjQLXGWi8u3EffjEt0hr3PyqMLLvxdep+62flIm68C8CetKYNkZdjb7JUG
vOR5NtQhbfceGv8LctfwqglHU+mDqBq74aUy0mlHrhrWeGJMSWMrLDhOjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+KGIWa/b++ARmsUBI/4GXcjVK5MB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvcjRvWWhacjl2NzRCR2F4UUVqX2daZHlOVXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpbSMA0G
CSqGSIb3DQEBCwUAA4IBAQBB+VWAscC3mxNL75fV+TyjA6jpqTVr1CQeYGD+/khj
awhBbAUc/8FOl9iuqajeImvYpFa9fnkNnD/ZBVmD+MQkmF2lI0hrKWTfeQRFCpwG
Sl6vPYxER15KytAWN7AiCs515p6sXJk0DTtCo+Pe3EgU5+5zOIN34vfCseXE0yDZ
fQZSmsDKV3rUEWfGsVFco4txeViktbTsZ09ESEqx01HpvXI9L1phP8it3F9a5Rge
arzOPBlUAcG2L5vT+ml+Qha1sbLUEUHxPecHHBXhscFhf0Od+PRFDS+/aiHOXSEY
2T0tegFObWgyCOfQR0UK1GXo9aw6rERB1TNgkf2b9yVu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org