Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/9RsIn6GkgVzbeU1bBQoUVpZWVC8.roa
File: 9RsIn6GkgVzbeU1bBQoUVpZWVC8.roa (raw, json)
Hash identifier: 8cKmM7G5ZwaVKFMHSeiGuFHYx7nosAa11mfJpKaEg7Q=
Subject key identifier: F5:1B:08:9F:A1:A4:81:5C:DB:79:4D:5B:05:0A:14:56:96:56:54:2F
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 032E00C9
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/9RsIn6GkgVzbeU1bBQoUVpZWVC8.roa
Signing time: Fri 10 Jun 2022 17:51:02 +0000
ROA not before: Fri 10 Jun 2022 17:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53346505 (0x32e00c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 10 17:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f51b089fa1a4815cdb794d5b050a14569656542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:cd:96:6d:af:1a:b4:50:f4:01:88:af:84:
4c:2a:b3:bd:84:61:9c:a5:b2:80:f5:00:b6:da:35:
9f:ee:f2:2e:30:26:1c:a9:4c:5e:d5:87:57:9a:f6:
df:c2:9b:eb:56:f1:84:8c:f1:7c:f6:99:e6:bb:bc:
58:dd:a4:83:84:b8:d1:fd:28:f9:f4:6f:cd:fa:d1:
e8:91:a9:bd:7b:ad:c6:17:24:c5:e1:fd:34:83:27:
18:ff:df:43:22:e2:40:6f:80:97:22:57:33:27:90:
aa:96:90:b4:d1:dc:be:a3:ff:72:73:5c:f0:2f:24:
85:ae:25:a2:93:b7:28:fb:46:20:70:d9:28:3f:00:
97:9f:f8:3b:11:a1:77:0c:81:3d:0c:1b:64:ef:d6:
b4:97:d3:e5:ce:4c:fa:6c:c7:d4:62:57:98:60:bc:
c6:21:5b:00:ec:61:e9:59:ef:0a:e2:8c:e0:6a:aa:
77:56:75:0b:3f:9d:54:fc:98:65:9a:dd:16:1c:72:
2f:0c:e3:62:5f:04:6a:99:d3:c2:6e:db:52:b0:03:
ad:90:ad:7f:7f:6f:fb:6d:35:4b:bd:8f:d3:1d:e0:
f2:37:4c:7c:91:8f:b4:28:d5:90:0e:81:03:65:fa:
11:95:d2:12:16:d2:77:02:3d:ba:77:e5:4f:c5:5c:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:08:9F:A1:A4:81:5C:DB:79:4D:5B:05:0A:14:56:96:56:54:2F
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/9RsIn6GkgVzbeU1bBQoUVpZWVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a8:29:58:e8:91:0e:ef:d2:3b:6d:fd:2f:6d:e5:09:ae:94:
92:73:a7:6c:cd:1f:1d:05:98:a4:39:10:d3:dc:39:49:81:6a:
7a:e6:7b:4b:78:3a:b3:1f:78:c5:4b:03:64:e4:1d:10:6d:d8:
a7:3d:c3:ca:b0:62:61:97:88:09:ba:a2:cb:02:32:1d:4a:ed:
ac:91:b8:4b:b6:44:2b:72:7e:db:41:d8:1b:55:26:7f:b6:6e:
cd:d4:8b:68:0e:9d:10:df:8e:1c:17:ec:37:b3:62:9b:9c:d3:
05:05:34:1f:48:1f:e0:0f:73:41:e9:c0:19:5b:ef:bf:31:13:
f8:0a:f1:4e:c7:43:e7:44:55:9c:d5:21:6b:b7:66:80:b6:80:
3a:d5:a1:eb:c0:d2:e6:de:a1:45:ba:c0:64:09:7b:61:50:ca:
ea:b4:e5:37:7c:53:f0:ed:10:b3:92:c2:58:44:0d:38:87:ab:
b5:16:da:6e:83:36:eb:a8:bf:52:8a:c5:93:97:41:85:52:e8:
1d:46:1b:d1:bc:e4:0c:08:d9:07:fc:01:a8:d9:7c:9c:13:2c:
a0:ea:36:8c:26:77:e0:16:d2:a7:4f:3d:1e:4f:b3:ee:81:0e:
d7:54:94:8d:e8:b3:80:30:23:99:71:9d:73:75:91:87:51:4b:
0c:2b:9c:d8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAy4AyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTNlY2U3MWVmNmViZjU1YmI3Yjg3ZTUwNjY1YmExMWZkYzc3ZjA4MB4XDTIyMDYx
MDE3NTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjUxYjA4OWZhMWE0
ODE1Y2RiNzk0ZDViMDUwYTE0NTY5NjU2NTQyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKe1zZZtrxq0UPQBiK+ETCqzvYRhnKWygPUAtto1n+7yLjAm
HKlMXtWHV5r238Kb61bxhIzxfPaZ5ru8WN2kg4S40f0o+fRvzfrR6JGpvXutxhck
xeH9NIMnGP/fQyLiQG+AlyJXMyeQqpaQtNHcvqP/cnNc8C8kha4lopO3KPtGIHDZ
KD8Al5/4OxGhdwyBPQwbZO/WtJfT5c5M+mzH1GJXmGC8xiFbAOxh6VnvCuKM4Gqq
d1Z1Cz+dVPyYZZrdFhxyLwzjYl8EapnTwm7bUrADrZCtf39v+201S72P0x3g8jdM
fJGPtCjVkA6BA2X6EZXSEhbSdwI9unflT8VcYT8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT1GwifoaSBXNt5TVsFChRWllZULzAfBgNVHSMEGDAWgBTVPs5x726/Vbt7
h+UGZboR/cd/CDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFUN09jZTl1djFXN2U0ZmxCbVc2RWYzSGZ3Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzgxNjY5LTI1MTktNGRhNS1iZDVkLTFjMjYyNjU5MGQyOC8x
LzlSc0luNkdrZ1Z6YmVVMWJCUW9VVnBaV1ZDOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzgxNjY5LTI1MTktNGRhNS1iZDVkLTFjMjYyNjU5MGQyOC8xLzFUN09jZTl1djFX
N2U0ZmxCbVc2RWYzSGZ3Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLQsTANBgkqhkiG9w0BAQsFAAOC
AQEAkqgpWOiRDu/SO239L23lCa6UknOnbM0fHQWYpDkQ09w5SYFqeuZ7S3g6sx94
xUsDZOQdEG3Ypz3DyrBiYZeICbqiywIyHUrtrJG4S7ZEK3J+20HYG1Umf7ZuzdSL
aA6dEN+OHBfsN7Nim5zTBQU0H0gf4A9zQenAGVvvvzET+ArxTsdD50RVnNUha7dm
gLaAOtWh68DS5t6hRbrAZAl7YVDK6rTlN3xT8O0Qs5LCWEQNOIertRbaboM266i/
UorFk5dBhVLoHUYb0bzkDAjZB/wBqNl8nBMsoOo2jCZ34BbSp089Hk+z7oEO11SU
jeizgDAjmXGdc3WRh1FLDCuc2A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org