Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/MyPWPKhh65OreDUXcFrz0rqSD2s.roa
File: MyPWPKhh65OreDUXcFrz0rqSD2s.roa (raw, json)
Hash identifier: kjbBghqnhV+1IcEb6acRik+ke2i8/l/u8xaRcGXtl9E=
Subject key identifier: 33:23:D6:3C:A8:61:EB:93:AB:78:35:17:70:5A:F3:D2:BA:92:0F:6B
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0181D6F2E1CAE21CC1CCE968BCCDC585EEF7
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/MyPWPKhh65OreDUXcFrz0rqSD2s.roa
Signing time: Thu 07 Jul 2022 04:37:30 +0000
ROA not before: Thu 07 Jul 2022 04:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 31.6.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:f2:e1:ca:e2:1c:c1:cc:e9:68:bc:cd:c5:85:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jul 7 04:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3323d63ca861eb93ab783517705af3d2ba920f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:85:26:7d:00:a0:ec:0d:32:b0:03:01:1d:
cc:75:e6:af:42:74:61:7a:f8:cd:9d:d4:6d:09:74:
36:07:05:32:7f:8e:ff:5d:77:a2:95:96:ef:ba:a7:
0b:f7:f8:41:b2:99:14:9f:8c:12:bc:6f:c4:13:d9:
17:a2:aa:64:fe:22:3c:43:05:20:5d:42:5e:e5:b1:
40:28:47:ae:44:66:d7:b6:60:ec:f3:e1:32:d1:ce:
a0:30:29:7b:7f:75:a3:3d:5a:25:c7:1c:80:c7:32:
e0:1b:b4:2f:93:4c:da:87:33:7a:52:91:11:28:48:
5f:43:68:90:67:66:d3:fe:15:c2:5f:f8:b8:42:f4:
51:b7:fc:e5:0e:60:68:47:e1:89:3e:1d:7b:89:7c:
ee:fc:38:68:09:34:92:4e:e5:ee:9a:db:75:0d:53:
67:05:63:06:ae:29:a9:f7:36:73:4b:c7:a4:32:ea:
e8:d6:4c:be:7b:db:73:23:39:15:f8:b6:b8:a9:b7:
79:b2:2c:9d:48:d5:b0:d9:25:ce:55:70:bd:41:5e:
46:2c:54:06:bc:58:89:b8:de:17:fe:09:ad:82:74:
70:e0:7b:82:22:ad:a4:a1:2d:4d:bc:89:a5:9c:6e:
62:00:1d:6c:6a:aa:c4:17:67:8c:f0:89:7d:e8:f1:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:D6:3C:A8:61:EB:93:AB:78:35:17:70:5A:F3:D2:BA:92:0F:6B
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/MyPWPKhh65OreDUXcFrz0rqSD2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:59:44:41:24:63:12:63:c5:4c:eb:39:8e:88:29:3b:55:e3:
1b:95:b0:fd:0b:84:1c:63:db:53:91:3d:7e:6e:2e:b5:2d:cc:
04:36:8e:b7:d5:1b:67:39:ca:eb:c1:6b:67:23:94:da:d9:c0:
8f:21:ce:6f:32:9d:4c:d8:4e:f4:7c:88:90:d8:a8:b0:4f:55:
99:c4:c5:5f:91:e1:9a:20:6c:2c:98:2d:22:ad:65:be:3c:5e:
58:77:c1:48:3a:35:0f:e3:48:41:a6:20:9f:79:06:b7:90:fc:
28:3d:0b:d9:52:e9:96:92:59:6a:22:c4:92:0d:8c:bd:36:6e:
37:f1:b9:87:06:eb:f1:14:05:95:1c:af:fc:46:3d:8f:5c:fe:
79:dc:42:12:e2:22:f0:a2:e4:29:7e:25:03:c7:06:22:15:6f:
b0:c9:0e:8c:ba:07:38:71:3d:7d:9b:9a:ae:c2:86:f3:54:41:
00:7c:71:c8:19:48:03:51:9f:48:b2:b7:ca:ca:86:3f:f3:42:
84:61:cf:b7:cf:99:74:f7:c9:df:01:c5:ce:68:8d:76:93:80:
5f:31:e3:f0:cf:57:ec:16:d0:b6:fe:44:27:ff:0c:5a:fc:12:
72:19:51:50:b3:8a:be:14:c0:75:9d:e7:c3:8b:41:b5:1d:69:
f3:b8:13:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHW8uHK4hzBzOlovM3Fhe73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIwNzA3MDQzNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzIzZDYzY2E4NjFlYjkzYWI3ODM1MTc3MDVhZjNkMmJhOTIwZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSyFJn0AoOwNMrADAR3MdeavQnRh
evjNndRtCXQ2BwUyf47/XXeilZbvuqcL9/hBspkUn4wSvG/EE9kXoqpk/iI8QwUg
XUJe5bFAKEeuRGbXtmDs8+Ey0c6gMCl7f3WjPVolxxyAxzLgG7Qvk0zahzN6UpER
KEhfQ2iQZ2bT/hXCX/i4QvRRt/zlDmBoR+GJPh17iXzu/DhoCTSSTuXumtt1DVNn
BWMGrimp9zZzS8ekMuro1ky+e9tzIzkV+La4qbd5siydSNWw2SXOVXC9QV5GLFQG
vFiJuN4X/gmtgnRw4HuCIq2koS1NvImlnG5iAB1saqrEF2eM8Il96PH9OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMj1jyoYeuTq3g1F3Ba89K6kg9rMB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvTXlQV1BLaGg2NU9yZURVWGNGcnowcnFTRDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHwYcMA0G
CSqGSIb3DQEBCwUAA4IBAQB9WURBJGMSY8VM6zmOiCk7VeMblbD9C4QcY9tTkT1+
bi61LcwENo631RtnOcrrwWtnI5Ta2cCPIc5vMp1M2E70fIiQ2KiwT1WZxMVfkeGa
IGwsmC0irWW+PF5Yd8FIOjUP40hBpiCfeQa3kPwoPQvZUumWkllqIsSSDYy9Nm43
8bmHBuvxFAWVHK/8Rj2PXP553EIS4iLwouQpfiUDxwYiFW+wyQ6Mugc4cT19m5qu
wobzVEEAfHHIGUgDUZ9IsrfKyoY/80KEYc+3z5l098nfAcXOaI12k4BfMePwz1fs
FtC2/kQn/wxa/BJyGVFQs4q+FMB1nefDi0G1HWnzuBP/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org