Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q86i4LLTKpeQ8eRmoBXUfpSXcik.roa
File: q86i4LLTKpeQ8eRmoBXUfpSXcik.roa (raw, json)
Hash identifier: DcDuz4fYcinOADy8kKc9ei2tX+hN/CIsKHSEKR9KQ0o=
Subject key identifier: AB:CE:A2:E0:B2:D3:2A:97:90:F1:E4:66:A0:15:D4:7E:94:97:72:29
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01835B7583BE4980CB023C5A065B3DE0ABA7
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q86i4LLTKpeQ8eRmoBXUfpSXcik.roa
Signing time: Tue 20 Sep 2022 15:12:51 +0000
ROA not before: Tue 20 Sep 2022 15:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 31.6.45.0/24 maxlen: 24
178.208.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:75:83:be:49:80:cb:02:3c:5a:06:5b:3d:e0:ab:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Sep 20 15:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abcea2e0b2d32a9790f1e466a015d47e94977229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:12:3c:7f:b5:eb:89:f6:fb:e5:88:cd:69:
85:31:e9:13:b7:09:57:ca:a9:b9:6f:49:90:21:1e:
e5:e6:17:80:8f:e2:2a:eb:89:fd:60:c3:64:8e:5c:
71:06:b2:5f:6b:c0:22:88:37:ff:4c:ad:2b:ac:9d:
cb:45:d2:d3:c0:f0:6f:05:95:73:26:8c:10:55:f9:
ee:cf:b2:9b:87:08:7d:89:8a:38:ac:68:65:5b:c6:
8a:69:7e:39:fb:7a:0e:32:69:bf:0a:7a:6b:79:ea:
26:11:6d:51:6b:21:e8:f3:8c:65:ad:62:1c:de:08:
eb:84:3f:b0:25:ac:3e:ce:c0:84:6e:69:48:30:44:
02:46:d1:78:f4:49:95:d8:77:28:b8:23:e3:c3:40:
b9:c9:76:c1:ae:36:7d:1f:4e:7d:55:91:b2:bc:f2:
24:47:8a:1d:6a:65:10:0f:f0:0e:1a:c6:e9:6e:8d:
af:38:24:d4:2f:1a:da:73:0f:74:21:07:df:ac:7a:
c2:bf:69:60:49:25:4f:ad:40:fe:ac:68:0b:3c:a5:
56:81:39:cb:8d:84:4d:8d:62:03:91:51:d7:bc:e7:
32:bd:b2:fb:81:10:75:ec:84:e1:67:c5:24:fc:8e:
3d:18:94:c3:77:f7:4c:bc:9d:c2:04:bd:03:e0:1d:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:A2:E0:B2:D3:2A:97:90:F1:E4:66:A0:15:D4:7E:94:97:72:29
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q86i4LLTKpeQ8eRmoBXUfpSXcik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
178.208.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:2b:d2:43:cf:6c:1c:3d:8b:9a:5a:11:34:e6:97:8a:b4:7f:
bd:40:61:56:81:2d:c1:74:87:48:85:26:ae:a5:42:44:cc:d6:
3c:a3:b5:7d:0e:8c:e7:1a:11:ab:55:62:d2:20:31:40:04:e6:
7d:60:95:20:02:23:9a:c4:e6:43:31:d4:eb:0e:03:1a:90:96:
cf:86:51:9f:0f:b5:b8:f5:19:8c:ec:f9:a0:23:7b:e0:aa:47:
c0:4b:d1:ab:15:00:19:30:54:e3:4d:fc:64:20:27:ac:19:fb:
e3:aa:b4:a5:a5:b8:6b:ec:1c:c0:16:e7:79:9a:ce:81:83:34:
d9:15:fd:a4:4a:09:1b:0a:c1:bb:4d:37:26:b5:52:63:89:96:
7d:6c:39:a1:fb:bb:47:e9:c1:9d:06:b9:e3:e7:a0:c1:a3:f9:
35:1a:c0:42:71:ca:f3:2f:09:6a:00:5b:36:1e:9c:8d:cc:48:
06:99:27:48:b3:ad:94:28:c7:48:c8:f3:f5:95:76:b9:2c:77:
b2:74:1b:18:d5:0e:df:81:d4:96:f8:e5:91:43:5b:df:93:de:
1d:fa:37:2b:31:56:91:95:0e:74:28:25:25:a4:93:dc:c6:5f:
7e:7e:9a:95:e1:83:7a:a0:45:60:35:42:53:18:61:32:3c:72:
2d:17:4f:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNbdYO+SYDLAjxaBls94KunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIwOTIwMTUxMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmNlYTJlMGIyZDMyYTk3OTBmMWU0NjZhMDE1ZDQ3ZTk0OTc3MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwESPH+164n2++WIzWmFMekTtwlX
yqm5b0mQIR7l5heAj+Iq64n9YMNkjlxxBrJfa8AiiDf/TK0rrJ3LRdLTwPBvBZVz
JowQVfnuz7Kbhwh9iYo4rGhlW8aKaX45+3oOMmm/CnpreeomEW1RayHo84xlrWIc
3gjrhD+wJaw+zsCEbmlIMEQCRtF49EmV2HcouCPjw0C5yXbBrjZ9H059VZGyvPIk
R4odamUQD/AOGsbpbo2vOCTULxracw90IQffrHrCv2lgSSVPrUD+rGgLPKVWgTnL
jYRNjWIDkVHXvOcyvbL7gRB17IThZ8Uk/I49GJTDd/dMvJ3CBL0D4B0/NwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKvOouCy0yqXkPHkZqAV1H6Ul3IpMB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvcTg2aTRMTFRLcGVROGVSbW9CWFVmcFNYY2lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHwYtAwQC
stC0MA0GCSqGSIb3DQEBCwUAA4IBAQB9K9JDz2wcPYuaWhE05peKtH+9QGFWgS3B
dIdIhSaupUJEzNY8o7V9DoznGhGrVWLSIDFABOZ9YJUgAiOaxOZDMdTrDgMakJbP
hlGfD7W49RmM7PmgI3vgqkfAS9GrFQAZMFTjTfxkICesGfvjqrSlpbhr7BzAFud5
ms6BgzTZFf2kSgkbCsG7TTcmtVJjiZZ9bDmh+7tH6cGdBrnj56DBo/k1GsBCccrz
LwlqAFs2HpyNzEgGmSdIs62UKMdIyPP1lXa5LHeydBsY1Q7fgdSW+OWRQ1vfk94d
+jcrMVaRlQ50KCUlpJPcxl9+fpqV4YN6oEVgNUJTGGEyPHItF0/m
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org