Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/SSF7yUUS357qmCuS080X2n44c6o.roa
File: SSF7yUUS357qmCuS080X2n44c6o.roa (raw, json)
Hash identifier: ZJ5dLqmMb90pVRSetviqhhRS0PRzMr4/UFSEjxAoCI8=
Subject key identifier: 49:21:7B:C9:45:12:DF:9E:EA:98:2B:92:D3:CD:17:DA:7E:38:73:AA
Certificate issuer: /CN=5f326681a161298adb9ec53359aa41a56a775e6d
Certificate serial: 0185728C96829B835F076C380E1C6C0AF984
Authority key identifier: 5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/SSF7yUUS357qmCuS080X2n44c6o.roa
Signing time: Mon 02 Jan 2023 12:54:54 +0000
ROA not before: Mon 02 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57598
IP address blocks: 81.162.128.0/18 maxlen: 18
37.246.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:96:82:9b:83:5f:07:6c:38:0e:1c:6c:0a:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f326681a161298adb9ec53359aa41a56a775e6d
Validity
Not Before: Jan 2 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49217bc94512df9eea982b92d3cd17da7e3873aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:20:19:a2:81:63:6a:49:d4:fc:64:41:59:
d7:3a:51:a0:15:2d:3f:d8:3a:a7:96:40:25:84:3f:
48:82:c3:3c:02:3e:e0:c5:2c:63:9a:ca:d2:2e:15:
45:80:06:02:c2:d4:b7:8b:50:0e:6a:d4:de:0f:45:
fd:46:ab:27:a2:b1:3d:a1:9e:96:47:59:94:cc:4f:
5e:68:e3:55:6a:b5:19:ce:54:b0:80:83:66:d4:e2:
80:04:40:08:84:ec:df:7a:d8:52:98:d7:03:bd:85:
3e:08:c7:bc:67:42:cd:b4:b6:52:ff:4c:c5:34:1e:
17:36:ca:ca:01:cc:19:fb:bc:0f:9d:3d:65:ff:0e:
5b:ab:75:1b:b0:df:5b:85:12:94:87:ea:9f:68:a7:
7b:5d:10:87:d3:a1:a8:e5:41:26:60:a5:87:2f:83:
e4:a5:fd:3a:0e:16:6e:5b:da:84:12:43:5b:54:eb:
84:0f:e3:ae:ce:6b:eb:dc:6a:f7:92:69:de:80:a6:
c0:dd:3e:2e:eb:88:1d:bb:5b:93:31:36:30:90:7e:
8b:06:c1:67:19:dd:75:91:7e:3a:7d:b6:bc:9f:17:
10:28:32:66:54:45:b6:d1:59:32:e1:1f:ed:b5:54:
07:79:1f:25:1b:f6:83:69:d7:36:ee:6d:98:98:f1:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:7B:C9:45:12:DF:9E:EA:98:2B:92:D3:CD:17:DA:7E:38:73:AA
X509v3 Authority Key Identifier:
keyid:5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/SSF7yUUS357qmCuS080X2n44c6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.246.0.0/16
81.162.128.0/18
Signature Algorithm: sha256WithRSAEncryption
14:29:03:a8:89:55:c2:7c:ee:48:a4:ed:e2:59:76:5a:c7:f6:
a0:92:17:b2:b0:f2:85:c5:b2:99:62:63:fb:bf:4d:4c:79:8f:
d3:81:80:1d:25:87:95:7e:e6:35:51:ad:b9:fc:23:c5:d9:65:
ce:6f:bc:c6:2f:34:23:ad:a7:30:2d:a2:1d:42:f4:65:82:26:
84:1f:62:47:16:95:5d:50:7a:a8:a2:33:a9:5b:61:c4:bc:f5:
7f:27:55:02:9d:5c:ed:c2:d7:2d:a9:76:1d:20:4d:bf:d2:e0:
7d:87:64:a5:6b:1d:82:e8:ea:29:4b:0d:01:60:d4:04:2b:8e:
15:8d:d0:d1:49:07:40:56:7d:20:7f:35:8d:7c:bc:88:c1:e1:
ee:1e:a1:0a:1e:36:cc:12:e5:e2:97:88:fc:be:99:43:f4:79:
08:d9:8f:2b:c9:4f:32:53:5f:32:7f:3e:47:ba:2a:11:b2:b8:
8a:63:ce:c7:1a:1f:db:fa:7f:82:51:f7:da:6f:e9:4e:ec:44:
24:cd:6a:3c:ee:39:1b:ac:69:45:eb:46:7b:e4:85:1f:9c:5a:
68:2b:02:c9:c1:a1:75:50:1d:e2:ec:77:80:f5:2a:be:96:6a:
9d:9e:16:16:0c:86:e9:ff:9a:69:4d:0c:af:21:be:43:fa:21:
00:f4:8d:7a
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAYVyjJaCm4NfB2w4DhxsCvmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMzI2NjgxYTE2MTI5OGFkYjllYzUzMzU5YWE0MWE1NmE3
NzVlNmQwHhcNMjMwMTAyMTI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTIxN2JjOTQ1MTJkZjllZWE5ODJiOTJkM2NkMTdkYTdlMzg3M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nEgGaKBY2pJ1PxkQVnXOlGgFS0/
2DqnlkAlhD9IgsM8Aj7gxSxjmsrSLhVFgAYCwtS3i1AOatTeD0X9RqsnorE9oZ6W
R1mUzE9eaONVarUZzlSwgINm1OKABEAIhOzfethSmNcDvYU+CMe8Z0LNtLZS/0zF
NB4XNsrKAcwZ+7wPnT1l/w5bq3UbsN9bhRKUh+qfaKd7XRCH06Go5UEmYKWHL4Pk
pf06DhZuW9qEEkNbVOuED+Ouzmvr3Gr3kmnegKbA3T4u64gdu1uTMTYwkH6LBsFn
Gd11kX46fba8nxcQKDJmVEW20Vky4R/ttVQHeR8lG/aDadc27m2YmPG0LwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFEkhe8lFEt+e6pgrktPNF9p+OHOqMB8GA1UdIwQY
MBaAFF8yZoGhYSmK257FM1mqQaVqd15tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpKbWdhRmhLWXJibnNVeldhcEJwV3AzWG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZjgwOTEtYjE5My00Y2ZjLTllZjAt
NDYzZGUwZjY5NjlmLzEvU1NGN3lVVVMzNTdxbUN1UzA4MFgybjQ0YzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mZjgwOTEtYjE5My00Y2ZjLTllZjAtNDYzZGUwZjY5Njlm
LzEvWHpKbWdhRmhLWXJibnNVeldhcEJwV3AzWG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAJfYDBAZR
ooAwDQYJKoZIhvcNAQELBQADggEBABQpA6iJVcJ87kik7eJZdlrH9qCSF7Kw8oXF
spliY/u/TUx5j9OBgB0lh5V+5jVRrbn8I8XZZc5vvMYvNCOtpzAtoh1C9GWCJoQf
YkcWlV1QeqiiM6lbYcS89X8nVQKdXO3C1y2pdh0gTb/S4H2HZKVrHYLo6ilLDQFg
1AQrjhWN0NFJB0BWfSB/NY18vIjB4e4eoQoeNswS5eKXiPy+mUP0eQjZjyvJTzJT
XzJ/Pke6KhGyuIpjzscaH9v6f4JR99pv6U7sRCTNajzuORusaUXrRnvkhR+cWmgr
AsnBoXVQHeLsd4D1Kr6Wap2eFhYMhun/mmlNDK8hvkP6IQD0jXo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:18 2024 by rpki-client on console-fra.rpki-client.org