Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/Q1jndnu8guZsTG2qlUSJbQIxv00.roa
File: Q1jndnu8guZsTG2qlUSJbQIxv00.roa (raw, json)
Hash identifier: WfeZz4BKG6HegDXv9m9XzMXbYM0PDIYoyW44QJ1/0Vc=
Subject key identifier: 43:58:E7:76:7B:BC:82:E6:6C:4C:6D:AA:95:44:89:6D:02:31:BF:4D
Certificate issuer: /CN=dc71eb38789caffb220cf410b76190bef5f2e95e
Certificate serial: 031002F7
Authority key identifier: DC:71:EB:38:78:9C:AF:FB:22:0C:F4:10:B7:61:90:BE:F5:F2:E9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HHrOHicr_siDPQQt2GQvvXy6V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/Q1jndnu8guZsTG2qlUSJbQIxv00.roa
Signing time: Sat 01 Jan 2022 04:56:58 +0000
ROA not before: Sat 01 Jan 2022 04:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13768
IP address blocks: 194.38.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51380983 (0x31002f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc71eb38789caffb220cf410b76190bef5f2e95e
Validity
Not Before: Jan 1 04:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4358e7767bbc82e66c4c6daa9544896d0231bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:32:5d:8e:d6:16:70:8b:4d:8c:af:3d:8f:
7b:e9:7e:1d:ee:5a:48:01:87:d5:23:74:eb:6c:22:
09:c5:7d:1a:b6:dc:0a:44:f5:bb:ee:b6:45:ae:70:
97:21:2a:42:bb:18:30:0b:3e:6f:6c:86:47:34:e0:
09:77:74:1b:0c:8e:3d:c7:95:9a:92:7c:76:be:ca:
b3:c1:81:03:4d:e3:45:11:ea:6e:f3:3f:31:88:59:
b9:ea:49:28:3f:03:0e:ab:6c:2e:ec:b3:fe:b8:8d:
48:5a:43:bf:58:6e:03:de:3e:98:7f:21:b2:c0:d0:
04:c4:d6:04:b5:4c:b8:fc:8e:38:f1:c2:27:07:9a:
99:3e:ae:5d:6a:a8:64:b4:a2:59:c3:22:c2:fa:2b:
81:56:de:2f:01:fd:04:aa:ed:db:a0:0f:a9:ce:ee:
67:bc:7c:5d:9d:a2:e5:c2:b5:e4:3a:b4:0a:41:57:
5a:a3:b3:2f:d6:e2:51:8c:56:54:d5:7c:fc:6d:ea:
e6:0d:de:fa:38:c1:8b:2d:ac:94:a3:13:5d:a1:fe:
af:cf:82:ac:41:d7:02:e4:40:03:d0:b6:9a:e6:1e:
6f:45:b1:88:19:35:d8:ea:f1:26:30:12:cc:51:c0:
93:e2:44:5c:3f:a0:82:78:c2:41:76:4c:b9:89:b2:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:E7:76:7B:BC:82:E6:6C:4C:6D:AA:95:44:89:6D:02:31:BF:4D
X509v3 Authority Key Identifier:
keyid:DC:71:EB:38:78:9C:AF:FB:22:0C:F4:10:B7:61:90:BE:F5:F2:E9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHrOHicr_siDPQQt2GQvvXy6V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/Q1jndnu8guZsTG2qlUSJbQIxv00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/3HHrOHicr_siDPQQt2GQvvXy6V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:5f:2b:55:4a:b4:c4:3c:e0:f5:cc:31:9f:39:9e:77:f5:c7:
97:36:ce:35:8c:4e:41:16:d6:b8:bc:9f:7d:5a:79:5c:07:b9:
86:0d:f6:7f:13:52:1e:10:42:db:d6:4c:72:7f:33:c8:98:5b:
97:82:92:87:f9:17:87:45:f5:d6:c9:0c:d2:d1:8a:c6:cd:7f:
7a:95:a2:65:25:95:9f:20:9f:40:8d:2f:f5:96:57:6e:20:87:
96:29:7d:23:80:53:0c:b4:9b:25:af:6d:f5:9c:58:45:b5:df:
ca:cb:ae:db:43:e5:87:06:0c:a3:4b:00:02:cd:1c:77:12:91:
3e:2d:a0:83:8a:ab:cd:f8:8d:b5:62:ca:93:9b:6a:81:71:5e:
6a:1a:b4:c3:11:5c:22:0b:ad:31:9d:71:39:44:bc:f4:c6:2b:
08:d3:61:37:de:8d:80:e1:fe:19:21:62:ce:80:04:71:aa:87:
0a:af:fa:39:33:59:25:7d:52:29:75:7f:86:3c:a3:5e:45:f8:
f8:d6:c7:6a:63:06:2a:12:00:1f:cf:fd:5e:ff:8d:a6:b8:4a:
0e:64:20:a1:6c:a5:34:ec:46:76:20:92:da:53:b2:7e:03:20:
51:16:03:7d:bf:d0:7c:5a:cf:26:6a:d8:de:1c:e3:c6:6f:af:
49:41:4d:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxAC9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzcxZWIzODc4OWNhZmZiMjIwY2Y0MTBiNzYxOTBiZWY1ZjJlOTVlMB4XDTIyMDEw
MTA0NTY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDM1OGU3NzY3YmJj
ODJlNjZjNGM2ZGFhOTU0NDg5NmQwMjMxYmY0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJOMl2O1hZwi02Mrz2Pe+l+He5aSAGH1SN062wiCcV9Grbc
CkT1u+62Ra5wlyEqQrsYMAs+b2yGRzTgCXd0GwyOPceVmpJ8dr7Ks8GBA03jRRHq
bvM/MYhZuepJKD8DDqtsLuyz/riNSFpDv1huA94+mH8hssDQBMTWBLVMuPyOOPHC
JweamT6uXWqoZLSiWcMiwvorgVbeLwH9BKrt26APqc7uZ7x8XZ2i5cK15Dq0CkFX
WqOzL9biUYxWVNV8/G3q5g3e+jjBiy2slKMTXaH+r8+CrEHXAuRAA9C2muYeb0Wx
iBk12OrxJjASzFHAk+JEXD+ggnjCQXZMuYmyy58CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRDWOd2e7yC5mxMbaqVRIltAjG/TTAfBgNVHSMEGDAWgBTcces4eJyv+yIM
9BC3YZC+9fLpXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNISHJPSGljcl9zaURQUVF0MkdRdnZYeTZWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvOWU0NGFlLWI5N2MtNGM4MC1hMjZlLWZiMDBjYjBhOGNkMC8x
L1Exam5kbnU4Z3Vac1RHMnFsVVNKYlFJeHYwMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
OWU0NGFlLWI5N2MtNGM4MC1hMjZlLWZiMDBjYjBhOGNkMC8xLzNISHJPSGljcl9z
aURQUVF0MkdRdnZYeTZWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsImKDANBgkqhkiG9w0BAQsFAAOC
AQEAXF8rVUq0xDzg9cwxnzmed/XHlzbONYxOQRbWuLyffVp5XAe5hg32fxNSHhBC
29ZMcn8zyJhbl4KSh/kXh0X11skM0tGKxs1/epWiZSWVnyCfQI0v9ZZXbiCHlil9
I4BTDLSbJa9t9ZxYRbXfysuu20PlhwYMo0sAAs0cdxKRPi2gg4qrzfiNtWLKk5tq
gXFeahq0wxFcIgutMZ1xOUS89MYrCNNhN96NgOH+GSFizoAEcaqHCq/6OTNZJX1S
KXV/hjyjXkX4+NbHamMGKhIAH8/9Xv+NprhKDmQgoWylNOxGdiCS2lOyfgMgURYD
fb/QfFrPJmrY3hzjxm+vSUFNZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org