Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/sx_JXCml1VjgWdIpgb5MFD7svJw.roa
File: sx_JXCml1VjgWdIpgb5MFD7svJw.roa (raw, json)
Hash identifier: C7zKtqP2ij9HhSk9bUlJIXX4a6jsFdbhyooeYPnkgsE=
Subject key identifier: B3:1F:C9:5C:29:A5:D5:58:E0:59:D2:29:81:BE:4C:14:3E:EC:BC:9C
Certificate issuer: /CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Certificate serial: 018829F4E0BD6CDAB30AC2B522C69DAE24CA
Authority key identifier: 25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/sx_JXCml1VjgWdIpgb5MFD7svJw.roa
Signing time: Wed 17 May 2023 13:44:54 +0000
ROA not before: Wed 17 May 2023 13:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205134
IP address blocks: 91.216.171.0/24 maxlen: 24
2a12:d9c0:1::/48 maxlen: 48
2a12:d9c0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:f4:e0:bd:6c:da:b3:0a:c2:b5:22:c6:9d:ae:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2564be81ecbc14d874027bf23b9dec3f7f2080eb
Validity
Not Before: May 17 13:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b31fc95c29a5d558e059d22981be4c143eecbc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:dc:f1:68:90:a9:94:15:25:c2:bb:f0:60:
6c:30:af:0b:f9:fc:05:66:09:61:b2:90:d2:79:ca:
74:be:53:29:e8:5e:dc:68:bd:0e:5f:53:43:df:15:
db:6c:b9:f9:d7:ad:4a:34:f4:36:b3:2c:4a:cc:18:
d7:bf:01:f4:2c:77:18:8c:fd:f1:5f:e6:8b:9f:af:
02:15:25:b1:ec:cb:57:a4:dc:e5:cd:62:41:0b:39:
3a:ac:a6:5f:0d:ce:1b:b9:e4:f1:84:18:2b:e1:21:
f4:0a:31:ce:40:78:f8:46:1f:a9:b2:ff:30:3c:e2:
e1:af:e3:fc:fb:2a:c7:2d:2b:dc:d1:49:ef:47:16:
f1:f0:97:19:bc:69:8a:c8:55:06:95:d8:98:db:fa:
cc:72:cf:df:13:fa:21:e1:cc:37:f7:1b:27:1d:8b:
36:8c:20:f2:3b:f5:e3:10:43:c2:0c:b9:26:1b:0e:
fa:d7:66:0d:46:7b:52:8e:25:9f:78:75:39:a9:f1:
54:a3:7d:d5:9c:2b:ed:20:5b:c4:5b:88:0d:cd:c4:
0e:46:03:07:63:b5:b0:82:03:91:89:d5:10:da:1a:
1d:44:44:c9:68:7a:76:42:88:00:ab:dd:9f:75:46:
7b:03:21:d5:2f:4c:50:e3:82:35:03:0a:dd:f5:b6:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:C9:5C:29:A5:D5:58:E0:59:D2:29:81:BE:4C:14:3E:EC:BC:9C
X509v3 Authority Key Identifier:
keyid:25:64:BE:81:EC:BC:14:D8:74:02:7B:F2:3B:9D:EC:3F:7F:20:80:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWS-gey8FNh0AnvyO53sP38ggOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/sx_JXCml1VjgWdIpgb5MFD7svJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8be1f1-1033-4772-b2f1-28491036231b/1/JWS-gey8FNh0AnvyO53sP38ggOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.171.0/24
IPv6:
2a12:d9c0:1::-2a12:d9c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:84:66:eb:df:20:05:62:0c:73:37:4e:c1:e9:04:41:10:70:
b0:3b:3f:5d:9c:c9:1b:b6:e9:bb:3f:bb:39:97:c7:13:75:15:
e9:3b:4f:e2:ba:1e:a0:2e:f3:bc:49:ed:cc:52:73:cd:9e:80:
7f:55:a8:56:68:bc:d8:1c:a1:a5:5e:a0:8a:1b:88:6d:3a:25:
58:18:7f:6d:81:23:e2:44:21:10:4f:a6:f0:0f:06:d3:b5:50:
9f:71:24:0d:36:58:59:28:91:7e:20:f2:e0:0f:21:aa:3e:14:
57:2f:00:7b:72:b4:cf:f3:f2:2d:44:4e:ce:22:80:ff:cc:57:
63:cd:cc:fc:e6:a1:e5:42:42:67:3a:35:f8:57:10:39:58:08:
5e:77:95:ed:51:f2:06:fd:46:c8:ba:29:f8:6d:51:30:a1:d7:
26:0e:38:aa:87:7a:04:99:fd:1c:da:d8:25:b2:bc:df:50:d1:
04:24:1c:47:fc:14:2a:5c:93:8b:c8:98:56:73:e4:8b:08:20:
7e:8b:11:e0:1b:25:c2:23:92:ae:3e:82:ef:de:1d:e8:ea:59:
8a:df:57:3e:fa:bf:33:8d:dd:f5:62:3f:43:8e:fc:c2:37:0b:
ca:5a:df:4b:03:e9:da:63:4e:61:25:84:b1:9c:1d:b5:6d:60:
43:69:98:18
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYgp9OC9bNqzCsK1IsadriTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjRiZTgxZWNiYzE0ZDg3NDAyN2JmMjNiOWRlYzNmN2Yy
MDgwZWIwHhcNMjMwNTE3MTM0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzFmYzk1YzI5YTVkNTU4ZTA1OWQyMjk4MWJlNGMxNDNlZWNiYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Lc8WiQqZQVJcK78GBsMK8L+fwF
ZglhspDSecp0vlMp6F7caL0OX1ND3xXbbLn5161KNPQ2syxKzBjXvwH0LHcYjP3x
X+aLn68CFSWx7MtXpNzlzWJBCzk6rKZfDc4bueTxhBgr4SH0CjHOQHj4Rh+psv8w
POLhr+P8+yrHLSvc0UnvRxbx8JcZvGmKyFUGldiY2/rMcs/fE/oh4cw39xsnHYs2
jCDyO/XjEEPCDLkmGw7612YNRntSjiWfeHU5qfFUo33VnCvtIFvEW4gNzcQORgMH
Y7WwggORidUQ2hodRETJaHp2QogAq92fdUZ7AyHVL0xQ44I1Awrd9bYgVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLMfyVwppdVY4FnSKYG+TBQ+7LycMB8GA1UdIwQY
MBaAFCVkvoHsvBTYdAJ78jud7D9/IIDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldTLWdleThGTmgwQW52eU81M3NQMzhnZ09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YmUxZjEtMTAzMy00NzcyLWIyZjEt
Mjg0OTEwMzYyMzFiLzEvc3hfSlhDbWwxVmpnV2RJcGdiNU1GRDdzdkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YmUxZjEtMTAzMy00NzcyLWIyZjEtMjg0OTEwMzYyMzFi
LzEvSldTLWdleThGTmgwQW52eU81M3NQMzhnZ09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAW9irMBoE
AgACMBQwEgMHACoS2cAAAQMHACoS2cAAAjANBgkqhkiG9w0BAQsFAAOCAQEAqYRm
698gBWIMczdOwekEQRBwsDs/XZzJG7bpuz+7OZfHE3UV6TtP4roeoC7zvEntzFJz
zZ6Af1WoVmi82ByhpV6gihuIbTolWBh/bYEj4kQhEE+m8A8G07VQn3EkDTZYWSiR
fiDy4A8hqj4UVy8Ae3K0z/PyLUROziKA/8xXY83M/Oah5UJCZzo1+FcQOVgIXneV
7VHyBv1GyLop+G1RMKHXJg44qod6BJn9HNrYJbK831DRBCQcR/wUKlyTi8iYVnPk
iwggfosR4BslwiOSrj6C794d6OpZit9XPvq/M43d9WI/Q478wjcLylrfSwPp2mNO
YSWEsZwdtW1gQ2mYGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:47 2024 by rpki-client on console-fra.rpki-client.org