Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EBm0psiR9BtzvCTJA_pXmE4SC0E.roa
File: EBm0psiR9BtzvCTJA_pXmE4SC0E.roa (raw, json)
Hash identifier: jKz2d40qGgUMEycA9bp0pZJRgNy8cSMXTjSCNrKncJE=
Subject key identifier: 10:19:B4:A6:C8:91:F4:1B:73:BC:24:C9:03:FA:57:98:4E:12:0B:41
Certificate issuer: /CN=0d01db542317430414757aacb093fd72069192b1
Certificate serial: 01856B6EA161FEF171F2CE39C27A8F0020D6
Authority key identifier: 0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EBm0psiR9BtzvCTJA_pXmE4SC0E.roa
Signing time: Sun 01 Jan 2023 03:44:50 +0000
ROA not before: Sun 01 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 94.158.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a1:61:fe:f1:71:f2:ce:39:c2:7a:8f:00:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d01db542317430414757aacb093fd72069192b1
Validity
Not Before: Jan 1 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1019b4a6c891f41b73bc24c903fa57984e120b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:44:40:fd:31:b8:47:a0:0b:25:3e:18:ef:
36:49:29:a7:76:dc:df:38:ef:dc:fc:e8:8d:ed:54:
6f:56:31:e6:ce:d0:85:40:39:1c:59:c2:1c:76:bd:
41:1c:78:4d:21:27:69:69:27:6c:1d:9d:b2:fb:62:
03:1a:44:b4:0d:7f:56:97:fd:65:8e:2a:6d:46:cd:
1d:00:3b:bb:37:c4:4d:f6:1c:a9:17:7e:af:ba:64:
70:da:89:9f:67:53:b3:35:da:d3:9c:a9:dd:ff:96:
ba:59:ea:73:e0:b2:77:4d:40:0d:82:0a:ec:ec:61:
a5:da:54:13:a7:28:ae:01:2c:75:33:44:6a:a5:ff:
4f:66:8d:2e:ad:77:30:21:c6:36:a0:64:23:f1:87:
51:67:7e:67:b0:08:84:43:e2:88:ee:22:f8:dc:bb:
b1:be:61:80:8f:26:eb:f6:6a:c0:52:95:eb:13:5b:
65:9c:f4:ff:6d:5d:17:06:f3:fb:0a:97:1c:44:8b:
a1:6b:67:d8:a0:58:62:e1:d0:ca:0f:bb:71:13:e6:
9a:a3:63:10:fe:52:87:49:1c:a4:32:06:9e:f5:65:
c1:38:03:4f:43:87:64:f4:bf:4b:56:9c:ff:e7:0d:
8e:75:00:99:bc:57:af:43:f0:75:92:e9:c2:0a:6a:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:B4:A6:C8:91:F4:1B:73:BC:24:C9:03:FA:57:98:4E:12:0B:41
X509v3 Authority Key Identifier:
keyid:0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EBm0psiR9BtzvCTJA_pXmE4SC0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.180.0/22
Signature Algorithm: sha256WithRSAEncryption
90:9e:f3:94:a0:d2:ae:5c:fd:70:e0:ce:26:d6:0b:e6:05:8b:
fc:c1:10:b2:f9:f0:6f:a7:aa:07:0a:9e:3f:2b:d6:af:b2:2c:
60:e7:9b:0b:32:c7:6b:11:44:e5:fe:51:8c:4a:a3:c3:3d:bb:
e8:e8:7d:6b:04:26:c1:09:3c:39:4a:c2:5c:1d:76:0f:64:d7:
09:c9:7a:0b:95:f5:1b:43:e3:95:87:0f:22:2d:3c:bf:6e:7d:
2f:4f:54:32:1c:1f:81:0f:e1:3b:60:df:f7:32:20:85:46:76:
53:27:5c:32:3b:d2:24:02:49:e1:3c:93:c7:83:ce:fd:d4:b0:
36:cf:0e:2d:b0:5a:ce:25:fc:aa:f9:ac:d7:7d:3b:a3:b0:64:
1b:9b:08:a6:5e:6e:5e:fc:f8:7e:b1:ce:98:0b:0f:7d:9a:0a:
18:21:d3:18:2b:6c:1b:c9:ed:4d:13:03:b1:e2:b6:1f:2c:14:
c7:bf:6f:16:45:7b:f3:8a:e3:a9:90:c5:b1:8d:3e:7e:91:d9:
61:61:b9:22:ef:d9:e5:27:2a:e2:28:d4:45:f5:e9:9e:50:de:
a2:88:0e:41:21:0c:07:3b:8e:b9:de:1e:c9:e1:bd:e4:1e:7e:
a5:b5:ac:87:1c:f5:64:d4:59:f9:0a:99:c4:fb:ab:06:f7:23:
13:f9:c0:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrbqFh/vFx8s45wnqPACDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDFkYjU0MjMxNzQzMDQxNDc1N2FhY2IwOTNmZDcyMDY5
MTkyYjEwHhcNMjMwMTAxMDM0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE5YjRhNmM4OTFmNDFiNzNiYzI0YzkwM2ZhNTc5ODRlMTIwYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS1EQP0xuEegCyU+GO82SSmndtzf
OO/c/OiN7VRvVjHmztCFQDkcWcIcdr1BHHhNISdpaSdsHZ2y+2IDGkS0DX9Wl/1l
jiptRs0dADu7N8RN9hypF36vumRw2omfZ1OzNdrTnKnd/5a6Wepz4LJ3TUANggrs
7GGl2lQTpyiuASx1M0Rqpf9PZo0urXcwIcY2oGQj8YdRZ35nsAiEQ+KI7iL43Lux
vmGAjybr9mrAUpXrE1tlnPT/bV0XBvP7CpccRIuha2fYoFhi4dDKD7txE+aao2MQ
/lKHSRykMgae9WXBOANPQ4dk9L9LVpz/5w2OdQCZvFevQ/B1kunCCmo2fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAZtKbIkfQbc7wkyQP6V5hOEgtBMB8GA1UdIwQY
MBaAFA0B21QjF0MEFHV6rLCT/XIGkZKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFIYlZDTVhRd1FVZFhxc3NKUDljZ2FSa3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yMzcxNDYtZjg1Yy00MmJiLWIzZTUt
OWRlYjA0MjE2MjczLzEvRUJtMHBzaVI5QnR6dkNUSkFfcFhtRTRTQzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yMzcxNDYtZjg1Yy00MmJiLWIzZTUtOWRlYjA0MjE2Mjcz
LzEvRFFIYlZDTVhRd1FVZFhxc3NKUDljZ2FSa3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXp60MA0G
CSqGSIb3DQEBCwUAA4IBAQCQnvOUoNKuXP1w4M4m1gvmBYv8wRCy+fBvp6oHCp4/
K9avsixg55sLMsdrEUTl/lGMSqPDPbvo6H1rBCbBCTw5SsJcHXYPZNcJyXoLlfUb
Q+OVhw8iLTy/bn0vT1QyHB+BD+E7YN/3MiCFRnZTJ1wyO9IkAknhPJPHg8791LA2
zw4tsFrOJfyq+azXfTujsGQbmwimXm5e/Ph+sc6YCw99mgoYIdMYK2wbye1NEwOx
4rYfLBTHv28WRXvziuOpkMWxjT5+kdlhYbki79nlJyriKNRF9emeUN6iiA5BIQwH
O4653h7J4b3kHn6ltayHHPVk1Fn5CpnE+6sG9yMT+cAh
-----END CERTIFICATE-----
Generated at Tue Sep 5 15:10:59 2023 by rpki-client on console-ams.rpki-client.org