Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa
File: Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa (raw, json)
Hash identifier: JFIyFAkhda54v0GKonJN5NQ3UVtB5bBgR8ERoKWeG8s=
Subject key identifier: 0B:0B:BD:95:9F:A4:8F:95:DA:80:64:68:06:61:FD:1B:39:7C:1B:9D
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01882CEE98BD1EF653AC189DED041F553252
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa
Signing time: Thu 18 May 2023 03:36:54 +0000
ROA not before: Thu 18 May 2023 03:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.108.59.0/24 maxlen: 24
193.108.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:ee:98:bd:1e:f6:53:ac:18:9d:ed:04:1f:55:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 18 03:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0bbd959fa48f95da8064680661fd1b397c1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:df:56:be:fb:a5:54:6e:c6:91:b2:03:df:
a7:b1:5c:2e:b4:94:ab:e3:28:8a:88:f1:d7:6c:86:
55:6c:84:a7:6f:55:8c:61:8b:9d:42:68:66:c4:6a:
85:e9:3b:8f:85:c8:e9:78:f4:a8:ab:f5:96:65:22:
f4:85:cd:18:b5:7b:14:20:e8:6c:c2:33:f4:bf:77:
a8:31:64:1c:99:3c:86:a2:6b:d1:38:72:46:ba:a9:
cc:3d:6a:0b:9c:b6:4a:0a:e2:ac:02:28:a4:6c:2b:
22:8a:35:f2:5c:3a:b2:68:ea:12:24:79:fc:fd:0b:
78:94:01:c3:53:ae:10:d9:a4:fe:82:40:d3:61:1f:
a3:a6:c4:fb:4a:fe:86:16:5b:ce:93:25:b4:76:97:
96:6b:e2:ea:aa:98:87:55:1b:d7:e7:1c:7d:f0:70:
2c:8f:70:6f:79:50:f3:32:e2:5e:5a:aa:93:0c:68:
f6:d2:11:00:99:75:97:64:c3:cc:89:49:7b:91:fc:
ba:bb:f6:4b:6b:53:d2:de:51:a4:ea:eb:f4:e8:8b:
be:fa:cf:83:ed:cb:f4:b3:82:e1:24:5d:07:2a:d1:
8b:02:da:3c:b0:f7:b8:e9:c7:31:f8:57:46:41:02:
ad:3c:4a:83:4b:c8:02:7b:8c:fa:a5:71:eb:60:b4:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:BD:95:9F:A4:8F:95:DA:80:64:68:06:61:FD:1B:39:7C:1B:9D
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.59.0/24
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d7:89:9b:d9:ec:00:a4:8d:d9:03:fc:fd:4c:20:8e:d0:55:
51:df:58:36:d4:93:aa:4c:3c:e8:c3:33:83:63:03:ff:f2:6c:
be:f0:52:02:4b:dc:8e:3e:a7:e5:b1:73:a4:f4:7e:1f:e6:dd:
ed:c0:c4:0b:5b:73:a1:38:dd:02:ba:5d:9a:94:3c:03:29:6a:
43:0d:24:db:c2:8e:e6:6e:00:95:e1:db:1b:7e:81:3f:68:05:
fc:ea:17:03:d1:19:66:87:f5:ad:fe:48:bf:aa:57:3a:e4:b2:
d6:99:db:e7:04:73:62:25:19:f5:2d:22:89:ed:17:75:bb:52:
6a:b6:fd:d3:fe:96:3b:72:fb:b9:0f:9f:cc:96:80:b3:00:d8:
6e:a5:cb:71:95:e8:af:0d:d6:ff:0b:65:78:7f:5c:0e:9d:2c:
e3:6e:2d:c7:c5:1b:55:c3:e3:55:3c:3c:a6:45:5c:d5:b6:75:
f3:24:d2:c1:88:6f:13:ef:3c:5b:4e:ad:69:cd:24:bc:ce:f6:
56:52:63:14:8f:23:21:c1:30:c7:67:05:0b:a1:1f:44:7f:52:
ef:7c:9f:47:d5:ff:12:07:62:8e:8a:35:fe:c2:d0:12:e0:5a:
71:fc:95:7c:39:03:d4:98:ee:e0:03:09:19:48:e3:3a:e6:ff:
eb:cf:1e:94
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYgs7pi9HvZTrBid7QQfVTJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwNTE4MDMzNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBiYmQ5NTlmYTQ4Zjk1ZGE4MDY0NjgwNjYxZmQxYjM5N2MxYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKTfVr77pVRuxpGyA9+nsVwutJSr
4yiKiPHXbIZVbISnb1WMYYudQmhmxGqF6TuPhcjpePSoq/WWZSL0hc0YtXsUIOhs
wjP0v3eoMWQcmTyGomvROHJGuqnMPWoLnLZKCuKsAiikbCsiijXyXDqyaOoSJHn8
/Qt4lAHDU64Q2aT+gkDTYR+jpsT7Sv6GFlvOkyW0dpeWa+LqqpiHVRvX5xx98HAs
j3BveVDzMuJeWqqTDGj20hEAmXWXZMPMiUl7kfy6u/ZLa1PS3lGk6uv06Iu++s+D
7cv0s4LhJF0HKtGLAto8sPe46ccx+FdGQQKtPEqDS8gCe4z6pXHrYLRucQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAsLvZWfpI+V2oBkaAZh/Rs5fBudMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL0N3dTlsWi1rajVYYWdHUm9CbUg5R3psOEc1MC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADBbDsD
BADBbGkwDQYJKoZIhvcNAQELBQADggEBAGXXiZvZ7ACkjdkD/P1MII7QVVHfWDbU
k6pMPOjDM4NjA//ybL7wUgJL3I4+p+Wxc6T0fh/m3e3AxAtbc6E43QK6XZqUPAMp
akMNJNvCjuZuAJXh2xt+gT9oBfzqFwPRGWaH9a3+SL+qVzrkstaZ2+cEc2IlGfUt
IontF3W7Umq2/dP+ljty+7kPn8yWgLMA2G6ly3GV6K8N1v8LZXh/XA6dLONuLcfF
G1XD41U8PKZFXNW2dfMk0sGIbxPvPFtOrWnNJLzO9lZSYxSPIyHBMMdnBQuhH0R/
Uu98n0fV/xIHYo6KNf7C0BLgWnH8lXw5A9SY7uADCRlI4zrm/+vPHpQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org