Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XLRM1rSsf7oX6s8EVTb861xDk-Q.roa
File: XLRM1rSsf7oX6s8EVTb861xDk-Q.roa (raw, json)
Hash identifier: ly7OMUbUM5whqyoPPD02Xu3RssCD8WFKU1PiF3BYyjY=
Subject key identifier: 5C:B4:4C:D6:B4:AC:7F:BA:17:EA:CF:04:55:36:FC:EB:5C:43:93:E4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186E19B280FE09AD49C46044CA820B3D341
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XLRM1rSsf7oX6s8EVTb861xDk-Q.roa
Signing time: Tue 14 Mar 2023 19:31:27 +0000
ROA not before: Tue 14 Mar 2023 19:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e1:9b:28:0f:e0:9a:d4:9c:46:04:4c:a8:20:b3:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 14 19:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb44cd6b4ac7fba17eacf045536fceb5c4393e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:8f:d7:2a:cd:c5:2a:85:46:51:13:82:f5:
45:75:ee:20:9a:ab:ff:05:2f:20:35:9b:80:1b:a1:
90:93:17:22:da:bd:83:a2:06:9e:4f:37:91:2f:12:
e1:5d:9d:5e:40:ea:a9:09:3d:62:f5:d5:11:7e:ae:
a3:ec:b6:05:2f:0a:5c:b7:cf:6d:32:e3:8f:7f:94:
ff:dd:16:70:9d:8b:32:ec:1e:3a:f9:8c:c7:6b:7a:
35:18:ae:e6:75:dc:1d:bd:67:1f:9f:79:57:30:f7:
0b:40:92:47:97:cf:80:29:ef:f4:a8:89:ba:03:3e:
9d:20:7c:93:bf:cf:c4:3b:b5:98:39:f9:d6:35:a0:
0e:0b:76:20:41:85:75:f0:2f:cd:97:e9:ab:14:ab:
5f:10:b9:37:a9:43:7d:f5:ef:2c:c5:1b:81:d3:6a:
c7:71:dc:68:2c:42:a9:1f:54:67:cc:61:17:4e:95:
ad:a0:e1:c0:dc:f1:7e:87:47:87:c1:14:19:d1:4a:
c6:7b:28:52:8a:82:14:61:58:75:c6:75:17:5e:a0:
7b:5a:bb:c2:59:0a:9b:9a:0e:46:5d:f0:8f:06:99:
a6:18:b7:4b:83:64:82:37:de:c4:88:35:a9:af:ad:
2d:c2:e7:52:b3:80:81:7e:b8:7b:8a:7d:24:a2:49:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:4C:D6:B4:AC:7F:BA:17:EA:CF:04:55:36:FC:EB:5C:43:93:E4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XLRM1rSsf7oX6s8EVTb861xDk-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:5a:8a:d6:25:b7:b5:96:69:32:0d:3d:ef:c8:6f:13:e4:e3:
66:d8:bb:09:a8:af:58:e5:7e:c2:b2:1c:7f:87:4f:8b:d6:3c:
39:da:ca:c6:1d:1a:2e:a3:02:b9:eb:60:a1:85:ec:59:5f:93:
15:be:77:b9:62:78:0e:93:ff:93:7a:ef:b5:06:35:6c:fe:76:
2f:ad:59:27:19:27:ed:d0:fd:c9:81:03:82:8b:43:f6:ca:00:
3e:49:2b:aa:c1:5e:e0:c2:d6:1e:01:58:8a:34:79:f4:17:0e:
db:e3:ab:23:72:71:0e:59:1e:16:64:ac:e9:c5:8d:c4:2c:e9:
9d:21:6d:71:a4:af:3e:ef:c3:c2:00:e7:18:05:5e:14:8e:29:
68:72:dd:02:b8:b6:91:73:20:2b:6f:76:7a:dd:8f:56:27:9d:
36:35:73:a1:19:fc:b7:bf:aa:a2:0f:55:97:05:dc:30:59:ca:
bd:69:47:ff:ed:a5:ef:2c:f4:cd:98:5d:8a:74:3a:88:d0:cb:
25:1c:7a:cd:1e:8d:35:72:7e:a9:28:10:cd:32:75:40:85:26:
cf:b9:df:98:e1:da:f1:49:c0:9e:4d:54:65:3c:74:71:75:15:
49:f3:30:e2:f2:5c:47:8b:25:7f:f8:bb:07:7f:62:17:d5:47:
fa:48:c2:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbhmygP4JrUnEYETKggs9NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjMwMzE0MTkzMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2I0NGNkNmI0YWM3ZmJhMTdlYWNmMDQ1NTM2ZmNlYjVjNDM5M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQSP1yrNxSqFRlETgvVFde4gmqv/
BS8gNZuAG6GQkxci2r2DogaeTzeRLxLhXZ1eQOqpCT1i9dURfq6j7LYFLwpct89t
MuOPf5T/3RZwnYsy7B46+YzHa3o1GK7mddwdvWcfn3lXMPcLQJJHl8+AKe/0qIm6
Az6dIHyTv8/EO7WYOfnWNaAOC3YgQYV18C/Nl+mrFKtfELk3qUN99e8sxRuB02rH
cdxoLEKpH1RnzGEXTpWtoOHA3PF+h0eHwRQZ0UrGeyhSioIUYVh1xnUXXqB7WrvC
WQqbmg5GXfCPBpmmGLdLg2SCN97EiDWpr60twudSs4CBfrh7in0koklpMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFy0TNa0rH+6F+rPBFU2/OtcQ5PkMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvWExSTTFyU3NmN29YNnM4RVZUYjg2MXhEay1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaysMA0G
CSqGSIb3DQEBCwUAA4IBAQCmWorWJbe1lmkyDT3vyG8T5ONm2LsJqK9Y5X7Cshx/
h0+L1jw52srGHRouowK562ChhexZX5MVvne5YngOk/+Teu+1BjVs/nYvrVknGSft
0P3JgQOCi0P2ygA+SSuqwV7gwtYeAViKNHn0Fw7b46sjcnEOWR4WZKzpxY3ELOmd
IW1xpK8+78PCAOcYBV4Ujiloct0CuLaRcyArb3Z63Y9WJ502NXOhGfy3v6qiD1WX
BdwwWcq9aUf/7aXvLPTNmF2KdDqI0MslHHrNHo01cn6pKBDNMnVAhSbPud+Y4drx
ScCeTVRlPHRxdRVJ8zDi8lxHiyV/+LsHf2IX1Uf6SMJw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org