Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa
File: lbBOeaceuNVwY3cb_-sdt4EYEKo.roa (raw, json)
Hash identifier: c6rYCG/FwQrS3IuNZLiRBif0E+ZXwFcISipErsemY8w=
Subject key identifier: 95:B0:4E:79:A7:1E:B8:D5:70:63:77:1B:FF:EB:1D:B7:81:18:10:AA
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A134507
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa
Signing time: Sat 12 Mar 2022 22:12:48 +0000
ROA not before: Sat 12 Mar 2022 22:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169035015 (0xa134507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 12 22:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b04e79a71eb8d57063771bffeb1db7811810aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:91:6a:5e:97:15:71:28:95:3f:52:7a:ec:
ec:d3:1b:3d:cd:4e:15:3d:e3:4f:85:2b:be:9b:e5:
7c:fc:fa:4f:c4:d5:f7:81:6f:c4:70:bf:1b:fc:3f:
2c:62:89:7d:77:a2:ad:50:46:73:9a:9d:88:2b:53:
f9:06:a9:09:70:95:4a:62:fd:83:95:ba:5f:a7:d4:
32:49:fc:6d:45:06:59:c4:03:1a:df:a8:a6:58:97:
76:b7:ba:e4:78:96:48:62:57:45:2d:25:9d:53:4c:
16:6d:a4:cf:25:fe:0a:02:11:eb:73:20:57:8a:aa:
3b:00:11:18:fa:7b:f1:2f:47:cc:53:32:a0:b2:dd:
02:1b:47:c0:63:cc:ae:86:59:06:e5:65:45:5a:62:
c7:e5:cd:00:18:41:91:77:3a:ac:9a:ab:7d:0f:2c:
64:62:a0:ad:98:cd:4a:40:ef:89:2e:02:22:fe:51:
e9:5e:7c:66:c9:a0:3a:58:41:46:b4:f8:9d:46:54:
a4:06:e3:38:7c:be:56:14:3b:68:b6:0e:09:8d:1e:
e0:fb:d2:5d:63:f6:13:66:d9:87:f9:14:7c:fd:a1:
af:b7:26:6c:cf:83:43:a9:6d:c2:2a:fa:66:6c:6f:
ac:a5:17:36:69:5e:07:2e:e2:ca:bb:fe:74:7b:42:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:4E:79:A7:1E:B8:D5:70:63:77:1B:FF:EB:1D:B7:81:18:10:AA
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lbBOeaceuNVwY3cb_-sdt4EYEKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fb:72:cc:4a:b7:cb:32:76:91:2a:f8:78:a6:f0:1a:cc:be:
67:cc:aa:20:53:0d:95:54:de:b3:28:55:b0:df:58:4c:5d:d3:
a5:a0:dd:b5:42:54:94:57:7b:65:1b:05:d8:77:b8:3f:c4:ac:
a9:0f:a2:9a:b1:66:73:69:2f:e7:27:d5:ec:34:21:c6:29:4b:
b8:d9:9d:d8:25:10:1b:6c:7c:15:29:ce:3b:84:8f:35:e0:8d:
7d:49:85:66:88:72:3e:78:e8:a3:69:a6:99:c7:44:e4:f0:06:
52:4d:29:56:b4:43:47:ac:c1:c6:20:4d:1c:66:35:df:6c:51:
93:7e:b6:34:b2:f9:71:15:93:c2:a6:7d:9f:f0:47:11:90:2e:
e1:bd:50:81:c8:b5:35:59:d0:f0:86:b9:2c:08:a4:59:d6:79:
47:33:b2:12:0c:ee:c1:6f:4c:0a:ed:08:77:c1:f6:cb:79:60:
d3:77:73:be:88:8b:e5:70:7e:ac:08:91:5b:26:35:d2:d2:91:
1b:eb:36:6b:15:d7:1e:cb:0c:15:2c:24:31:b6:d3:84:5b:d7:
0a:5c:b3:1d:19:94:0c:cb:e4:16:89:9f:28:77:94:ac:a6:8f:
ad:1e:af:27:a5:f9:a9:51:81:39:fc:7f:b4:64:8f:ad:b0:91:
b3:d6:8b:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEChNFBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMx
MjIyMTI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTViMDRlNzlhNzFl
YjhkNTcwNjM3NzFiZmZlYjFkYjc4MTE4MTBhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrkkWpelxVxKJU/Unrs7NMbPc1OFT3jT4UrvpvlfPz6T8TV
94FvxHC/G/w/LGKJfXeirVBGc5qdiCtT+QapCXCVSmL9g5W6X6fUMkn8bUUGWcQD
Gt+opliXdre65HiWSGJXRS0lnVNMFm2kzyX+CgIR63MgV4qqOwARGPp78S9HzFMy
oLLdAhtHwGPMroZZBuVlRVpix+XNABhBkXc6rJqrfQ8sZGKgrZjNSkDviS4CIv5R
6V58ZsmgOlhBRrT4nUZUpAbjOHy+VhQ7aLYOCY0e4PvSXWP2E2bZh/kUfP2hr7cm
bM+DQ6ltwir6ZmxvrKUXNmleBy7iyrv+dHtClasCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVsE55px641XBjdxv/6x23gRgQqjAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L2xiQk9lYWNldU5Wd1kzY2JfLXNkdDRFWUVLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEl7zANBgkqhkiG9w0BAQsFAAOC
AQEAZ/tyzEq3yzJ2kSr4eKbwGsy+Z8yqIFMNlVTesyhVsN9YTF3TpaDdtUJUlFd7
ZRsF2He4P8SsqQ+imrFmc2kv5yfV7DQhxilLuNmd2CUQG2x8FSnOO4SPNeCNfUmF
ZohyPnjoo2mmmcdE5PAGUk0pVrRDR6zBxiBNHGY132xRk362NLL5cRWTwqZ9n/BH
EZAu4b1Qgci1NVnQ8Ia5LAikWdZ5RzOyEgzuwW9MCu0Id8H2y3lg03dzvoiL5XB+
rAiRWyY10tKRG+s2axXXHssMFSwkMbbThFvXClyzHRmUDMvkFomfKHeUrKaPrR6v
J6X5qVGBOfx/tGSPrbCRs9aLKw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org