Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/niG7TDMSnz1UIrwvXxysXHL7yLM.roa
File: niG7TDMSnz1UIrwvXxysXHL7yLM.roa (raw, json)
Hash identifier: A9orE9Z8q57qRNBvxH5neItcZqyvJfGPifyj5bUxRG8=
Subject key identifier: 9E:21:BB:4C:33:12:9F:3D:54:22:BC:2F:5F:1C:AC:5C:72:FB:C8:B3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183A8AEA93D2F8B77D8F0EC0B8CD59B7A1C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/niG7TDMSnz1UIrwvXxysXHL7yLM.roa
Signing time: Wed 05 Oct 2022 15:06:02 +0000
ROA not before: Wed 05 Oct 2022 15:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:ae:a9:3d:2f:8b:77:d8:f0:ec:0b:8c:d5:9b:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 5 15:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e21bb4c33129f3d5422bc2f5f1cac5c72fbc8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:0b:9c:cc:53:5b:18:3e:66:82:4f:f6:fd:
7e:a8:22:b3:f6:cd:bb:3b:6c:f9:10:f2:8e:58:31:
58:11:fa:2e:d3:1b:c9:72:30:68:45:8f:2f:e9:bc:
6b:ec:87:13:0a:0a:ee:94:a1:77:58:c7:f4:c8:9d:
a8:65:7b:21:1f:27:68:25:2a:d2:59:f4:d7:15:d2:
66:67:77:b9:fb:e1:c2:ba:c9:0a:92:51:1f:de:7d:
4a:fe:28:21:de:61:3c:40:ae:2e:68:57:fd:4b:63:
0f:1a:f6:72:8f:d6:d7:8c:04:fc:1c:d5:d6:31:d0:
ab:db:1b:85:8d:6c:de:e6:56:04:1c:3b:fe:0f:dc:
07:ce:1c:82:70:f5:31:86:aa:40:25:50:e3:5a:36:
dc:c9:62:c4:f2:92:72:76:4e:3d:8f:6d:c2:e8:cb:
14:07:ee:5c:fb:c9:73:d1:ac:19:5d:e3:f1:5e:18:
c0:68:0c:97:ae:65:95:dd:88:fd:4c:5c:ff:8c:2c:
4d:9f:4b:3e:59:6a:8f:f1:56:3a:1d:91:c1:61:21:
83:c9:a1:44:d7:70:72:e0:95:69:da:8e:a2:de:3f:
40:36:b3:6b:e1:67:6b:2c:40:51:4f:2b:38:a4:f1:
53:4c:4e:f3:30:7e:8c:7c:11:7a:be:86:15:bf:35:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:BB:4C:33:12:9F:3D:54:22:BC:2F:5F:1C:AC:5C:72:FB:C8:B3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/niG7TDMSnz1UIrwvXxysXHL7yLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c2:69:6b:80:36:d8:2b:f9:79:3e:39:f7:4d:76:f9:9b:25:
24:3f:28:1d:9b:34:fa:2b:fc:15:a0:d4:ba:67:18:04:4f:e8:
9c:82:4a:4e:32:64:68:ec:e6:93:2d:2f:c2:86:41:41:e5:dd:
e3:a6:bf:f3:ee:5c:11:ab:0d:3e:de:93:66:4f:1f:3a:57:fa:
6a:6c:63:8d:91:86:ce:36:33:01:74:39:21:e9:03:02:e5:7d:
c8:2f:d9:b8:1d:44:10:c3:7b:0a:f9:98:c9:f4:5a:45:ef:eb:
87:5a:0a:5b:8e:bd:5a:28:21:0d:da:cd:74:f5:5c:51:e9:07:
98:2a:b0:74:09:f5:18:f6:71:20:cd:04:58:0d:92:8d:0b:b9:
10:2c:ab:aa:15:cb:2d:41:7a:b2:9f:ef:f5:d8:a4:d9:32:f7:
f6:64:93:e5:e6:24:97:42:31:98:dd:de:cf:8b:fe:06:ca:63:
ef:d1:68:3e:3b:9c:93:6e:f4:55:6a:ea:47:ab:fb:2d:49:88:
62:94:fa:78:8d:01:45:37:1d:83:7b:22:c6:8f:91:62:b1:43:
34:2d:30:f6:a7:6a:6c:f0:68:42:63:7f:69:0c:d6:f8:d4:12:
10:42:63:1a:b7:f4:bc:87:4f:9f:a4:ef:8d:14:76:22:e5:38:
44:a5:b2:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOorqk9L4t32PDsC4zVm3ocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDA1MTUwNjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTIxYmI0YzMzMTI5ZjNkNTQyMmJjMmY1ZjFjYWM1YzcyZmJjOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8QLnMxTWxg+ZoJP9v1+qCKz9s27
O2z5EPKOWDFYEfou0xvJcjBoRY8v6bxr7IcTCgrulKF3WMf0yJ2oZXshHydoJSrS
WfTXFdJmZ3e5++HCuskKklEf3n1K/igh3mE8QK4uaFf9S2MPGvZyj9bXjAT8HNXW
MdCr2xuFjWze5lYEHDv+D9wHzhyCcPUxhqpAJVDjWjbcyWLE8pJydk49j23C6MsU
B+5c+8lz0awZXePxXhjAaAyXrmWV3Yj9TFz/jCxNn0s+WWqP8VY6HZHBYSGDyaFE
13By4JVp2o6i3j9ANrNr4WdrLEBRTys4pPFTTE7zMH6MfBF6voYVvzVx+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4hu0wzEp89VCK8L18crFxy+8izMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvbmlHN1RETVNuejFVSXJ3dlh4eXNYSEw3eUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWyMA0G
CSqGSIb3DQEBCwUAA4IBAQB7wmlrgDbYK/l5Pjn3TXb5myUkPygdmzT6K/wVoNS6
ZxgET+icgkpOMmRo7OaTLS/ChkFB5d3jpr/z7lwRqw0+3pNmTx86V/pqbGONkYbO
NjMBdDkh6QMC5X3IL9m4HUQQw3sK+ZjJ9FpF7+uHWgpbjr1aKCEN2s109VxR6QeY
KrB0CfUY9nEgzQRYDZKNC7kQLKuqFcstQXqyn+/12KTZMvf2ZJPl5iSXQjGY3d7P
i/4GymPv0Wg+O5yTbvRVaupHq/stSYhilPp4jQFFNx2DeyLGj5FisUM0LTD2p2ps
8GhCY39pDNb41BIQQmMat/S8h0+fpO+NFHYi5ThEpbLD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org