Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qJe1NGD_NKgQBQpSWZ7PKigAxsc.roa
File: qJe1NGD_NKgQBQpSWZ7PKigAxsc.roa (raw, json)
Hash identifier: gspJp99eVfeNYuadio5l9PHSokjeZjAITNZ99cT3qGQ=
Subject key identifier: A8:97:B5:34:60:FF:34:A8:10:05:0A:52:59:9E:CF:2A:28:00:C6:C7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184EE46154B42B49C9E0931FC196B1AA9E0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qJe1NGD_NKgQBQpSWZ7PKigAxsc.roa
Signing time: Wed 07 Dec 2022 20:28:01 +0000
ROA not before: Wed 07 Dec 2022 20:28:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:46:15:4b:42:b4:9c:9e:09:31:fc:19:6b:1a:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 7 20:28:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a897b53460ff34a810050a52599ecf2a2800c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:df:1b:d8:bc:0a:b8:0c:60:66:c0:61:44:
e3:be:ba:14:9f:f9:09:33:b5:c0:81:7a:68:ea:0d:
50:f2:86:df:78:40:3c:e3:06:c4:e4:a5:20:59:b4:
4c:7f:61:4d:44:32:d0:69:fe:4b:64:fa:31:50:76:
1e:df:4f:05:1e:07:40:17:fb:6c:6b:82:d0:ae:e0:
08:04:36:bc:33:11:94:f3:27:3a:7b:31:e6:30:4b:
73:e1:22:35:0f:50:17:4c:24:33:9a:db:3e:c9:9b:
67:9c:a5:d0:a0:dd:79:01:38:09:42:4a:67:58:6a:
cf:f4:42:0a:a8:f4:5c:b7:6f:ec:60:50:e2:40:8c:
5c:46:22:9a:00:c6:e5:2c:22:f7:19:89:a9:a7:4f:
9b:8b:39:f0:1a:88:c1:48:b5:bd:0e:4e:a2:ee:47:
fa:40:79:68:b8:e2:75:2f:a5:f7:91:a4:73:25:69:
f5:46:de:80:cf:00:5a:c6:4b:ed:d2:6a:04:1b:b6:
06:1e:f5:29:4b:07:ba:2c:25:e6:e0:bb:b7:09:08:
6a:37:4e:74:ca:65:19:7c:63:0d:80:12:da:7c:14:
c2:39:74:7c:e8:43:a1:b4:a1:75:17:51:e4:e5:1d:
4a:fa:59:91:c9:48:f5:c7:90:00:fc:9d:0b:9c:8a:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:B5:34:60:FF:34:A8:10:05:0A:52:59:9E:CF:2A:28:00:C6:C7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qJe1NGD_NKgQBQpSWZ7PKigAxsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:2c:0f:08:22:1f:6e:82:12:2e:d6:bd:5b:58:32:08:d9:9c:
12:d3:9e:6d:d5:48:12:d1:dc:f8:50:07:3f:cd:08:f5:5b:8f:
ed:fc:d1:09:1f:34:ce:c6:0d:4a:c3:25:6a:29:6a:87:c5:7c:
30:eb:8f:76:e1:ec:f0:4a:1c:fb:c8:df:36:10:68:87:d5:b6:
82:88:e8:20:f5:25:7e:14:f7:cf:f4:c1:00:5c:a7:e7:21:9a:
f3:b3:0e:8b:81:48:8e:50:25:6c:44:bc:84:60:8a:c8:56:6c:
89:e8:94:9e:bd:25:09:52:17:53:ef:5c:d3:5f:fc:ca:80:86:
b1:5e:74:92:1c:7b:20:14:93:96:8d:22:7f:03:4c:4d:42:8d:
98:fc:d7:bf:47:6c:d5:5f:2d:db:98:17:76:19:6d:6f:1e:00:
bf:29:0e:8e:9f:77:92:78:9d:b4:24:c5:7c:42:f2:1d:71:0b:
54:e6:ce:26:41:65:c8:40:87:cc:1c:bf:cc:44:81:e4:17:d1:
00:3d:03:08:aa:5a:69:f1:1b:d2:5d:aa:a3:a7:00:ba:68:c6:
b5:4a:3d:99:7a:51:e8:81:e4:76:79:41:1f:db:69:0c:f1:df:
b6:00:af:02:c1:f6:88:73:2f:89:f4:53:81:7f:07:a5:a0:de:
40:82:6a:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTuRhVLQrScngkx/BlrGqngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjA3MjAyODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODk3YjUzNDYwZmYzNGE4MTAwNTBhNTI1OTllY2YyYTI4MDBjNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWjfG9i8CrgMYGbAYUTjvroUn/kJ
M7XAgXpo6g1Q8obfeEA84wbE5KUgWbRMf2FNRDLQaf5LZPoxUHYe308FHgdAF/ts
a4LQruAIBDa8MxGU8yc6ezHmMEtz4SI1D1AXTCQzmts+yZtnnKXQoN15ATgJQkpn
WGrP9EIKqPRct2/sYFDiQIxcRiKaAMblLCL3GYmpp0+biznwGojBSLW9Dk6i7kf6
QHlouOJ1L6X3kaRzJWn1Rt6AzwBaxkvt0moEG7YGHvUpSwe6LCXm4Lu3CQhqN050
ymUZfGMNgBLafBTCOXR86EOhtKF1F1Hk5R1K+lmRyUj1x5AA/J0LnIoo7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiXtTRg/zSoEAUKUlmezyooAMbHMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvcUplMU5HRF9OS2dRQlFwU1daN1BLaWdBeHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjj4MA0G
CSqGSIb3DQEBCwUAA4IBAQBuLA8IIh9ughIu1r1bWDII2ZwS055t1UgS0dz4UAc/
zQj1W4/t/NEJHzTOxg1KwyVqKWqHxXww64924ezwShz7yN82EGiH1baCiOgg9SV+
FPfP9MEAXKfnIZrzsw6LgUiOUCVsRLyEYIrIVmyJ6JSevSUJUhdT71zTX/zKgIax
XnSSHHsgFJOWjSJ/A0xNQo2Y/Ne/R2zVXy3bmBd2GW1vHgC/KQ6On3eSeJ20JMV8
QvIdcQtU5s4mQWXIQIfMHL/MRIHkF9EAPQMIqlpp8RvSXaqjpwC6aMa1Sj2ZelHo
geR2eUEf22kM8d+2AK8CwfaIcy+J9FOBfweloN5Agmo8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org