Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xi1QMgs32MUObJbjdzudStvjxfs.roa
File: xi1QMgs32MUObJbjdzudStvjxfs.roa (raw, json)
Hash identifier: L5yZ89K0sEZ54RZKojmmBDDenBFdN+m7R1Cjde1IxU8=
Subject key identifier: C6:2D:50:32:0B:37:D8:C5:0E:6C:96:E3:77:3B:9D:4A:DB:E3:C5:FB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184BB415799E6EEC4EEA49B1026A3B354E8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xi1QMgs32MUObJbjdzudStvjxfs.roa
Signing time: Sun 27 Nov 2022 22:42:12 +0000
ROA not before: Sun 27 Nov 2022 22:42:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53356
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:41:57:99:e6:ee:c4:ee:a4:9b:10:26:a3:b3:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 27 22:42:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c62d50320b37d8c50e6c96e3773b9d4adbe3c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:06:23:0d:cf:0f:30:e9:ff:f0:8e:ed:7a:
6b:c6:22:dc:c2:cb:2c:f3:7a:a7:49:fa:07:5d:1d:
cd:84:59:96:09:c1:1d:18:32:28:70:c5:82:98:c0:
7a:28:d2:90:56:f9:3f:47:f1:0c:d6:cc:bd:76:9b:
ea:f9:4b:ae:98:8f:60:d1:74:95:fd:2f:11:c9:29:
b6:87:f6:1d:ff:f8:d6:ad:13:4f:a1:27:e5:f0:78:
ec:0a:18:18:7b:05:43:3c:14:7e:a5:8b:d9:73:69:
f9:bf:01:27:57:a3:fb:9a:89:0b:3d:a5:cd:3c:5a:
49:71:60:b2:1e:57:18:49:6d:30:40:1b:70:69:e7:
c8:4b:80:c2:b2:48:03:c6:9d:55:f0:b4:1f:53:e3:
be:d8:d2:c9:fe:5c:00:e8:89:ea:99:8f:09:56:f3:
a3:86:28:d7:0a:15:27:cb:13:24:68:a6:ff:06:e9:
f6:39:51:9f:21:01:21:24:80:22:a7:a3:b3:eb:1b:
60:c9:d1:da:3e:93:97:d2:de:9d:d6:e7:54:1d:5b:
50:fc:fc:9e:47:ca:83:63:9e:77:29:2e:f6:5c:ed:
02:14:91:69:8e:e8:4b:8c:fb:33:9c:82:5b:bd:39:
e9:3d:25:e3:d3:1c:4f:af:d2:95:3d:43:e1:23:6d:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:50:32:0B:37:D8:C5:0E:6C:96:E3:77:3B:9D:4A:DB:E3:C5:FB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xi1QMgs32MUObJbjdzudStvjxfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:64:fa:66:51:7a:72:f1:46:b5:e8:bb:f2:13:45:53:a9:ef:
e9:a5:cf:83:0a:e1:ae:a5:17:24:62:9f:86:3e:cc:98:94:07:
b1:80:ea:af:29:9a:88:5a:0a:57:90:28:94:2c:2b:ed:90:9f:
7e:54:6e:7b:65:48:20:26:a8:66:a2:86:ba:ba:86:8f:ef:60:
42:0c:38:42:89:79:18:b7:59:9c:c4:14:b6:9c:80:e9:17:a4:
d2:14:e5:08:08:44:91:f9:cf:e8:54:cf:80:6c:cd:c2:7f:d9:
ce:10:bd:17:be:24:56:df:8f:94:20:93:36:a9:e0:48:c9:1d:
bb:76:21:33:55:16:c9:4a:fa:1e:40:2c:b8:3a:73:7e:f5:73:
33:78:d5:21:1a:c7:4d:0a:15:15:15:34:88:dd:13:41:f5:c6:
8f:b7:df:b9:6a:a8:26:96:fe:d8:57:16:12:2e:2e:29:0d:c0:
a7:eb:d6:c1:7b:88:bb:bb:ec:67:18:5d:bd:78:51:e7:91:47:
90:08:75:ab:86:c4:4b:a3:da:aa:f8:8a:ae:9c:e4:aa:14:2f:
87:b2:4b:80:5e:6d:3f:c7:b7:46:ef:67:99:35:22:e4:34:6c:
04:7e:86:4d:ee:eb:3e:a2:18:b4:b3:cf:c6:ab:94:88:07:d3:
1b:81:ad:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS7QVeZ5u7E7qSbECajs1ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMTI3MjI0MjEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjJkNTAzMjBiMzdkOGM1MGU2Yzk2ZTM3NzNiOWQ0YWRiZTNjNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWsGIw3PDzDp//CO7XprxiLcwsss
83qnSfoHXR3NhFmWCcEdGDIocMWCmMB6KNKQVvk/R/EM1sy9dpvq+UuumI9g0XSV
/S8RySm2h/Yd//jWrRNPoSfl8HjsChgYewVDPBR+pYvZc2n5vwEnV6P7mokLPaXN
PFpJcWCyHlcYSW0wQBtwaefIS4DCskgDxp1V8LQfU+O+2NLJ/lwA6InqmY8JVvOj
hijXChUnyxMkaKb/Bun2OVGfIQEhJIAip6Oz6xtgydHaPpOX0t6d1udUHVtQ/Pye
R8qDY553KS72XO0CFJFpjuhLjPsznIJbvTnpPSXj0xxPr9KVPUPhI23WtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYtUDILN9jFDmyW43c7nUrb48X7MB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEveGkxUU1nczMyTVVPYkpiamR6dWRTdHZqeGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxZPMA0G
CSqGSIb3DQEBCwUAA4IBAQDIZPpmUXpy8Ua16LvyE0VTqe/ppc+DCuGupRckYp+G
PsyYlAexgOqvKZqIWgpXkCiULCvtkJ9+VG57ZUggJqhmooa6uoaP72BCDDhCiXkY
t1mcxBS2nIDpF6TSFOUICESR+c/oVM+AbM3Cf9nOEL0XviRW34+UIJM2qeBIyR27
diEzVRbJSvoeQCy4OnN+9XMzeNUhGsdNChUVFTSI3RNB9caPt9+5aqgmlv7YVxYS
Li4pDcCn69bBe4i7u+xnGF29eFHnkUeQCHWrhsRLo9qq+IqunOSqFC+HskuAXm0/
x7dG72eZNSLkNGwEfoZN7us+ohi0s8/Gq5SIB9Mbga38
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org