Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yx-4dgzmpMiukRsUiretOYSlhSE.roa
File: yx-4dgzmpMiukRsUiretOYSlhSE.roa (raw, json)
Hash identifier: oB41VCVu7kH6nOXl3vuaygSJoN3dLyqNgiVtSK8gGYw=
Subject key identifier: CB:1F:B8:76:0C:E6:A4:C8:AE:91:1B:14:8A:B7:AD:39:84:A5:85:21
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018569A111EE18398AF60D77F73A9D0A171B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yx-4dgzmpMiukRsUiretOYSlhSE.roa
Signing time: Sat 31 Dec 2022 19:20:41 +0000
ROA not before: Sat 31 Dec 2022 19:20:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:69:a1:11:ee:18:39:8a:f6:0d:77:f7:3a:9d:0a:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 31 19:20:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb1fb8760ce6a4c8ae911b148ab7ad3984a58521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b4:96:07:ac:42:14:b5:42:b1:eb:a0:f1:
95:0b:51:26:25:27:a2:47:2f:85:4b:d3:b5:e0:3e:
47:a3:d9:4e:ef:38:66:2e:a4:26:90:9f:2f:7f:90:
7d:d4:40:0b:80:c9:c9:b8:92:2f:f2:d3:66:4f:e2:
3b:3f:18:23:3c:56:e6:e5:f0:6e:dd:7b:01:f2:90:
12:d6:42:d6:5d:29:ee:3e:1a:0a:7e:95:e1:87:fc:
7e:4d:85:bb:f6:d8:86:1a:07:f4:25:d0:f6:b0:ad:
19:96:31:ba:97:89:cd:83:bb:cd:8d:30:ed:9a:b5:
21:dc:69:f9:e5:44:53:11:22:ba:8b:ad:e9:63:cb:
ff:b8:9f:c3:1c:da:49:77:25:df:93:ed:99:b9:57:
a6:ec:7c:5a:ab:4c:b2:f2:b2:73:07:49:99:e5:1a:
9e:ee:d3:33:fd:9a:b1:8e:cd:27:67:a3:85:58:cf:
7c:19:de:3c:eb:a4:77:4c:94:d5:d2:ab:c5:95:bd:
7d:83:92:f1:90:6e:3a:33:83:79:c1:90:b2:02:bc:
61:25:60:48:c2:3b:07:a1:a3:93:34:7f:1c:7f:83:
d5:fd:1c:62:77:ee:33:ab:5f:87:11:6b:de:dd:63:
8f:98:ce:0c:83:61:64:62:b7:34:e4:f6:7e:5a:9e:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:B8:76:0C:E6:A4:C8:AE:91:1B:14:8A:B7:AD:39:84:A5:85:21
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yx-4dgzmpMiukRsUiretOYSlhSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
57:39:16:4c:21:3b:ce:31:d5:86:8b:34:28:14:0e:76:db:77:
26:54:84:c5:55:ce:a5:5c:97:cd:b5:55:69:f2:58:44:3a:a9:
3c:90:0b:c8:18:53:b2:eb:07:22:b3:a8:05:f4:dd:52:dc:dd:
c4:5b:0b:eb:af:aa:5e:0e:41:cc:93:18:f4:5a:dd:87:a9:5e:
d3:21:ec:34:e9:6b:5d:44:4e:91:35:44:0c:16:9f:4d:2d:a1:
61:7b:07:70:ed:ff:09:3c:b4:81:f0:d2:14:9e:7c:c8:8b:97:
4a:04:41:44:11:a2:ed:16:0a:e6:25:fc:6f:1d:83:b7:68:6e:
23:4d:76:5d:7e:aa:95:eb:bb:4a:cb:64:e9:35:da:af:59:6c:
e3:4d:69:d0:37:e8:ef:5e:fa:9e:9c:18:8e:d7:de:7d:25:ee:
77:e4:93:06:ad:f3:ba:83:6d:6d:48:5b:21:40:5c:c0:c8:3e:
c8:7a:eb:de:8d:5c:ec:22:83:d4:55:75:d9:2a:c5:18:5a:55:
5f:d7:38:cd:6a:b6:35:9c:49:ea:f0:ab:33:bb:66:8b:92:d0:
8b:5a:d8:d9:86:f1:72:3b:25:df:36:9e:9a:ed:f5:43:7d:80:
96:45:7e:52:f1:a4:3e:80:51:68:3d:08:41:58:ac:57:85:13:
e3:a6:5a:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVpoRHuGDmK9g139zqdChcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjMxMTkyMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjFmYjg3NjBjZTZhNGM4YWU5MTFiMTQ4YWI3YWQzOTg0YTU4NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm60lgesQhS1QrHroPGVC1EmJSei
Ry+FS9O14D5Ho9lO7zhmLqQmkJ8vf5B91EALgMnJuJIv8tNmT+I7PxgjPFbm5fBu
3XsB8pAS1kLWXSnuPhoKfpXhh/x+TYW79tiGGgf0JdD2sK0ZljG6l4nNg7vNjTDt
mrUh3Gn55URTESK6i63pY8v/uJ/DHNpJdyXfk+2ZuVem7Hxaq0yy8rJzB0mZ5Rqe
7tMz/Zqxjs0nZ6OFWM98Gd4866R3TJTV0qvFlb19g5LxkG46M4N5wZCyArxhJWBI
wjsHoaOTNH8cf4PV/Rxid+4zq1+HEWve3WOPmM4Mg2FkYrc05PZ+Wp5EowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsfuHYM5qTIrpEbFIq3rTmEpYUhMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEveXgtNGRnem1wTWl1a1JzVWlyZXRPWVNsaFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaysMA0G
CSqGSIb3DQEBCwUAA4IBAQBXORZMITvOMdWGizQoFA5223cmVITFVc6lXJfNtVVp
8lhEOqk8kAvIGFOy6wcis6gF9N1S3N3EWwvrr6peDkHMkxj0Wt2HqV7TIew06Wtd
RE6RNUQMFp9NLaFhewdw7f8JPLSB8NIUnnzIi5dKBEFEEaLtFgrmJfxvHYO3aG4j
TXZdfqqV67tKy2TpNdqvWWzjTWnQN+jvXvqenBiO1959Je535JMGrfO6g21tSFsh
QFzAyD7IeuvejVzsIoPUVXXZKsUYWlVf1zjNarY1nEnq8Kszu2aLktCLWtjZhvFy
OyXfNp6a7fVDfYCWRX5S8aQ+gFFoPQhBWKxXhRPjplpc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org