Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/gSKKu3hN82ttMOjfTWedjYYO4pM.roa
File: gSKKu3hN82ttMOjfTWedjYYO4pM.roa (raw, json)
Hash identifier: ZBKadCM3quuBu5Nd3N3ceD2vPna1sOvHQ3lYPBOI1Gw=
Subject key identifier: 81:22:8A:BB:78:4D:F3:6B:6D:30:E8:DF:4D:67:9D:8D:86:0E:E2:93
Certificate issuer: /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial: 0183F9F2F3293D763A0B0FF868A353392634
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/gSKKu3hN82ttMOjfTWedjYYO4pM.roa
Signing time: Fri 21 Oct 2022 09:49:52 +0000
ROA not before: Fri 21 Oct 2022 09:49:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14178
IP address blocks: 185.70.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f2:f3:29:3d:76:3a:0b:0f:f8:68:a3:53:39:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
Validity
Not Before: Oct 21 09:49:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81228abb784df36b6d30e8df4d679d8d860ee293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:3b:6f:c8:57:56:84:ea:60:99:dd:f4:5f:
6c:ce:61:f1:01:f1:2e:4d:8a:ff:77:95:7a:52:b5:
fd:97:c4:71:2f:ad:68:a8:de:6c:9d:04:40:4d:48:
86:a3:ce:41:47:bb:1b:ce:10:e8:f0:a8:59:bf:cf:
25:04:18:5f:88:ec:1d:a4:61:85:21:58:04:fb:fb:
9d:e0:76:2c:da:24:51:52:02:49:c3:b4:22:a1:56:
cc:f5:54:7d:b5:92:0f:4a:2d:3c:e5:ef:84:d6:97:
62:18:85:23:43:ed:47:1d:71:c9:90:fc:4f:2c:77:
31:b3:b9:7a:47:0f:98:77:cb:02:88:3f:a2:35:db:
d1:f5:27:ba:f5:ca:7a:fc:1d:43:13:c9:6c:0a:eb:
18:ee:5b:bd:a1:f4:32:c8:44:e5:e6:04:10:1f:7c:
3c:98:41:1b:af:7c:95:8e:c6:ed:26:2a:a3:3a:2a:
70:8b:01:e5:71:5b:96:7c:f4:8a:ac:8f:d9:35:5e:
46:86:32:ed:5d:32:84:a6:9b:4a:a9:cd:40:7d:b3:
16:35:b4:8e:92:09:d3:5c:12:00:cf:fd:dd:eb:a8:
31:22:01:1f:ee:3b:58:70:fc:bd:99:76:56:8d:b2:
06:96:01:81:2f:4d:81:8e:9a:5a:f8:05:8a:44:5c:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:8A:BB:78:4D:F3:6B:6D:30:E8:DF:4D:67:9D:8D:86:0E:E2:93
X509v3 Authority Key Identifier:
keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/gSKKu3hN82ttMOjfTWedjYYO4pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.112.0/22
Signature Algorithm: sha256WithRSAEncryption
35:86:05:1a:ee:bd:7d:47:1c:88:9b:df:31:6a:7a:f7:b7:db:
bf:47:ed:5c:39:ba:ab:9d:f4:91:52:7d:5b:20:17:47:8a:00:
a4:93:dd:e3:35:b8:5f:81:39:72:b5:2f:81:c9:6e:e8:2f:42:
9a:22:c8:0c:86:bb:df:f8:bf:7d:dd:1a:7b:46:19:bd:b9:be:
76:14:78:59:2c:94:f7:fd:7b:c0:3b:62:9d:61:36:95:64:ad:
5e:93:8e:15:70:c4:9a:7b:71:70:c5:68:17:dc:89:72:68:dc:
14:80:fa:fc:ca:e7:74:ae:ba:93:fc:e2:85:fa:4c:86:52:fa:
ed:a6:06:28:52:be:b7:e2:05:fa:ee:cd:d3:e4:67:3a:91:62:
78:8f:23:80:20:fe:b5:1a:b9:62:49:4a:43:76:10:12:7e:4f:
f8:ec:f4:34:0e:e0:9c:bf:29:50:0b:5f:e6:36:57:94:a3:e0:
af:9c:a1:29:04:d0:36:b6:3c:8e:49:6a:34:8b:93:a3:12:0e:
74:45:f3:3e:21:f2:ec:10:e4:fe:aa:da:f2:2b:d8:45:3b:08:
0a:0d:67:bf:38:5e:26:b9:03:92:29:1e:77:32:45:4c:bf:4b:
7c:b6:9a:49:f6:57:3e:c1:03:49:87:7e:fe:26:ab:0c:39:f0:
07:d9:d4:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP58vMpPXY6Cw/4aKNTOSY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MGVmNzFhNDIyYTJmMGZlOTExNjA1NzlhNDA1MDYxOGQ4
YmFmMTAwHhcNMjIxMDIxMDk0OTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTIyOGFiYjc4NGRmMzZiNmQzMGU4ZGY0ZDY3OWQ4ZDg2MGVlMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8g7b8hXVoTqYJnd9F9szmHxAfEu
TYr/d5V6UrX9l8RxL61oqN5snQRATUiGo85BR7sbzhDo8KhZv88lBBhfiOwdpGGF
IVgE+/ud4HYs2iRRUgJJw7QioVbM9VR9tZIPSi085e+E1pdiGIUjQ+1HHXHJkPxP
LHcxs7l6Rw+Yd8sCiD+iNdvR9Se69cp6/B1DE8lsCusY7lu9ofQyyETl5gQQH3w8
mEEbr3yVjsbtJiqjOipwiwHlcVuWfPSKrI/ZNV5GhjLtXTKEpptKqc1AfbMWNbSO
kgnTXBIAz/3d66gxIgEf7jtYcPy9mXZWjbIGlgGBL02Bjppa+AWKRFwo1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEiirt4TfNrbTDo301nnY2GDuKTMB8GA1UdIwQY
MBaAFBcO9xpCKi8P6RFgV5pAUGGNi68QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnc3M0drSXFMd19wRVdCWG1rQlFZWTJMcnhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lNWY3ZTktODBmOS00MzE3LWIyMWUt
ODMzNmZlYzQ4OGYzLzEvZ1NLS3UzaE44MnR0TU9qZlRXZWRqWVlPNHBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lNWY3ZTktODBmOS00MzE3LWIyMWUtODMzNmZlYzQ4OGYz
LzEvRnc3M0drSXFMd19wRVdCWG1rQlFZWTJMcnhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUZwMA0G
CSqGSIb3DQEBCwUAA4IBAQA1hgUa7r19RxyIm98xanr3t9u/R+1cObqrnfSRUn1b
IBdHigCkk93jNbhfgTlytS+ByW7oL0KaIsgMhrvf+L993Rp7Rhm9ub52FHhZLJT3
/XvAO2KdYTaVZK1ek44VcMSae3FwxWgX3IlyaNwUgPr8yud0rrqT/OKF+kyGUvrt
pgYoUr634gX67s3T5Gc6kWJ4jyOAIP61GrliSUpDdhASfk/47PQ0DuCcvylQC1/m
NleUo+CvnKEpBNA2tjyOSWo0i5OjEg50RfM+IfLsEOT+qtryK9hFOwgKDWe/OF4m
uQOSKR53MkVMv0t8tppJ9lc+wQNJh37+JqsMOfAH2dTk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org