Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/wU0bLtWBI_Hvq22m-wBQARYyYK0.roa
File: wU0bLtWBI_Hvq22m-wBQARYyYK0.roa (raw, json)
Hash identifier: lT94E2FB+UzMtr6h8h6ES4Pvn3dGe7kUrSaMsieIvlk=
Subject key identifier: C1:4D:1B:2E:D5:81:23:F1:EF:AB:6D:A6:FB:00:50:01:16:32:60:AD
Certificate issuer: /CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Certificate serial: 01822759A70739DCF8C9524996C51E6D2552
Authority key identifier: 49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/wU0bLtWBI_Hvq22m-wBQARYyYK0.roa
Signing time: Fri 22 Jul 2022 19:19:23 +0000
ROA not before: Fri 22 Jul 2022 19:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 91.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:59:a7:07:39:dc:f8:c9:52:49:96:c5:1e:6d:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Validity
Not Before: Jul 22 19:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c14d1b2ed58123f1efab6da6fb005001163260ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:85:f3:bd:ad:3f:32:bd:d1:7a:0f:08:bf:
81:66:d7:2f:b5:8f:3a:2c:be:80:3c:6d:e8:16:53:
85:c6:41:f6:fa:74:4a:59:67:e6:a8:c7:05:6a:d9:
7c:94:a9:51:2b:ed:df:8e:b4:15:ac:9d:97:a1:ba:
c6:d5:c5:9d:4a:6d:29:c6:00:6d:42:f8:43:a6:1b:
59:ca:25:06:b2:bf:d1:73:e1:7c:72:d3:e3:22:c0:
c7:b0:07:09:69:3d:f0:8b:f7:bd:7c:89:20:87:e9:
f9:ba:3f:be:30:e3:f3:51:49:c2:b6:e0:1c:01:b4:
76:ee:59:14:f1:df:9a:76:4b:93:f0:d5:6b:f3:7c:
ba:49:02:d3:e7:aa:29:c5:b6:2b:1c:d0:ce:a0:6f:
82:c1:b6:b2:f1:ab:80:42:7d:b0:e1:9a:41:af:4a:
18:d9:26:64:de:48:3c:b2:c3:04:0a:50:06:8f:d6:
a9:49:1d:81:bb:eb:9a:e3:07:8c:a8:d9:8c:0e:a9:
0c:94:ef:35:0e:c7:55:1e:31:06:00:f5:fa:31:ec:
1a:2c:a2:52:09:5d:8a:16:d4:7a:70:b7:3a:f0:97:
5b:19:87:12:87:8a:09:06:61:64:86:f6:56:b2:15:
00:3a:f2:7f:2d:79:fa:87:04:5d:ad:fd:7b:ac:98:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:1B:2E:D5:81:23:F1:EF:AB:6D:A6:FB:00:50:01:16:32:60:AD
X509v3 Authority Key Identifier:
keyid:49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/wU0bLtWBI_Hvq22m-wBQARYyYK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ef:9a:a0:f1:20:28:01:96:34:ed:71:1f:af:d3:4f:78:3b:
5a:5d:a4:ea:ec:ed:2e:72:23:dc:2d:8e:77:5a:4a:76:03:2b:
19:4d:3e:f7:27:b3:f9:43:39:51:8f:61:c8:bb:df:67:ce:51:
49:c1:4f:e8:02:fb:b0:23:53:89:ae:ad:7a:66:5b:c1:94:6a:
56:cd:9f:9e:a8:cb:89:77:88:a1:bd:06:fb:af:6d:df:84:d2:
cd:0d:97:3c:a8:4d:e4:1f:6d:86:d6:69:9b:c3:87:a6:aa:2a:
ac:a4:9a:1a:9d:4b:f9:b7:7c:07:e0:45:97:24:69:a1:dd:2e:
1e:11:36:2f:23:b0:a3:b1:16:b0:9c:4e:23:b7:db:0d:08:73:
ce:17:11:b2:d5:2a:04:8f:71:e2:c5:5c:fd:d4:93:b3:89:a7:
e6:4a:fc:63:83:83:69:a7:ed:0b:3d:62:df:e9:f5:5c:b1:02:
ad:2a:a7:9e:d2:5c:a5:0d:b6:f6:12:66:92:ce:63:c3:d3:e7:
40:6a:eb:d9:df:82:f7:61:34:7b:c7:47:69:b7:cf:65:5e:e4:
50:06:79:33:91:c2:ca:cd:4b:7f:2a:8f:67:a9:f9:f2:dc:9d:
9b:ba:88:32:2a:57:a3:d7:90:b9:d8:be:65:88:45:a3:50:ca:
45:63:47:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYInWacHOdz4yVJJlsUebSVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGYxOTE0NWJmODQzMmZlOGYzMGZjMjQ1MmYzZTMwMDI3
MjJjNjcwHhcNMjIwNzIyMTkxOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTRkMWIyZWQ1ODEyM2YxZWZhYjZkYTZmYjAwNTAwMTE2MzI2MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7aF872tPzK90XoPCL+BZtcvtY86
LL6APG3oFlOFxkH2+nRKWWfmqMcFatl8lKlRK+3fjrQVrJ2XobrG1cWdSm0pxgBt
QvhDphtZyiUGsr/Rc+F8ctPjIsDHsAcJaT3wi/e9fIkgh+n5uj++MOPzUUnCtuAc
AbR27lkU8d+adkuT8NVr83y6SQLT56opxbYrHNDOoG+Cwbay8auAQn2w4ZpBr0oY
2SZk3kg8ssMEClAGj9apSR2Bu+ua4weMqNmMDqkMlO81DsdVHjEGAPX6MewaLKJS
CV2KFtR6cLc68JdbGYcSh4oJBmFkhvZWshUAOvJ/LXn6hwRdrf17rJiBSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFNGy7VgSPx76ttpvsAUAEWMmCtMB8GA1UdIwQY
MBaAFElPGRRb+EMv6PMPwkUvPjACcixnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1U4WkZGdjRReV9vOHdfQ1JTOC1NQUp5TEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jZjFkNmMtNWYxZS00NDNkLTg5YzQt
ZWEyNzg2MzM0NzMyLzEvd1UwYkx0V0JJX0h2cTIybS13QlFBUll5WUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jZjFkNmMtNWYxZS00NDNkLTg5YzQtZWEyNzg2MzM0NzMy
LzEvU1U4WkZGdjRReV9vOHdfQ1JTOC1NQUp5TEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9qLMA0G
CSqGSIb3DQEBCwUAA4IBAQA075qg8SAoAZY07XEfr9NPeDtaXaTq7O0uciPcLY53
Wkp2AysZTT73J7P5QzlRj2HIu99nzlFJwU/oAvuwI1OJrq16ZlvBlGpWzZ+eqMuJ
d4ihvQb7r23fhNLNDZc8qE3kH22G1mmbw4emqiqspJoanUv5t3wH4EWXJGmh3S4e
ETYvI7CjsRawnE4jt9sNCHPOFxGy1SoEj3HixVz91JOziafmSvxjg4Npp+0LPWLf
6fVcsQKtKqee0lylDbb2EmaSzmPD0+dAauvZ34L3YTR7x0dpt89lXuRQBnkzkcLK
zUt/Ko9nqfny3J2buogyKlej15C52L5liEWjUMpFY0c4
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:11 2025 by rpki-client