Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/aGy7Sg_h7Tpqc6D6cMAFMO_1oiI.roa
File: aGy7Sg_h7Tpqc6D6cMAFMO_1oiI.roa (raw, json)
Hash identifier: Mcx8X+3m1DZo6Kq5UtGMKFBry3V4uY3UNJhNb0jBwK4=
Subject key identifier: 68:6C:BB:4A:0F:E1:ED:3A:6A:73:A0:FA:70:C0:05:30:EF:F5:A2:22
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 0182E89EB5F9FE05C7BED3BC5FC838B1CEDB
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/aGy7Sg_h7Tpqc6D6cMAFMO_1oiI.roa
Signing time: Mon 29 Aug 2022 08:01:31 +0000
ROA not before: Mon 29 Aug 2022 08:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:9e:b5:f9:fe:05:c7:be:d3:bc:5f:c8:38:b1:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Aug 29 08:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=686cbb4a0fe1ed3a6a73a0fa70c00530eff5a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:31:72:7b:0e:1c:a9:0c:94:d7:64:b9:52:
71:34:d5:41:94:b4:4d:23:16:51:60:3b:e8:d7:01:
d7:0e:2a:2b:bc:3b:e8:eb:ad:c9:08:fd:2b:65:aa:
bd:7a:fa:5b:bf:7c:ab:9e:3c:6c:4e:c8:f5:b7:60:
5f:57:70:bf:6f:45:aa:74:d7:b4:17:2c:e4:d0:8f:
d1:c2:b9:28:c3:58:58:16:5d:7d:4e:0f:b7:69:eb:
a0:88:d4:c2:e5:71:90:ed:fb:1b:12:bf:25:19:20:
af:76:2a:9a:c7:89:fc:b4:1e:24:63:cb:00:19:97:
3c:6d:0c:ad:d4:15:99:14:5e:35:90:e9:32:7d:a9:
6a:f4:83:f6:81:d7:cf:8c:87:2d:7b:e2:17:04:f5:
49:0e:00:25:a0:7d:ab:9a:47:08:dc:d0:9e:89:bd:
91:dd:49:b4:08:e9:f8:d6:c9:60:96:ea:04:f6:2b:
e8:40:49:1c:35:68:80:d9:85:e9:db:be:e7:34:d7:
10:fd:84:d5:14:22:d2:46:06:14:64:62:ab:92:0b:
3f:f9:07:c4:1b:68:65:a1:6b:ae:3a:10:e9:41:33:
fe:a3:64:ec:7d:71:d3:a7:2e:7e:ce:9f:c5:e4:5f:
9a:74:82:8e:ec:ca:83:22:8f:1a:93:c4:14:d3:d9:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:BB:4A:0F:E1:ED:3A:6A:73:A0:FA:70:C0:05:30:EF:F5:A2:22
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/aGy7Sg_h7Tpqc6D6cMAFMO_1oiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:87:df:5b:9b:1c:35:5f:05:19:06:7e:ef:c9:06:99:5c:d6:
41:86:e0:be:2c:5b:20:7c:f6:6f:e8:50:5c:f3:92:9f:70:4a:
b1:7a:22:21:6e:8a:de:45:96:8d:a2:f1:d2:99:93:b4:8d:8b:
f0:48:d8:97:31:ad:a0:3f:2b:1f:9f:ed:f0:0c:9c:d3:18:35:
c3:47:69:45:2d:b6:19:d7:76:ae:a0:f0:0c:13:b9:b8:03:48:
7a:19:2d:d7:73:f2:da:e6:f1:db:d5:bf:1c:45:00:57:41:d5:
fa:a6:8d:d5:10:ea:f5:85:63:ca:1f:1f:09:07:8f:d5:6f:f6:
5f:eb:7d:1f:c5:63:a6:90:50:01:6d:74:08:75:db:c4:ce:1e:
a8:96:c0:ec:6f:32:af:0f:eb:c8:f4:cf:9d:7c:4d:e3:55:5c:
22:b1:46:f2:ad:d4:96:79:0c:70:a1:d4:ca:ab:3a:74:b2:2e:
35:8b:71:51:e1:1d:f9:02:e3:2c:c4:c8:11:86:08:f1:d9:bf:
b5:22:ba:df:5c:89:a9:3b:34:7b:b8:65:01:90:0b:cf:24:9d:
bc:bf:d6:ee:75:83:4e:93:90:df:7f:f0:62:fe:07:62:29:87:
2e:f1:99:67:05:4e:33:a1:07:68:d3:78:79:4a:6e:ac:43:ca:
0f:36:05:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLonrX5/gXHvtO8X8g4sc7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTg1NGE5YmJmZjEzOTE0ZDA1MTY0OGMxMWQ2NjdjNjQz
OGIxMzMwHhcNMjIwODI5MDgwMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODZjYmI0YTBmZTFlZDNhNmE3M2EwZmE3MGMwMDUzMGVmZjVhMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8xcnsOHKkMlNdkuVJxNNVBlLRN
IxZRYDvo1wHXDiorvDvo663JCP0rZaq9evpbv3yrnjxsTsj1t2BfV3C/b0WqdNe0
Fyzk0I/Rwrkow1hYFl19Tg+3aeugiNTC5XGQ7fsbEr8lGSCvdiqax4n8tB4kY8sA
GZc8bQyt1BWZFF41kOkyfalq9IP2gdfPjIcte+IXBPVJDgAloH2rmkcI3NCeib2R
3Um0COn41slgluoE9ivoQEkcNWiA2YXp277nNNcQ/YTVFCLSRgYUZGKrkgs/+QfE
G2hloWuuOhDpQTP+o2TsfXHTpy5+zp/F5F+adIKO7MqDIo8ak8QU09k+TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhsu0oP4e06anOg+nDABTDv9aIiMB8GA1UdIwQY
MBaAFGWoVKm7/xORTQUWSMEdZnxkOLEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUt
NjI2ODRkMzA1NTdiLzEvYUd5N1NnX2g3VHBxYzZENmNNQUZNT18xb2lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUtNjI2ODRkMzA1NTdi
LzEvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeBMA0G
CSqGSIb3DQEBCwUAA4IBAQBLh99bmxw1XwUZBn7vyQaZXNZBhuC+LFsgfPZv6FBc
85KfcEqxeiIhboreRZaNovHSmZO0jYvwSNiXMa2gPysfn+3wDJzTGDXDR2lFLbYZ
13auoPAME7m4A0h6GS3Xc/La5vHb1b8cRQBXQdX6po3VEOr1hWPKHx8JB4/Vb/Zf
630fxWOmkFABbXQIddvEzh6olsDsbzKvD+vI9M+dfE3jVVwisUbyrdSWeQxwodTK
qzp0si41i3FR4R35AuMsxMgRhgjx2b+1IrrfXImpOzR7uGUBkAvPJJ28v9budYNO
k5Dff/Bi/gdiKYcu8ZlnBU4zoQdo03h5Sm6sQ8oPNgWH
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:19 2025 by rpki-client