Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/IUEzbRtUzbTE8gfXtzH6A4sQZoA.roa
File: IUEzbRtUzbTE8gfXtzH6A4sQZoA.roa (raw, json)
Hash identifier: bJGTv0gJyiOByQKWUmBM0kImzSOQesEScl4901Qma8Q=
Subject key identifier: 21:41:33:6D:1B:54:CD:B4:C4:F2:07:D7:B7:31:FA:03:8B:10:66:80
Certificate issuer: /CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Certificate serial: 070FDAB5
Authority key identifier: CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/IUEzbRtUzbTE8gfXtzH6A4sQZoA.roa
Signing time: Sat 01 Jan 2022 14:02:41 +0000
ROA not before: Sat 01 Jan 2022 14:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 194.53.68.0/22 maxlen: 32
194.53.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118479541 (0x70fdab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Validity
Not Before: Jan 1 14:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2141336d1b54cdb4c4f207d7b731fa038b106680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:ac:58:77:0d:6f:fd:f3:63:86:52:6f:b8:
06:a6:25:2d:ca:c2:d8:78:1c:0b:81:6f:94:34:8e:
20:5e:1e:bc:e3:43:47:d4:26:3c:6f:47:27:22:6f:
11:56:7d:92:b9:6e:41:fd:53:e1:aa:db:e4:92:7a:
1e:1d:d8:09:02:15:bc:a8:47:40:21:76:d7:09:8d:
25:a2:21:62:e6:00:88:81:ef:16:3a:37:0b:d8:d7:
8c:8c:d6:06:fa:2c:4c:de:8e:78:4d:50:e7:c7:c9:
ec:ed:9e:40:c9:99:b8:93:26:e3:a1:16:78:85:16:
2b:d8:82:7c:6c:86:4e:01:ec:cb:3a:8d:d0:19:5e:
0c:40:b9:91:79:c6:2e:26:54:13:fc:e3:77:fa:69:
67:72:83:14:a7:aa:5b:c7:9b:fb:8f:b4:b1:07:c6:
04:ff:e4:6c:76:94:74:6c:3d:bb:41:e0:87:1c:e1:
13:d8:8c:71:7e:ec:a4:7d:09:47:cc:e8:50:9d:16:
b9:ed:fc:22:37:a4:66:5b:b1:92:aa:b0:a8:64:d3:
2d:ee:fe:bf:8b:01:54:be:a5:a4:3a:e7:73:38:aa:
fd:bd:61:62:ac:78:f2:06:c0:62:9c:8d:a0:64:91:
d8:13:b8:a7:4b:34:a8:e3:10:2d:94:54:30:bf:67:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:33:6D:1B:54:CD:B4:C4:F2:07:D7:B7:31:FA:03:8B:10:66:80
X509v3 Authority Key Identifier:
keyid:CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/IUEzbRtUzbTE8gfXtzH6A4sQZoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:ab:bd:af:2e:b1:ac:d0:fe:29:6f:64:02:8c:a1:ff:9f:5e:
ba:c2:3f:13:89:38:3e:b8:2f:0a:cc:f7:d3:ef:0f:70:b9:09:
7b:1c:65:d7:6d:7f:0e:60:0e:6d:03:4a:75:ef:5c:53:90:81:
f0:c2:a4:3c:97:c0:c0:3a:f9:89:f0:70:12:13:17:a4:82:7f:
64:ea:54:1a:23:2b:2b:0b:bc:a1:e4:31:24:08:eb:b6:89:e2:
e6:02:a9:96:26:02:c9:1e:a2:bd:fd:c1:d6:22:6e:53:16:11:
6e:6f:0c:25:d2:1c:d0:af:cb:9c:79:dc:bd:92:f3:a8:ce:82:
9b:be:07:2a:22:aa:c1:68:25:c3:93:83:23:e8:f6:c8:35:08:
ae:30:c0:7c:25:29:bd:ce:85:1c:47:8b:c1:8f:87:38:75:5c:
ee:ac:72:2f:ef:7d:92:d5:a6:eb:fb:cd:22:70:a5:fa:46:d5:
75:70:0d:52:3d:03:21:f6:4e:9b:5c:ef:ba:43:7a:48:42:24:
cd:45:8f:a5:41:1a:1f:74:53:4a:36:15:db:b2:8f:38:4f:06:
09:92:d5:95:0e:91:34:fe:7f:df:98:51:8f:ef:cc:79:f5:97:
85:f1:2b:13:40:2e:80:e9:7a:a5:e7:0d:5b:f9:b6:6d:18:1a:
c9:e8:32:d3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBw/atTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmEzNDllM2I2YWMyZmEyNjI0MTNjMjBjYmM0MWQ2YTUzNzQzMTkzMB4XDTIyMDEw
MTE0MDI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjE0MTMzNmQxYjU0
Y2RiNGM0ZjIwN2Q3YjczMWZhMDM4YjEwNjY4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANxGrFh3DW/982OGUm+4BqYlLcrC2HgcC4FvlDSOIF4evOND
R9QmPG9HJyJvEVZ9krluQf1T4arb5JJ6Hh3YCQIVvKhHQCF21wmNJaIhYuYAiIHv
Fjo3C9jXjIzWBvosTN6OeE1Q58fJ7O2eQMmZuJMm46EWeIUWK9iCfGyGTgHsyzqN
0BleDEC5kXnGLiZUE/zjd/ppZ3KDFKeqW8eb+4+0sQfGBP/kbHaUdGw9u0Hghxzh
E9iMcX7spH0JR8zoUJ0Wue38IjekZluxkqqwqGTTLe7+v4sBVL6lpDrncziq/b1h
Yqx48gbAYpyNoGSR2BO4p0s0qOMQLZRUML9nq+ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhQTNtG1TNtMTyB9e3MfoDixBmgDAfBgNVHSMEGDAWgBTPo0njtqwvomJB
PCDLxB1qU3QxkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o2Tko0N2FzTDZKaVFUd2d5OFFkYWxOME1aTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvM2Q3ODc0LTI1ODgtNDA3Zi1hY2I5LTEzZDllZmJmNWNjZi8x
L0lVRXpiUnRVemJURThnZlh0ekg2QTRzUVpvQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
M2Q3ODc0LTI1ODgtNDA3Zi1hY2I5LTEzZDllZmJmNWNjZi8xL3o2Tko0N2FzTDZK
aVFUd2d5OFFkYWxOME1aTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsI1RDANBgkqhkiG9w0BAQsFAAOC
AQEALKu9ry6xrND+KW9kAoyh/59eusI/E4k4PrgvCsz30+8PcLkJexxl121/DmAO
bQNKde9cU5CB8MKkPJfAwDr5ifBwEhMXpIJ/ZOpUGiMrKwu8oeQxJAjrtoni5gKp
liYCyR6ivf3B1iJuUxYRbm8MJdIc0K/LnHncvZLzqM6Cm74HKiKqwWglw5ODI+j2
yDUIrjDAfCUpvc6FHEeLwY+HOHVc7qxyL+99ktWm6/vNInCl+kbVdXANUj0DIfZO
m1zvukN6SEIkzUWPpUEaH3RTSjYV27KPOE8GCZLVlQ6RNP5/35hRj+/MefWXhfEr
E0AugOl6pecNW/m2bRgayegy0w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:37 2025 by rpki-client