Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/IuKob-R2P8w5qSpTIDYjyKE0yek.roa
File: IuKob-R2P8w5qSpTIDYjyKE0yek.roa (raw, json)
Hash identifier: oOzBjsNCuMDy58NVLr6DqVsUPAA9QOmanwBCx9HiTow=
Subject key identifier: 22:E2:A8:6F:E4:76:3F:CC:39:A9:2A:53:20:36:23:C8:A1:34:C9:E9
Certificate issuer: /CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Certificate serial: 018210560886699D8D083A266D3412FC29C1
Authority key identifier: B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/IuKob-R2P8w5qSpTIDYjyKE0yek.roa
Signing time: Mon 18 Jul 2022 08:04:09 +0000
ROA not before: Mon 18 Jul 2022 08:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204727
IP address blocks: 151.248.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:56:08:86:69:9d:8d:08:3a:26:6d:34:12:fc:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Validity
Not Before: Jul 18 08:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22e2a86fe4763fcc39a92a53203623c8a134c9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:ce:6d:1e:20:33:7f:4a:8f:9d:e5:5e:f6:
ab:c0:c7:97:84:ab:f2:78:1d:e3:8e:5d:24:bc:99:
8b:2c:ba:4c:8b:d2:9e:5c:11:3c:67:8a:b6:73:dd:
13:cf:0c:4e:e8:e5:22:42:ce:dc:54:d0:61:9b:52:
96:c2:41:f0:59:c2:1c:e7:0e:98:71:fb:3e:40:7e:
06:b2:c4:7d:2f:13:a2:56:9b:be:a5:b6:07:1f:f3:
fe:51:38:54:1e:44:77:c5:de:7c:af:e6:88:6d:e8:
b3:2d:86:1b:92:a5:d5:52:14:6d:75:39:22:bd:f2:
18:d0:d7:5a:7e:2f:83:97:66:2c:be:bc:de:b6:76:
29:af:b1:ee:37:7d:d4:4a:ef:55:37:04:c2:3c:16:
b8:b1:98:36:84:43:10:c3:7c:4d:95:0a:9f:69:ea:
3a:2d:4d:e3:47:cc:7b:de:ab:5c:0f:7e:d5:dc:21:
52:f8:b3:32:f0:5d:3a:42:81:24:91:69:24:7b:2d:
91:c8:77:9c:e2:37:39:06:ba:c0:b9:03:c4:87:4e:
0f:dd:32:d4:82:a1:89:a0:84:7f:cd:10:af:90:56:
05:09:86:ba:e8:1b:8f:95:e4:0a:2c:f7:1c:e3:10:
59:cb:dd:18:fd:a3:20:ce:96:f5:ca:81:82:65:3f:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:A8:6F:E4:76:3F:CC:39:A9:2A:53:20:36:23:C8:A1:34:C9:E9
X509v3 Authority Key Identifier:
keyid:B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/IuKob-R2P8w5qSpTIDYjyKE0yek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.18.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:db:e8:d5:e1:91:fb:0f:b9:15:13:a5:d7:e3:18:ab:10:01:
8b:c8:5e:a6:6d:c5:2e:2e:fa:00:f9:3e:03:56:02:d9:f0:d9:
2f:f9:24:37:94:a7:5b:f1:b5:03:3c:e5:7c:22:f9:30:eb:a6:
19:24:36:47:77:f7:21:45:66:60:f0:db:25:5a:48:e4:04:c7:
1f:83:ef:8b:03:86:7d:80:56:3d:0c:c1:4a:68:75:d6:8f:d7:
d1:02:de:04:1b:08:81:c4:5e:8f:f2:19:27:65:95:c3:70:10:
cc:bc:71:24:27:8b:ca:84:ac:0b:9d:d2:01:e1:a1:6f:01:1a:
37:03:57:2e:e9:9a:45:3f:9f:5c:65:62:b8:ee:2d:47:d5:be:
2a:b0:d0:42:36:a4:67:f1:62:e9:26:5a:c1:12:73:bf:45:2b:
8e:fa:21:5b:69:53:c8:23:df:3d:2a:0a:62:a2:5b:af:a3:23:
66:0c:d3:cf:81:bf:29:5e:ea:cb:c1:30:f2:05:62:85:02:43:
e4:f6:13:d5:a0:db:03:1f:e7:3b:8a:f3:0f:b0:6a:a7:5d:b8:
cd:dd:60:3a:bc:95:a4:fb:0d:6f:a7:c4:43:21:a2:b4:1b:68:
6e:37:16:2e:cf:44:e5:d1:9f:7c:8f:86:68:f3:b4:11:2f:c9:
38:aa:69:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIQVgiGaZ2NCDombTQS/CnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjY4YzZjZDhjNDBkZGY5M2MzMGE3NjY5ZTMwZjZiNTBj
MTgzYzMwHhcNMjIwNzE4MDgwNDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmUyYTg2ZmU0NzYzZmNjMzlhOTJhNTMyMDM2MjNjOGExMzRjOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZjObR4gM39Kj53lXvarwMeXhKvy
eB3jjl0kvJmLLLpMi9KeXBE8Z4q2c90TzwxO6OUiQs7cVNBhm1KWwkHwWcIc5w6Y
cfs+QH4GssR9LxOiVpu+pbYHH/P+UThUHkR3xd58r+aIbeizLYYbkqXVUhRtdTki
vfIY0Ndafi+Dl2YsvrzetnYpr7HuN33USu9VNwTCPBa4sZg2hEMQw3xNlQqfaeo6
LU3jR8x73qtcD37V3CFS+LMy8F06QoEkkWkkey2RyHec4jc5BrrAuQPEh04P3TLU
gqGJoIR/zRCvkFYFCYa66BuPleQKLPcc4xBZy90Y/aMgzpb1yoGCZT/hpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLiqG/kdj/MOakqUyA2I8ihNMnpMB8GA1UdIwQY
MBaAFLRmjGzYxA3fk8MKdmnjD2tQwYPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhTWJOakVEZC1Ud3dwMmFlTVBhMURCZzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85M2IwZjMtYzIxZi00NWY0LTgxZjgt
Yjk1YTlkMTczY2I3LzEvSXVLb2ItUjJQOHc1cVNwVElEWWp5S0UweWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85M2IwZjMtYzIxZi00NWY0LTgxZjgtYjk1YTlkMTczY2I3
LzEvdEdhTWJOakVEZC1Ud3dwMmFlTVBhMURCZzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/gSMA0G
CSqGSIb3DQEBCwUAA4IBAQC92+jV4ZH7D7kVE6XX4xirEAGLyF6mbcUuLvoA+T4D
VgLZ8Nkv+SQ3lKdb8bUDPOV8Ivkw66YZJDZHd/chRWZg8NslWkjkBMcfg++LA4Z9
gFY9DMFKaHXWj9fRAt4EGwiBxF6P8hknZZXDcBDMvHEkJ4vKhKwLndIB4aFvARo3
A1cu6ZpFP59cZWK47i1H1b4qsNBCNqRn8WLpJlrBEnO/RSuO+iFbaVPII989Kgpi
oluvoyNmDNPPgb8pXurLwTDyBWKFAkPk9hPVoNsDH+c7ivMPsGqnXbjN3WA6vJWk
+w1vp8RDIaK0G2huNxYuz0Tl0Z98j4Zo87QRL8k4qmmi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:48 2024 by rpki-client on console-ams.rpki-client.org