Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/sMcW0_GLxxBGzLZ2xoCcIogN6XE.roa
File: sMcW0_GLxxBGzLZ2xoCcIogN6XE.roa (raw, json)
Hash identifier: cG/QPXx0xCrFFT3qhRWXeCSv0MmYpn1JhD5eCRz6H/k=
Subject key identifier: B0:C7:16:D3:F1:8B:C7:10:46:CC:B6:76:C6:80:9C:22:88:0D:E9:71
Certificate issuer: /CN=9482ee484b4bcd5b053e17bd1f73bcee23f43392
Certificate serial: 01849ADF4BF6B66832A7AE80255A7B0A85FD
Authority key identifier: 94:82:EE:48:4B:4B:CD:5B:05:3E:17:BD:1F:73:BC:EE:23:F4:33:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lILuSEtLzVsFPhe9H3O87iP0M5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/sMcW0_GLxxBGzLZ2xoCcIogN6XE.roa
Signing time: Mon 21 Nov 2022 15:47:15 +0000
ROA not before: Mon 21 Nov 2022 15:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 5.182.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:df:4b:f6:b6:68:32:a7:ae:80:25:5a:7b:0a:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9482ee484b4bcd5b053e17bd1f73bcee23f43392
Validity
Not Before: Nov 21 15:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0c716d3f18bc71046ccb676c6809c22880de971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:0c:f5:83:d2:cc:a8:11:5a:fb:34:47:d5:
a5:6a:12:bd:25:98:f8:35:d6:4f:f8:87:34:e7:f3:
4b:3d:a0:81:54:da:0c:23:b7:cb:d7:de:73:2b:27:
e2:1c:96:aa:a0:58:43:1a:73:98:df:41:1e:66:b6:
94:72:2f:a4:37:82:2e:58:bb:ac:b5:b8:94:f0:d1:
fe:05:56:9f:69:88:c0:23:d4:20:18:f3:73:2b:80:
e1:f6:d3:3c:fa:89:fc:c9:52:ea:73:03:72:ae:d8:
81:23:0f:ca:83:c1:ba:20:22:e3:b4:99:1c:33:79:
9a:12:61:a5:37:a9:fc:49:46:10:60:37:b4:7d:c0:
fe:14:4e:58:6a:0a:c0:73:60:d4:ba:55:ef:bd:1e:
52:a5:b9:43:1b:f0:8c:ed:a6:e0:f9:f4:b3:73:8b:
fd:53:ad:c7:4f:fc:7c:8a:1a:8b:b6:04:dc:d1:60:
33:26:59:af:52:fa:e7:a5:a3:3e:90:ac:3d:ea:bb:
ee:a1:15:9c:ef:c6:4e:bb:8d:e3:29:8e:df:37:5f:
4c:ef:19:05:03:3b:73:0f:b1:64:22:7a:91:8d:b0:
79:58:b0:23:cf:4c:aa:a1:47:1d:a7:e3:24:7d:af:
d7:22:fa:22:2e:4e:84:db:77:33:12:b0:a7:28:4e:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:16:D3:F1:8B:C7:10:46:CC:B6:76:C6:80:9C:22:88:0D:E9:71
X509v3 Authority Key Identifier:
keyid:94:82:EE:48:4B:4B:CD:5B:05:3E:17:BD:1F:73:BC:EE:23:F4:33:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lILuSEtLzVsFPhe9H3O87iP0M5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/sMcW0_GLxxBGzLZ2xoCcIogN6XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/lILuSEtLzVsFPhe9H3O87iP0M5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
Signature Algorithm: sha256WithRSAEncryption
01:48:75:cb:3b:f3:b6:a8:a0:23:67:b2:fe:2e:57:35:4c:f4:
be:7b:fb:7c:c7:8c:fa:a3:44:c3:55:3e:95:b7:a0:3f:74:8e:
ef:4e:c7:82:a5:10:fa:74:5f:37:a0:25:11:ad:18:2d:08:7b:
ed:ba:2b:46:f2:6a:e5:8c:e0:3e:9f:37:34:3b:17:eb:7e:b1:
32:f3:df:5f:b1:3e:20:3b:ec:57:7b:c9:e8:54:35:43:1f:7c:
eb:27:93:57:68:ef:12:39:4d:f1:69:b2:15:a6:47:59:72:e2:
4a:69:45:52:77:fa:ad:0b:73:92:f3:6b:22:d1:ef:cf:f1:4b:
60:ff:a5:16:46:f0:fe:e9:9c:28:dd:92:dc:b4:18:43:bc:5c:
00:5d:50:e3:5c:a1:71:87:91:8c:5a:2d:a7:6a:07:58:0b:22:
d1:4e:4a:06:e4:a9:ce:84:57:4a:67:e1:a7:ed:3e:f8:ab:e5:
34:af:90:cc:60:33:18:2b:e0:35:7a:df:02:07:55:ef:c1:33:
62:bb:db:4f:43:92:ac:f0:84:30:52:d6:a5:17:78:b0:a1:ca:
e7:d1:ac:3a:13:57:06:05:4e:98:69:fe:cb:47:6a:d5:98:0a:
d1:0b:8f:38:62:89:e4:e4:3b:4f:87:7b:a1:a5:60:ba:8a:58:
4c:41:16:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSa30v2tmgyp66AJVp7CoX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODJlZTQ4NGI0YmNkNWIwNTNlMTdiZDFmNzNiY2VlMjNm
NDMzOTIwHhcNMjIxMTIxMTU0NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGM3MTZkM2YxOGJjNzEwNDZjY2I2NzZjNjgwOWMyMjg4MGRlOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcM9YPSzKgRWvs0R9WlahK9JZj4
NdZP+Ic05/NLPaCBVNoMI7fL195zKyfiHJaqoFhDGnOY30EeZraUci+kN4IuWLus
tbiU8NH+BVafaYjAI9QgGPNzK4Dh9tM8+on8yVLqcwNyrtiBIw/Kg8G6ICLjtJkc
M3maEmGlN6n8SUYQYDe0fcD+FE5YagrAc2DUulXvvR5SpblDG/CM7abg+fSzc4v9
U63HT/x8ihqLtgTc0WAzJlmvUvrnpaM+kKw96rvuoRWc78ZOu43jKY7fN19M7xkF
AztzD7FkInqRjbB5WLAjz0yqoUcdp+Mkfa/XIvoiLk6E23czErCnKE50GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDHFtPxi8cQRsy2dsaAnCKIDelxMB8GA1UdIwQY
MBaAFJSC7khLS81bBT4XvR9zvO4j9DOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElMdVNFdEx6VnNGUGhlOUgzTzg3aVAwTTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYTZjMmItYzIyZi00MTUxLWIwN2It
NDk5NWZiOWIxZTU5LzEvc01jVzBfR0x4eEJHekxaMnhvQ2NJb2dONlhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iYTZjMmItYzIyZi00MTUxLWIwN2ItNDk5NWZiOWIxZTU5
LzEvbElMdVNFdEx6VnNGUGhlOUgzTzg3aVAwTTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbZIMA0G
CSqGSIb3DQEBCwUAA4IBAQABSHXLO/O2qKAjZ7L+Llc1TPS+e/t8x4z6o0TDVT6V
t6A/dI7vTseCpRD6dF83oCURrRgtCHvtuitG8mrljOA+nzc0OxfrfrEy899fsT4g
O+xXe8noVDVDH3zrJ5NXaO8SOU3xabIVpkdZcuJKaUVSd/qtC3OS82si0e/P8Utg
/6UWRvD+6Zwo3ZLctBhDvFwAXVDjXKFxh5GMWi2nagdYCyLRTkoG5KnOhFdKZ+Gn
7T74q+U0r5DMYDMYK+A1et8CB1XvwTNiu9tPQ5Ks8IQwUtalF3iwocrn0aw6E1cG
BU6Yaf7LR2rVmArRC484Yonk5DtPh3uhpWC6ilhMQRbm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:20 2023 by rpki-client on console-fra.rpki-client.org