Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/cUm614ih1eT9cCzBH8QagpIviVQ.roa
File: cUm614ih1eT9cCzBH8QagpIviVQ.roa (raw, json)
Hash identifier: Ng4Vjs/zgi+KyloQvygCqSYzr19M1vYPZ7VGmrLBeTo=
Subject key identifier: 71:49:BA:D7:88:A1:D5:E4:FD:70:2C:C1:1F:C4:1A:82:92:2F:89:54
Certificate issuer: /CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Certificate serial: 018DDA90F304760C776C59E97532819C371A
Authority key identifier: 00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/cUm614ih1eT9cCzBH8QagpIviVQ.roa
Signing time: Sat 24 Feb 2024 10:02:28 +0000
ROA not before: Sat 24 Feb 2024 10:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209531
IP address blocks: 147.78.168.0/22 maxlen: 22
2a09:27c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:da:90:f3:04:76:0c:77:6c:59:e9:75:32:81:9c:37:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Validity
Not Before: Feb 24 10:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7149bad788a1d5e4fd702cc11fc41a82922f8954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:a2:47:9b:80:82:b2:c8:3c:78:56:0b:81:
ce:f1:bd:ef:c8:d9:e1:74:6d:b2:55:13:4e:08:b3:
7c:bb:df:05:33:a0:16:f6:1f:9c:4f:13:5b:3a:e4:
57:d1:1b:90:2b:05:1f:ac:78:e3:ff:95:bc:e4:78:
0d:94:63:ad:25:47:26:bd:5e:d6:f7:33:6d:73:a9:
fe:c4:1d:36:ee:40:d4:c2:bc:98:a1:27:e7:05:83:
6b:e4:c9:ff:3c:90:df:8e:c2:a1:20:51:1e:bf:d8:
04:30:68:3f:2b:84:07:c6:2f:c2:7b:38:c7:cb:39:
7d:26:9c:de:33:6f:1c:94:70:4d:cf:83:47:4f:9d:
33:01:14:ef:e9:13:48:f6:0d:50:aa:03:19:d8:b2:
9c:6a:98:c8:7b:b6:00:23:a1:b5:6d:d8:2d:ab:2b:
d6:3f:f4:b2:a0:63:ee:92:c7:32:1e:8f:e2:5d:85:
6f:40:82:95:0f:a5:81:e4:69:57:5f:a1:8a:50:b6:
81:b3:11:d2:41:62:99:9e:1b:cb:6d:d1:79:b3:74:
92:36:4a:7a:a7:99:3f:3c:ad:cf:48:b5:66:98:76:
03:0b:67:f4:49:10:fa:09:41:5e:41:a0:cd:41:ec:
96:60:ed:38:ac:a4:08:df:e0:25:2a:5d:7b:37:43:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:BA:D7:88:A1:D5:E4:FD:70:2C:C1:1F:C4:1A:82:92:2F:89:54
X509v3 Authority Key Identifier:
keyid:00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/cUm614ih1eT9cCzBH8QagpIviVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
IPv6:
2a09:27c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:d8:8b:a0:a4:6c:fe:ed:00:1b:2b:a4:3c:19:23:f6:74:81:
2c:e4:58:a2:29:74:74:88:a3:29:7d:86:99:b8:db:35:e5:c2:
a1:6a:ca:94:52:d2:23:e7:46:e8:06:d4:e1:55:c4:3e:f5:42:
f9:27:3b:90:bc:59:11:fb:cb:c6:b8:2c:d6:c4:9d:c6:41:69:
a5:8c:0b:16:bb:50:77:a5:54:8e:f0:8e:c6:2e:a5:81:ee:26:
48:e1:f1:db:c6:b1:b6:9c:bf:eb:d5:78:b7:70:31:58:bd:c0:
46:af:98:03:28:3e:d6:49:ce:84:03:83:51:2d:46:40:ae:a0:
85:b4:99:4c:3c:d7:9a:e3:fd:59:1d:21:ed:8b:5b:7e:f3:70:
79:2e:49:fc:e5:dd:f2:8d:20:93:b8:e3:7e:b8:23:ea:bd:76:
94:75:5a:8f:7e:91:a6:78:ec:9a:be:53:01:c1:9f:be:0b:72:
17:9b:19:21:0d:0b:f8:08:9b:fb:50:14:23:fa:28:91:99:39:
7d:37:78:91:03:d5:59:48:94:ea:80:8d:73:02:88:b1:52:71:
51:f4:67:47:a7:72:ce:93:61:11:b1:da:6d:7a:2d:7b:7c:54:
5c:a3:31:81:e3:b4:0d:b9:a6:64:6f:3d:27:25:65:2d:c5:96:
19:38:fe:75
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY3akPMEdgx3bFnpdTKBnDcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTVhNGY4ZjRkNDE4ODhlNDM5NGM1ZjU2NDk3OTI5NWQy
ZjEzYWEwHhcNMjQwMjI0MTAwMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQ5YmFkNzg4YTFkNWU0ZmQ3MDJjYzExZmM0MWE4MjkyMmY4OTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWuiR5uAgrLIPHhWC4HO8b3vyNnh
dG2yVRNOCLN8u98FM6AW9h+cTxNbOuRX0RuQKwUfrHjj/5W85HgNlGOtJUcmvV7W
9zNtc6n+xB027kDUwryYoSfnBYNr5Mn/PJDfjsKhIFEev9gEMGg/K4QHxi/CezjH
yzl9JpzeM28clHBNz4NHT50zARTv6RNI9g1QqgMZ2LKcapjIe7YAI6G1bdgtqyvW
P/SyoGPukscyHo/iXYVvQIKVD6WB5GlXX6GKULaBsxHSQWKZnhvLbdF5s3SSNkp6
p5k/PK3PSLVmmHYDC2f0SRD6CUFeQaDNQeyWYO04rKQI3+AlKl17N0PY1QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHFJuteIodXk/XAswR/EGoKSL4lUMB8GA1UdIwQY
MBaAFACVpPj01BiI5DlMX1ZJeSldLxOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpXay1QVFVHSWprT1V4ZlZrbDVLVjB2RTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMzM3NTgtNGM2MC00Y2IzLWEyMDgt
YzA2OTczMDZmOWE1LzEvY1VtNjE0aWgxZVQ5Y0N6Qkg4UWFncEl2aVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMzM3NTgtNGM2MC00Y2IzLWEyMDgtYzA2OTczMDZmOWE1
LzEvQUpXay1QVFVHSWprT1V4ZlZrbDVLVjB2RTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCk06oMA0E
AgACMAcDBQMqCSfAMA0GCSqGSIb3DQEBCwUAA4IBAQCA2IugpGz+7QAbK6Q8GSP2
dIEs5FiiKXR0iKMpfYaZuNs15cKhasqUUtIj50boBtThVcQ+9UL5JzuQvFkR+8vG
uCzWxJ3GQWmljAsWu1B3pVSO8I7GLqWB7iZI4fHbxrG2nL/r1Xi3cDFYvcBGr5gD
KD7WSc6EA4NRLUZArqCFtJlMPNea4/1ZHSHti1t+83B5Lkn85d3yjSCTuON+uCPq
vXaUdVqPfpGmeOyavlMBwZ++C3IXmxkhDQv4CJv7UBQj+iiRmTl9N3iRA9VZSJTq
gI1zAoixUnFR9GdHp3LOk2ERsdptei17fFRcozGB47QNuaZkbz0nJWUtxZYZOP51
-----END CERTIFICATE-----
Generated at Tue Mar 5 15:06:30 2024 by rpki-client on console-fra.rpki-client.org