Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/1-q66A44owNU18-vFnDqgkR4hRk4.roa
File: 1-q66A44owNU18-vFnDqgkR4hRk4.roa (raw, json)
Hash identifier: MufVBxep+uVb6oXcd2MvWMuugskPqow+SGtv7aMRNQc=
Subject key identifier: FA:AE:BA:03:8E:28:C0:D5:35:F3:EB:C5:9C:3A:A0:91:1E:21:46:4E
Certificate issuer: /CN=518ffec6469428a0c4d9069ef22461d492ba3dc6
Certificate serial: 0188303D7822E269E1A25974D30E5F552862
Authority key identifier: 51:8F:FE:C6:46:94:28:A0:C4:D9:06:9E:F2:24:61:D4:92:BA:3D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UY_-xkaUKKDE2Qae8iRh1JK6PcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/1-q66A44owNU18-vFnDqgkR4hRk4.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 88.151.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:78:22:e2:69:e1:a2:59:74:d3:0e:5f:55:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518ffec6469428a0c4d9069ef22461d492ba3dc6
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaeba038e28c0d535f3ebc59c3aa0911e21464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:d1:dc:4a:08:04:19:8f:8a:45:ce:a1:a2:
dc:6e:10:34:eb:7e:0f:b6:23:f3:22:8a:04:58:a6:
be:81:18:e9:31:de:08:b9:05:41:d5:be:be:1a:dc:
a4:78:ef:0b:55:d4:81:7f:45:5f:89:36:07:ba:76:
d3:6a:e4:67:fc:d9:a0:05:51:c5:1d:5e:45:ed:f5:
15:13:b3:49:f2:3b:69:99:7a:ca:d9:f6:9f:5c:00:
f3:a6:35:a1:45:fb:51:0c:5c:6c:f4:dd:bc:ad:ff:
24:9b:b8:bd:1b:ac:5f:7f:09:eb:ee:ef:28:dd:b2:
9e:1f:f3:26:25:39:0b:2b:37:74:0d:63:d8:7a:0f:
d0:aa:8c:90:7b:fe:4e:df:aa:60:98:d7:bb:21:f0:
59:b5:ac:ff:78:c8:6a:50:ff:db:d6:a4:cf:7e:e8:
49:54:28:70:4b:16:2f:a9:f4:79:3d:d4:bd:90:a5:
4d:f5:9d:4d:04:99:fa:60:4e:0c:e0:5b:75:77:37:
79:e3:3e:ea:49:24:81:3e:4a:da:99:d2:a7:22:89:
1d:4c:21:7e:39:70:b2:75:ea:d5:fb:84:31:78:46:
84:28:74:18:99:47:8c:48:41:6a:0a:5a:f5:34:bc:
b3:b4:46:20:d6:be:4c:10:8b:0f:f2:46:7a:f0:7b:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:BA:03:8E:28:C0:D5:35:F3:EB:C5:9C:3A:A0:91:1E:21:46:4E
X509v3 Authority Key Identifier:
keyid:51:8F:FE:C6:46:94:28:A0:C4:D9:06:9E:F2:24:61:D4:92:BA:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UY_-xkaUKKDE2Qae8iRh1JK6PcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/1-q66A44owNU18-vFnDqgkR4hRk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/22edf4-0192-41bf-9faf-0243a3b8af52/1/UY_-xkaUKKDE2Qae8iRh1JK6PcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4b:fe:ee:64:31:d1:70:f6:e6:dc:8b:b5:70:bb:98:bd:22:
bc:3d:e4:a3:09:b4:b8:6a:be:1b:c3:e1:6e:b2:1a:cd:04:2a:
17:c3:d9:2c:90:2a:2a:3e:c4:33:83:22:e1:a1:e9:c4:97:87:
12:8f:43:e8:25:5c:7a:48:db:9d:0c:90:7f:7f:c8:f0:7e:1f:
7e:08:dc:f2:17:4c:8e:a9:c8:c8:38:6a:89:af:b9:82:84:be:
ff:e8:f8:55:53:d1:02:47:e5:3d:12:0d:c3:1c:ba:fe:ec:dc:
f5:93:f6:6e:75:db:7f:02:90:50:51:d8:2c:08:24:79:e1:e3:
63:92:b1:73:85:95:c9:61:47:d5:a2:bf:84:06:6a:0f:eb:f0:
94:ba:77:34:3d:d9:ac:55:33:ec:4c:a1:dd:80:6a:e9:81:36:
7c:ad:23:2b:04:6a:ec:39:78:2d:9d:30:e3:ef:58:79:a7:0c:
68:59:4a:29:5f:1d:1f:bd:9f:3c:54:b8:7e:a2:8a:14:d7:24:
b3:0e:86:cc:8d:aa:8c:d8:c5:d9:ff:ba:f6:57:74:a4:51:31:
a7:6d:be:7c:d7:43:20:10:3c:b5:2a:3e:a2:3f:7b:6c:cf:83:
1e:c8:cd:a3:ec:7d:a4:f1:7c:be:03:8d:ca:c9:94:2a:c6:d3:
65:1f:fa:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYgwPXgi4mnholl00w5fVShiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOGZmZWM2NDY5NDI4YTBjNGQ5MDY5ZWYyMjQ2MWQ0OTJi
YTNkYzYwHhcNMjMwNTE4MTkwMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWFlYmEwMzhlMjhjMGQ1MzVmM2ViYzU5YzNhYTA5MTFlMjE0NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPR3EoIBBmPikXOoaLcbhA0634P
tiPzIooEWKa+gRjpMd4IuQVB1b6+GtykeO8LVdSBf0VfiTYHunbTauRn/NmgBVHF
HV5F7fUVE7NJ8jtpmXrK2fafXADzpjWhRftRDFxs9N28rf8km7i9G6xffwnr7u8o
3bKeH/MmJTkLKzd0DWPYeg/QqoyQe/5O36pgmNe7IfBZtaz/eMhqUP/b1qTPfuhJ
VChwSxYvqfR5PdS9kKVN9Z1NBJn6YE4M4Ft1dzd54z7qSSSBPkramdKnIokdTCF+
OXCyderV+4QxeEaEKHQYmUeMSEFqClr1NLyztEYg1r5MEIsP8kZ68HtCNwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPquugOOKMDVNfPrxZw6oJEeIUZOMB8GA1UdIwQY
MBaAFFGP/sZGlCigxNkGnvIkYdSSuj3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlfLXhrYVVLS0RFMlFhZThpUmgxSks2UGNZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yMmVkZjQtMDE5Mi00MWJmLTlmYWYt
MDI0M2EzYjhhZjUyLzEvMS1xNjZBNDRvd05VMTgtdkZuRHFna1I0aFJrNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzAvMjJlZGY0LTAxOTItNDFiZi05ZmFmLTAyNDNhM2I4YWY1
Mi8xL1VZXy14a2FVS0tERTJRYWU4aVJoMUpLNlBjWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFiXCDAN
BgkqhkiG9w0BAQsFAAOCAQEAdkv+7mQx0XD25tyLtXC7mL0ivD3kowm0uGq+G8Ph
brIazQQqF8PZLJAqKj7EM4Mi4aHpxJeHEo9D6CVcekjbnQyQf3/I8H4ffgjc8hdM
jqnIyDhqia+5goS+/+j4VVPRAkflPRINwxy6/uzc9ZP2bnXbfwKQUFHYLAgkeeHj
Y5Kxc4WVyWFH1aK/hAZqD+vwlLp3ND3ZrFUz7Eyh3YBq6YE2fK0jKwRq7Dl4LZ0w
4+9YeacMaFlKKV8dH72fPFS4fqKKFNcksw6GzI2qjNjF2f+69ld0pFExp22+fNdD
IBA8tSo+oj97bM+DHsjNo+x9pPF8vgONysmUKsbTZR/63Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:14 2024 by rpki-client on console-ams.rpki-client.org