Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/rXipS_lcnw8z0MmUcE799nF4RP0.roa
File: rXipS_lcnw8z0MmUcE799nF4RP0.roa (raw, json)
Hash identifier: b/3n2I6tO18P215jlryx91lWjncknEC22wA/8J+//MU=
Subject key identifier: AD:78:A9:4B:F9:5C:9F:0F:33:D0:C9:94:70:4E:FD:F6:71:78:44:FD
Certificate issuer: /CN=4366c43872731a268bf5c963ddf661774ef9cae1
Certificate serial: 018326ED39AC9F100C2AF05E7C58E3BD44AA
Authority key identifier: 43:66:C4:38:72:73:1A:26:8B:F5:C9:63:DD:F6:61:77:4E:F9:CA:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2bEOHJzGiaL9clj3fZhd075yuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/rXipS_lcnw8z0MmUcE799nF4RP0.roa
Signing time: Sat 10 Sep 2022 10:23:44 +0000
ROA not before: Sat 10 Sep 2022 10:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ed:39:ac:9f:10:0c:2a:f0:5e:7c:58:e3:bd:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4366c43872731a268bf5c963ddf661774ef9cae1
Validity
Not Before: Sep 10 10:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad78a94bf95c9f0f33d0c994704efdf6717844fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:ef:73:59:df:0a:d6:c0:e1:b2:c5:8e:c1:
4d:f5:cf:6e:9b:12:0d:bd:f6:1b:80:7f:0f:cf:a1:
0d:43:db:63:48:b5:38:e3:24:c2:14:0b:46:bf:2a:
df:d4:6c:e1:ef:f1:1f:69:7c:50:b0:ee:c2:d3:29:
6f:23:83:83:1a:3c:c1:22:d6:cd:7e:5d:04:c6:8a:
21:f2:1c:e8:ea:47:7a:e0:8e:9b:39:dc:ac:9e:07:
9c:82:82:c3:15:96:17:7a:a6:a3:8d:c3:f6:7e:a2:
42:d9:09:23:da:71:78:14:96:23:a8:88:b6:11:64:
a0:ff:10:d7:2c:62:40:62:07:ba:88:3b:ea:c2:00:
c5:d3:9e:53:b5:00:0a:7e:ef:b5:d5:c3:80:d2:d1:
e4:7a:e8:f0:79:d4:31:84:9c:22:7a:d4:18:12:97:
60:d4:8e:e3:f3:5c:6b:b5:dc:13:0e:eb:27:78:c5:
54:34:d0:5d:02:a1:fa:1d:10:c4:76:79:3c:8f:d9:
47:74:d0:d0:ff:bd:c9:88:e6:71:66:b8:dc:53:18:
4c:9c:51:ce:12:a0:f1:3c:b2:ef:40:ac:8c:31:9a:
0d:14:bb:90:e7:b9:53:ac:c5:3a:f4:11:2f:fc:33:
e9:67:96:9c:1b:ab:a4:22:7f:e7:ed:66:f0:0e:be:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:A9:4B:F9:5C:9F:0F:33:D0:C9:94:70:4E:FD:F6:71:78:44:FD
X509v3 Authority Key Identifier:
keyid:43:66:C4:38:72:73:1A:26:8B:F5:C9:63:DD:F6:61:77:4E:F9:CA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2bEOHJzGiaL9clj3fZhd075yuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/rXipS_lcnw8z0MmUcE799nF4RP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/Q2bEOHJzGiaL9clj3fZhd075yuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.76.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1a:80:88:ff:b8:77:84:d6:fe:c6:36:91:0c:f2:75:89:cb:
a0:9a:26:1c:61:9f:d0:fa:5e:a5:eb:e7:2d:fe:ed:1f:b8:2f:
d6:ef:26:65:50:12:1c:d8:a3:1c:c8:c7:70:be:97:5d:3c:e2:
ab:06:02:71:0c:b6:39:5d:25:b8:5c:40:a8:50:d3:c4:1e:1c:
51:0d:07:f0:73:97:2d:92:bb:7e:e3:3d:b8:83:6e:42:d7:bd:
b9:ae:50:34:60:2f:34:6e:f2:0b:58:cd:48:fd:92:16:c8:31:
8e:eb:de:44:76:0a:a1:e8:6f:44:30:f4:c6:fe:e5:7d:a1:ce:
e5:67:1b:98:fc:55:47:09:e8:49:ec:a5:36:ee:ce:a2:45:9d:
a1:85:db:06:cd:7e:33:9a:7a:f9:fc:1e:ee:d5:e3:95:4f:4a:
22:55:54:97:41:cb:13:b9:ee:af:05:af:9a:d5:94:41:d3:ff:
4b:88:3c:f1:c2:bd:bc:15:ec:42:f3:65:5c:01:75:49:78:b8:
2a:f9:47:af:db:45:a5:ad:a5:5f:4b:ae:86:eb:ca:46:00:36:
97:6f:99:4e:5b:b2:6f:cb:f1:ff:bc:65:2b:42:f4:f5:14:e3:
71:28:34:9e:4c:2c:64:5e:e4:56:b9:ff:84:92:1e:1d:de:35:
20:b2:20:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMm7TmsnxAMKvBefFjjvUSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjZjNDM4NzI3MzFhMjY4YmY1Yzk2M2RkZjY2MTc3NGVm
OWNhZTEwHhcNMjIwOTEwMTAyMzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDc4YTk0YmY5NWM5ZjBmMzNkMGM5OTQ3MDRlZmRmNjcxNzg0NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzTvc1nfCtbA4bLFjsFN9c9umxIN
vfYbgH8Pz6ENQ9tjSLU44yTCFAtGvyrf1Gzh7/EfaXxQsO7C0ylvI4ODGjzBItbN
fl0Exooh8hzo6kd64I6bOdysngecgoLDFZYXeqajjcP2fqJC2Qkj2nF4FJYjqIi2
EWSg/xDXLGJAYge6iDvqwgDF055TtQAKfu+11cOA0tHkeujwedQxhJwietQYEpdg
1I7j81xrtdwTDusneMVUNNBdAqH6HRDEdnk8j9lHdNDQ/73JiOZxZrjcUxhMnFHO
EqDxPLLvQKyMMZoNFLuQ57lTrMU69BEv/DPpZ5acG6ukIn/n7WbwDr4vkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK14qUv5XJ8PM9DJlHBO/fZxeET9MB8GA1UdIwQY
MBaAFENmxDhycxomi/XJY932YXdO+crhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJiRU9ISnpHaWFMOWNsajNmWmhkMDc1eXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ZmE1ODAtY2ZkOS00NDJiLTk0M2Yt
ZDg0M2VlNTUxZWIyLzEvclhpcFNfbGNudzh6ME1tVWNFNzk5bkY0UlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85ZmE1ODAtY2ZkOS00NDJiLTk0M2YtZDg0M2VlNTUxZWIy
LzEvUTJiRU9ISnpHaWFMOWNsajNmWmhkMDc1eXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRMMA0G
CSqGSIb3DQEBCwUAA4IBAQBvGoCI/7h3hNb+xjaRDPJ1icugmiYcYZ/Q+l6l6+ct
/u0fuC/W7yZlUBIc2KMcyMdwvpddPOKrBgJxDLY5XSW4XECoUNPEHhxRDQfwc5ct
krt+4z24g25C1725rlA0YC80bvILWM1I/ZIWyDGO695Edgqh6G9EMPTG/uV9oc7l
ZxuY/FVHCehJ7KU27s6iRZ2hhdsGzX4zmnr5/B7u1eOVT0oiVVSXQcsTue6vBa+a
1ZRB0/9LiDzxwr28FexC82VcAXVJeLgq+Uev20WlraVfS66G68pGADaXb5lOW7Jv
y/H/vGUrQvT1FONxKDSeTCxkXuRWuf+Ekh4d3jUgsiAD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org