Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/MI_aO8WE9vDEvmuv3eoGa-NtW50.roa
File: MI_aO8WE9vDEvmuv3eoGa-NtW50.roa (raw, json)
Hash identifier: xsjjvDh2x7QJELzCBQfQ/YgIFGWDLzN1AkjpuraGN24=
Subject key identifier: 30:8F:DA:3B:C5:84:F6:F0:C4:BE:6B:AF:DD:EA:06:6B:E3:6D:5B:9D
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 018A2DC77160B0B583B73B29EC249D9B1D75
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/MI_aO8WE9vDEvmuv3eoGa-NtW50.roa
Signing time: Fri 25 Aug 2023 17:39:19 +0000
ROA not before: Fri 25 Aug 2023 17:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
176.118.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:c7:71:60:b0:b5:83:b7:3b:29:ec:24:9d:9b:1d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Aug 25 17:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=308fda3bc584f6f0c4be6bafddea066be36d5b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c3:00:9b:c5:3a:b7:80:20:d6:94:1c:fc:e3:
fb:29:59:26:f6:75:e9:13:e0:fd:c8:fb:a3:96:19:
ea:d4:54:4f:e6:2c:80:4b:60:64:c1:8f:01:f4:52:
2f:c9:b4:49:04:12:51:b9:9c:0c:cb:27:04:50:09:
70:44:34:18:64:46:b5:9d:13:d9:cd:f4:32:87:23:
c5:b5:bf:22:58:cd:57:63:67:33:57:d2:3e:61:70:
86:0c:93:ef:cc:fb:fb:f7:06:ad:7f:a0:77:0c:76:
d5:19:c7:63:dd:0f:67:bf:53:ef:92:f2:d9:39:61:
53:2d:42:00:fc:73:ad:c9:b2:af:f6:51:b2:59:dc:
23:9c:5a:44:de:55:9a:88:eb:9b:15:05:b4:4c:f6:
d5:8c:8e:3d:89:f4:cd:1f:c8:2e:6b:a2:f6:95:d2:
d8:9a:9d:e2:4b:21:9e:65:28:74:6f:b1:d9:61:e7:
03:c0:7b:21:f8:7e:32:a3:57:f1:27:11:50:5b:3b:
a6:76:18:17:34:e9:39:a8:a8:a5:3a:57:c8:4d:9c:
8b:ba:2a:d7:99:a9:95:89:45:bf:9e:b2:80:ad:e7:
66:8d:3d:41:7e:af:2f:3d:b1:14:2c:94:f0:32:48:
49:ed:ba:27:0f:b7:5f:69:a4:3d:12:27:9c:9d:a0:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:DA:3B:C5:84:F6:F0:C4:BE:6B:AF:DD:EA:06:6B:E3:6D:5B:9D
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/MI_aO8WE9vDEvmuv3eoGa-NtW50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.182.0/24
91.232.184.0/24
176.118.80.0/21
Signature Algorithm: sha256WithRSAEncryption
88:79:cc:bb:b6:41:24:3b:bd:6d:97:10:58:8a:4d:31:66:be:
26:2f:54:ba:90:9c:cb:b3:06:bd:14:3d:11:8b:30:a5:4e:d7:
2b:3d:9b:41:79:f9:2d:ca:3b:6d:61:e0:96:33:e1:d6:4f:03:
47:fe:c3:d2:64:da:65:cd:a7:82:32:1c:2d:ac:44:02:8e:73:
78:e5:c5:5d:b7:c7:78:dc:bc:93:2b:b0:54:93:3a:04:c9:87:
03:b3:f3:11:3b:47:27:2f:1d:00:05:91:e5:b8:bf:3e:be:eb:
eb:03:d0:1b:3a:e7:36:9e:02:39:99:64:dd:aa:55:4d:b8:44:
3c:61:27:d9:64:6a:28:f6:2b:03:cb:2b:d4:75:bc:3c:3a:de:
56:f7:e1:7b:f2:f1:9b:fb:e8:54:b6:a6:28:44:28:b2:97:3e:
5b:45:92:55:fd:c4:ec:1a:88:f5:a5:5f:71:b4:63:ed:e8:6b:
ff:c5:c2:c4:d6:cf:8b:81:46:5b:db:73:e0:fe:34:6c:e6:40:
4d:70:42:43:3b:11:0d:ee:22:a8:a5:a9:64:09:7b:40:b0:91:
36:9b:19:4a:4f:83:81:de:bc:7a:ab:0d:d7:8a:4a:4b:1a:22:
cb:82:60:34:ce:a4:86:25:b8:b4:e1:1f:ee:8b:4a:26:a5:e4:
c7:a8:53:5b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYotx3FgsLWDtzsp7CSdmx11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjMwODI1MTczOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDhmZGEzYmM1ODRmNmYwYzRiZTZiYWZkZGVhMDY2YmUzNmQ1YjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsMAm8U6t4Ag1pQc/OP7KVkm9nXp
E+D9yPujlhnq1FRP5iyAS2BkwY8B9FIvybRJBBJRuZwMyycEUAlwRDQYZEa1nRPZ
zfQyhyPFtb8iWM1XY2czV9I+YXCGDJPvzPv79watf6B3DHbVGcdj3Q9nv1PvkvLZ
OWFTLUIA/HOtybKv9lGyWdwjnFpE3lWaiOubFQW0TPbVjI49ifTNH8gua6L2ldLY
mp3iSyGeZSh0b7HZYecDwHsh+H4yo1fxJxFQWzumdhgXNOk5qKilOlfITZyLuirX
mamViUW/nrKAredmjT1Bfq8vPbEULJTwMkhJ7bonD7dfaaQ9EiecnaCwEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDCP2jvFhPbwxL5rr93qBmvjbVudMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvTUlfYU84V0U5dkRFdm11djNlb0dhLU50VzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+i2AwQA
W+i4AwQDsHZQMA0GCSqGSIb3DQEBCwUAA4IBAQCIecy7tkEkO71tlxBYik0xZr4m
L1S6kJzLswa9FD0RizClTtcrPZtBefktyjttYeCWM+HWTwNH/sPSZNplzaeCMhwt
rEQCjnN45cVdt8d43LyTK7BUkzoEyYcDs/MRO0cnLx0ABZHluL8+vuvrA9AbOuc2
ngI5mWTdqlVNuEQ8YSfZZGoo9isDyyvUdbw8Ot5W9+F78vGb++hUtqYoRCiylz5b
RZJV/cTsGoj1pV9xtGPt6Gv/xcLE1s+LgUZb23Pg/jRs5kBNcEJDOxEN7iKopalk
CXtAsJE2mxlKT4OB3rx6qw3XikpLGiLLgmA0zqSGJbi04R/ui0ompeTHqFNb
-----END CERTIFICATE-----
Generated at Mon Aug 28 09:54:14 2023 by rpki-client on console-ams.rpki-client.org