Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/XrHl-w9vZB1OKtH1Auat1alrTUM.roa
File: XrHl-w9vZB1OKtH1Auat1alrTUM.roa (raw, json)
Hash identifier: vEQwq4H6bneTgzGyae46jxGhfxyykr//+Kq1KPn5yIE=
Subject key identifier: 5E:B1:E5:FB:0F:6F:64:1D:4E:2A:D1:F5:02:E6:AD:D5:A9:6B:4D:43
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0188490DDBBB49E98963A7FFA7BED4E44945
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/XrHl-w9vZB1OKtH1Auat1alrTUM.roa
Signing time: Tue 23 May 2023 14:40:24 +0000
ROA not before: Tue 23 May 2023 14:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:0d:db:bb:49:e9:89:63:a7:ff:a7:be:d4:e4:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: May 23 14:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eb1e5fb0f6f641d4e2ad1f502e6add5a96b4d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ba:10:c3:64:a3:1e:6a:4e:80:a0:13:7a:
b4:11:d5:1a:4b:10:5e:58:93:4d:c7:24:20:5c:35:
b1:e7:3e:26:30:cf:ae:e3:a5:04:ad:e8:ea:87:05:
0a:52:e1:54:bf:52:7f:ea:09:a6:93:6d:04:68:04:
22:f2:04:09:cc:fa:57:47:85:7a:56:a4:7d:8c:4c:
25:24:3e:4e:54:fa:ba:b9:ab:72:f6:41:b8:26:91:
2c:0e:9b:83:1b:39:9b:c3:69:bc:45:e8:75:63:b5:
a6:bf:3c:c5:2b:ff:c2:76:22:4f:81:23:82:3b:81:
37:38:d9:ef:b4:38:cf:a0:db:e2:78:d7:1f:32:bc:
f0:92:8f:b2:38:ed:cf:ec:00:33:45:d0:be:cd:bf:
e8:21:b3:35:b0:97:1a:32:8d:df:c4:9b:47:a5:fe:
76:bd:d2:d9:4f:6f:db:80:fb:27:30:24:6b:1a:1d:
ae:d7:1b:f7:9a:52:41:a4:7b:32:75:30:ea:cd:50:
54:ea:65:b3:44:d0:30:59:2d:31:39:72:d8:78:be:
ae:c6:38:b0:5b:96:51:56:50:74:fc:1e:2b:c7:cb:
2d:6b:9e:57:ba:f0:25:24:ef:c2:69:83:20:1c:8a:
a3:7b:39:ca:25:4b:40:4b:36:92:cf:30:eb:90:7c:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:E5:FB:0F:6F:64:1D:4E:2A:D1:F5:02:E6:AD:D5:A9:6B:4D:43
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/XrHl-w9vZB1OKtH1Auat1alrTUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:0f:0a:d3:51:f3:76:d3:ba:55:cd:36:1e:8f:44:31:e1:a8:
91:57:b7:58:f5:e1:7c:f6:df:75:e1:ed:44:a3:f7:7b:dd:a2:
3b:b6:89:77:46:b8:81:0a:b9:76:49:b8:7a:2f:68:f1:04:60:
1f:7a:f7:10:7f:fd:a4:0e:a5:b2:d4:d7:e2:a1:5b:9f:59:aa:
1f:3a:54:6d:41:8e:5a:52:48:0f:3a:09:76:e4:38:1d:4a:f6:
5d:21:2d:6f:c1:3e:7b:0e:65:6b:cd:1c:7f:8d:09:04:4b:f6:
5d:23:67:01:b6:e6:f6:68:ad:6b:c1:bc:e4:e6:97:53:0c:12:
73:85:f6:ad:7d:ea:05:ee:f6:13:fa:fd:9e:5b:d5:93:f1:f1:
43:b7:1b:e2:8a:ca:c5:82:66:1d:69:c9:e4:ea:c7:7b:fd:8f:
5b:d8:a9:b8:2d:28:46:bc:c3:ee:7c:d2:6c:74:8c:b6:2e:c6:
95:8f:da:27:d4:8a:af:3a:f0:7e:24:61:58:e0:e4:d0:55:d2:
c1:4b:27:85:71:f3:56:91:0f:aa:67:bc:75:c7:e6:e4:17:07:
3b:29:18:05:a4:c7:a6:1d:38:fe:cf:3a:7d:d5:58:22:34:1b:
ab:63:bf:09:6e:29:fc:5c:6a:90:9b:ee:e0:2e:ae:c9:10:c1:
4d:d3:c4:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhJDdu7SemJY6f/p77U5ElFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjMwNTIzMTQ0MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWIxZTVmYjBmNmY2NDFkNGUyYWQxZjUwMmU2YWRkNWE5NmI0ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK26EMNkox5qToCgE3q0EdUaSxBe
WJNNxyQgXDWx5z4mMM+u46UErejqhwUKUuFUv1J/6gmmk20EaAQi8gQJzPpXR4V6
VqR9jEwlJD5OVPq6uaty9kG4JpEsDpuDGzmbw2m8Reh1Y7WmvzzFK//CdiJPgSOC
O4E3ONnvtDjPoNvieNcfMrzwko+yOO3P7AAzRdC+zb/oIbM1sJcaMo3fxJtHpf52
vdLZT2/bgPsnMCRrGh2u1xv3mlJBpHsydTDqzVBU6mWzRNAwWS0xOXLYeL6uxjiw
W5ZRVlB0/B4rx8sta55XuvAlJO/CaYMgHIqjeznKJUtASzaSzzDrkHwwdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6x5fsPb2QdTirR9QLmrdWpa01DMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvWHJIbC13OXZaQjFPS3RIMUF1YXQxYWxyVFVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHFkMA0G
CSqGSIb3DQEBCwUAA4IBAQB6DwrTUfN207pVzTYej0Qx4aiRV7dY9eF89t914e1E
o/d73aI7tol3RriBCrl2Sbh6L2jxBGAfevcQf/2kDqWy1NfioVufWaofOlRtQY5a
UkgPOgl25DgdSvZdIS1vwT57DmVrzRx/jQkES/ZdI2cBtub2aK1rwbzk5pdTDBJz
hfatfeoF7vYT+v2eW9WT8fFDtxviisrFgmYdacnk6sd7/Y9b2Km4LShGvMPufNJs
dIy2LsaVj9on1IqvOvB+JGFY4OTQVdLBSyeFcfNWkQ+qZ7x1x+bkFwc7KRgFpMem
HTj+zzp91VgiNBurY78Jbin8XGqQm+7gLq7JEMFN08Tk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org