Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/vkFvDg28i-f_XTUxpeJuNXhdlGA.roa
File: vkFvDg28i-f_XTUxpeJuNXhdlGA.roa (raw, json)
Hash identifier: iIZ42geXSBWfRn7qoOzhBjLCen7syxKxYUzuAAirB8w=
Subject key identifier: BE:41:6F:0E:0D:BC:8B:E7:FF:5D:35:31:A5:E2:6E:35:78:5D:94:60
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 025137F6
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/vkFvDg28i-f_XTUxpeJuNXhdlGA.roa
Signing time: Sat 01 Jan 2022 10:05:28 +0000
ROA not before: Sat 01 Jan 2022 10:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38877174 (0x25137f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 10:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be416f0e0dbc8be7ff5d3531a5e26e35785d9460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:dc:c4:de:dc:66:8f:cd:2e:53:1c:cf:11:
2e:86:df:22:bb:63:c9:dc:a1:4c:df:b5:75:bb:0c:
df:1c:d7:75:b5:a0:f6:06:11:96:8e:d9:34:b8:9a:
1e:bc:4c:51:ae:bc:f9:ad:28:7e:ab:c1:92:e1:4e:
7a:3a:b3:7b:76:f1:80:07:5d:8b:1a:9b:e6:a5:a2:
66:4c:75:ac:6b:ab:db:15:ee:bd:d4:e9:33:80:e4:
db:41:92:71:df:22:de:c1:28:4c:7c:37:d3:fb:75:
66:b9:2b:35:f6:39:5e:dd:d5:d8:1f:5a:ec:aa:87:
80:be:a0:be:cf:12:12:6d:1e:4c:84:4c:d9:23:20:
5a:3a:13:e1:76:c6:b6:8f:56:7f:89:d8:1b:b8:3d:
f1:2b:8c:d7:ef:69:d9:41:04:0d:65:68:d7:e6:ad:
d4:66:e0:4b:25:e8:9b:e6:44:96:fa:a4:7b:be:16:
20:34:81:b9:35:27:d9:ac:aa:34:4f:ed:9a:c4:7b:
0d:28:ef:f1:aa:87:a1:8d:18:1f:8d:be:e4:8f:2d:
48:be:da:a5:8a:02:cf:21:da:cf:93:b4:e2:d3:6e:
2a:43:d9:35:2d:06:79:f2:f6:71:3f:9b:03:21:58:
77:9b:f4:4b:32:fc:da:d5:94:62:c6:3a:77:d3:9c:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:6F:0E:0D:BC:8B:E7:FF:5D:35:31:A5:E2:6E:35:78:5D:94:60
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/vkFvDg28i-f_XTUxpeJuNXhdlGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
59:54:23:8e:6e:51:74:55:e6:5f:15:2f:50:46:e0:db:5d:45:
00:9f:66:76:94:1b:c6:df:9f:bb:85:d4:2c:79:35:22:b9:9a:
6b:ff:c9:75:a5:3f:b1:81:e0:f5:7f:e2:2f:0a:3d:6a:0d:ad:
16:00:b1:48:84:2e:7f:00:36:e8:07:7b:1f:3b:15:d7:2f:f2:
70:c1:01:75:87:fe:d3:20:f1:a5:e0:2b:4f:07:37:45:b8:6f:
b8:e4:df:d0:ac:8f:7d:8a:0b:38:d7:3a:25:4e:dc:f2:a9:37:
8a:2a:5c:9f:04:b8:4d:45:30:6d:49:2e:1a:4e:a4:d6:8c:8a:
f6:fc:68:1f:77:77:a1:de:aa:0d:02:df:ed:a5:14:ee:f0:ef:
8a:5e:10:c2:f6:49:da:59:8b:63:32:39:1d:e9:47:50:8f:e7:
d8:d9:34:ab:7d:77:cc:06:2d:b7:a1:2a:b0:83:a9:bc:03:46:
5b:bc:03:85:c4:d6:e1:d3:19:af:b7:3c:70:39:e0:63:2e:7e:
ee:ca:76:c4:8a:1d:f2:2a:58:b9:8d:15:9a:1d:c8:c1:1e:52:
f8:aa:9a:85:04:7b:a1:c8:19:16:fe:21:44:b6:f7:76:fc:cd:
43:52:d1:62:66:45:7a:34:47:37:7e:cd:6c:15:43:59:c4:87:
ea:9b:4c:3f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAlE39jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Mjk3OGQxZDRlNzc4MjgxNmFjNDJkYTQ3ODhlMzNjYmIyNDg3ODU5MB4XDTIyMDEw
MTEwMDUyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU0MTZmMGUwZGJj
OGJlN2ZmNWQzNTMxYTVlMjZlMzU3ODVkOTQ2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMc/3MTe3GaPzS5THM8RLobfIrtjydyhTN+1dbsM3xzXdbWg
9gYRlo7ZNLiaHrxMUa68+a0ofqvBkuFOejqze3bxgAddixqb5qWiZkx1rGur2xXu
vdTpM4Dk20GScd8i3sEoTHw30/t1ZrkrNfY5Xt3V2B9a7KqHgL6gvs8SEm0eTIRM
2SMgWjoT4XbGto9Wf4nYG7g98SuM1+9p2UEEDWVo1+at1GbgSyXom+ZElvqke74W
IDSBuTUn2ayqNE/tmsR7DSjv8aqHoY0YH42+5I8tSL7apYoCzyHaz5O04tNuKkPZ
NS0GefL2cT+bAyFYd5v0SzL82tWUYsY6d9Oc1U8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS+QW8ODbyL5/9dNTGl4m41eF2UYDAfBgNVHSMEGDAWgBRyl40dTneCgWrE
LaR4jjPLskh4WTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NwZU5IVTUzZ29GcXhDMmtlSTR6eTdKSWVGay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvMjJlOTZmLTI0NTEtNGU4Ni1hMDM3LThkYjYyZWE1MDk5NS8x
L3ZrRnZEZzI4aS1mX1hUVXhwZUp1TlhoZGxHQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
MjJlOTZmLTI0NTEtNGU4Ni1hMDM3LThkYjYyZWE1MDk5NS8xL2NwZU5IVTUzZ29G
cXhDMmtlSTR6eTdKSWVGay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcK06AMEAcK07DANBgkqhkiG9w0B
AQsFAAOCAQEAWVQjjm5RdFXmXxUvUEbg211FAJ9mdpQbxt+fu4XULHk1Irmaa//J
daU/sYHg9X/iLwo9ag2tFgCxSIQufwA26Ad7HzsV1y/ycMEBdYf+0yDxpeArTwc3
RbhvuOTf0KyPfYoLONc6JU7c8qk3iipcnwS4TUUwbUkuGk6k1oyK9vxoH3d3od6q
DQLf7aUU7vDvil4QwvZJ2lmLYzI5HelHUI/n2Nk0q313zAYtt6EqsIOpvANGW7wD
hcTW4dMZr7c8cDngYy5+7sp2xIod8ipYuY0Vmh3IwR5S+KqahQR7ocgZFv4hRLb3
dvzNQ1LRYmZFejRHN37NbBVDWcSH6ptMPw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org