Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/S7yUbp2tw9UCT9wgpyRiliyPzJk.roa
File: S7yUbp2tw9UCT9wgpyRiliyPzJk.roa (raw, json)
Hash identifier: Nj+igM0jCx8u3AXbjyqz1I8qlFFsHxRRr77iRSPQyQU=
Subject key identifier: 4B:BC:94:6E:9D:AD:C3:D5:02:4F:DC:20:A7:24:62:96:2C:8F:CC:99
Certificate issuer: /CN=fde2dad864434ef5b4c5d453d2d53b3b66adde6f
Certificate serial: 01870E16C9529CC00FFC85BAB3F577A54035
Authority key identifier: FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eLa2GRDTvW0xdRT0tU7O2at3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/S7yUbp2tw9UCT9wgpyRiliyPzJk.roa
Signing time: Thu 23 Mar 2023 10:49:46 +0000
ROA not before: Thu 23 Mar 2023 10:49:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 80.71.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:16:c9:52:9c:c0:0f:fc:85:ba:b3:f5:77:a5:40:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde2dad864434ef5b4c5d453d2d53b3b66adde6f
Validity
Not Before: Mar 23 10:49:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbc946e9dadc3d5024fdc20a72462962c8fcc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:da:fe:c0:ea:f8:3b:f5:91:5f:95:f5:c5:
97:2a:f8:47:65:5e:51:e7:da:ad:9f:52:2b:72:10:
9a:63:9b:19:1c:0a:2d:10:c7:08:3d:30:13:fe:1b:
9c:57:33:e3:4f:53:28:d1:06:d9:af:c4:8d:50:66:
73:0d:d1:81:82:ff:de:70:15:77:e4:07:a7:4e:ee:
3f:f4:76:d3:cf:97:b3:3a:e6:b0:53:5c:46:f2:8d:
57:25:d1:3c:bd:8c:b3:64:ee:cd:aa:49:a5:46:ee:
30:25:b5:65:a6:d5:fc:2f:d9:68:d2:26:d8:b8:c8:
27:15:4d:1b:66:22:25:4e:cc:e1:cb:85:78:ac:e0:
d6:dd:cd:49:39:14:6c:47:1e:3b:5c:64:c7:32:d2:
22:7e:da:a5:4d:ae:0c:97:41:23:c8:0e:93:b0:09:
43:32:68:37:f2:d3:f7:b8:77:a0:76:69:ec:ef:8a:
5e:f4:16:c3:13:a2:00:90:7c:64:b1:d1:70:1d:13:
1e:f7:d1:ec:17:38:4d:df:15:51:9f:08:e5:a1:c1:
86:65:42:1e:4f:e8:c0:c3:51:59:b5:12:22:02:16:
0e:67:56:5b:56:d9:a5:3a:c6:0e:b7:22:5b:36:c4:
cd:15:5e:8c:a8:60:4c:df:f0:0c:51:a1:6d:a8:ef:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:94:6E:9D:AD:C3:D5:02:4F:DC:20:A7:24:62:96:2C:8F:CC:99
X509v3 Authority Key Identifier:
keyid:FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eLa2GRDTvW0xdRT0tU7O2at3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/S7yUbp2tw9UCT9wgpyRiliyPzJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/_eLa2GRDTvW0xdRT0tU7O2at3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.157.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ce:84:b1:91:6f:e8:54:6a:81:c7:c3:78:79:1a:c4:c0:13:
77:c3:1c:15:8e:33:5b:ef:30:17:0d:cb:81:13:bc:e3:f7:a2:
d5:6c:54:3e:a2:49:91:65:77:60:74:30:2c:56:91:a0:34:4c:
b0:ff:5c:42:be:b4:2b:ad:67:09:d1:91:7a:f1:a6:38:50:3a:
24:47:bb:c9:26:35:13:74:e9:88:7f:b1:ae:41:c6:82:13:54:
28:67:18:60:90:4d:42:54:b3:05:3b:22:74:75:4d:83:c8:6f:
c3:32:fc:c2:8c:db:91:58:8d:6c:ca:f8:95:55:28:0b:27:0c:
36:a7:56:0d:1d:7b:0e:d3:c8:f8:68:d1:fd:44:89:04:4c:de:
a2:9d:82:ef:19:c8:96:69:b8:ce:50:0d:5f:2a:a3:41:88:2d:
08:7a:06:83:da:03:98:f6:8c:e3:3d:9d:48:49:0d:c8:4e:c2:
e8:b2:83:7b:86:05:eb:3f:6c:ca:51:e4:46:36:12:fd:63:2b:
08:e2:ec:4b:19:d6:62:11:8f:92:37:c6:80:57:0c:da:ba:5d:
44:f1:48:b7:74:b1:7f:84:ff:4e:22:dc:3a:af:40:d1:a2:89:
3f:18:37:ec:a7:01:a9:19:f0:75:ab:23:f2:85:2b:37:2c:ac:
1d:18:e0:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcOFslSnMAP/IW6s/V3pUA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTJkYWQ4NjQ0MzRlZjViNGM1ZDQ1M2QyZDUzYjNiNjZh
ZGRlNmYwHhcNMjMwMzIzMTA0OTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmJjOTQ2ZTlkYWRjM2Q1MDI0ZmRjMjBhNzI0NjI5NjJjOGZjYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLa/sDq+Dv1kV+V9cWXKvhHZV5R
59qtn1IrchCaY5sZHAotEMcIPTAT/hucVzPjT1Mo0QbZr8SNUGZzDdGBgv/ecBV3
5AenTu4/9HbTz5ezOuawU1xG8o1XJdE8vYyzZO7NqkmlRu4wJbVlptX8L9lo0ibY
uMgnFU0bZiIlTszhy4V4rODW3c1JORRsRx47XGTHMtIiftqlTa4Ml0EjyA6TsAlD
Mmg38tP3uHegdmns74pe9BbDE6IAkHxksdFwHRMe99HsFzhN3xVRnwjlocGGZUIe
T+jAw1FZtRIiAhYOZ1ZbVtmlOsYOtyJbNsTNFV6MqGBM3/AMUaFtqO8sowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEu8lG6drcPVAk/cIKckYpYsj8yZMB8GA1UdIwQY
MBaAFP3i2thkQ071tMXUU9LVOztmrd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VMYTJHUkRUdlcweGRSVDB0VTdPMmF0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81YjM4YjUtMTVlNi00ZGNhLTgxNmIt
ODQ2N2VjNDk5YTcyLzEvUzd5VWJwMnR3OVVDVDl3Z3B5UmlsaXlQekprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC81YjM4YjUtMTVlNi00ZGNhLTgxNmItODQ2N2VjNDk5YTcy
LzEvX2VMYTJHUkRUdlcweGRSVDB0VTdPMmF0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEedMA0G
CSqGSIb3DQEBCwUAA4IBAQC+zoSxkW/oVGqBx8N4eRrEwBN3wxwVjjNb7zAXDcuB
E7zj96LVbFQ+okmRZXdgdDAsVpGgNEyw/1xCvrQrrWcJ0ZF68aY4UDokR7vJJjUT
dOmIf7GuQcaCE1QoZxhgkE1CVLMFOyJ0dU2DyG/DMvzCjNuRWI1syviVVSgLJww2
p1YNHXsO08j4aNH9RIkETN6inYLvGciWabjOUA1fKqNBiC0IegaD2gOY9ozjPZ1I
SQ3ITsLosoN7hgXrP2zKUeRGNhL9YysI4uxLGdZiEY+SN8aAVwzaul1E8Ui3dLF/
hP9OItw6r0DRook/GDfspwGpGfB1qyPyhSs3LKwdGOAX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org