Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/bMsSCESoHvI-vnFMFADNM17Cqjo.roa
File: bMsSCESoHvI-vnFMFADNM17Cqjo.roa (raw, json)
Hash identifier: W5gMP7GbTSgbUBO4ZF106BxjQf2LQVtMrEM1czUl05Q=
Subject key identifier: 6C:CB:12:08:44:A8:1E:F2:3E:BE:71:4C:14:00:CD:33:5E:C2:AA:3A
Certificate issuer: /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial: 01824A2C2477DDB87E562BB0545C8C29249D
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/bMsSCESoHvI-vnFMFADNM17Cqjo.roa
Signing time: Fri 29 Jul 2022 13:36:23 +0000
ROA not before: Fri 29 Jul 2022 13:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 194.31.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:2c:24:77:dd:b8:7e:56:2b:b0:54:5c:8c:29:24:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Validity
Not Before: Jul 29 13:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ccb120844a81ef23ebe714c1400cd335ec2aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:8a:cd:e1:ab:4e:cd:04:50:71:da:05:11:
73:05:64:e8:38:62:a1:42:00:13:9d:63:46:ce:83:
72:cd:38:3d:78:59:01:38:c6:e4:61:2d:a3:97:ec:
41:b4:b9:1b:46:2f:7d:76:20:d8:ea:f5:b4:bd:b4:
26:0d:91:fc:62:2a:63:f2:c3:e1:86:62:bd:f7:45:
3d:4e:98:91:2d:50:ca:60:73:97:55:f7:78:9b:92:
6b:76:8a:ec:fb:70:91:32:43:3d:c0:4b:57:9c:10:
f2:fb:b7:be:c6:98:6d:4b:0f:af:4b:da:f7:d4:e9:
21:7d:21:8f:2c:dd:54:ff:6e:8c:10:2a:dd:63:69:
8a:02:1e:f0:8e:5f:01:88:df:18:8a:7f:d1:76:0c:
cf:3f:f6:6f:44:8d:33:bc:d3:f9:34:ab:21:b5:e0:
9d:ec:dc:86:b7:b5:fc:22:2e:6a:f9:a0:29:bc:ba:
4e:21:2d:e8:81:8e:fa:93:03:4e:8b:05:a9:12:c6:
e3:ea:ed:ac:e4:22:b2:62:65:fb:de:ed:25:7d:3c:
5a:c3:24:ac:f3:12:6f:4a:19:d3:89:83:42:8e:67:
f8:c1:cd:63:cb:b7:93:f5:08:a8:4f:9f:c9:a3:ba:
d5:67:bd:c1:00:34:0f:30:e3:19:b5:fb:0c:fa:7b:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:12:08:44:A8:1E:F2:3E:BE:71:4C:14:00:CD:33:5E:C2:AA:3A
X509v3 Authority Key Identifier:
keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/bMsSCESoHvI-vnFMFADNM17Cqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:58:12:13:fc:2c:dd:f6:2a:64:88:ce:37:d6:63:02:6e:
5a:aa:69:80:04:ef:45:a5:91:3c:f0:1d:a6:d0:b3:12:23:05:
72:e4:09:89:68:d1:e8:f5:e6:89:5f:f6:93:aa:18:64:6d:28:
a9:41:c0:09:7c:64:83:6e:ea:d1:e6:72:46:47:ce:4b:60:24:
8b:45:9a:a5:94:77:98:73:d7:a2:b6:9a:3b:5e:e2:a0:52:50:
1a:8d:73:7a:03:95:d3:0d:dc:0b:db:3c:26:e9:8e:8b:68:f4:
09:5d:d1:92:15:13:0f:ff:b8:e5:41:ca:99:5f:3e:e6:96:ae:
60:6a:34:d2:04:22:20:01:66:ee:12:7b:27:4f:a1:d2:5d:f1:
2b:db:fb:98:6f:9c:3f:68:86:ec:9c:f0:bb:27:1c:43:37:a7:
aa:2e:a3:e9:fa:24:65:8f:e8:84:0a:66:79:18:36:d4:8c:bd:
41:0a:e8:89:d3:74:9a:ed:a3:de:b4:aa:40:8c:68:34:37:c6:
7c:94:0d:96:4c:4e:0c:b2:d2:c4:67:ec:3c:d1:d4:ef:5b:2f:
c4:d6:85:3c:67:b0:b2:2c:72:b1:46:ce:e6:75:5a:fd:e8:b7:
5a:8c:43:0a:85:bc:ed:97:a6:79:ff:73:40:6c:8f:5e:87:0f:
03:ac:2a:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJKLCR33bh+ViuwVFyMKSSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MWJjYTM5ODYxZjljMzBjNzU3NjE0ODAxZjg2ZDE3ZTVl
YTFlNGIwHhcNMjIwNzI5MTMzNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2NiMTIwODQ0YTgxZWYyM2ViZTcxNGMxNDAwY2QzMzVlYzJhYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRGKzeGrTs0EUHHaBRFzBWToOGKh
QgATnWNGzoNyzTg9eFkBOMbkYS2jl+xBtLkbRi99diDY6vW0vbQmDZH8Yipj8sPh
hmK990U9TpiRLVDKYHOXVfd4m5Jrdors+3CRMkM9wEtXnBDy+7e+xphtSw+vS9r3
1OkhfSGPLN1U/26MECrdY2mKAh7wjl8BiN8Yin/RdgzPP/ZvRI0zvNP5NKshteCd
7NyGt7X8Ii5q+aApvLpOIS3ogY76kwNOiwWpEsbj6u2s5CKyYmX73u0lfTxawySs
8xJvShnTiYNCjmf4wc1jy7eT9QioT5/Jo7rVZ73BADQPMOMZtfsM+nu/xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzLEghEqB7yPr5xTBQAzTNewqo6MB8GA1UdIwQY
MBaAFNQbyjmGH5wwx1dhSAH4bRfl6h5LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJ2S09ZWWZuRERIVjJGSUFmaHRGLVhxSGtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTg2NDItZTM2Zi00YzVjLWE4ZTAt
YTBiNTE0MjQ5YzA2LzEvYk1zU0NFU29Idkktdm5GTUZBRE5NMTdDcWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OTg2NDItZTM2Zi00YzVjLWE4ZTAtYTBiNTE0MjQ5YzA2
LzEvMUJ2S09ZWWZuRERIVjJGSUFmaHRGLVhxSGtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh/NMA0G
CSqGSIb3DQEBCwUAA4IBAQApBlgSE/ws3fYqZIjON9ZjAm5aqmmABO9FpZE88B2m
0LMSIwVy5AmJaNHo9eaJX/aTqhhkbSipQcAJfGSDburR5nJGR85LYCSLRZqllHeY
c9eitpo7XuKgUlAajXN6A5XTDdwL2zwm6Y6LaPQJXdGSFRMP/7jlQcqZXz7mlq5g
ajTSBCIgAWbuEnsnT6HSXfEr2/uYb5w/aIbsnPC7JxxDN6eqLqPp+iRlj+iECmZ5
GDbUjL1BCuiJ03Sa7aPetKpAjGg0N8Z8lA2WTE4MstLEZ+w80dTvWy/E1oU8Z7Cy
LHKxRs7mdVr96LdajEMKhbztl6Z5/3NAbI9ehw8DrCqr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:17 2025 by rpki-client