Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/ZDz0U-wPMqdO9KoSDJqCFE3jq_o.roa
File: ZDz0U-wPMqdO9KoSDJqCFE3jq_o.roa (raw, json)
Hash identifier: LMuJkAQyGhOiJf5mU84Os2KtLo1rHUimMMkc5MdjSAw=
Subject key identifier: 64:3C:F4:53:EC:0F:32:A7:4E:F4:AA:12:0C:9A:82:14:4D:E3:AB:FA
Certificate issuer: /CN=f06603f0282ed590135f33645f55f2b62c298e3c
Certificate serial: 01882086B7FF105718296767F5054136F2DF
Authority key identifier: F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/ZDz0U-wPMqdO9KoSDJqCFE3jq_o.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 94.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b7:ff:10:57:18:29:67:67:f5:05:41:36:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06603f0282ed590135f33645f55f2b62c298e3c
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643cf453ec0f32a74ef4aa120c9a82144de3abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:74:3c:2a:eb:27:79:b7:23:45:44:4a:9e:
7c:6c:96:44:2f:04:f5:5c:36:a4:2c:67:31:57:65:
61:1b:50:32:a4:5c:19:48:8c:35:f2:be:d5:96:ae:
ef:f6:8c:bc:90:5c:0f:8f:1c:49:c5:8a:c8:25:db:
73:b6:3f:7f:59:04:6b:af:cf:c6:30:aa:d3:bf:05:
1e:9a:1e:b5:47:8e:d0:22:df:37:1f:ca:69:90:ec:
98:ed:18:98:51:cf:b8:65:1b:6e:c4:bd:db:62:40:
88:3e:68:05:c5:1e:7a:f1:bc:62:c1:a9:17:38:90:
c4:e4:67:0a:65:66:a7:ca:09:87:c9:fd:c2:c1:ed:
29:24:a7:51:aa:62:38:43:e9:56:0c:39:2f:27:33:
67:66:61:c4:0f:90:cf:aa:f2:01:86:b6:20:4c:81:
84:dd:4a:cb:0c:03:f2:68:ad:03:ab:d7:77:52:c4:
28:a0:cc:07:e7:2d:83:fa:9f:ce:36:92:f8:50:c5:
b2:e1:a2:b5:81:1e:3f:9f:fd:37:87:58:5b:d0:1f:
31:a5:4f:26:22:86:9c:b6:58:c9:91:4e:e4:bb:27:
05:a4:8a:51:17:fb:04:41:23:f7:ab:40:67:c6:19:
3c:aa:ed:06:e1:e8:4f:59:cc:c7:04:7b:75:82:cc:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:F4:53:EC:0F:32:A7:4E:F4:AA:12:0C:9A:82:14:4D:E3:AB:FA
X509v3 Authority Key Identifier:
keyid:F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/ZDz0U-wPMqdO9KoSDJqCFE3jq_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.126.0/24
Signature Algorithm: sha256WithRSAEncryption
46:73:6d:d8:44:ac:0e:05:83:ae:06:f4:bb:e8:da:dc:9e:7c:
61:69:9c:ee:a4:cd:0b:6b:69:78:b1:b9:54:70:10:7c:c6:36:
50:9b:5f:fd:f3:4a:79:32:38:58:c6:a2:96:3e:82:33:27:8f:
4d:b6:01:64:b2:0f:75:7d:29:85:d9:54:9d:b7:e1:09:9e:db:
79:49:30:ee:d2:ec:cd:5c:9d:b9:ac:4a:34:2e:ba:c6:c6:61:
5e:0d:b5:db:b5:88:e6:2d:d4:00:02:7e:d5:c6:21:7c:b4:0e:
7d:c6:42:af:c5:9d:1d:0c:2f:b0:36:8a:d9:78:30:ac:73:b1:
63:99:54:20:c1:3f:de:30:dd:4b:9c:e8:1f:3c:66:05:3e:fc:
0f:8c:1a:eb:18:54:0f:95:8a:74:00:a2:2b:60:ff:a8:c3:09:
ea:9f:ce:9c:7d:26:bb:d6:08:01:4b:ed:0f:ca:07:37:03:a2:
ac:86:22:56:b0:27:7f:ce:b5:db:53:d4:3a:cb:c2:c1:7b:2c:
88:f3:a8:52:e4:72:fd:1c:95:24:42:3c:fb:c1:df:92:46:c6:
a9:8a:a5:d7:04:12:33:29:0c:05:71:7c:d3:51:63:62:b9:e7:
9f:88:cb:f7:bb:78:67:77:a8:7d:e1:4b:3c:37:d6:43:65:96:
d6:d5:89:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrf/EFcYKWdn9QVBNvLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjYwM2YwMjgyZWQ1OTAxMzVmMzM2NDVmNTVmMmI2MmMy
OThlM2MwHhcNMjMwNTE1MTc0NzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNjZjQ1M2VjMGYzMmE3NGVmNGFhMTIwYzlhODIxNDRkZTNhYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs350PCrrJ3m3I0VESp58bJZELwT1
XDakLGcxV2VhG1AypFwZSIw18r7Vlq7v9oy8kFwPjxxJxYrIJdtztj9/WQRrr8/G
MKrTvwUemh61R47QIt83H8ppkOyY7RiYUc+4ZRtuxL3bYkCIPmgFxR568bxiwakX
OJDE5GcKZWanygmHyf3Cwe0pJKdRqmI4Q+lWDDkvJzNnZmHED5DPqvIBhrYgTIGE
3UrLDAPyaK0Dq9d3UsQooMwH5y2D+p/ONpL4UMWy4aK1gR4/n/03h1hb0B8xpU8m
IoactljJkU7kuycFpIpRF/sEQSP3q0Bnxhk8qu0G4ehPWczHBHt1gswcGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQ89FPsDzKnTvSqEgyaghRN46v6MB8GA1UdIwQY
MBaAFPBmA/AoLtWQE18zZF9V8rYsKY48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdZRDhDZ3UxWkFUWHpOa1gxWHl0aXdwamp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ZWMxYTktNDRlMi00MzZkLWJhY2Yt
MTk3YWJlZDRkMTZhLzEvWkR6MFUtd1BNcWRPOUtvU0RKcUNGRTNqcV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81ZWMxYTktNDRlMi00MzZkLWJhY2YtMTk3YWJlZDRkMTZh
LzEvOEdZRDhDZ3UxWkFUWHpOa1gxWHl0aXdwamp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp+MA0G
CSqGSIb3DQEBCwUAA4IBAQBGc23YRKwOBYOuBvS76NrcnnxhaZzupM0La2l4sblU
cBB8xjZQm1/980p5MjhYxqKWPoIzJ49NtgFksg91fSmF2VSdt+EJntt5STDu0uzN
XJ25rEo0LrrGxmFeDbXbtYjmLdQAAn7VxiF8tA59xkKvxZ0dDC+wNorZeDCsc7Fj
mVQgwT/eMN1LnOgfPGYFPvwPjBrrGFQPlYp0AKIrYP+owwnqn86cfSa71ggBS+0P
ygc3A6KshiJWsCd/zrXbU9Q6y8LBeyyI86hS5HL9HJUkQjz7wd+SRsapiqXXBBIz
KQwFcXzTUWNiueefiMv3u3hnd6h94Us8N9ZDZZbW1Ykq
-----END CERTIFICATE-----
Generated at Tue Oct 31 15:52:34 2023 by rpki-client on console-ams.rpki-client.org