Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/9T50zaBcAbCW6xQ9BgoLZj1jjkA.roa
File: 9T50zaBcAbCW6xQ9BgoLZj1jjkA.roa (raw, json)
Hash identifier: 8mAIGBquDjTcwW3M4f+ygviVCzJUOU/evynQ0xqPlkk=
Subject key identifier: F5:3E:74:CD:A0:5C:01:B0:96:EB:14:3D:06:0A:0B:66:3D:63:8E:40
Certificate issuer: /CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Certificate serial: 01882086B37EFD0B5BB1695FE12EE4670EBB
Authority key identifier: C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/9T50zaBcAbCW6xQ9BgoLZj1jjkA.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 46.254.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:7e:fd:0b:5b:b1:69:5f:e1:2e:e4:67:0e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53e74cda05c01b096eb143d060a0b663d638e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:d7:7a:7f:45:16:23:04:fb:01:15:bd:b9:
ef:05:38:16:af:76:3c:50:e9:4c:04:52:00:93:af:
25:dc:7b:c6:62:3c:d6:29:cf:b0:dc:71:af:f3:ef:
fb:b9:70:80:51:fb:61:7b:eb:a9:5a:f1:c2:c0:95:
96:ad:2c:dd:c9:7e:ee:60:22:01:e6:58:d8:00:d9:
5f:95:7a:ac:b1:84:64:45:0b:7b:16:f5:3a:0f:0f:
41:80:8a:e7:27:eb:5b:31:d2:d3:b7:cd:4f:d1:e9:
43:1b:e7:47:80:80:80:8e:70:f7:b0:38:98:68:1b:
22:6e:53:b2:4f:5e:47:9f:17:7d:1f:d9:4a:37:8f:
4b:a3:90:6d:3e:7b:a0:d5:18:42:7c:6f:50:13:5a:
4b:7d:4a:91:37:c1:60:b6:11:d8:fa:0a:d3:5f:0c:
0e:dc:05:b1:01:8f:fb:45:5c:e2:00:e1:29:28:c5:
da:48:09:76:29:bd:68:73:47:8c:4a:f6:bf:b7:eb:
a0:09:ff:d0:c6:81:3b:27:da:02:e3:3c:bc:b1:e2:
74:50:4c:75:bd:9e:91:23:1b:39:c2:2e:9f:1f:37:
2e:cf:7b:bd:9b:a0:e2:a2:f8:1f:c0:18:da:8b:fc:
cc:91:f4:78:34:62:b8:ed:dc:b5:83:72:8f:9a:1b:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:74:CD:A0:5C:01:B0:96:EB:14:3D:06:0A:0B:66:3D:63:8E:40
X509v3 Authority Key Identifier:
keyid:C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/9T50zaBcAbCW6xQ9BgoLZj1jjkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/xCMr1SONxAENHFKSnd6k8jwEJXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fd:18:80:7e:fc:7b:9c:ae:27:db:29:7b:13:cd:f4:2f:9c:
0d:9f:e6:0b:f8:4c:3b:e1:a8:ea:01:d8:30:09:9e:7a:d8:39:
96:3c:dc:d4:8d:16:50:71:5b:02:a3:37:c2:8c:2a:08:2f:6d:
b1:cf:11:53:4a:46:3a:69:9b:44:81:59:be:1b:dd:ef:fb:02:
79:00:fc:ab:29:d5:9e:c9:b5:43:17:c5:aa:9c:f6:cc:71:03:
83:79:e0:56:29:06:b9:81:45:26:51:ac:0a:1e:b7:42:f5:15:
19:3b:6e:6d:f8:04:9f:0e:55:6c:17:c8:5b:ef:d1:80:20:5f:
c8:13:81:b3:ec:26:89:fc:fa:4a:a0:96:27:d2:e3:14:19:36:
ee:0e:d1:41:ca:33:81:5d:15:dc:9a:33:32:13:82:66:10:c4:
75:e3:ed:21:b2:ef:a0:21:91:2d:e6:7e:a8:ae:5f:fb:9e:59:
5f:0e:39:f2:8a:33:92:51:66:7f:7e:d7:4a:71:8b:c9:dc:9e:
03:bc:a8:17:3f:c9:95:41:84:97:36:31:f3:3d:c9:b0:ff:85:
51:86:45:f3:2a:38:b2:5b:d4:92:68:58:7b:f1:1e:da:57:1d:
63:a3:88:e4:a7:c4:2d:7d:22:2f:8a:13:d5:b8:34:0b:64:8b:
12:8f:8a:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrN+/QtbsWlf4S7kZw67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjMyYmQ1MjM4ZGM0MDEwZDFjNTI5MjlkZGVhNGYyM2Mw
NDI1NzQwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTNlNzRjZGEwNWMwMWIwOTZlYjE0M2QwNjBhMGI2NjNkNjM4ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvrXen9FFiME+wEVvbnvBTgWr3Y8
UOlMBFIAk68l3HvGYjzWKc+w3HGv8+/7uXCAUfthe+upWvHCwJWWrSzdyX7uYCIB
5ljYANlflXqssYRkRQt7FvU6Dw9BgIrnJ+tbMdLTt81P0elDG+dHgICAjnD3sDiY
aBsiblOyT15Hnxd9H9lKN49Lo5BtPnug1RhCfG9QE1pLfUqRN8FgthHY+grTXwwO
3AWxAY/7RVziAOEpKMXaSAl2Kb1oc0eMSva/t+ugCf/QxoE7J9oC4zy8seJ0UEx1
vZ6RIxs5wi6fHzcuz3u9m6DiovgfwBjai/zMkfR4NGK47dy1g3KPmht1mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPU+dM2gXAGwlusUPQYKC2Y9Y45AMB8GA1UdIwQY
MBaAFMQjK9UjjcQBDRxSkp3epPI8BCV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENNcjFTT054QUVOSEZLU25kNms4andFSlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNDJhZTctNWY2NC00MDM5LWEwNTEt
NDAzYjg1N2JmOGI3LzEvOVQ1MHphQmNBYkNXNnhROUJnb0xaajFqamtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNDJhZTctNWY2NC00MDM5LWEwNTEtNDAzYjg1N2JmOGI3
LzEveENNcjFTT054QUVOSEZLU25kNms4andFSlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5sMA0G
CSqGSIb3DQEBCwUAA4IBAQB4/RiAfvx7nK4n2yl7E830L5wNn+YL+Ew74ajqAdgw
CZ562DmWPNzUjRZQcVsCozfCjCoIL22xzxFTSkY6aZtEgVm+G93v+wJ5APyrKdWe
ybVDF8WqnPbMcQODeeBWKQa5gUUmUawKHrdC9RUZO25t+ASfDlVsF8hb79GAIF/I
E4Gz7CaJ/PpKoJYn0uMUGTbuDtFByjOBXRXcmjMyE4JmEMR14+0hsu+gIZEt5n6o
rl/7nllfDjnyijOSUWZ/ftdKcYvJ3J4DvKgXP8mVQYSXNjHzPcmw/4VRhkXzKjiy
W9SSaFh78R7aVx1jo4jkp8QtfSIvihPVuDQLZIsSj4oI
-----END CERTIFICATE-----
Generated at Tue Aug 8 10:16:47 2023 by rpki-client on console-fra.rpki-client.org