Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/B_RqgYCQbNnc6kSPsoNSPu6sV64.roa
File: B_RqgYCQbNnc6kSPsoNSPu6sV64.roa (raw, json)
Hash identifier: 6AikcHr7gLG+Nvd6Fxd++KWuAEO+LNpZwgg6prJ7+y4=
Subject key identifier: 07:F4:6A:81:80:90:6C:D9:DC:EA:44:8F:B2:83:52:3E:EE:AC:57:AE
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 018789F13F899AEDEDB0D4B21E5B884E3252
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/B_RqgYCQbNnc6kSPsoNSPu6sV64.roa
Signing time: Sun 16 Apr 2023 12:01:41 +0000
ROA not before: Sun 16 Apr 2023 12:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 92.249.24.0/24 maxlen: 24
92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:89:f1:3f:89:9a:ed:ed:b0:d4:b2:1e:5b:88:4e:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Apr 16 12:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f46a8180906cd9dcea448fb283523eeeac57ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:9f:2d:e6:18:4d:bc:9d:f3:4b:b8:36:58:
3f:e3:99:0e:58:08:45:08:31:2e:65:da:3e:82:9e:
2e:9f:8a:83:65:2c:53:2b:49:8f:74:39:dc:a0:0b:
1c:c6:c9:ab:8e:ac:ae:28:bd:20:d9:76:14:a7:0d:
5d:89:a6:66:21:42:1e:e8:c4:5b:d5:44:80:8a:a0:
ba:7f:ef:b2:64:d6:b2:e0:df:c2:37:0c:e7:71:b1:
9e:b9:c0:0f:c5:88:44:de:67:db:85:67:95:23:78:
db:cf:91:ed:f1:47:bf:bd:e6:e3:c3:2e:4a:0e:d8:
97:ba:cf:97:5e:46:d8:99:83:fe:f3:32:17:eb:42:
38:6e:d7:b1:0d:dd:58:f5:84:c5:8b:18:17:e7:8d:
1c:dd:db:87:e5:4f:a7:96:4b:93:a2:bb:c4:d8:eb:
fc:e2:6e:b5:4b:25:cc:f5:c6:74:1d:0a:ca:29:5f:
e4:42:fe:24:0e:d3:15:9b:af:a1:02:8b:91:54:04:
28:7f:c9:88:09:5a:c0:9d:36:fa:ff:3f:d5:98:3e:
24:97:fc:ed:f0:60:76:da:d9:09:4c:a3:dd:55:32:
dc:91:10:3d:cf:7e:a5:b4:e6:b1:0a:04:c0:0b:06:
5b:d7:d9:fe:e8:5f:2b:ee:40:ed:3b:29:04:02:23:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F4:6A:81:80:90:6C:D9:DC:EA:44:8F:B2:83:52:3E:EE:AC:57:AE
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/B_RqgYCQbNnc6kSPsoNSPu6sV64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
92.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:09:30:cd:c8:2d:6e:fb:db:25:3e:28:66:87:60:f3:97:30:
fc:fd:94:43:27:6a:f4:e8:ee:84:56:22:ba:18:07:01:e0:52:
5f:9c:84:ea:96:ea:18:7d:b8:32:12:7a:a9:59:b5:e0:92:b0:
df:aa:c1:76:50:35:59:32:98:1a:4e:80:b8:3e:31:d9:ce:bb:
6e:78:c0:8a:6f:9c:e1:bd:f6:dc:9d:9a:7e:85:da:83:97:8d:
0f:52:1b:31:71:25:8a:03:f5:60:66:8c:0b:91:f9:d3:8b:23:
7d:5f:70:5a:10:90:08:13:6d:48:f3:d3:1d:21:31:9c:98:30:
a6:96:50:9e:ba:54:69:f2:30:df:a8:35:21:bd:4c:a6:9e:9b:
a2:8c:40:7b:3d:68:c1:ca:b4:3f:d8:0a:3b:2a:99:63:c9:13:
bf:4d:53:f4:10:75:93:50:fd:18:eb:35:02:10:05:84:f4:2f:
85:c9:1e:a2:47:49:60:12:a2:f2:96:82:73:77:71:8b:e9:b6:
81:40:ff:7c:10:3f:51:8d:51:be:f6:e7:a6:d6:33:71:83:37:
f8:6a:95:26:eb:3e:9e:d1:99:b6:d1:60:34:b5:85:d0:55:e8:
be:7b:8b:c8:9a:91:ae:13:cf:c4:7a:6a:c5:c9:3a:59:15:b8:
72:1a:ce:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYeJ8T+Jmu3tsNSyHluITjJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjMwNDE2MTIwMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Y0NmE4MTgwOTA2Y2Q5ZGNlYTQ0OGZiMjgzNTIzZWVlYWM1N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAremfLeYYTbyd80u4Nlg/45kOWAhF
CDEuZdo+gp4un4qDZSxTK0mPdDncoAscxsmrjqyuKL0g2XYUpw1diaZmIUIe6MRb
1USAiqC6f++yZNay4N/CNwzncbGeucAPxYhE3mfbhWeVI3jbz5Ht8Ue/vebjwy5K
DtiXus+XXkbYmYP+8zIX60I4btexDd1Y9YTFixgX540c3duH5U+nlkuTorvE2Ov8
4m61SyXM9cZ0HQrKKV/kQv4kDtMVm6+hAouRVAQof8mICVrAnTb6/z/VmD4kl/zt
8GB22tkJTKPdVTLckRA9z36ltOaxCgTACwZb19n+6F8r7kDtOykEAiOWhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAf0aoGAkGzZ3OpEj7KDUj7urFeuMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvQl9ScWdZQ1FiTm5jNmtTUHNvTlNQdTZzVjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXPkYAwQA
XPkbMA0GCSqGSIb3DQEBCwUAA4IBAQCqCTDNyC1u+9slPihmh2DzlzD8/ZRDJ2r0
6O6EViK6GAcB4FJfnITqluoYfbgyEnqpWbXgkrDfqsF2UDVZMpgaToC4PjHZzrtu
eMCKb5zhvfbcnZp+hdqDl40PUhsxcSWKA/VgZowLkfnTiyN9X3BaEJAIE21I89Md
ITGcmDCmllCeulRp8jDfqDUhvUymnpuijEB7PWjByrQ/2Ao7KpljyRO/TVP0EHWT
UP0Y6zUCEAWE9C+FyR6iR0lgEqLyloJzd3GL6baBQP98ED9RjVG+9uem1jNxgzf4
apUm6z6e0Zm20WA0tYXQVei+e4vImpGuE8/EemrFyTpZFbhyGs4H
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org