Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/YfiF3fUoIN75FuBF6WQxQzZOu50.roa
File: YfiF3fUoIN75FuBF6WQxQzZOu50.roa (raw, json)
Hash identifier: GvSacuFMv0zvm8IIhOECGlpgt9VtpSWPQzmA6KmjyZI=
Subject key identifier: 61:F8:85:DD:F5:28:20:DE:F9:16:E0:45:E9:64:31:43:36:4E:BB:9D
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 0184AB64F513E4A2E34FA94E24623C30CDC9
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/YfiF3fUoIN75FuBF6WQxQzZOu50.roa
Signing time: Thu 24 Nov 2022 20:47:11 +0000
ROA not before: Thu 24 Nov 2022 20:47:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 92.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:64:f5:13:e4:a2:e3:4f:a9:4e:24:62:3c:30:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Nov 24 20:47:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61f885ddf52820def916e045e9643143364ebb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:44:1c:f3:0e:61:0b:65:22:c2:87:f1:a7:
9d:2a:cc:91:9f:d0:67:c7:2b:d6:16:3b:d9:4d:49:
20:8e:19:9c:71:6f:2e:d4:90:78:c4:34:7f:93:c0:
2c:b8:60:05:a8:18:56:cf:8a:50:08:e4:eb:43:45:
de:f4:a5:1b:f6:a8:53:c0:5d:ef:0f:a6:07:eb:02:
4b:ff:3d:f2:dc:3e:ce:a6:09:09:07:83:31:ef:27:
c4:1d:62:02:de:56:38:84:bb:42:47:ff:06:8f:04:
18:7e:8c:b4:10:4c:20:24:e6:43:40:4b:aa:dd:4a:
0d:b6:bd:4e:6b:19:11:15:36:1d:12:83:ef:6a:14:
c9:7e:0d:1e:bf:21:7e:bb:c1:92:29:5b:4e:f9:f4:
c2:e1:d5:3b:09:eb:08:d8:c8:f4:24:1e:75:ec:58:
d5:f7:7c:4e:19:b4:bf:7d:9e:b1:5e:57:a6:73:e7:
ca:e2:9b:b8:bc:d7:4b:0b:19:a0:63:8f:cb:50:80:
24:fb:55:85:a9:5a:6c:2d:8e:16:c7:ae:5b:d3:86:
99:14:04:09:61:d6:11:92:e5:ca:c1:9a:17:75:25:
a4:39:c8:a3:5e:b2:57:83:6f:35:8a:7e:7a:d6:2f:
d3:02:31:db:43:62:06:14:01:60:f6:4e:45:9c:0e:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:85:DD:F5:28:20:DE:F9:16:E0:45:E9:64:31:43:36:4E:BB:9D
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/YfiF3fUoIN75FuBF6WQxQzZOu50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ee:84:e7:69:0b:9f:b8:83:f9:2e:f5:68:08:5e:41:a1:3b:
f3:c2:63:fb:e7:41:b1:58:96:21:51:5a:cd:d4:32:3a:4e:84:
a0:d9:cb:a2:34:14:8b:6f:7e:bc:9d:95:2a:d0:ee:46:cf:3c:
0d:62:27:05:3d:94:b3:1c:02:f7:bb:b9:8a:ed:38:b4:e0:dd:
35:19:ed:c3:c4:59:6b:ee:56:f0:bb:54:33:28:78:d7:e4:40:
d4:e4:ef:d4:36:c0:a1:53:e5:35:b1:a5:2b:f7:f8:75:8d:af:
eb:bb:f9:91:b8:99:3c:00:84:bb:15:eb:ab:52:0e:83:24:42:
79:fc:f5:a0:39:f7:dd:4a:57:51:40:8a:9c:fe:df:1d:1c:6d:
03:f7:90:26:ef:c1:ef:87:c2:63:77:af:37:0b:5a:e1:2d:0c:
f0:b9:06:1a:cd:51:05:51:76:20:bc:ff:d6:d8:d0:23:7f:77:
1b:4f:2c:f5:10:31:82:cc:df:2f:9f:65:e5:69:14:49:e4:0c:
01:6b:70:64:eb:ac:a5:6a:a9:75:6d:39:61:df:2d:a5:e7:8e:
37:6f:de:35:18:7f:ac:08:d7:e3:c8:26:2b:b3:29:d0:14:88:
95:72:3d:26:14:ad:7f:fc:b1:46:49:46:bd:d2:0a:2d:4a:ce:
bf:6b:5a:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSrZPUT5KLjT6lOJGI8MM3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjIxMTI0MjA0NzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWY4ODVkZGY1MjgyMGRlZjkxNmUwNDVlOTY0MzE0MzM2NGViYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDlEHPMOYQtlIsKH8aedKsyRn9Bn
xyvWFjvZTUkgjhmccW8u1JB4xDR/k8AsuGAFqBhWz4pQCOTrQ0Xe9KUb9qhTwF3v
D6YH6wJL/z3y3D7OpgkJB4Mx7yfEHWIC3lY4hLtCR/8GjwQYfoy0EEwgJOZDQEuq
3UoNtr1OaxkRFTYdEoPvahTJfg0evyF+u8GSKVtO+fTC4dU7CesI2Mj0JB517FjV
93xOGbS/fZ6xXlemc+fK4pu4vNdLCxmgY4/LUIAk+1WFqVpsLY4Wx65b04aZFAQJ
YdYRkuXKwZoXdSWkOcijXrJXg281in561i/TAjHbQ2IGFAFg9k5FnA7lnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGH4hd31KCDe+RbgRelkMUM2TrudMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvWWZpRjNmVW9JTjc1RnVCRjZXUXhRelpPdTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkYMA0G
CSqGSIb3DQEBCwUAA4IBAQAA7oTnaQufuIP5LvVoCF5BoTvzwmP750GxWJYhUVrN
1DI6ToSg2cuiNBSLb368nZUq0O5GzzwNYicFPZSzHAL3u7mK7Ti04N01Ge3DxFlr
7lbwu1QzKHjX5EDU5O/UNsChU+U1saUr9/h1ja/ru/mRuJk8AIS7FeurUg6DJEJ5
/PWgOffdSldRQIqc/t8dHG0D95Am78Hvh8Jjd683C1rhLQzwuQYazVEFUXYgvP/W
2NAjf3cbTyz1EDGCzN8vn2XlaRRJ5AwBa3Bk66ylaql1bTlh3y2l5443b941GH+s
CNfjyCYrsynQFIiVcj0mFK1//LFGSUa90gotSs6/a1rB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org