Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/lK1G-vRZthZXlSSg8v7F1pncbsQ.roa
File: lK1G-vRZthZXlSSg8v7F1pncbsQ.roa (raw, json)
Hash identifier: 7r1HvzecuOxR229SoXu+Ir5lrJ24IPz46m1knwld6yI=
Subject key identifier: 94:AD:46:FA:F4:59:B6:16:57:95:24:A0:F2:FE:C5:D6:99:DC:6E:C4
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 01857082B83051269FDDB945697429136613
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/lK1G-vRZthZXlSSg8v7F1pncbsQ.roa
Signing time: Mon 02 Jan 2023 03:24:52 +0000
ROA not before: Mon 02 Jan 2023 03:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62456
IP address blocks: 92.249.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b8:30:51:26:9f:dd:b9:45:69:74:29:13:66:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 2 03:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ad46faf459b616579524a0f2fec5d699dc6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:2e:10:0c:50:8b:be:22:db:42:2f:18:28:
d1:df:86:b5:70:52:b3:2e:9e:a2:8b:00:97:fa:d9:
8d:46:da:57:e1:f1:3d:24:52:38:df:1c:8f:92:26:
ff:a7:cc:82:93:17:6d:b4:1e:f2:13:9d:33:91:b2:
ab:de:45:e4:fe:4d:3f:20:ac:13:d5:64:07:ab:19:
5e:c5:1e:ce:5b:f5:b0:87:d0:5f:ba:7d:0d:af:e8:
64:bd:b9:64:6c:d4:58:51:8b:ad:6d:cf:9d:ba:bd:
4e:ca:ed:53:02:f1:5e:24:6e:fc:64:ff:88:bd:9a:
66:6d:7e:6c:f1:89:6e:10:52:43:1b:2c:fd:b5:35:
0b:bc:ee:cc:86:9c:df:8f:62:22:e9:a8:cf:bb:fe:
7d:20:f9:41:a5:df:dd:5c:aa:9c:7d:df:52:e3:2b:
e2:67:ec:18:91:df:9d:42:dc:ef:d0:16:78:fc:ae:
66:df:d2:c8:9f:6e:8c:5e:5f:a1:c5:c1:5a:9b:b8:
c5:08:2c:95:5a:bf:1f:ce:26:20:14:0c:54:8c:d1:
95:e3:b6:8b:4d:03:c0:4e:e3:b1:29:4b:37:47:08:
f7:38:cc:7e:ca:3f:7d:84:f5:d0:22:e1:ce:b2:10:
df:7f:1f:82:a3:32:c6:3b:db:3d:42:10:32:ea:d4:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:46:FA:F4:59:B6:16:57:95:24:A0:F2:FE:C5:D6:99:DC:6E:C4
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/lK1G-vRZthZXlSSg8v7F1pncbsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3f:19:13:10:a9:40:39:e8:bc:b4:95:61:b5:57:79:ba:b2:
6a:42:c4:ab:2e:0b:32:7c:29:11:37:f5:5a:9d:4a:77:96:ac:
d6:8d:f1:5c:e8:13:0e:69:c8:d9:5a:f3:a8:e9:dd:aa:9e:9b:
54:dd:bd:1d:1b:2c:9f:71:67:51:f7:26:f3:01:2b:34:9a:1c:
c8:d3:61:a9:ad:ad:2a:6c:e3:1e:90:83:be:ca:8f:49:c5:ac:
c3:16:c3:c1:bb:30:82:01:99:cd:6f:3f:8e:e2:cc:d1:01:da:
06:41:93:57:44:9d:ca:02:ad:3e:08:7b:b3:73:cd:d2:b2:ae:
df:54:a4:7d:c2:80:84:d1:f0:85:e5:c3:3d:f5:be:25:19:ac:
45:e4:2a:98:fc:35:95:6d:0e:53:e1:95:6c:6b:1b:c3:29:2b:
8d:41:6e:85:c7:2a:36:60:8f:00:6c:0d:af:6d:b8:df:80:a7:
e2:de:8f:2d:61:aa:15:fe:3d:f0:32:58:5b:37:0a:e9:1a:3a:
fd:35:6e:45:25:c8:20:2a:30:27:66:27:ce:1a:11:15:3c:2d:
f3:00:ba:09:59:86:69:79:03:72:06:54:b3:64:86:db:c1:78:
0e:45:54:79:c1:a0:84:66:75:9c:8f:2b:2f:84:3f:e5:84:9a:
8c:4a:b0:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgrgwUSaf3blFaXQpE2YTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjMwMTAyMDMyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGFkNDZmYWY0NTliNjE2NTc5NTI0YTBmMmZlYzVkNjk5ZGM2ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVcuEAxQi74i20IvGCjR34a1cFKz
Lp6iiwCX+tmNRtpX4fE9JFI43xyPkib/p8yCkxdttB7yE50zkbKr3kXk/k0/IKwT
1WQHqxlexR7OW/Wwh9Bfun0Nr+hkvblkbNRYUYutbc+dur1Oyu1TAvFeJG78ZP+I
vZpmbX5s8YluEFJDGyz9tTULvO7Mhpzfj2Ii6ajPu/59IPlBpd/dXKqcfd9S4yvi
Z+wYkd+dQtzv0BZ4/K5m39LIn26MXl+hxcFam7jFCCyVWr8fziYgFAxUjNGV47aL
TQPATuOxKUs3Rwj3OMx+yj99hPXQIuHOshDffx+CozLGO9s9QhAy6tSUyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJStRvr0WbYWV5UkoPL+xdaZ3G7EMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvbEsxRy12Ulp0aFpYbFNTZzh2N0YxcG5jYnNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkZMA0G
CSqGSIb3DQEBCwUAA4IBAQAOPxkTEKlAOei8tJVhtVd5urJqQsSrLgsyfCkRN/Va
nUp3lqzWjfFc6BMOacjZWvOo6d2qnptU3b0dGyyfcWdR9ybzASs0mhzI02Gpra0q
bOMekIO+yo9JxazDFsPBuzCCAZnNbz+O4szRAdoGQZNXRJ3KAq0+CHuzc83Ssq7f
VKR9woCE0fCF5cM99b4lGaxF5CqY/DWVbQ5T4ZVsaxvDKSuNQW6Fxyo2YI8AbA2v
bbjfgKfi3o8tYaoV/j3wMlhbNwrpGjr9NW5FJcggKjAnZifOGhEVPC3zALoJWYZp
eQNyBlSzZIbbwXgORVR5waCEZnWcjysvhD/lhJqMSrBR
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org