Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/851584_aYQGNaSTO8lw3-vOUZ0E.roa
File: 851584_aYQGNaSTO8lw3-vOUZ0E.roa (raw, json)
Hash identifier: +yNBHP5inv9dTFL8ferGLOPOP0HhJnUAp8bO76KGqOY=
Subject key identifier: F3:9D:79:F3:8F:DA:61:01:8D:69:24:CE:F2:5C:37:FA:F3:94:67:41
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 01856F4B6B7716E28FF1C4E1B1420B501C7D
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/851584_aYQGNaSTO8lw3-vOUZ0E.roa
Signing time: Sun 01 Jan 2023 21:44:51 +0000
ROA not before: Sun 01 Jan 2023 21:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6b:77:16:e2:8f:f1:c4:e1:b1:42:0b:50:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Jan 1 21:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f39d79f38fda61018d6924cef25c37faf3946741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:54:c3:48:02:95:e9:58:8c:96:64:9e:55:
35:ba:f4:62:8a:b6:c9:f4:64:f3:c2:fc:d5:dc:62:
c5:5a:27:e7:f0:d6:47:f5:c9:f2:0e:23:fb:69:76:
98:f7:17:ab:51:4c:42:4a:69:d3:6c:2f:26:c6:d0:
0c:91:44:98:5f:e4:5b:5b:ae:08:a2:e6:7b:fb:a5:
2b:d3:2e:5c:43:ca:91:32:88:35:ff:5d:0a:d8:2e:
71:84:2e:22:97:d2:01:a8:e4:88:19:02:71:5a:6c:
2e:a1:88:dd:9c:7f:5d:43:4e:4f:db:30:e5:8e:a1:
2c:f6:eb:e5:cf:23:17:06:32:c9:5a:13:64:7f:20:
cf:d6:ca:23:1e:25:e8:e4:ee:86:91:23:94:8a:6d:
9f:e9:84:86:7d:67:a5:0b:90:b5:24:2d:2f:cd:38:
a3:b8:71:e0:70:ee:a4:28:07:65:3c:fc:19:ea:c4:
02:9e:cb:a1:7a:ea:1f:8f:28:cc:c3:16:7a:e2:38:
ae:3b:83:71:c3:a6:af:1d:fe:c2:38:51:e2:6d:17:
26:56:23:c7:bd:77:14:55:9b:90:08:cf:96:10:ca:
12:ae:58:6e:23:7f:0c:64:26:5e:49:ec:b0:d0:c5:
4c:78:97:0f:24:99:21:4e:48:1e:7c:59:89:39:5c:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:79:F3:8F:DA:61:01:8D:69:24:CE:F2:5C:37:FA:F3:94:67:41
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/851584_aYQGNaSTO8lw3-vOUZ0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8c:72:e2:ad:1b:52:7c:71:25:70:b7:19:70:69:97:30:72:
af:45:fe:77:0d:df:8c:e9:cb:cd:e1:f7:6a:b0:b8:7d:d6:44:
92:13:2b:0e:41:85:3e:4f:36:f5:77:c2:71:bd:04:e5:5f:b1:
bc:77:64:da:38:e7:53:eb:34:08:67:b7:7d:18:d7:ba:d9:ee:
1f:93:f7:d2:43:42:c3:f0:2c:b3:76:c5:ad:0a:c9:c0:da:9c:
f6:ca:c8:61:12:2e:2d:20:1c:00:4b:d9:45:81:d2:26:09:e6:
0a:9c:61:c5:19:ea:cf:5c:f9:ee:92:f9:6a:36:78:ab:01:7e:
c8:72:30:c0:2b:54:a3:2f:b8:66:3a:55:a7:1b:c0:83:1e:5d:
25:21:4d:1c:1c:ae:f8:82:80:5f:26:73:d3:72:93:ed:49:be:
00:56:16:ef:fc:77:01:b5:0f:4e:cf:9e:7f:c8:94:56:29:62:
38:a5:3d:18:f9:a3:9a:30:de:0c:11:bf:a9:4e:16:35:e4:3b:
e1:5f:b9:05:12:60:68:be:53:0c:f8:cc:24:e1:89:3b:fe:21:
ec:ff:d7:40:f2:6d:06:a1:45:a3:6e:02:86:be:3b:0d:2a:96:
a1:90:e6:f6:40:3f:7f:3e:e1:f8:90:5d:5a:db:9f:04:4c:70:
93:52:d9:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS2t3FuKP8cThsUILUBx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OGI3OTgzNmFmZTc1MzcwYTY4MGJiMTM2YzFiOTliYzg4
ZDQ1MTkwHhcNMjMwMTAxMjE0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzlkNzlmMzhmZGE2MTAxOGQ2OTI0Y2VmMjVjMzdmYWYzOTQ2NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYhUw0gClelYjJZknlU1uvRiirbJ
9GTzwvzV3GLFWifn8NZH9cnyDiP7aXaY9xerUUxCSmnTbC8mxtAMkUSYX+RbW64I
ouZ7+6Ur0y5cQ8qRMog1/10K2C5xhC4il9IBqOSIGQJxWmwuoYjdnH9dQ05P2zDl
jqEs9uvlzyMXBjLJWhNkfyDP1sojHiXo5O6GkSOUim2f6YSGfWelC5C1JC0vzTij
uHHgcO6kKAdlPPwZ6sQCnsuheuofjyjMwxZ64jiuO4Nxw6avHf7COFHibRcmViPH
vXcUVZuQCM+WEMoSrlhuI38MZCZeSeyw0MVMeJcPJJkhTkgefFmJOVy1KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOdefOP2mEBjWkkzvJcN/rzlGdBMB8GA1UdIwQY
MBaAFLmLeYNq/nU3CmgLsTbBuZvIjUUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVl0NWcyci1kVGNLYUF1eE5zRzVtOGlOUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iOTQyNDItY2ZkOC00N2IyLWIwMGQt
YWFjMGJlZmZmNGI2LzEvODUxNTg0X2FZUUdOYVNUTzhsdzMtdk9VWjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iOTQyNDItY2ZkOC00N2IyLWIwMGQtYWFjMGJlZmZmNGI2
LzEvdVl0NWcyci1kVGNLYUF1eE5zRzVtOGlOUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7/nMA0G
CSqGSIb3DQEBCwUAA4IBAQCbjHLirRtSfHElcLcZcGmXMHKvRf53Dd+M6cvN4fdq
sLh91kSSEysOQYU+Tzb1d8JxvQTlX7G8d2TaOOdT6zQIZ7d9GNe62e4fk/fSQ0LD
8CyzdsWtCsnA2pz2yshhEi4tIBwAS9lFgdImCeYKnGHFGerPXPnukvlqNnirAX7I
cjDAK1SjL7hmOlWnG8CDHl0lIU0cHK74goBfJnPTcpPtSb4AVhbv/HcBtQ9Oz55/
yJRWKWI4pT0Y+aOaMN4MEb+pThY15DvhX7kFEmBovlMM+Mwk4Yk7/iHs/9dA8m0G
oUWjbgKGvjsNKpahkOb2QD9/PuH4kF1a258ETHCTUtkK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:48 2025 by rpki-client