Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/RArFi1urzEvrKnl7f50Y8rSYDFQ.roa
File: RArFi1urzEvrKnl7f50Y8rSYDFQ.roa (raw, json)
Hash identifier: Y/7FkaQVIAE0ZhiMEDRgsTVJZ+C7J/prypZsOzJWq4I=
Subject key identifier: 44:0A:C5:8B:5B:AB:CC:4B:EB:2A:79:7B:7F:9D:18:F2:B4:98:0C:54
Certificate issuer: /CN=c9769bfa59865d0c9593262881807db13f4bb87a
Certificate serial: 01856DDD34C1D6B811A8755862F43AD93D02
Authority key identifier: C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/RArFi1urzEvrKnl7f50Y8rSYDFQ.roa
Signing time: Sun 01 Jan 2023 15:04:51 +0000
ROA not before: Sun 01 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 80.71.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:34:c1:d6:b8:11:a8:75:58:62:f4:3a:d9:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9769bfa59865d0c9593262881807db13f4bb87a
Validity
Not Before: Jan 1 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=440ac58b5babcc4beb2a797b7f9d18f2b4980c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:2a:6e:5c:41:37:59:d1:2e:78:41:f9:43:
90:7e:e8:87:15:52:df:7b:45:7d:09:a6:f7:2a:64:
95:c4:c7:a5:46:5a:9b:03:ea:03:00:e0:c6:94:56:
73:1d:f5:d9:1d:c5:1f:eb:7f:65:65:f4:d5:f1:39:
5a:15:d9:8d:d6:a4:fb:83:01:e6:42:92:4c:0b:bf:
c6:ed:f9:4b:77:9c:bd:26:1a:e5:29:11:b1:23:1c:
30:d6:e3:f1:59:da:16:86:00:f6:c9:65:a6:02:12:
e7:eb:ba:ed:1d:1c:03:c2:cf:9b:bb:9c:52:ba:b8:
ed:12:52:50:62:f7:86:c9:fc:f9:b7:75:fc:af:a5:
17:50:5d:b1:90:5a:e3:13:1a:18:0f:64:13:e9:24:
2f:2b:20:fb:05:72:8c:6d:90:12:b1:7e:85:fb:a9:
b9:f6:bb:05:58:6b:89:73:f0:3c:1f:56:9b:91:19:
cb:c5:be:0c:60:72:33:a6:94:f7:42:42:62:30:e1:
e2:f9:ff:f8:4a:25:c6:95:8a:f9:10:ec:1f:d4:d6:
6a:50:fa:16:49:68:6c:ec:91:95:a1:77:01:ac:76:
ea:34:56:4a:3e:1a:8e:e3:16:62:76:07:78:73:ee:
e2:11:16:65:2e:67:4d:22:61:18:db:0a:15:12:0e:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:C5:8B:5B:AB:CC:4B:EB:2A:79:7B:7F:9D:18:F2:B4:98:0C:54
X509v3 Authority Key Identifier:
keyid:C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/RArFi1urzEvrKnl7f50Y8rSYDFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.144.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e3:55:71:68:7a:91:2d:28:d1:2e:84:5a:f1:18:ef:9e:d4:
cf:7b:da:ce:eb:ce:80:19:1d:3d:9c:7b:9a:e8:4c:f4:c4:78:
83:0d:56:19:62:17:34:57:67:47:78:01:0d:18:f1:e6:a8:5a:
74:d2:8e:6c:20:f3:10:45:25:88:61:81:eb:09:25:41:95:5c:
3d:10:f7:ec:67:2b:0a:18:18:99:0b:bf:6e:b9:e0:63:aa:9b:
1e:13:87:dd:04:6d:4e:50:4e:98:33:61:f0:20:6a:1b:6c:6d:
98:ec:6e:e8:9d:cf:fd:aa:2d:df:94:14:9c:af:bf:02:78:82:
ca:0c:d7:db:f1:29:cb:72:b9:bf:2c:35:14:fa:b3:e5:3b:87:
77:99:a3:57:d5:fc:97:00:89:08:0c:c2:0c:10:4f:57:0c:04:
53:be:7d:80:14:7b:17:0d:76:6b:01:b3:3c:6c:4f:d0:6d:c0:
29:88:a6:84:0a:50:7d:19:75:6c:6a:68:0d:63:e9:e6:0b:cc:
d8:56:5b:05:6e:d9:1d:12:b0:18:09:89:82:29:71:bb:25:ec:
27:53:f8:ef:2c:ed:aa:45:0d:05:ef:1c:ec:02:ae:30:b6:6d:
88:eb:70:6d:f4:48:6e:39:c3:ee:11:eb:56:f6:ce:fa:7e:24:
9c:bc:46:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt3TTB1rgRqHVYYvQ62T0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY5YmZhNTk4NjVkMGM5NTkzMjYyODgxODA3ZGIxM2Y0
YmI4N2EwHhcNMjMwMTAxMTUwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDBhYzU4YjViYWJjYzRiZWIyYTc5N2I3ZjlkMThmMmI0OTgwYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI8qblxBN1nRLnhB+UOQfuiHFVLf
e0V9Cab3KmSVxMelRlqbA+oDAODGlFZzHfXZHcUf639lZfTV8TlaFdmN1qT7gwHm
QpJMC7/G7flLd5y9JhrlKRGxIxww1uPxWdoWhgD2yWWmAhLn67rtHRwDws+bu5xS
urjtElJQYveGyfz5t3X8r6UXUF2xkFrjExoYD2QT6SQvKyD7BXKMbZASsX6F+6m5
9rsFWGuJc/A8H1abkRnLxb4MYHIzppT3QkJiMOHi+f/4SiXGlYr5EOwf1NZqUPoW
SWhs7JGVoXcBrHbqNFZKPhqO4xZidgd4c+7iERZlLmdNImEY2woVEg61twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQKxYtbq8xL6yp5e3+dGPK0mAxUMB8GA1UdIwQY
MBaAFMl2m/pZhl0MlZMmKIGAfbE/S7h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhhYi1sbUdYUXlWa3lZb2dZQjlzVDlMdUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iYjc1MDctMjI2MS00ZWRhLWE1OTIt
ZjdlYzQwZTZhMDQ5LzEvUkFyRmkxdXJ6RXZyS25sN2Y1MFk4clNZREZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iYjc1MDctMjI2MS00ZWRhLWE1OTItZjdlYzQwZTZhMDQ5
LzEveVhhYi1sbUdYUXlWa3lZb2dZQjlzVDlMdUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEeQMA0G
CSqGSIb3DQEBCwUAA4IBAQAh41VxaHqRLSjRLoRa8RjvntTPe9rO686AGR09nHua
6Ez0xHiDDVYZYhc0V2dHeAENGPHmqFp00o5sIPMQRSWIYYHrCSVBlVw9EPfsZysK
GBiZC79uueBjqpseE4fdBG1OUE6YM2HwIGobbG2Y7G7onc/9qi3flBScr78CeILK
DNfb8SnLcrm/LDUU+rPlO4d3maNX1fyXAIkIDMIMEE9XDARTvn2AFHsXDXZrAbM8
bE/QbcApiKaEClB9GXVsamgNY+nmC8zYVlsFbtkdErAYCYmCKXG7JewnU/jvLO2q
RQ0F7xzsAq4wtm2I63Bt9EhuOcPuEetW9s76fiScvEZ0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org