Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/cYlghU8AhFNryNhXyRqSuzr0ZZo.roa
File: cYlghU8AhFNryNhXyRqSuzr0ZZo.roa (raw, json)
Hash identifier: lT8BO2tzanFbN+0UGsNRZlnQK729C9kJ+c+Sm0spz7A=
Subject key identifier: 71:89:60:85:4F:00:84:53:6B:C8:D8:57:C9:1A:92:BB:3A:F4:65:9A
Certificate issuer: /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial: 018706853B8950E1B4DA595178F314B7088B
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/cYlghU8AhFNryNhXyRqSuzr0ZZo.roa
Signing time: Tue 21 Mar 2023 23:33:27 +0000
ROA not before: Tue 21 Mar 2023 23:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 193.162.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:85:3b:89:50:e1:b4:da:59:51:78:f3:14:b7:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Validity
Not Before: Mar 21 23:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718960854f0084536bc8d857c91a92bb3af4659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:ea:af:54:3c:c8:cc:9e:0c:65:6e:70:b6:
74:44:ec:b3:ec:65:8e:09:76:46:a7:5e:0a:93:21:
4a:25:2d:bc:ae:a5:fb:1a:b6:24:fd:f3:e3:39:7d:
4a:c1:35:6b:b3:b7:a4:ce:b3:2c:a7:c9:28:aa:24:
49:2e:d7:94:01:c4:05:88:58:09:71:0a:78:b5:54:
39:fe:aa:fc:33:81:5f:26:cb:ff:c6:f4:85:95:39:
0e:c3:ec:83:a7:00:1f:b3:1a:8f:ae:81:32:fd:dd:
95:96:67:48:78:93:f4:68:50:d9:0c:d6:51:f3:4a:
69:88:aa:5e:f2:94:84:c0:dc:5c:b2:0f:c2:9b:1c:
d2:6f:77:15:f4:c6:cc:51:c6:ab:1a:7a:d1:88:fd:
8f:93:a7:ed:2f:c4:2f:bd:57:04:53:25:7d:a9:e3:
b5:b1:19:18:de:69:f9:83:21:31:a4:ae:a3:9e:7c:
62:6c:b0:65:60:08:c3:24:1a:1a:5f:4d:51:d4:2b:
01:c7:43:48:04:11:70:4b:7a:34:ae:cd:df:5f:0f:
71:e8:54:09:8c:86:75:a8:f0:dc:03:1d:a3:52:5d:
c1:70:e2:17:71:18:f0:fd:f9:16:68:66:f0:e4:c8:
d6:75:d5:f5:5b:fd:26:e6:c8:ae:91:a9:49:66:ab:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:60:85:4F:00:84:53:6B:C8:D8:57:C9:1A:92:BB:3A:F4:65:9A
X509v3 Authority Key Identifier:
keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/cYlghU8AhFNryNhXyRqSuzr0ZZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.133.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8e:b8:b5:24:6c:b7:05:e1:a8:69:79:24:a6:b2:dd:77:c1:
1e:22:0d:de:95:a8:b7:52:a2:87:41:b6:a1:ac:40:9c:24:30:
23:75:70:cf:8d:9f:c8:4d:47:8e:8a:15:72:f3:b5:c4:0f:3e:
60:8b:34:f4:7b:98:0a:42:fb:18:f3:a8:e2:00:88:e4:35:09:
4b:a2:af:d6:d0:1c:eb:50:bd:8d:5f:b1:d7:b8:88:3f:75:3a:
90:38:61:1f:c6:ef:21:1e:e0:f6:9a:a3:1a:11:4d:ee:44:ea:
8c:36:bd:70:82:b3:2d:8e:30:c2:89:88:5d:1d:6a:4d:c4:68:
e3:41:e0:38:42:8d:e6:6a:ba:47:76:7e:5d:31:e1:53:a6:88:
8c:ed:9d:59:e5:46:5c:dd:fa:9f:f1:59:47:3d:19:d3:d8:9b:
9f:75:eb:8c:1c:b9:a9:98:1c:55:c5:ae:6d:2f:b5:03:5b:15:
0e:b0:5b:bb:ea:eb:e9:d2:fa:1d:75:11:9b:b5:78:ca:0d:54:
a3:73:1f:9d:73:1b:ec:1a:fe:dc:74:ec:45:a5:0b:3a:74:db:
40:d2:9e:dd:40:ed:89:18:c9:1a:a0:c5:91:ea:08:db:6e:27:
d4:db:c9:08:82:25:63:9c:b9:74:d1:f4:c3:33:88:49:11:63:
c0:d2:4e:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcGhTuJUOG02llRePMUtwiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTMwZTE0ZThlZDhmYmM3YWI0YTkzOTljNWFlMmYxOWVl
OWY4MDMwHhcNMjMwMzIxMjMzMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTg5NjA4NTRmMDA4NDUzNmJjOGQ4NTdjOTFhOTJiYjNhZjQ2NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR3qr1Q8yMyeDGVucLZ0ROyz7GWO
CXZGp14KkyFKJS28rqX7GrYk/fPjOX1KwTVrs7ekzrMsp8koqiRJLteUAcQFiFgJ
cQp4tVQ5/qr8M4FfJsv/xvSFlTkOw+yDpwAfsxqProEy/d2VlmdIeJP0aFDZDNZR
80ppiKpe8pSEwNxcsg/CmxzSb3cV9MbMUcarGnrRiP2Pk6ftL8QvvVcEUyV9qeO1
sRkY3mn5gyExpK6jnnxibLBlYAjDJBoaX01R1CsBx0NIBBFwS3o0rs3fXw9x6FQJ
jIZ1qPDcAx2jUl3BcOIXcRjw/fkWaGbw5MjWddX1W/0m5siukalJZqv0AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGJYIVPAIRTa8jYV8kakrs69GWaMB8GA1UdIwQY
MBaAFJlTDhTo7Y+8erSpOZxa4vGe6fgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZNT0ZPanRqN3g2dEtrNW5Gcmk4WjdwLUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOTBjZDEtY2FiNi00OTU5LTlmZDIt
MmI2ZTJiMWQ2YmE1LzEvY1lsZ2hVOEFoRk5yeU5oWHlScVN1enIwWlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOTBjZDEtY2FiNi00OTU5LTlmZDItMmI2ZTJiMWQ2YmE1
LzEvbVZNT0ZPanRqN3g2dEtrNW5Gcmk4WjdwLUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaKFMA0G
CSqGSIb3DQEBCwUAA4IBAQBAjri1JGy3BeGoaXkkprLdd8EeIg3elai3UqKHQbah
rECcJDAjdXDPjZ/ITUeOihVy87XEDz5gizT0e5gKQvsY86jiAIjkNQlLoq/W0Bzr
UL2NX7HXuIg/dTqQOGEfxu8hHuD2mqMaEU3uROqMNr1wgrMtjjDCiYhdHWpNxGjj
QeA4Qo3marpHdn5dMeFTpoiM7Z1Z5UZc3fqf8VlHPRnT2JufdeuMHLmpmBxVxa5t
L7UDWxUOsFu76uvp0voddRGbtXjKDVSjcx+dcxvsGv7cdOxFpQs6dNtA0p7dQO2J
GMkaoMWR6gjbbifU28kIgiVjnLl00fTDM4hJEWPA0k41
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:35 2025 by rpki-client