Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/sPfQcQnl5Av1BOkFFGZK6Q6qEHo.roa
File: sPfQcQnl5Av1BOkFFGZK6Q6qEHo.roa (raw, json)
Hash identifier: 5XAA0c5AxhqqpY6evvHw9qxILKQ5X+8LM5zcY2mK47Y=
Subject key identifier: B0:F7:D0:71:09:E5:E4:0B:F5:04:E9:05:14:66:4A:E9:0E:AA:10:7A
Certificate issuer: /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial: 0182165A2832DA583A6FE5649BA86A84B19A
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/sPfQcQnl5Av1BOkFFGZK6Q6qEHo.roa
Signing time: Tue 19 Jul 2022 12:06:23 +0000
ROA not before: Tue 19 Jul 2022 12:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 147.78.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:5a:28:32:da:58:3a:6f:e5:64:9b:a8:6a:84:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Validity
Not Before: Jul 19 12:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0f7d07109e5e40bf504e90514664ae90eaa107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:8d:4d:07:96:a0:da:ab:6b:c2:ee:60:39:
92:a4:0a:cf:f8:54:98:21:0d:2f:04:4a:6d:43:ff:
e6:1a:d9:42:8b:95:5c:43:6b:8b:c9:56:aa:94:ea:
1c:da:dc:fb:ec:ea:f8:00:30:19:c8:de:3d:51:c0:
a0:77:be:41:e6:ee:b4:f6:d3:3a:f1:e2:10:9c:3c:
de:d8:6e:b9:39:68:5e:f5:8e:b6:0f:72:c7:b4:4d:
ce:de:d9:2d:fe:52:85:7b:f1:c8:fd:ea:08:e8:13:
22:18:e7:b4:0c:63:70:25:b5:c3:a0:d2:ae:f4:1b:
03:26:6d:eb:c0:54:63:1e:ce:23:ab:ac:69:cf:4d:
98:e1:c5:6f:35:3b:ac:90:80:52:b6:58:04:ba:49:
20:97:cb:b8:22:c8:19:b6:79:63:db:e4:95:6f:c9:
08:fb:37:0f:42:25:1e:50:74:b2:15:65:de:f5:e8:
a1:d3:20:de:fc:c9:15:ba:70:66:1f:6b:d7:8e:ee:
27:16:ee:7d:23:d0:c3:82:ad:a1:72:1e:b6:c4:5c:
02:e0:4e:e8:c8:e7:19:e4:c2:d7:d7:9e:f1:5a:ba:
fc:e4:d3:6b:a0:50:99:97:62:e2:f9:e4:ea:96:67:
73:2d:5f:0d:f2:b4:0f:bb:1f:66:89:23:a6:28:a3:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:D0:71:09:E5:E4:0B:F5:04:E9:05:14:66:4A:E9:0E:AA:10:7A
X509v3 Authority Key Identifier:
keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/sPfQcQnl5Av1BOkFFGZK6Q6qEHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:98:8b:3b:02:74:68:0e:6c:8e:83:d4:37:63:63:c1:27:27:
28:31:1d:58:e9:7c:df:5e:25:ce:69:08:3e:92:ef:54:19:f2:
84:fa:99:b4:46:1b:61:be:e3:dc:f1:41:7a:49:5f:c9:b3:94:
a1:3a:6e:7d:a3:d6:1f:24:53:0e:df:b8:46:0d:f7:ac:61:03:
ba:0e:73:45:45:d2:0a:78:eb:1f:29:6a:63:5b:55:75:3d:9f:
fb:cd:34:21:86:68:00:3b:a6:6b:b1:c4:36:dd:1b:71:de:cd:
2d:18:85:0b:19:f6:f7:b0:64:f8:5e:e3:dd:37:03:c7:cc:fb:
5f:90:c1:58:29:98:db:8d:b6:76:fd:27:42:d2:03:09:fc:05:
99:a9:bd:66:7c:22:1d:3c:b3:ee:eb:0b:e9:db:9b:b5:12:12:
3d:a7:b0:c3:46:08:1c:86:1f:f6:bc:fb:c6:7c:61:c0:e4:fb:
46:67:90:f6:be:14:d1:51:dd:e8:c5:62:e7:ac:d9:d7:03:7f:
ce:df:cd:31:5f:17:77:98:a4:17:13:7f:88:ac:c1:33:ef:ac:
4b:87:f6:42:99:de:f8:4d:45:65:62:84:d0:ae:16:6f:f8:4b:
5a:b9:e5:54:ff:b6:f6:fe:6d:e2:bd:ca:b3:ca:ff:5f:4c:5d:
a9:d7:23:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIWWigy2lg6b+Vkm6hqhLGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjA5OGIwMjk1ZDYxNzQ4OGQzZDllN2QyM2I1OWEzMzFj
MTVlNjAwHhcNMjIwNzE5MTIwNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGY3ZDA3MTA5ZTVlNDBiZjUwNGU5MDUxNDY2NGFlOTBlYWExMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunONTQeWoNqra8LuYDmSpArP+FSY
IQ0vBEptQ//mGtlCi5VcQ2uLyVaqlOoc2tz77Or4ADAZyN49UcCgd75B5u609tM6
8eIQnDze2G65OWhe9Y62D3LHtE3O3tkt/lKFe/HI/eoI6BMiGOe0DGNwJbXDoNKu
9BsDJm3rwFRjHs4jq6xpz02Y4cVvNTuskIBStlgEukkgl8u4IsgZtnlj2+SVb8kI
+zcPQiUeUHSyFWXe9eih0yDe/MkVunBmH2vXju4nFu59I9DDgq2hch62xFwC4E7o
yOcZ5MLX157xWrr85NNroFCZl2Li+eTqlmdzLV8N8rQPux9miSOmKKOGNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD30HEJ5eQL9QTpBRRmSukOqhB6MB8GA1UdIwQY
MBaAFJFgmLApXWF0iNPZ59I7WaMxwV5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dDWXNDbGRZWFNJMDlubjBqdFpvekhCWG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xNGNlMDMtMjNmMi00ZjdiLTg4YzAt
NDEwZTA5NDc3Njg1LzEvc1BmUWNRbmw1QXYxQk9rRkZHWks2UTZxRUhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xNGNlMDMtMjNmMi00ZjdiLTg4YzAtNDEwZTA5NDc3Njg1
LzEva1dDWXNDbGRZWFNJMDlubjBqdFpvekhCWG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk04UMA0G
CSqGSIb3DQEBCwUAA4IBAQCNmIs7AnRoDmyOg9Q3Y2PBJycoMR1Y6XzfXiXOaQg+
ku9UGfKE+pm0RhthvuPc8UF6SV/Js5ShOm59o9YfJFMO37hGDfesYQO6DnNFRdIK
eOsfKWpjW1V1PZ/7zTQhhmgAO6ZrscQ23Rtx3s0tGIULGfb3sGT4XuPdNwPHzPtf
kMFYKZjbjbZ2/SdC0gMJ/AWZqb1mfCIdPLPu6wvp25u1EhI9p7DDRggchh/2vPvG
fGHA5PtGZ5D2vhTRUd3oxWLnrNnXA3/O380xXxd3mKQXE3+IrMEz76xLh/ZCmd74
TUVlYoTQrhZv+EtaueVU/7b2/m3ivcqzyv9fTF2p1yOO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org