Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A9flwAwI_Xm9Jg89HlG20pvrF0A.roa
File: A9flwAwI_Xm9Jg89HlG20pvrF0A.roa (raw, json)
Hash identifier: EGPRsTu3N1Afu248VUNqFlYz2GfCs/DEevDQns3ZHJU=
Subject key identifier: 03:D7:E5:C0:0C:08:FD:79:BD:26:0F:3D:1E:51:B6:D2:9B:EB:17:40
Certificate issuer: /CN=0394a3c46ec087b0d09770d18706107d2c7c17da
Certificate serial: 1689D5BA
Authority key identifier: 03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A9flwAwI_Xm9Jg89HlG20pvrF0A.roa
Signing time: Sat 01 Jan 2022 07:53:11 +0000
ROA not before: Sat 01 Jan 2022 07:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206262
IP address blocks: 37.26.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378131898 (0x1689d5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0394a3c46ec087b0d09770d18706107d2c7c17da
Validity
Not Before: Jan 1 07:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03d7e5c00c08fd79bd260f3d1e51b6d29beb1740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:9b:38:78:eb:07:f2:61:aa:cb:6f:c0:96:
04:5d:fa:fa:f5:97:76:79:16:fd:a9:c1:88:e4:97:
e3:fa:32:48:2e:59:c6:88:9b:08:14:a5:b3:0c:c3:
e5:ac:4c:82:f0:63:69:13:23:37:4f:6c:45:3f:df:
d5:bc:c4:e4:82:9d:5c:db:5c:8d:a0:cd:b1:33:8b:
8c:d6:13:7c:ce:28:8c:da:02:54:54:6a:28:53:2f:
35:3f:91:7f:f1:ac:45:56:42:31:73:dd:9d:9e:77:
52:bf:ec:df:92:54:d3:cd:b7:92:36:e5:e5:b4:1b:
21:ea:8e:64:bb:bb:34:69:17:66:8f:36:16:1a:82:
9a:4b:8e:10:59:e3:07:a0:10:88:9d:43:d0:e2:d6:
c2:3c:ee:c7:6d:f9:16:9e:b5:f2:7f:0d:90:0e:f8:
90:0b:4f:94:41:8e:e3:58:ee:11:f2:50:a1:53:86:
e9:10:10:d5:d9:70:2c:22:cd:f9:f6:1c:26:4c:76:
e9:dd:c4:f7:47:12:c7:e9:a7:67:d5:94:db:c1:ab:
55:15:cb:05:b3:7e:90:a8:03:7a:83:5b:1c:97:d2:
0f:19:a9:a9:dc:6a:ee:d8:cb:41:c0:e9:4b:55:78:
ee:21:4f:cd:5b:96:de:e4:2f:76:cc:ce:f4:fe:fe:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:E5:C0:0C:08:FD:79:BD:26:0F:3D:1E:51:B6:D2:9B:EB:17:40
X509v3 Authority Key Identifier:
keyid:03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A9flwAwI_Xm9Jg89HlG20pvrF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:30:89:32:cf:51:f3:1b:81:84:77:9b:a2:66:61:fb:42:56:
0e:e1:e1:95:f1:ff:3f:91:27:af:fd:77:e0:f1:65:66:cf:3e:
23:5e:8e:9a:49:14:c1:06:92:7d:00:37:c3:af:2d:7c:08:a7:
92:f9:5a:9f:4b:fe:90:b2:37:cf:88:c7:4f:bf:5f:aa:8e:06:
46:3d:b8:47:37:36:1c:89:39:fc:d2:a8:5a:94:2b:12:c9:04:
09:34:09:16:35:6b:af:f3:6a:63:54:75:4f:87:e8:1b:73:ed:
6e:0f:d3:d0:53:76:fb:d7:e0:fd:f8:16:ed:7c:97:3d:98:00:
e0:55:a8:9a:cf:99:9b:aa:2a:3a:2b:62:5e:97:72:f1:7a:1d:
e5:d2:b1:04:cb:5c:c8:29:82:0e:46:5a:73:0b:6e:27:a3:cc:
2c:27:0b:3b:9e:44:d1:4c:a2:60:e2:a2:99:56:80:49:88:02:
7d:82:96:2d:bc:40:f5:53:89:36:82:e3:53:c8:72:a8:78:fd:
e3:0a:35:ad:44:5a:af:d8:86:02:c8:75:91:32:c4:dc:2e:88:
49:33:b8:7a:41:ff:19:f2:6a:e5:42:e9:bf:e0:66:d1:41:1a:
53:66:53:fd:ef:5a:e9:9e:c8:2f:02:57:83:f4:83:7a:e6:af:
bb:66:e3:b9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFonVujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Mzk0YTNjNDZlYzA4N2IwZDA5NzcwZDE4NzA2MTA3ZDJjN2MxN2RhMB4XDTIyMDEw
MTA3NTMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDNkN2U1YzAwYzA4
ZmQ3OWJkMjYwZjNkMWU1MWI2ZDI5YmViMTc0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANCJmzh46wfyYarLb8CWBF36+vWXdnkW/anBiOSX4/oySC5Z
xoibCBSlswzD5axMgvBjaRMjN09sRT/f1bzE5IKdXNtcjaDNsTOLjNYTfM4ojNoC
VFRqKFMvNT+Rf/GsRVZCMXPdnZ53Ur/s35JU0823kjbl5bQbIeqOZLu7NGkXZo82
FhqCmkuOEFnjB6AQiJ1D0OLWwjzux235Fp618n8NkA74kAtPlEGO41juEfJQoVOG
6RAQ1dlwLCLN+fYcJkx26d3E90cSx+mnZ9WU28GrVRXLBbN+kKgDeoNbHJfSDxmp
qdxq7tjLQcDpS1V47iFPzVuW3uQvdszO9P7+iJ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQD1+XADAj9eb0mDz0eUbbSm+sXQDAfBgNVHSMEGDAWgBQDlKPEbsCHsNCX
cNGHBhB9LHwX2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E1U2p4RzdBaDdEUWwzRFJod1lRZlN4OEY5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvMWI3YTU5LTJkZjYtNDc0MC1iNzE5LTYwODAzM2VmYzMzNS8x
L0E5Zmx3QXdJX1htOUpnODlIbEcyMHB2ckYwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
MWI3YTU5LTJkZjYtNDc0MC1iNzE5LTYwODAzM2VmYzMzNS8xL0E1U2p4RzdBaDdE
UWwzRFJod1lRZlN4OEY5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUaRjANBgkqhkiG9w0BAQsFAAOC
AQEAXjCJMs9R8xuBhHebomZh+0JWDuHhlfH/P5Enr/134PFlZs8+I16OmkkUwQaS
fQA3w68tfAinkvlan0v+kLI3z4jHT79fqo4GRj24Rzc2HIk5/NKoWpQrEskECTQJ
FjVrr/NqY1R1T4foG3Ptbg/T0FN2+9fg/fgW7XyXPZgA4FWoms+Zm6oqOitiXpdy
8Xod5dKxBMtcyCmCDkZacwtuJ6PMLCcLO55E0UyiYOKimVaASYgCfYKWLbxA9VOJ
NoLjU8hyqHj94wo1rURar9iGAsh1kTLE3C6ISTO4ekH/GfJq5ULpv+Bm0UEaU2ZT
/e9a6Z7ILwJXg/SDeuavu2bjuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org