Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-kryNSufB054njPCm3YMXjfm2cI.roa
File: 1-kryNSufB054njPCm3YMXjfm2cI.roa (raw, json)
Hash identifier: dl/RJEwstnrSjEl4tS+3xjatU32TG+c3IywxiIQTdP0=
Subject key identifier: FA:4A:F2:35:2B:9F:07:4E:78:9E:33:C2:9B:76:0C:5E:37:E6:D9:C2
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A1A5C0C57EBAB69F29437192D2E9
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-kryNSufB054njPCm3YMXjfm2cI.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.50.223.0/24 maxlen: 24
194.50.224.0/24 maxlen: 24
194.50.233.0/24 maxlen: 24
194.50.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a1:a5:c0:c5:7e:ba:b6:9f:29:43:71:92:d2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa4af2352b9f074e789e33c29b760c5e37e6d9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:97:87:74:3d:da:00:6f:8d:99:c3:1d:64:
28:f2:4d:4c:f7:7a:67:d5:e2:1f:55:41:1e:15:3b:
1c:55:03:71:f7:aa:7c:8b:3d:5a:7e:54:14:fd:0a:
e1:40:4c:87:ee:ed:29:f1:94:97:9d:63:3f:f3:b3:
54:b1:75:c5:6d:32:90:a6:8e:30:db:ca:95:40:04:
5f:7c:3f:09:87:24:e0:0c:c4:66:6f:64:17:68:76:
46:1f:09:ed:4f:52:39:a6:c6:fa:df:c8:e4:0d:2c:
be:1b:2e:69:45:91:3d:df:da:fd:a7:9f:8b:30:9a:
4f:6b:fb:44:84:1a:1b:65:6b:9d:1c:c7:08:00:13:
e9:5a:83:b2:06:4d:d9:bf:2e:6b:d5:88:a6:bd:f4:
fb:43:9b:aa:6f:58:be:55:2c:2a:f7:dd:27:2e:3f:
d0:00:ca:8e:36:56:37:e2:3d:6a:66:ab:0e:ca:96:
59:81:a8:31:89:f5:42:0a:d2:47:40:0c:e6:4c:44:
9e:90:5b:c1:65:54:17:22:76:ba:3f:5b:1f:8d:53:
46:fe:d7:ef:ca:5b:0a:ba:96:98:f4:c8:7e:03:8a:
9a:9a:ab:ea:8d:c0:03:22:b0:62:74:ca:47:e0:64:
50:80:0d:b5:62:81:87:5b:c8:ad:29:5d:e0:f0:2d:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:F2:35:2B:9F:07:4E:78:9E:33:C2:9B:76:0C:5E:37:E6:D9:C2
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-kryNSufB054njPCm3YMXjfm2cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.223.0-194.50.224.255
194.50.233.0/24
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4e:cc:5b:c2:e0:2b:34:78:49:fb:13:5c:b0:11:fe:f5:cd:
6a:09:22:96:7e:b3:28:fd:77:d6:f5:2b:fa:c9:04:1c:4b:0b:
0e:be:3e:fa:7d:c5:d6:d5:2f:8c:83:b4:ef:3c:c4:0e:06:3c:
18:14:3d:e2:f8:e0:17:23:3f:9e:bf:3e:61:e4:d2:5a:f3:ce:
20:dd:76:92:34:dd:65:ba:e7:0c:e2:17:4f:1a:d1:a0:40:47:
b7:c3:3c:93:94:8d:59:98:64:60:e0:81:8c:c0:11:1e:db:74:
fb:cf:e8:fd:ad:76:cf:5d:ce:18:c4:90:f2:02:fc:f7:a5:ed:
17:b8:6b:06:f4:b7:d1:80:60:dd:0a:0b:f3:e9:f9:17:8c:0f:
b2:76:7c:d5:4e:ed:09:08:6f:36:e2:33:9c:0a:e0:09:15:94:
99:7f:a9:43:8e:78:e4:d9:b7:61:25:33:23:8b:15:13:c0:cb:
2a:22:12:0f:e1:fc:7f:40:c0:d2:b6:3d:24:dd:5a:76:e9:71:
ed:e0:83:e3:c7:e5:75:48:7e:92:48:99:0d:c3:1e:51:fa:55:
c7:44:7d:53:2f:4b:20:27:73:81:3f:30:78:8e:99:2c:b1:05:
ed:01:af:2a:3c:b1:f4:7a:4a:23:7d:aa:ee:b8:ca:4c:f9:db:
53:2b:62:cd
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVveaGlwMV+urafKUNxktLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTM4YWY2NmViNGQ1NTdmYTRiMzkzOWM2Y2JkOTYxYTkx
MjM1NjAwHhcNMjMwMTAxMjIzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTRhZjIzNTJiOWYwNzRlNzg5ZTMzYzI5Yjc2MGM1ZTM3ZTZkOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi82Xh3Q92gBvjZnDHWQo8k1M93pn
1eIfVUEeFTscVQNx96p8iz1aflQU/QrhQEyH7u0p8ZSXnWM/87NUsXXFbTKQpo4w
28qVQARffD8JhyTgDMRmb2QXaHZGHwntT1I5psb638jkDSy+Gy5pRZE939r9p5+L
MJpPa/tEhBobZWudHMcIABPpWoOyBk3Zvy5r1YimvfT7Q5uqb1i+VSwq990nLj/Q
AMqONlY34j1qZqsOypZZgagxifVCCtJHQAzmTESekFvBZVQXIna6P1sfjVNG/tfv
ylsKupaY9Mh+A4qamqvqjcADIrBidMpH4GRQgA21YoGHW8itKV3g8C1PfQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPpK8jUrnwdOeJ4zwpt2DF435tnCMB8GA1UdIwQY
MBaAFAATivZutNVX+ks5OcbL2WGpEjVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMt
NGZlYTYyNDQxM2U0LzEvMS1rcnlOU3VmQjA1NG5qUENtM1lNWGpmbTJjSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvODMyMzNjLTg5OGUtNDkxZC05NThjLTRmZWE2MjQ0MTNl
NC8xL0FCT0s5bTYwMVZmNlN6azV4c3ZaWWFrU05XQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQAwjLf
AwQAwjLgAwQAwjLpAwQAwjLzMA0GCSqGSIb3DQEBCwUAA4IBAQCJTsxbwuArNHhJ
+xNcsBH+9c1qCSKWfrMo/XfW9Sv6yQQcSwsOvj76fcXW1S+Mg7TvPMQOBjwYFD3i
+OAXIz+evz5h5NJa884g3XaSNN1luucM4hdPGtGgQEe3wzyTlI1ZmGRg4IGMwBEe
23T7z+j9rXbPXc4YxJDyAvz3pe0XuGsG9LfRgGDdCgvz6fkXjA+ydnzVTu0JCG82
4jOcCuAJFZSZf6lDjnjk2bdhJTMjixUTwMsqIhIP4fx/QMDStj0k3Vp26XHt4IPj
x+V1SH6SSJkNwx5R+lXHRH1TL0sgJ3OBPzB4jpkssQXtAa8qPLH0ekojfaruuMpM
+dtTK2LN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org