Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQBxFdlRtGTzwAlPtfnhAQSYwA4.roa
File: yQBxFdlRtGTzwAlPtfnhAQSYwA4.roa (raw, json)
Hash identifier: i9r9UmaTbkxSSKYRd8UpAI8NVK1yfO5yWAbzbXFGHe0=
Subject key identifier: C9:00:71:15:D9:51:B4:64:F3:C0:09:4F:B5:F9:E1:01:04:98:C0:0E
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01856C784EB5A866B87B47E676A96250773F
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQBxFdlRtGTzwAlPtfnhAQSYwA4.roa
Signing time: Sun 01 Jan 2023 08:35:01 +0000
ROA not before: Sun 01 Jan 2023 08:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 194.31.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:4e:b5:a8:66:b8:7b:47:e6:76:a9:62:50:77:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 1 08:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9007115d951b464f3c0094fb5f9e1010498c00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:1c:51:f5:01:37:e4:3f:a3:16:47:46:92:
67:c8:3b:44:12:03:e9:53:ea:d7:b6:74:ed:81:e8:
8f:6b:c4:4c:6f:d6:94:10:17:3e:91:01:63:e8:f4:
36:db:1f:cb:57:05:df:49:3e:cc:c2:7b:76:8e:90:
78:88:db:65:b5:6c:7c:57:a8:e2:6f:08:aa:39:5f:
7a:eb:e3:9c:8b:26:69:3b:81:cb:fc:07:b2:52:09:
64:22:eb:81:17:25:61:ae:af:0f:48:62:a6:ff:6a:
c9:a2:b2:96:d5:be:2b:c9:21:fe:c5:f4:ed:96:85:
24:0d:fb:ee:af:4d:6f:46:46:66:bb:36:25:50:68:
55:b3:3d:28:e0:79:df:39:e5:90:88:a6:ff:4b:1e:
56:c3:1c:0d:8c:3b:8e:27:1b:3e:85:05:09:65:44:
82:17:64:17:70:14:28:b1:79:a8:c9:ff:7c:fa:c1:
ad:db:fc:a4:46:b2:55:29:a7:c2:93:57:9b:a3:05:
33:07:4b:2c:b3:d8:3b:e3:7d:73:c2:10:9f:f2:1f:
a5:fe:9e:cd:a7:41:8a:e9:1c:35:41:61:7c:2a:03:
8c:66:8a:53:03:88:98:56:2f:09:6f:47:90:81:9b:
3e:4e:a4:07:20:1e:14:8c:1f:dd:91:60:4e:59:2b:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:71:15:D9:51:B4:64:F3:C0:09:4F:B5:F9:E1:01:04:98:C0:0E
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQBxFdlRtGTzwAlPtfnhAQSYwA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.180.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5a:09:2c:0f:23:46:33:55:5f:76:33:18:75:c6:9b:79:25:
23:b6:48:27:15:00:08:a5:ca:1a:d5:26:41:53:67:4c:d1:d9:
3b:bc:88:41:ca:b7:e1:11:1d:55:2f:d0:f7:22:9d:49:6c:70:
6f:42:d4:d3:15:65:bc:87:dd:34:4d:21:86:3c:25:ac:1a:26:
b9:2b:a5:53:89:dd:84:47:16:c9:93:88:77:98:bb:e9:42:37:
9c:7c:97:7e:97:c2:a8:34:95:85:6e:84:e9:42:1c:dd:6f:a1:
e1:48:b9:ab:0b:4a:27:b4:54:27:dc:09:53:8a:9b:cf:af:7d:
2d:45:f7:54:2f:0e:55:92:03:c2:48:f4:9b:b2:88:4b:e0:ed:
ec:a0:88:d5:1b:12:64:5a:49:af:5a:58:4c:18:6e:d4:07:a2:
44:92:82:ee:08:a0:73:61:88:cb:f0:95:5f:16:0b:d4:86:df:
2a:4d:b2:51:59:db:f0:9f:61:ba:52:2a:11:69:3d:16:0c:56:
cd:26:5d:27:39:ce:bb:e7:ba:18:d3:25:62:45:60:47:70:8a:
73:bf:e0:c9:6f:07:37:91:e1:1f:01:6e:ad:c2:8e:a4:63:33:
b9:d3:d8:a2:73:14:58:ea:ec:f4:e8:34:fd:ce:e7:8e:27:39:
b3:56:62:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseE61qGa4e0fmdqliUHc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjMwMTAxMDgzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTAwNzExNWQ5NTFiNDY0ZjNjMDA5NGZiNWY5ZTEwMTA0OThjMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3UcUfUBN+Q/oxZHRpJnyDtEEgPp
U+rXtnTtgeiPa8RMb9aUEBc+kQFj6PQ22x/LVwXfST7Mwnt2jpB4iNtltWx8V6ji
bwiqOV966+OciyZpO4HL/AeyUglkIuuBFyVhrq8PSGKm/2rJorKW1b4rySH+xfTt
loUkDfvur01vRkZmuzYlUGhVsz0o4HnfOeWQiKb/Sx5WwxwNjDuOJxs+hQUJZUSC
F2QXcBQosXmoyf98+sGt2/ykRrJVKafCk1ebowUzB0sss9g7431zwhCf8h+l/p7N
p0GK6Rw1QWF8KgOMZopTA4iYVi8Jb0eQgZs+TqQHIB4UjB/dkWBOWSuwOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkAcRXZUbRk88AJT7X54QEEmMAOMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEveVFCeEZkbFJ0R1R6d0FsUHRmbmhBUVNZd0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwh+0MA0G
CSqGSIb3DQEBCwUAA4IBAQCJWgksDyNGM1VfdjMYdcabeSUjtkgnFQAIpcoa1SZB
U2dM0dk7vIhByrfhER1VL9D3Ip1JbHBvQtTTFWW8h900TSGGPCWsGia5K6VTid2E
RxbJk4h3mLvpQjecfJd+l8KoNJWFboTpQhzdb6HhSLmrC0ontFQn3AlTipvPr30t
RfdULw5VkgPCSPSbsohL4O3soIjVGxJkWkmvWlhMGG7UB6JEkoLuCKBzYYjL8JVf
FgvUht8qTbJRWdvwn2G6UioRaT0WDFbNJl0nOc6757oY0yViRWBHcIpzv+DJbwc3
keEfAW6two6kYzO509iicxRY6uz06DT9zueOJzmzVmJb
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:02 2025 by rpki-client