Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/32a9v9UgxA6r_cq13J5Gp_7jvzU.roa
File: 32a9v9UgxA6r_cq13J5Gp_7jvzU.roa (raw, json)
Hash identifier: MLsNjnNoAhk/VAJ3xWRMhpiB7w9OqJRiirI6Dj71X1s=
Subject key identifier: DF:66:BD:BF:D5:20:C4:0E:AB:FD:CA:B5:DC:9E:46:A7:FE:E3:BF:35
Certificate issuer: /CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
Certificate serial: 01882086B1EF85C61BD52126466D020079C6
Authority key identifier: BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/32a9v9UgxA6r_cq13J5Gp_7jvzU.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.163.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:ef:85:c6:1b:d5:21:26:46:6d:02:00:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df66bdbfd520c40eabfdcab5dc9e46a7fee3bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:49:81:7a:7d:97:15:a8:a2:34:0e:c0:b4:
4a:27:d4:f6:4a:94:26:3f:22:fa:7d:57:b7:39:7f:
1d:cf:f7:a8:92:b4:df:fe:20:14:65:7d:57:8e:bc:
7e:de:15:c0:78:55:21:04:64:24:d2:46:31:d0:a1:
56:8e:29:76:02:9b:01:a5:c8:6b:9d:13:5a:e3:f1:
98:31:01:10:8f:aa:69:be:53:e5:fb:97:aa:6e:a8:
dd:47:d3:56:96:6a:33:7f:87:95:f6:78:33:cf:07:
bd:1f:87:4a:60:83:0b:93:9d:27:92:e8:fd:35:4a:
fd:63:14:dc:51:1a:e5:69:ba:34:ae:59:2e:73:0d:
66:a2:3d:31:55:f7:29:8a:73:4a:97:25:6a:be:dd:
fd:88:e5:ac:21:e1:41:7f:13:bb:05:15:42:a4:36:
9e:1c:12:65:fb:bb:8e:20:34:01:99:fd:2b:cd:8d:
f4:0b:8e:3f:71:1f:6c:d8:8c:ed:50:3f:ef:00:64:
51:51:e1:56:f3:17:45:53:4f:4c:05:47:08:0f:ab:
c5:45:6c:ef:b7:9d:c2:5a:50:67:d3:11:e1:eb:19:
31:e0:c6:93:1d:5c:86:7c:9b:ef:db:f9:24:87:a1:
a5:4c:7d:31:46:59:37:d3:32:a5:58:d1:94:e8:a2:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:66:BD:BF:D5:20:C4:0E:AB:FD:CA:B5:DC:9E:46:A7:FE:E3:BF:35
X509v3 Authority Key Identifier:
keyid:BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/32a9v9UgxA6r_cq13J5Gp_7jvzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8c:9d:54:f2:ec:41:db:b4:0e:d8:03:36:75:b9:96:c3:69:
bf:20:47:0f:c1:de:1e:86:34:1a:ca:2d:e8:c5:45:29:90:68:
20:10:c5:77:8d:44:b5:f1:51:58:8b:27:87:c5:7e:07:b7:37:
34:38:15:ba:5b:ed:c6:ba:82:40:95:14:a7:b9:f7:1d:0f:a7:
b6:23:7e:0e:c0:ae:17:40:38:d2:f7:d3:38:80:3f:c6:d7:f7:
d6:7c:31:20:e4:b2:eb:86:1b:b1:70:c0:2a:c7:21:0e:a8:76:
ca:b8:91:f6:43:a0:a3:61:9c:32:ea:d0:6f:7c:08:64:fb:5f:
1c:5c:49:05:b6:22:db:df:d9:e2:89:31:09:cd:87:72:63:9d:
53:40:78:81:70:0d:3c:f8:11:33:78:b8:a5:ac:d2:5e:88:27:
39:91:b5:90:53:6b:d1:c8:1b:61:63:70:cb:9d:f6:44:62:31:
a4:a7:5a:86:7d:07:c7:39:6c:d4:e1:b9:6e:26:2a:a2:e3:32:
6a:93:37:0d:15:68:26:63:10:0f:bd:2c:cf:c7:dc:3a:d0:b8:
80:ef:64:c0:4a:c8:c9:b4:dd:19:25:60:53:0e:35:e3:98:0a:
88:69:11:11:d3:fe:0b:70:1c:8a:94:d5:86:2f:5c:0d:d5:70:
33:38:7c:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrHvhcYb1SEmRm0CAHnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmVlNWNmNGJmYzJiNmNiZGQwODZhYWUzODc3YWJmNjc5
N2RlYTgwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjY2YmRiZmQ1MjBjNDBlYWJmZGNhYjVkYzllNDZhN2ZlZTNiZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PJJgXp9lxWoojQOwLRKJ9T2SpQm
PyL6fVe3OX8dz/eokrTf/iAUZX1Xjrx+3hXAeFUhBGQk0kYx0KFWjil2ApsBpchr
nRNa4/GYMQEQj6ppvlPl+5eqbqjdR9NWlmozf4eV9ngzzwe9H4dKYIMLk50nkuj9
NUr9YxTcURrlabo0rlkucw1moj0xVfcpinNKlyVqvt39iOWsIeFBfxO7BRVCpDae
HBJl+7uOIDQBmf0rzY30C44/cR9s2IztUD/vAGRRUeFW8xdFU09MBUcID6vFRWzv
t53CWlBn0xHh6xkx4MaTHVyGfJvv2/kkh6GlTH0xRlk30zKlWNGU6KKhdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9mvb/VIMQOq/3KtdyeRqf+4781MB8GA1UdIwQY
MBaAFL4u5c9L/CtsvdCGquOHer9nl96oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmk3bHowdjhLMnk5MElhcTQ0ZDZ2MmVYM3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mZTRmMDEtNjExNi00Yjk3LWI3YTUt
ZGZmMWY5ZWU2MTM1LzEvMzJhOXY5VWd4QTZyX2NxMTNKNUdwXzdqdnpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mZTRmMDEtNjExNi00Yjk3LWI3YTUtZGZmMWY5ZWU2MTM1
LzEvdmk3bHowdjhLMnk5MElhcTQ0ZDZ2MmVYM3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPBMA0G
CSqGSIb3DQEBCwUAA4IBAQBrjJ1U8uxB27QO2AM2dbmWw2m/IEcPwd4ehjQayi3o
xUUpkGggEMV3jUS18VFYiyeHxX4Htzc0OBW6W+3GuoJAlRSnufcdD6e2I34OwK4X
QDjS99M4gD/G1/fWfDEg5LLrhhuxcMAqxyEOqHbKuJH2Q6CjYZwy6tBvfAhk+18c
XEkFtiLb39niiTEJzYdyY51TQHiBcA08+BEzeLilrNJeiCc5kbWQU2vRyBthY3DL
nfZEYjGkp1qGfQfHOWzU4bluJiqi4zJqkzcNFWgmYxAPvSzPx9w60LiA72TASsjJ
tN0ZJWBTDjXjmAqIaRER0/4LcByKlNWGL1wN1XAzOHy+
-----END CERTIFICATE-----
Generated at Wed Oct 4 08:15:09 2023 by rpki-client on console-fra.rpki-client.org