Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/3EqyuUMEqbtmuPziDQNf5d2jUo0.roa
File: 3EqyuUMEqbtmuPziDQNf5d2jUo0.roa (raw, json)
Hash identifier: IoeapWxTpMC8ch5DeuBfC+5/c7jZe0Y5Sm3d94DwS8w=
Subject key identifier: DC:4A:B2:B9:43:04:A9:BB:66:B8:FC:E2:0D:03:5F:E5:DD:A3:52:8D
Certificate issuer: /CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Certificate serial: 0185E3594188CCD024426BF552C1D7C6E011
Authority key identifier: 89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/3EqyuUMEqbtmuPziDQNf5d2jUo0.roa
Signing time: Tue 24 Jan 2023 10:35:55 +0000
ROA not before: Tue 24 Jan 2023 10:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6735
IP address blocks: 194.88.160.0/19 maxlen: 19
2a05:e140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:59:41:88:cc:d0:24:42:6b:f5:52:c1:d7:c6:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Validity
Not Before: Jan 24 10:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc4ab2b94304a9bb66b8fce20d035fe5dda3528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:f6:b7:5c:06:6b:c6:bf:37:ec:5e:2c:e6:
ef:7a:0a:7b:2b:f5:0e:b5:b7:96:10:23:24:03:e8:
8b:36:b8:68:a1:e1:89:25:8e:79:8a:77:18:5e:d1:
da:3b:81:b5:47:34:48:3e:23:b9:1b:97:2f:fa:aa:
9d:c8:29:1e:e9:06:20:b6:1f:be:43:f6:86:0f:11:
9c:43:1b:8e:65:82:22:7f:95:8a:84:4d:8d:a3:fd:
9b:fe:38:77:72:23:18:a2:63:ad:51:28:86:48:c0:
1a:78:c8:d7:c5:a2:af:75:ab:e6:39:28:72:1b:76:
79:79:98:da:11:29:5b:27:24:9f:9c:02:44:32:13:
0b:b5:8c:5c:d9:88:2c:ad:df:64:b4:40:d1:49:5d:
68:0d:96:8e:30:2d:1f:49:60:bc:0d:44:c1:f4:1f:
21:0b:40:2a:88:8a:fc:f4:f1:01:f2:eb:10:83:30:
00:a2:5b:d9:bf:9f:43:1b:ee:e2:1d:99:9e:e9:0a:
3d:69:9b:76:b3:62:80:91:6f:40:02:51:f9:4e:ae:
4f:10:80:36:46:32:39:93:56:b5:50:0f:41:6c:3d:
d0:95:9d:03:12:ed:f0:03:ac:89:0c:40:bd:51:e0:
3a:23:0c:dc:93:3a:33:12:5a:37:0e:00:15:df:fd:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:B2:B9:43:04:A9:BB:66:B8:FC:E2:0D:03:5F:E5:DD:A3:52:8D
X509v3 Authority Key Identifier:
keyid:89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/3EqyuUMEqbtmuPziDQNf5d2jUo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.160.0/19
IPv6:
2a05:e140::/29
Signature Algorithm: sha256WithRSAEncryption
98:2f:49:f5:92:dc:4e:0c:36:86:3c:52:c0:17:86:94:a8:61:
1f:2d:db:1b:33:b6:24:3a:56:e6:f0:ec:ce:ed:3f:10:0d:36:
fb:5d:77:51:34:0d:9d:a0:2e:bb:ff:b1:43:6c:6e:09:04:95:
6d:2e:ce:3e:d4:c5:30:f4:d6:40:d6:b9:af:fd:4d:5f:fa:d3:
a7:34:8c:77:8d:26:f7:20:d7:25:d4:ca:b3:72:7f:87:9d:fa:
66:57:a0:71:bb:e9:2e:c9:6f:dc:9a:2c:36:69:4a:20:b7:19:
d4:32:8b:1c:ba:dc:26:f7:94:1c:d1:7d:45:0c:99:74:83:74:
96:07:e2:33:50:20:d2:f5:d5:f4:82:a9:65:6d:42:76:f1:01:
c2:65:1f:bd:a1:00:ef:21:57:f0:bd:ce:8e:4f:68:09:55:37:
e5:af:aa:97:b3:2f:1f:67:7a:7a:51:d3:ba:b3:0b:2f:be:81:
08:7b:93:a3:91:16:ea:50:52:5e:a1:90:ef:21:78:c1:44:c4:
0a:72:32:c4:1c:08:8c:2f:17:79:f7:7b:d2:26:57:20:29:31:
1b:07:8a:fa:7f:b5:17:ef:02:f0:a5:46:9b:94:7d:eb:fc:e4:
e9:bc:08:38:e0:b6:45:55:f5:71:61:00:2c:f7:87:62:f0:e1:
26:fa:2c:04
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYXjWUGIzNAkQmv1UsHXxuARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2NmYTUyNzg3NzRhNzExZTQ0YmUxZDZiMGMyNzk3ZjIy
ZjJiNzcwHhcNMjMwMTI0MTAzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzRhYjJiOTQzMDRhOWJiNjZiOGZjZTIwZDAzNWZlNWRkYTM1MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8P2t1wGa8a/N+xeLObvegp7K/UO
tbeWECMkA+iLNrhooeGJJY55incYXtHaO4G1RzRIPiO5G5cv+qqdyCke6QYgth++
Q/aGDxGcQxuOZYIif5WKhE2No/2b/jh3ciMYomOtUSiGSMAaeMjXxaKvdavmOShy
G3Z5eZjaESlbJySfnAJEMhMLtYxc2Ygsrd9ktEDRSV1oDZaOMC0fSWC8DUTB9B8h
C0AqiIr89PEB8usQgzAAolvZv59DG+7iHZme6Qo9aZt2s2KAkW9AAlH5Tq5PEIA2
RjI5k1a1UA9BbD3QlZ0DEu3wA6yJDEC9UeA6IwzckzozElo3DgAV3/0JDwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNxKsrlDBKm7Zrj84g0DX+Xdo1KNMB8GA1UdIwQY
MBaAFIk8+lJ4d0pxHkS+HWsMJ5fyLyt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVR6NlVuaDNTbkVlUkw0ZGF3d25sX0l2SzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Yzk3YTgtMGE3Mi00NjQ2LWJiZWYt
NGE1OGY2ZjRhNTIwLzEvM0VxeXVVTUVxYnRtdVB6aURRTmY1ZDJqVW8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Yzk3YTgtMGE3Mi00NjQ2LWJiZWYtNGE1OGY2ZjRhNTIw
LzEvaVR6NlVuaDNTbkVlUkw0ZGF3d25sX0l2SzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwligMA0E
AgACMAcDBQMqBeFAMA0GCSqGSIb3DQEBCwUAA4IBAQCYL0n1ktxODDaGPFLAF4aU
qGEfLdsbM7YkOlbm8OzO7T8QDTb7XXdRNA2doC67/7FDbG4JBJVtLs4+1MUw9NZA
1rmv/U1f+tOnNIx3jSb3INcl1Mqzcn+HnfpmV6Bxu+kuyW/cmiw2aUogtxnUMosc
utwm95Qc0X1FDJl0g3SWB+IzUCDS9dX0gqllbUJ28QHCZR+9oQDvIVfwvc6OT2gJ
VTflr6qXsy8fZ3p6UdO6swsvvoEIe5OjkRbqUFJeoZDvIXjBRMQKcjLEHAiMLxd5
93vSJlcgKTEbB4r6f7UX7wLwpUablH3r/OTpvAg44LZFVfVxYQAs94di8OEm+iwE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:43 2025 by rpki-client