Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/5-JiLFp2T47Gue_7kKJkaZsp37E.roa
File: 5-JiLFp2T47Gue_7kKJkaZsp37E.roa (raw, json)
Hash identifier: nMQu4z0ldE4M/PYgjbdRB8kYI7Rr+BlnZPmlDd/h020=
Subject key identifier: E7:E2:62:2C:5A:76:4F:8E:C6:B9:EF:FB:90:A2:64:69:9B:29:DF:B1
Certificate issuer: /CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Certificate serial: 018540F4C644133FBD6C44F98DC2F86897D2
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/5-JiLFp2T47Gue_7kKJkaZsp37E.roa
Signing time: Fri 23 Dec 2022 21:47:41 +0000
ROA not before: Fri 23 Dec 2022 21:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:f4:c6:44:13:3f:bd:6c:44:f9:8d:c2:f8:68:97:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Validity
Not Before: Dec 23 21:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7e2622c5a764f8ec6b9effb90a264699b29dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:63:f5:70:c1:81:34:08:33:3a:9b:95:62:
73:1a:34:e8:27:19:f8:68:7d:2f:5c:cc:f5:57:06:
ea:d3:2c:77:c5:85:7c:c9:6f:19:0c:a4:c8:b6:d9:
1d:8d:5d:42:03:4f:ce:24:18:ba:2b:fe:f5:3f:8c:
93:10:32:51:f8:c8:ae:50:f1:65:4e:83:47:77:15:
a3:4a:ed:09:e5:c4:d6:7d:58:30:13:48:55:04:fa:
db:a4:48:be:b9:3c:a9:03:f1:dc:fd:bd:91:04:1f:
ff:b6:c9:a0:60:67:81:59:ca:96:72:84:f1:81:d2:
cc:0e:90:7f:ec:bb:75:4f:d6:23:09:92:b2:f5:45:
bc:16:d5:cf:69:3a:70:73:dd:12:e2:af:6a:b3:f1:
e6:4d:d2:54:85:90:b7:21:56:06:35:cc:63:da:1c:
81:07:b5:ca:6e:52:f3:de:f6:c3:d6:26:25:4b:e3:
20:7a:3f:72:f1:c3:d1:5e:97:66:90:8d:4e:8d:7e:
22:15:1e:94:dd:ce:78:32:a9:67:70:00:b1:41:78:
69:57:33:73:ad:58:0e:7b:45:e9:a6:90:be:b2:ee:
0c:ed:89:16:be:aa:e8:a1:c7:c1:6f:32:f8:57:e4:
a5:4c:68:c3:f1:4d:e2:13:7c:bb:b2:99:48:c7:f4:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:62:2C:5A:76:4F:8E:C6:B9:EF:FB:90:A2:64:69:9B:29:DF:B1
X509v3 Authority Key Identifier:
keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/5-JiLFp2T47Gue_7kKJkaZsp37E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
13:38:dd:01:78:77:68:bb:b6:f2:2e:14:1c:62:ca:e5:60:8b:
68:95:91:fb:68:30:50:4e:38:ed:1e:05:b3:6e:19:1a:1e:da:
70:e1:0d:dd:8c:15:49:dc:ad:06:14:53:64:87:78:ec:25:ad:
22:c7:67:f2:5f:17:69:32:b3:37:cc:4d:aa:a7:aa:4a:74:f5:
b9:e9:22:9a:0c:e2:83:3d:92:7c:9b:35:31:41:7d:e3:db:cf:
59:f8:c6:4f:7e:b6:26:4b:a5:a3:d1:00:30:72:6a:31:4c:64:
91:02:bb:62:a0:de:6e:ee:8d:02:2e:e3:ea:b4:65:87:31:cb:
aa:04:97:58:c3:2d:46:f3:76:64:64:7d:a8:38:91:8d:fd:68:
a2:ff:c5:df:80:8d:7b:c3:e9:96:d7:59:44:c5:00:05:45:bd:
40:40:bb:62:02:9c:88:55:3b:8c:fa:5f:88:03:a5:0d:cc:b0:
66:6d:a7:58:28:f5:7b:58:6f:ab:fb:89:1b:e8:08:10:dc:4e:
b5:e3:0e:f6:d9:aa:95:3b:d5:02:c3:58:ec:5c:99:71:63:f2:
5f:79:01:65:23:4b:b7:fd:24:7d:15:a4:9b:f7:a6:73:4b:96:
97:43:41:0c:2a:be:b0:28:e6:4d:fc:ef:7e:35:10:6e:3c:07:
a0:88:aa:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVA9MZEEz+9bET5jcL4aJfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzk5N2VmN2Y3ZjFlMWRhMTBlNWMxZDk4ZWEzMTQ3NGI2
ZGJiMTEwHhcNMjIxMjIzMjE0NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2UyNjIyYzVhNzY0ZjhlYzZiOWVmZmI5MGEyNjQ2OTliMjlkZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq9j9XDBgTQIMzqblWJzGjToJxn4
aH0vXMz1Vwbq0yx3xYV8yW8ZDKTIttkdjV1CA0/OJBi6K/71P4yTEDJR+MiuUPFl
ToNHdxWjSu0J5cTWfVgwE0hVBPrbpEi+uTypA/Hc/b2RBB//tsmgYGeBWcqWcoTx
gdLMDpB/7Lt1T9YjCZKy9UW8FtXPaTpwc90S4q9qs/HmTdJUhZC3IVYGNcxj2hyB
B7XKblLz3vbD1iYlS+Mgej9y8cPRXpdmkI1OjX4iFR6U3c54MqlncACxQXhpVzNz
rVgOe0XpppC+su4M7YkWvqroocfBbzL4V+SlTGjD8U3iE3y7splIx/S3GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfiYixadk+Oxrnv+5CiZGmbKd+xMB8GA1UdIwQY
MBaAFP95l+9/fx4doQ5cHZjqMUdLbbsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNtWDczOV9IaDJoRGx3ZG1Pb3hSMHR0dXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNjc5MDQtNGYzOC00YTJhLTk2ZTIt
MjNhYTE0MjQ0NGUxLzEvNS1KaUxGcDJUNDdHdWVfN2tLSmthWnNwMzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNjc5MDQtNGYzOC00YTJhLTk2ZTItMjNhYTE0MjQ0NGUx
LzEvXzNtWDczOV9IaDJoRGx3ZG1Pb3hSMHR0dXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaN/MA0G
CSqGSIb3DQEBCwUAA4IBAQATON0BeHdou7byLhQcYsrlYItolZH7aDBQTjjtHgWz
bhkaHtpw4Q3djBVJ3K0GFFNkh3jsJa0ix2fyXxdpMrM3zE2qp6pKdPW56SKaDOKD
PZJ8mzUxQX3j289Z+MZPfrYmS6Wj0QAwcmoxTGSRArtioN5u7o0CLuPqtGWHMcuq
BJdYwy1G83ZkZH2oOJGN/Wii/8XfgI17w+mW11lExQAFRb1AQLtiApyIVTuM+l+I
A6UNzLBmbadYKPV7WG+r+4kb6AgQ3E614w722aqVO9UCw1jsXJlxY/JfeQFlI0u3
/SR9FaSb96ZzS5aXQ0EMKr6wKOZN/O9+NRBuPAegiKrb
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:05 2023 by rpki-client on console-fra.rpki-client.org