Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/cueDDeu2ZHY7ZCxUqG_8XaRgyH0.roa
File: cueDDeu2ZHY7ZCxUqG_8XaRgyH0.roa (raw, json)
Hash identifier: yPlzMqr8usIVP/aiLjKQvAjm4gHpyL+Z7/lHSudagPc=
Subject key identifier: 72:E7:83:0D:EB:B6:64:76:3B:64:2C:54:A8:6F:FC:5D:A4:60:C8:7D
Certificate issuer: /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial: 018805C9783BDEB123C4216B823BE82C8D07
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/cueDDeu2ZHY7ZCxUqG_8XaRgyH0.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 185.76.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:78:3b:de:b1:23:c4:21:6b:82:3b:e8:2c:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72e7830debb664763b642c54a86ffc5da460c87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:0d:06:82:b3:3f:9b:62:0a:62:da:97:25:
da:81:92:70:80:16:72:a8:25:8e:8b:bd:8d:c5:70:
73:b2:67:1b:c4:24:20:2a:7d:64:c8:f7:82:05:38:
c5:b1:7b:6f:6a:76:57:63:db:64:74:d3:de:65:7b:
e8:28:8f:d0:63:bb:8f:0e:14:59:4a:5d:84:85:08:
c6:50:cd:62:eb:bf:ba:a2:a3:63:77:43:2f:a5:3e:
05:cc:1c:3a:a1:28:44:14:72:0e:55:c4:5e:18:ac:
4d:e7:32:c8:c5:f7:8d:81:07:2e:de:8e:e2:e7:52:
71:69:f2:60:ad:de:4c:19:35:c5:0d:c1:5a:1d:65:
70:79:d6:48:76:0f:37:cc:10:29:8e:ec:7c:db:67:
e9:2b:6b:d2:52:83:83:05:75:cb:4a:de:9c:31:8b:
ae:d1:16:14:93:27:43:6f:cb:0e:2d:1a:47:e3:bc:
07:e1:f7:cf:53:2c:1d:66:ab:0f:9e:0d:c6:53:60:
f7:fa:c5:45:d7:94:1d:4b:57:80:a8:46:30:df:61:
8a:e0:53:87:ba:4f:49:be:72:96:3d:2f:f3:61:92:
f3:a7:85:c5:bf:22:1e:ed:bd:53:85:ec:46:ec:01:
9d:f9:a3:fe:ba:82:85:1b:d4:e1:3b:90:98:c7:50:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:83:0D:EB:B6:64:76:3B:64:2C:54:A8:6F:FC:5D:A4:60:C8:7D
X509v3 Authority Key Identifier:
keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/cueDDeu2ZHY7ZCxUqG_8XaRgyH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
83:10:38:aa:8e:43:aa:51:69:89:4e:86:89:9a:4c:ca:73:61:
1b:8d:fa:76:2e:ca:48:1a:2c:af:ae:7d:54:7e:f2:aa:27:fb:
2d:ac:0e:b1:c9:cf:3a:b3:8b:55:88:30:c9:94:b1:70:c7:a6:
4e:35:db:17:c1:b7:30:34:47:9c:ef:67:fa:bb:45:54:a6:79:
b2:a6:13:3d:e0:c6:57:e5:71:8f:4a:51:d2:74:34:3a:4f:ef:
17:a9:2a:7f:f1:4b:73:7a:ff:a2:7e:b0:83:66:bf:19:cc:e2:
d5:41:ae:1a:68:5b:52:a5:ab:46:ef:aa:d9:ad:b5:6e:b4:b6:
af:91:a4:57:96:7f:35:55:15:11:32:a6:b5:15:87:31:4d:a3:
62:e4:54:71:58:0d:27:4d:2e:07:c0:f5:cc:56:89:2d:a8:03:
71:74:60:59:fc:ee:fa:67:ea:d7:e0:06:4d:f0:1a:24:05:6a:
8e:a2:01:c9:68:72:29:91:39:e2:00:65:c4:39:2e:f5:7c:5d:
1c:09:23:a8:29:0f:e7:90:4b:2c:25:2d:df:46:31:d3:6b:36:
05:45:1e:a6:d7:92:d9:a4:0b:7a:10:ee:4a:b8:8f:07:ba:a4:
8c:d4:17:de:be:4d:f9:c1:36:65:99:a6:ca:80:98:ac:21:eb:
5c:b4:73:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgFyXg73rEjxCFrgjvoLI0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNmZkNmI2NWExMWEzYTcyYzIyZmFhZGEwNmMzMWYyZjYz
MzE2MzcwHhcNMjMwNTEwMTMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmU3ODMwZGViYjY2NDc2M2I2NDJjNTRhODZmZmM1ZGE0NjBjODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHoNBoKzP5tiCmLalyXagZJwgBZy
qCWOi72NxXBzsmcbxCQgKn1kyPeCBTjFsXtvanZXY9tkdNPeZXvoKI/QY7uPDhRZ
Sl2EhQjGUM1i67+6oqNjd0MvpT4FzBw6oShEFHIOVcReGKxN5zLIxfeNgQcu3o7i
51JxafJgrd5MGTXFDcFaHWVwedZIdg83zBApjux822fpK2vSUoODBXXLSt6cMYuu
0RYUkydDb8sOLRpH47wH4ffPUywdZqsPng3GU2D3+sVF15QdS1eAqEYw32GK4FOH
uk9JvnKWPS/zYZLzp4XFvyIe7b1ThexG7AGd+aP+uoKFG9ThO5CYx1AptwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLngw3rtmR2O2QsVKhv/F2kYMh9MB8GA1UdIwQY
MBaAFAJv1rZaEaOnLCL6raBsMfL2MxY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1fV3Rsb1JvNmNzSXZxdG9Hd3g4dll6RmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTQ4ZGItYTFmYS00MDExLTg5MTct
NGVhYmUzYzVlNDE4LzEvY3VlRERldTJaSFk3WkN4VXFHXzhYYVJneUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yMTQ4ZGItYTFmYS00MDExLTg5MTctNGVhYmUzYzVlNDE4
LzEvQW1fV3Rsb1JvNmNzSXZxdG9Hd3g4dll6RmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUyWMA0G
CSqGSIb3DQEBCwUAA4IBAQCDEDiqjkOqUWmJToaJmkzKc2Ebjfp2LspIGiyvrn1U
fvKqJ/strA6xyc86s4tViDDJlLFwx6ZONdsXwbcwNEec72f6u0VUpnmyphM94MZX
5XGPSlHSdDQ6T+8XqSp/8Utzev+ifrCDZr8ZzOLVQa4aaFtSpatG76rZrbVutLav
kaRXln81VRURMqa1FYcxTaNi5FRxWA0nTS4HwPXMVoktqANxdGBZ/O76Z+rX4AZN
8BokBWqOogHJaHIpkTniAGXEOS71fF0cCSOoKQ/nkEssJS3fRjHTazYFRR6m15LZ
pAt6EO5KuI8HuqSM1Bfevk35wTZlmabKgJisIetctHPe
-----END CERTIFICATE-----
Generated at Thu Jul 20 14:34:26 2023 by rpki-client on console-ams.rpki-client.org