Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/BU2rbhRnQp6ng-rJZqtfGrIQ1xI.roa
File: BU2rbhRnQp6ng-rJZqtfGrIQ1xI.roa (raw, json)
Hash identifier: NdMQTtPYFBIEMJZpC4HsPkS+UGXPVpeX4aSxTp4vYJ8=
Subject key identifier: 05:4D:AB:6E:14:67:42:9E:A7:83:EA:C9:66:AB:5F:1A:B2:10:D7:12
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0185E9299106118B4647CBBB9DCD57FF6051
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/BU2rbhRnQp6ng-rJZqtfGrIQ1xI.roa
Signing time: Wed 25 Jan 2023 13:41:33 +0000
ROA not before: Wed 25 Jan 2023 13:41:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 37.44.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:29:91:06:11:8b:46:47:cb:bb:9d:cd:57:ff:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 25 13:41:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=054dab6e1467429ea783eac966ab5f1ab210d712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:a1:79:8b:ab:d5:e6:0c:c9:cc:70:27:9d:
5a:c2:35:38:22:ee:b8:62:97:77:4f:02:e7:6a:ca:
46:d3:43:f8:3f:0d:b1:88:7c:ba:ed:bb:ce:4d:77:
c8:93:b7:78:3b:0a:87:ed:19:18:ce:9d:fb:b2:7b:
50:47:5f:81:02:0a:91:02:18:00:96:b2:f4:18:c9:
69:b6:c4:e3:2c:7e:13:e3:07:29:99:47:6b:e9:54:
21:89:19:82:ad:13:51:1f:4c:f8:eb:55:c2:07:31:
fa:2b:3e:17:1e:b6:e1:2b:cd:2b:95:9f:fc:80:fe:
86:6c:5a:52:eb:aa:f5:33:4b:92:e9:b8:ec:39:99:
5a:d7:01:f6:97:ae:2d:69:30:eb:5a:8f:0c:05:f8:
42:07:8f:48:9a:c5:eb:df:d1:57:a8:23:81:e6:71:
38:cf:f8:df:0e:7e:9b:59:68:7c:e6:3f:ff:40:16:
24:d5:f3:87:bf:e0:f4:1f:91:f9:00:69:d5:e1:03:
a3:9f:6d:86:1a:a7:7a:f7:b3:28:c8:86:cd:ab:0e:
f6:83:52:46:20:9a:db:ef:a1:69:38:ad:ef:ab:b0:
9d:74:77:91:86:1c:60:85:42:95:99:3f:d9:bb:5c:
b4:5d:ea:d7:f8:39:7a:a9:0f:2e:1d:98:07:23:92:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:AB:6E:14:67:42:9E:A7:83:EA:C9:66:AB:5F:1A:B2:10:D7:12
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/BU2rbhRnQp6ng-rJZqtfGrIQ1xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.252.0/23
Signature Algorithm: sha256WithRSAEncryption
89:55:be:72:e9:fc:94:53:6e:13:e0:24:3d:48:93:71:eb:3a:
a7:d9:8a:5d:d6:d7:35:70:fd:65:c3:c8:11:4f:30:65:6d:ce:
1a:49:08:22:53:de:10:1c:34:bd:34:cc:f3:b8:55:a1:77:26:
de:b4:ad:43:59:7c:3c:3c:cc:00:d2:7f:59:2c:0f:97:83:e3:
48:e5:ed:bd:10:27:f0:72:8b:fc:01:7a:3d:4e:1f:c5:e1:d7:
32:9f:31:f9:26:5a:7f:f6:cd:c4:f0:dd:6b:45:25:b7:08:ab:
ba:99:ef:b5:8a:56:1a:c2:c8:a9:c3:c8:d7:4a:f8:ac:74:6a:
e0:04:76:69:64:93:68:c0:47:75:a8:0c:10:d1:2c:43:9b:4a:
99:6b:6b:7d:7b:7f:6f:0d:c7:02:0f:f2:6a:c1:d8:70:09:26:
89:f7:44:be:69:db:e3:93:7b:b5:b3:d7:9d:ae:64:b6:44:1e:
19:30:ff:ce:2e:fe:c8:51:de:c3:98:bb:40:49:96:7f:cd:4d:
68:9f:64:37:9a:0c:a0:ab:84:dc:48:66:e8:96:cf:5b:74:77:
ac:dd:6c:54:f3:5f:59:ba:65:d3:44:ae:35:d2:dd:8d:d3:47:
25:c8:38:0e:28:92:9d:d8:4f:f7:8e:1e:b9:7b:60:1d:dc:b8:
ea:91:70:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXpKZEGEYtGR8u7nc1X/2BRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDk1MTZkYjk0MTc5NTJkZWRkOTI1MmZlNWQ4M2YwOWEz
ZDk5ZjUwHhcNMjMwMTI1MTM0MTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTRkYWI2ZTE0Njc0MjllYTc4M2VhYzk2NmFiNWYxYWIyMTBkNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TKheYur1eYMycxwJ51awjU4Iu64
Ypd3TwLnaspG00P4Pw2xiHy67bvOTXfIk7d4OwqH7RkYzp37sntQR1+BAgqRAhgA
lrL0GMlptsTjLH4T4wcpmUdr6VQhiRmCrRNRH0z461XCBzH6Kz4XHrbhK80rlZ/8
gP6GbFpS66r1M0uS6bjsOZla1wH2l64taTDrWo8MBfhCB49ImsXr39FXqCOB5nE4
z/jfDn6bWWh85j//QBYk1fOHv+D0H5H5AGnV4QOjn22GGqd697MoyIbNqw72g1JG
IJrb76FpOK3vq7CddHeRhhxghUKVmT/Zu1y0XerX+Dl6qQ8uHZgHI5K8UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVNq24UZ0Kep4PqyWarXxqyENcSMB8GA1UdIwQY
MBaAFCzZUW25QXlS3t2SUv5dg/CaPZn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5sUmJibEJlVkxlM1pKU19sMkQ4Sm85bWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iYWI1M2ItMzExNS00MWM1LTg3ZWEt
YzAwNDU0ZTBiMTJhLzEvQlUycmJoUm5RcDZuZy1ySlpxdGZHcklRMXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iYWI1M2ItMzExNS00MWM1LTg3ZWEtYzAwNDU0ZTBiMTJh
LzEvTE5sUmJibEJlVkxlM1pKU19sMkQ4Sm85bWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJSz8MA0G
CSqGSIb3DQEBCwUAA4IBAQCJVb5y6fyUU24T4CQ9SJNx6zqn2Ypd1tc1cP1lw8gR
TzBlbc4aSQgiU94QHDS9NMzzuFWhdybetK1DWXw8PMwA0n9ZLA+Xg+NI5e29ECfw
cov8AXo9Th/F4dcynzH5Jlp/9s3E8N1rRSW3CKu6me+1ilYawsipw8jXSvisdGrg
BHZpZJNowEd1qAwQ0SxDm0qZa2t9e39vDccCD/JqwdhwCSaJ90S+advjk3u1s9ed
rmS2RB4ZMP/OLv7IUd7DmLtASZZ/zU1on2Q3mgygq4TcSGbols9bdHes3WxU819Z
umXTRK410t2N00clyDgOKJKd2E/3jh65e2Ad3LjqkXDN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:40 2025 by rpki-client