Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa
File: wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa (raw, json)
Hash identifier: +f1v9kaXJ5LLEDqxq86GAmqUtvk7qadJq7M0jL7gmaA=
Subject key identifier: C1:3E:33:35:1E:AA:67:E1:13:1F:26:8C:F0:58:17:BA:C6:50:EC:00
Certificate issuer: /CN=923aa0015ac180c236ffa211d969674286d073e9
Certificate serial: DD3173
Authority key identifier: 92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa
Signing time: Sat 01 Jan 2022 06:01:57 +0000
ROA not before: Sat 01 Jan 2022 06:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.93.232.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14496115 (0xdd3173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923aa0015ac180c236ffa211d969674286d073e9
Validity
Not Before: Jan 1 06:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c13e33351eaa67e1131f268cf05817bac650ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8f:5e:99:4e:99:e1:c0:f7:06:00:07:37:f0:
8c:9d:f6:3b:d0:5e:e0:ab:bd:9b:cb:42:27:22:b0:
45:0a:5d:d1:08:7d:a0:ec:66:22:ee:8a:02:23:32:
58:24:89:1e:1c:41:4a:ba:98:a8:04:14:76:3b:dc:
4e:60:ff:43:3e:79:1e:40:62:cb:cf:da:70:2b:24:
b3:0e:ac:4a:c9:42:f0:10:b9:49:98:7e:ad:65:ac:
75:de:a1:8f:aa:a4:02:c1:b8:33:61:b4:bb:73:26:
ea:1a:44:15:c9:ae:fd:0a:1a:4a:96:6a:ab:ff:13:
71:33:e6:4d:8f:45:7b:00:1e:82:10:52:88:f2:27:
3f:6f:7e:7b:dd:45:51:97:34:af:72:45:18:86:a4:
f2:89:92:13:69:bf:45:e5:c8:80:b2:87:ca:b8:d4:
f6:e1:78:ad:cc:80:98:be:c9:d4:de:4f:a8:b6:61:
40:7c:73:fd:b9:37:dd:c4:88:59:a1:6b:46:04:c8:
4a:40:1f:72:5d:d6:92:a8:6b:4b:f3:89:ff:f5:4f:
41:ac:a9:e4:bc:d2:06:ce:67:04:e1:ac:de:4e:b2:
f7:02:a3:62:66:5f:0b:ac:99:a3:23:c2:9c:7f:25:
4d:78:35:99:6e:03:14:69:56:d0:2f:fa:a3:68:2a:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:33:35:1E:AA:67:E1:13:1F:26:8C:F0:58:17:BA:C6:50:EC:00
X509v3 Authority Key Identifier:
keyid:92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.144.0/22
185.93.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:a1:3f:50:86:37:a5:91:cd:07:27:e1:77:f4:ae:53:d0:ef:
3e:cd:d4:97:fc:84:41:c6:f3:24:00:c6:44:77:88:07:6c:33:
75:68:b6:72:ec:90:24:41:e2:1d:1b:9e:13:62:c9:84:de:78:
a1:8b:3b:b8:f3:25:92:6f:f1:38:2d:52:21:03:a7:e4:91:f1:
d3:0d:89:58:0a:c7:22:95:4f:0f:4b:4f:df:b0:d7:cc:62:09:
ec:47:7e:eb:a0:48:fa:b3:ad:d0:77:cb:51:c5:50:36:4f:4f:
ad:6e:85:56:01:e7:b0:28:d6:75:1f:d3:db:16:e4:fd:55:79:
47:77:04:c8:9e:40:71:1a:75:6d:c0:3a:39:fd:5e:28:e8:31:
87:10:90:70:85:39:35:98:4c:1c:01:a6:50:ae:65:d3:34:0a:
ad:c9:7b:51:ae:ee:07:b4:5f:61:84:59:65:56:b3:3b:c3:40:
30:76:27:b9:ca:43:a9:09:d6:9c:22:a5:6f:e2:94:58:2c:8b:
1b:72:07:64:e7:bd:96:3f:c3:9f:fa:d6:bc:41:14:12:8f:ea:
fa:ce:74:da:e9:e6:19:3d:d5:27:38:d9:d0:32:3d:16:dd:e2:
3a:2f:45:52:81:6c:8e:dc:24:a3:9f:8a:19:8d:72:24:d4:06:
44:20:e6:d7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAN0xczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjNhYTAwMTVhYzE4MGMyMzZmZmEyMTFkOTY5Njc0Mjg2ZDA3M2U5MB4XDTIyMDEw
MTA2MDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzEzZTMzMzUxZWFh
NjdlMTEzMWYyNjhjZjA1ODE3YmFjNjUwZWMwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPSPXplOmeHA9wYABzfwjJ32O9Be4Ku9m8tCJyKwRQpd0Qh9
oOxmIu6KAiMyWCSJHhxBSrqYqAQUdjvcTmD/Qz55HkBiy8/acCsksw6sSslC8BC5
SZh+rWWsdd6hj6qkAsG4M2G0u3Mm6hpEFcmu/QoaSpZqq/8TcTPmTY9FewAeghBS
iPInP29+e91FUZc0r3JFGIak8omSE2m/ReXIgLKHyrjU9uF4rcyAmL7J1N5PqLZh
QHxz/bk33cSIWaFrRgTISkAfcl3WkqhrS/OJ//VPQayp5LzSBs5nBOGs3k6y9wKj
YmZfC6yZoyPCnH8lTXg1mW4DFGlW0C/6o2gq7BUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTBPjM1Hqpn4RMfJozwWBe6xlDsADAfBgNVHSMEGDAWgBSSOqABWsGAwjb/
ohHZaWdChtBz6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tqcWdBVnJCZ01JMl82SVIyV2xuUW9iUWMtay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvMDI2ZWNjLTM2ZjktNDkwZi04OTM0LTg1ZjU0OGQ3NGRiOS8x
L3dUNHpOUjZxWi1FVEh5YU04RmdYdXNaUTdBQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
MDI2ZWNjLTM2ZjktNDkwZi04OTM0LTg1ZjU0OGQ3NGRiOS8xL2tqcWdBVnJCZ01J
Ml82SVIyV2xuUW9iUWMtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvykAMEArld6DANBgkqhkiG9w0B
AQsFAAOCAQEAP6E/UIY3pZHNByfhd/SuU9DvPs3Ul/yEQcbzJADGRHeIB2wzdWi2
cuyQJEHiHRueE2LJhN54oYs7uPMlkm/xOC1SIQOn5JHx0w2JWArHIpVPD0tP37DX
zGIJ7Ed+66BI+rOt0HfLUcVQNk9PrW6FVgHnsCjWdR/T2xbk/VV5R3cEyJ5AcRp1
bcA6Of1eKOgxhxCQcIU5NZhMHAGmUK5l0zQKrcl7Ua7uB7RfYYRZZVazO8NAMHYn
ucpDqQnWnCKlb+KUWCyLG3IHZOe9lj/Dn/rWvEEUEo/q+s502unmGT3VJzjZ0DI9
Ft3iOi9FUoFsjtwko5+KGY1yJNQGRCDm1w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:36 2025 by rpki-client