Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/2sy3ooZEaPNyRyOknMGAZtjGTj4.roa
File: 2sy3ooZEaPNyRyOknMGAZtjGTj4.roa (raw, json)
Hash identifier: acqijJmI3YFpag++USWuOANbMNx8IvvurscNCb3m/2k=
Subject key identifier: DA:CC:B7:A2:86:44:68:F3:72:47:23:A4:9C:C1:80:66:D8:C6:4E:3E
Certificate issuer: /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial: 0187950B0A5EDFC25DF6C00DE4785AFAC37F
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/2sy3ooZEaPNyRyOknMGAZtjGTj4.roa
Signing time: Tue 18 Apr 2023 15:45:41 +0000
ROA not before: Tue 18 Apr 2023 15:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 193.38.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:0b:0a:5e:df:c2:5d:f6:c0:0d:e4:78:5a:fa:c3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Validity
Not Before: Apr 18 15:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daccb7a2864468f3724723a49cc18066d8c64e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:c2:86:e9:1b:17:fd:2a:43:a6:15:15:3b:
24:bd:2b:f7:c9:16:dc:09:29:42:98:52:33:01:1c:
f0:39:d7:11:50:c0:5a:4d:a1:75:fe:f5:96:f3:4d:
07:e8:4e:5c:45:58:69:77:c2:eb:db:fc:09:aa:58:
63:55:39:8c:4f:6a:97:20:e8:6b:0e:14:11:34:99:
48:c5:d2:43:a0:14:56:76:c1:3c:cf:db:f8:09:3a:
91:0a:47:5c:62:ff:93:a1:49:ee:e3:a4:14:7d:71:
cf:b2:f6:5e:dc:dd:28:c3:c0:7e:33:12:cc:20:af:
70:ae:21:fc:aa:a6:b5:5e:12:10:86:de:27:b5:6e:
8a:dd:28:1f:97:e2:e3:88:9d:8c:0c:df:59:0f:64:
55:72:a4:19:91:ea:81:2e:39:af:40:9c:e3:0e:f1:
1e:8f:15:77:e9:81:11:bf:f1:51:c9:44:9f:3a:f5:
b8:e6:25:ee:63:e5:42:2f:7d:e7:2b:a4:a6:5f:84:
57:d2:cc:58:27:8e:90:8b:47:a1:d9:ea:56:2f:5b:
f9:6d:aa:70:88:9d:68:9a:06:39:6f:9b:06:61:0a:
9f:8f:85:2e:d0:9a:c2:0f:50:2e:5f:d8:cd:4f:87:
b6:e6:4f:3d:eb:70:b1:a9:ae:4f:6b:9f:a2:43:5c:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:B7:A2:86:44:68:F3:72:47:23:A4:9C:C1:80:66:D8:C6:4E:3E
X509v3 Authority Key Identifier:
keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/2sy3ooZEaPNyRyOknMGAZtjGTj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.244.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:20:3a:fb:f6:c6:cc:16:87:cb:8b:30:e0:b4:01:29:31:
7f:d2:5d:53:68:d2:d3:82:62:1c:48:4c:bc:9d:b3:d7:3d:10:
b1:3d:52:be:fe:84:2b:70:c7:8d:b0:4e:8a:ee:e6:60:73:d0:
d0:9b:ad:ad:cf:0b:c1:74:b6:e9:17:5d:db:9e:33:2c:15:7c:
a2:0b:55:c4:3f:42:c5:d0:2f:cc:99:74:d4:d1:6b:00:02:64:
81:83:20:fe:47:8e:7b:2d:76:30:80:c0:04:c5:5d:3e:db:e7:
17:5f:74:7c:de:12:f6:a6:dd:e3:3f:2d:f3:80:23:20:a9:fd:
cc:56:64:64:2b:8a:bb:36:42:98:00:4d:83:9c:98:c1:9c:cb:
f2:c4:8c:cf:c3:ba:8f:d7:59:1f:47:82:2a:d7:5c:1c:73:c8:
ae:c6:b6:4c:48:14:9c:eb:ac:f7:3e:a3:7d:fc:86:e6:bc:46:
a4:aa:c7:e8:41:38:7f:e4:5a:bc:46:a7:5b:9d:4c:88:9a:01:
71:af:88:b4:de:e4:7f:66:3b:ce:c1:4c:fe:1c:f2:1b:c6:2a:
bb:6b:97:89:d6:c6:7c:8e:05:2a:b1:6c:db:b6:f0:db:7a:d5:
de:cb:ef:ee:bf:0b:33:80:85:84:aa:47:32:e8:41:71:6a:8d:
72:3b:1e:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeVCwpe38Jd9sAN5Hha+sN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNGZjNzEyNWM0MzUwODkyYzA0ZGU4OWE2NzNkZTExOGM4
YTRlOTEwHhcNMjMwNDE4MTU0NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWNjYjdhMjg2NDQ2OGYzNzI0NzIzYTQ5Y2MxODA2NmQ4YzY0ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI/ChukbF/0qQ6YVFTskvSv3yRbc
CSlCmFIzARzwOdcRUMBaTaF1/vWW800H6E5cRVhpd8Lr2/wJqlhjVTmMT2qXIOhr
DhQRNJlIxdJDoBRWdsE8z9v4CTqRCkdcYv+ToUnu46QUfXHPsvZe3N0ow8B+MxLM
IK9wriH8qqa1XhIQht4ntW6K3Sgfl+LjiJ2MDN9ZD2RVcqQZkeqBLjmvQJzjDvEe
jxV36YERv/FRyUSfOvW45iXuY+VCL33nK6SmX4RX0sxYJ46Qi0eh2epWL1v5bapw
iJ1omgY5b5sGYQqfj4Uu0JrCD1AuX9jNT4e25k8963Cxqa5Pa5+iQ1yRIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrMt6KGRGjzckcjpJzBgGbYxk4+MB8GA1UdIwQY
MBaAFG1PxxJcQ1CJLATeiaZz3hGMik6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlVfSEVseERVSWtzQk42SnBuUGVFWXlLVHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZDJkOTAtMDRiYi00NGRkLWFiMWIt
MmE5ZGI5NDJhZGI3LzEvMnN5M29vWkVhUE55UnlPa25NR0FadGpHVGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ZDJkOTAtMDRiYi00NGRkLWFiMWItMmE5ZGI5NDJhZGI3
LzEvYlVfSEVseERVSWtzQk42SnBuUGVFWXlLVHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb0MA0G
CSqGSIb3DQEBCwUAA4IBAQA2rCA6+/bGzBaHy4sw4LQBKTF/0l1TaNLTgmIcSEy8
nbPXPRCxPVK+/oQrcMeNsE6K7uZgc9DQm62tzwvBdLbpF13bnjMsFXyiC1XEP0LF
0C/MmXTU0WsAAmSBgyD+R457LXYwgMAExV0+2+cXX3R83hL2pt3jPy3zgCMgqf3M
VmRkK4q7NkKYAE2DnJjBnMvyxIzPw7qP11kfR4Iq11wcc8iuxrZMSBSc66z3PqN9
/IbmvEakqsfoQTh/5Fq8RqdbnUyImgFxr4i03uR/ZjvOwUz+HPIbxiq7a5eJ1sZ8
jgUqsWzbtvDbetXey+/uvwszgIWEqkcy6EFxao1yOx4q
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-fra.rpki-client.org