Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/RbuMflDbolwEw_xOGEkUaGKug7g.roa
File: RbuMflDbolwEw_xOGEkUaGKug7g.roa (raw, json)
Hash identifier: JiaeE1fc5vnPgg9Ap2UaovK19iX5/qwtqRCIzOookKU=
Subject key identifier: 45:BB:8C:7E:50:DB:A2:5C:04:C3:FC:4E:18:49:14:68:62:AE:83:B8
Certificate issuer: /CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
Certificate serial: 0189654AC01A6226A3C4AD153F51B5C6E177
Authority key identifier: D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/RbuMflDbolwEw_xOGEkUaGKug7g.roa
Signing time: Mon 17 Jul 2023 19:19:04 +0000
ROA not before: Mon 17 Jul 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 94.124.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c0:1a:62:26:a3:c4:ad:15:3f:51:b5:c6:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83a5e49dd9ec0f454e78930267d0d1c930728e3
Validity
Not Before: Jul 17 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45bb8c7e50dba25c04c3fc4e1849146862ae83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:30:cc:3f:9a:62:c5:4a:c5:6f:3d:e2:93:
8a:76:b8:59:fa:f3:8a:8a:38:eb:7b:04:0f:8d:43:
c0:a6:85:6e:bc:12:73:2c:88:8a:6c:67:cb:53:e6:
87:ee:a2:69:9e:1d:b4:dc:cb:2d:ec:40:82:94:16:
db:cc:fe:77:16:d3:68:3d:0d:de:4a:3a:dd:e1:9b:
3a:ef:5f:2e:54:bc:9e:5c:26:53:fc:ab:51:07:a2:
dd:ac:a5:c5:44:fc:05:a0:f6:1e:fc:47:84:80:67:
e7:a9:53:ef:76:df:de:92:36:bc:3e:83:7c:d0:38:
c1:1f:ab:b8:e6:c3:ee:8b:0e:b0:28:fa:8d:fd:e6:
df:e5:e1:02:60:12:f7:47:4c:b0:90:ce:8a:fc:7f:
6a:8b:d7:d8:da:a0:e8:7d:87:2e:21:01:ad:48:3a:
bb:15:18:f3:f2:41:d5:12:32:43:35:b6:49:77:9b:
ca:92:f5:02:61:63:3a:1e:1d:a5:94:1c:8a:00:f4:
60:98:10:6b:13:ab:18:b1:54:41:5d:3f:17:c1:f8:
b1:66:4c:37:53:52:e7:b9:61:eb:a1:11:02:35:96:
99:69:a8:ce:89:e2:33:6f:72:87:cc:81:52:20:68:
27:62:db:ed:bf:01:c3:b0:19:c1:df:db:9e:cf:ab:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:8C:7E:50:DB:A2:5C:04:C3:FC:4E:18:49:14:68:62:AE:83:B8
X509v3 Authority Key Identifier:
keyid:D8:3A:5E:49:DD:9E:C0:F4:54:E7:89:30:26:7D:0D:1C:93:07:28:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DpeSd2ewPRU54kwJn0NHJMHKOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/RbuMflDbolwEw_xOGEkUaGKug7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df18c9-af70-430d-b7f9-73c7ed293884/1/2DpeSd2ewPRU54kwJn0NHJMHKOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.75.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e1:79:e2:5d:1c:cf:f3:f2:fb:31:b0:63:0c:37:b7:f7:90:
67:57:20:de:21:1a:79:f3:9a:97:a9:d7:cb:1a:41:05:a5:ab:
d3:7a:ac:c3:70:8e:5b:65:21:ed:b7:f4:c4:7f:ec:6f:86:01:
d2:13:91:67:69:d6:70:5a:fb:19:a1:55:d1:92:c9:52:d3:21:
a4:08:96:cb:6c:f2:9b:98:77:1e:e3:84:57:f0:22:15:87:67:
ea:dc:87:9f:32:a7:fb:28:45:5e:67:ac:be:2b:f1:b7:a3:ed:
04:2e:75:3a:39:d1:8c:57:48:7d:bf:c1:94:a1:b3:86:48:06:
8e:62:72:d8:b3:4c:d6:17:6b:f1:bc:cd:69:b8:a8:c5:13:2d:
b4:07:4a:38:4b:18:70:1c:f6:14:10:78:63:be:ac:f2:5e:bb:
99:f8:82:44:82:19:aa:db:57:98:01:c8:18:64:49:07:74:d4:
4c:e9:1a:04:c3:f7:38:3c:f7:ff:1e:f2:6e:13:fc:67:b4:57:
a1:0d:f2:b2:57:c0:a3:ff:9f:20:03:09:60:21:f9:6d:e7:42:
b1:a4:25:93:32:7a:31:b5:29:bb:1d:68:be:89:78:aa:0a:00:
a7:98:06:c4:61:b9:45:49:56:1f:d2:3c:b1:57:06:39:d5:d9:
96:87:d1:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSsAaYiajxK0VP1G1xuF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4M2E1ZTQ5ZGQ5ZWMwZjQ1NGU3ODkzMDI2N2QwZDFjOTMw
NzI4ZTMwHhcNMjMwNzE3MTkxOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWJiOGM3ZTUwZGJhMjVjMDRjM2ZjNGUxODQ5MTQ2ODYyYWU4M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwUwzD+aYsVKxW894pOKdrhZ+vOK
ijjrewQPjUPApoVuvBJzLIiKbGfLU+aH7qJpnh203Mst7ECClBbbzP53FtNoPQ3e
Sjrd4Zs6718uVLyeXCZT/KtRB6LdrKXFRPwFoPYe/EeEgGfnqVPvdt/ekja8PoN8
0DjBH6u45sPuiw6wKPqN/ebf5eECYBL3R0ywkM6K/H9qi9fY2qDofYcuIQGtSDq7
FRjz8kHVEjJDNbZJd5vKkvUCYWM6Hh2llByKAPRgmBBrE6sYsVRBXT8XwfixZkw3
U1LnuWHroRECNZaZaajOieIzb3KHzIFSIGgnYtvtvwHDsBnB39uez6uokwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEW7jH5Q26JcBMP8ThhJFGhiroO4MB8GA1UdIwQY
MBaAFNg6XkndnsD0VOeJMCZ9DRyTByjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRwZVNkMmV3UFJVNTRrd0puME5ISk1IS09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZjE4YzktYWY3MC00MzBkLWI3Zjkt
NzNjN2VkMjkzODg0LzEvUmJ1TWZsRGJvbHdFd194T0dFa1VhR0t1ZzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kZjE4YzktYWY3MC00MzBkLWI3ZjktNzNjN2VkMjkzODg0
LzEvMkRwZVNkMmV3UFJVNTRrd0puME5ISk1IS09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnxLMA0G
CSqGSIb3DQEBCwUAA4IBAQCS4XniXRzP8/L7MbBjDDe395BnVyDeIRp585qXqdfL
GkEFpavTeqzDcI5bZSHtt/TEf+xvhgHSE5FnadZwWvsZoVXRkslS0yGkCJbLbPKb
mHce44RX8CIVh2fq3IefMqf7KEVeZ6y+K/G3o+0ELnU6OdGMV0h9v8GUobOGSAaO
YnLYs0zWF2vxvM1puKjFEy20B0o4SxhwHPYUEHhjvqzyXruZ+IJEghmq21eYAcgY
ZEkHdNRM6RoEw/c4PPf/HvJuE/xntFehDfKyV8Cj/58gAwlgIflt50KxpCWTMnox
tSm7HWi+iXiqCgCnmAbEYblFSVYf0jyxVwY51dmWh9G/
-----END CERTIFICATE-----
Generated at Fri Aug 25 08:06:46 2023 by rpki-client on console-ams.rpki-client.org