Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/Fphc6iDz4a148TKgljGs6tqXwWQ.roa
File: Fphc6iDz4a148TKgljGs6tqXwWQ.roa (raw, json)
Hash identifier: aKBeJu1JadeRL9KNyc0mNrZ9mpNEFg81LemP3OKVa2Q=
Subject key identifier: 16:98:5C:EA:20:F3:E1:AD:78:F1:32:A0:96:31:AC:EA:DA:97:C1:64
Certificate issuer: /CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Certificate serial: 0182207DB3F113E00ED60D9B7B576333F343
Authority key identifier: 70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/Fphc6iDz4a148TKgljGs6tqXwWQ.roa
Signing time: Thu 21 Jul 2022 11:21:25 +0000
ROA not before: Thu 21 Jul 2022 11:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 91.247.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:7d:b3:f1:13:e0:0e:d6:0d:9b:7b:57:63:33:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Validity
Not Before: Jul 21 11:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16985cea20f3e1ad78f132a09631aceada97c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:e9:97:3b:3e:64:40:1c:b9:c9:2c:6e:28:
cf:c8:c7:8a:0c:0a:2c:46:9c:67:07:b4:b1:e5:9b:
e5:48:78:d5:f2:2a:1f:76:1b:a7:b9:27:9e:b4:5a:
5e:b9:03:93:fe:64:2d:92:e2:ce:31:a6:77:be:85:
9c:21:22:13:2f:7b:c0:cf:bf:71:53:08:3d:17:9a:
89:58:c0:b7:ce:45:ba:45:c8:51:d7:87:37:2b:9d:
14:12:6b:b5:df:cd:91:11:ba:2a:03:df:f9:3d:27:
b6:b1:53:f2:2c:0a:d5:63:bd:d8:2a:12:eb:cb:75:
cb:68:42:eb:ed:7b:87:01:a2:c9:2b:3f:61:81:fc:
b7:7b:4e:16:2d:1f:fe:7f:27:a7:1c:97:2a:cb:ec:
9e:f0:b5:c9:8a:ce:d1:76:1f:bb:a8:06:73:39:75:
1d:ce:39:95:ff:a8:61:df:3f:28:40:c9:90:5b:f8:
14:98:fe:a4:95:30:99:3e:f5:76:bd:d9:7b:39:9b:
f4:3c:ae:68:c7:bc:aa:48:69:fc:45:56:fc:14:72:
d3:c6:87:25:15:c6:37:5b:74:9f:78:db:0d:dc:23:
96:c0:66:5f:38:fd:a7:2f:a5:2d:b2:61:09:27:84:
b3:a4:07:dd:80:60:1f:b0:8b:84:9b:e4:1c:07:c1:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:5C:EA:20:F3:E1:AD:78:F1:32:A0:96:31:AC:EA:DA:97:C1:64
X509v3 Authority Key Identifier:
keyid:70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/Fphc6iDz4a148TKgljGs6tqXwWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.164.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8c:96:42:a5:c4:e0:2f:9e:c8:39:12:a6:3b:18:8d:68:eb:
c9:80:f1:83:eb:9b:89:52:10:e8:42:c3:d6:4f:ef:f4:70:ab:
48:aa:19:2a:a5:1e:32:10:73:a0:6e:cf:29:74:be:a3:df:6a:
12:71:30:e9:7a:af:36:6a:7b:e0:e5:eb:83:27:5e:19:dd:d7:
72:7f:02:d7:80:a2:53:39:d5:5a:57:87:52:e3:ac:8b:ae:c2:
83:03:fb:aa:5f:f1:60:93:25:b8:03:c5:0d:01:d8:ae:91:03:
92:01:80:1d:f2:93:dd:23:04:e4:b8:93:f2:7f:59:6a:8f:73:
29:2b:67:40:1e:87:7c:94:6a:24:ea:0b:87:05:c8:ea:e2:83:
0e:1e:60:69:8e:cc:9c:49:40:ec:be:d9:32:11:e6:bc:7a:d1:
07:09:4a:26:68:c7:7a:a6:01:38:5e:df:b2:41:f3:fa:32:8d:
3d:47:f7:cd:df:23:b3:e7:0d:02:eb:18:a0:75:f3:fe:b4:6d:
a8:6c:8d:35:1f:07:d2:d5:0d:67:bd:18:5f:13:f1:a3:97:e0:
9e:f5:ad:5b:fa:b0:0b:1b:0e:21:e1:36:2b:dd:0a:66:27:c9:
77:11:1d:50:4f:84:63:b4:ed:e9:40:9c:0a:dd:94:6b:5e:6c:
76:20:82:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgfbPxE+AO1g2be1djM/NDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTliOTdmMWY4YTFlZDQ3MzhjNTAwYWVjZmZhZDI0ZjEz
NjcxNjYwHhcNMjIwNzIxMTEyMTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjk4NWNlYTIwZjNlMWFkNzhmMTMyYTA5NjMxYWNlYWRhOTdjMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin7plzs+ZEAcucksbijPyMeKDAos
RpxnB7Sx5ZvlSHjV8iofdhunuSeetFpeuQOT/mQtkuLOMaZ3voWcISITL3vAz79x
Uwg9F5qJWMC3zkW6RchR14c3K50UEmu1382REboqA9/5PSe2sVPyLArVY73YKhLr
y3XLaELr7XuHAaLJKz9hgfy3e04WLR/+fyenHJcqy+ye8LXJis7Rdh+7qAZzOXUd
zjmV/6hh3z8oQMmQW/gUmP6klTCZPvV2vdl7OZv0PK5ox7yqSGn8RVb8FHLTxocl
FcY3W3SfeNsN3COWwGZfOP2nL6UtsmEJJ4SzpAfdgGAfsIuEm+QcB8EQdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBaYXOog8+GtePEyoJYxrOral8FkMB8GA1UdIwQY
MBaAFHCpuX8fih7Uc4xQCuz/rSTxNnFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ttNWZ4LUtIdFJ6akZBSzdQLXRKUEUyY1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGJlZmYtZjFhZC00Y2ViLWI0NzMt
ODE5NzNlYmIwNzk0LzEvRnBoYzZpRHo0YTE0OFRLZ2xqR3M2dHFYd1dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGJlZmYtZjFhZC00Y2ViLWI0NzMtODE5NzNlYmIwNzk0
LzEvY0ttNWZ4LUtIdFJ6akZBSzdQLXRKUEUyY1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/ekMA0G
CSqGSIb3DQEBCwUAA4IBAQB4jJZCpcTgL57IORKmOxiNaOvJgPGD65uJUhDoQsPW
T+/0cKtIqhkqpR4yEHOgbs8pdL6j32oScTDpeq82anvg5euDJ14Z3ddyfwLXgKJT
OdVaV4dS46yLrsKDA/uqX/FgkyW4A8UNAdiukQOSAYAd8pPdIwTkuJPyf1lqj3Mp
K2dAHod8lGok6guHBcjq4oMOHmBpjsycSUDsvtkyEea8etEHCUomaMd6pgE4Xt+y
QfP6Mo09R/fN3yOz5w0C6xigdfP+tG2obI01HwfS1Q1nvRhfE/Gjl+Ce9a1b+rAL
Gw4h4TYr3QpmJ8l3ER1QT4RjtO3pQJwK3ZRrXmx2IIKz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org