Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/hR-aCQmSesI3ejNAh_nsbLaVTAk.roa
File: hR-aCQmSesI3ejNAh_nsbLaVTAk.roa (raw, json)
Hash identifier: ucl3EpPcb079rLMJkIcAEofPg7Azd0Tg8WBgLNW1lrw=
Subject key identifier: 85:1F:9A:09:09:92:7A:C2:37:7A:33:40:87:F9:EC:6C:B6:95:4C:09
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 018606233E7BBE3D1D6A0AD000B656B6CA9C
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/hR-aCQmSesI3ejNAh_nsbLaVTAk.roa
Signing time: Tue 31 Jan 2023 04:43:38 +0000
ROA not before: Tue 31 Jan 2023 04:43:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:23:3e:7b:be:3d:1d:6a:0a:d0:00:b6:56:b6:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Jan 31 04:43:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=851f9a0909927ac2377a334087f9ec6cb6954c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:50:d6:18:8e:a4:e7:61:61:b2:a2:65:38:
64:ed:f7:5e:cd:b7:bd:5e:ac:44:f0:5a:6e:0c:ed:
96:22:98:13:3b:4c:e2:fe:4b:2c:5f:77:71:3e:47:
f7:31:70:90:cd:f3:a6:b8:97:01:6a:09:46:eb:c8:
fb:0b:f7:21:b1:8b:0d:25:f4:89:05:1a:1e:51:51:
d7:29:c8:03:b0:bb:81:ea:09:62:8a:61:57:a3:43:
09:e6:12:ba:f0:d4:a8:de:28:43:f3:4d:b3:a6:bf:
21:e3:31:27:e5:5d:09:a5:47:06:d7:60:84:fd:85:
30:f2:da:b2:cd:ad:9b:9d:5a:f5:0e:c3:29:e1:07:
bc:bb:d6:4c:aa:ea:08:a9:ca:0a:6f:b9:f7:f7:da:
9a:4f:1e:96:08:78:12:c8:b6:3b:48:e2:02:75:da:
d3:96:c1:68:96:21:46:4e:49:58:00:6f:57:89:ef:
49:14:ea:60:7e:3b:ca:ba:ef:35:15:c9:53:a6:7f:
c4:e9:48:c5:d3:25:b3:2b:01:d9:97:20:c8:9f:a7:
f0:33:7e:b6:d6:3c:ed:62:96:eb:f0:75:53:f7:d2:
17:f5:96:86:39:33:47:9b:54:d1:db:6d:8d:e6:37:
a1:14:f2:f3:cb:bd:2c:45:5e:d3:8c:61:05:2e:7f:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:9A:09:09:92:7A:C2:37:7A:33:40:87:F9:EC:6C:B6:95:4C:09
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/hR-aCQmSesI3ejNAh_nsbLaVTAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3e:82:e7:c0:ba:c9:1e:89:c5:32:1d:6e:f9:0a:93:25:5b:
c0:22:aa:58:d1:27:ea:6a:d1:5f:32:ae:8e:47:ac:f1:98:a1:
1a:b1:01:9b:b5:34:ec:03:1b:58:ff:8e:94:d7:2d:38:85:57:
34:cc:b5:a4:c8:3e:97:28:11:85:d7:40:2c:9a:a1:09:10:e2:
74:da:e5:f2:6a:80:87:b4:e7:8d:58:a4:66:bb:50:b7:f3:52:
8d:c0:87:6e:1b:bb:bd:a4:09:7c:65:9b:bc:23:5c:a8:ca:3a:
96:36:e2:45:56:b5:b9:34:08:46:4f:be:d7:bc:c9:b2:0d:0e:
b7:32:89:8c:f9:0d:da:0b:b1:44:9b:9a:e1:f5:9a:66:78:03:
0a:a2:f7:a3:b3:61:84:91:83:67:08:5d:76:bc:75:b8:e1:f9:
3e:7d:3f:00:a2:ab:41:1f:80:74:85:52:fd:37:79:cd:28:0e:
59:59:56:38:52:68:01:71:01:7e:3d:cf:9d:7b:10:fd:45:be:
15:d4:95:27:f8:f7:f7:bb:93:d4:b4:7c:ad:e3:3c:2f:f9:12:
7e:73:da:2e:b1:be:21:b9:59:c8:23:71:91:3b:ac:d9:5d:14:
f1:c5:1d:72:d4:3d:ba:7f:65:87:62:a1:69:8e:13:12:24:7a:
eb:3c:ca:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYGIz57vj0dagrQALZWtsqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2ZjYmI2N2QzMzlhYWQ3NDE4NjA4YzU5NWU3NGY1NDJi
NzUzNTMwHhcNMjMwMTMxMDQ0MzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTFmOWEwOTA5OTI3YWMyMzc3YTMzNDA4N2Y5ZWM2Y2I2OTU0YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmtQ1hiOpOdhYbKiZThk7fdezbe9
XqxE8FpuDO2WIpgTO0zi/kssX3dxPkf3MXCQzfOmuJcBaglG68j7C/chsYsNJfSJ
BRoeUVHXKcgDsLuB6gliimFXo0MJ5hK68NSo3ihD802zpr8h4zEn5V0JpUcG12CE
/YUw8tqyza2bnVr1DsMp4Qe8u9ZMquoIqcoKb7n399qaTx6WCHgSyLY7SOICddrT
lsFoliFGTklYAG9Xie9JFOpgfjvKuu81FclTpn/E6UjF0yWzKwHZlyDIn6fwM362
1jztYpbr8HVT99IX9ZaGOTNHm1TR222N5jehFPLzy70sRV7TjGEFLn/WhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUfmgkJknrCN3ozQIf57Gy2lUwJMB8GA1UdIwQY
MBaAFP7Py7Z9M5qtdBhgjFledPVCt1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NfTHRuMHptcTEwR0dDTVdWNTA5VUszVTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzZjMTYtM2VmZi00YmM0LWIzZDIt
YTljZWExNGQ2MTYzLzEvaFItYUNRbVNlc0kzZWpOQWhfbnNiTGFWVEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMzZjMTYtM2VmZi00YmM0LWIzZDItYTljZWExNGQ2MTYz
LzEvX3NfTHRuMHptcTEwR0dDTVdWNTA5VUszVTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIAMA0G
CSqGSIb3DQEBCwUAA4IBAQCbPoLnwLrJHonFMh1u+QqTJVvAIqpY0SfqatFfMq6O
R6zxmKEasQGbtTTsAxtY/46U1y04hVc0zLWkyD6XKBGF10AsmqEJEOJ02uXyaoCH
tOeNWKRmu1C381KNwIduG7u9pAl8ZZu8I1yoyjqWNuJFVrW5NAhGT77XvMmyDQ63
MomM+Q3aC7FEm5rh9ZpmeAMKovejs2GEkYNnCF12vHW44fk+fT8AoqtBH4B0hVL9
N3nNKA5ZWVY4UmgBcQF+Pc+dexD9Rb4V1JUn+Pf3u5PUtHyt4zwv+RJ+c9ousb4h
uVnII3GRO6zZXRTxxR1y1D26f2WHYqFpjhMSJHrrPMpJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org