Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/BLw2pVqLMLuMA1A0wki4GaOw4wU.roa
File: BLw2pVqLMLuMA1A0wki4GaOw4wU.roa (raw, json)
Hash identifier: eHOu7Hl86wT0MmbZ5N42ymMLecU+58zC9vYNhAorok8=
Subject key identifier: 04:BC:36:A5:5A:8B:30:BB:8C:03:50:34:C2:48:B8:19:A3:B0:E3:05
Certificate issuer: /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial: 0183D1D2804ED138DFDFCF410F5E6639549C
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/BLw2pVqLMLuMA1A0wki4GaOw4wU.roa
Signing time: Thu 13 Oct 2022 14:49:36 +0000
ROA not before: Thu 13 Oct 2022 14:49:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 147.78.100.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:d2:80:4e:d1:38:df:df:cf:41:0f:5e:66:39:54:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Validity
Not Before: Oct 13 14:49:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04bc36a55a8b30bb8c035034c248b819a3b0e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:8c:74:6d:98:2b:40:93:0d:fe:78:a6:c8:
d2:ef:fe:e4:bf:b8:cd:9b:59:78:09:bc:3c:13:e6:
52:ac:fb:f3:30:83:aa:bc:6f:55:20:38:8d:d0:58:
92:d8:83:e0:b8:1f:cf:f6:5a:99:83:c5:9b:cd:bc:
10:d9:45:71:72:c6:5a:2e:d4:c3:1a:e7:75:33:60:
07:3c:f3:6f:f0:49:99:f9:9e:3f:57:0f:ad:1a:c8:
48:32:f8:d4:08:01:69:e0:99:fa:47:43:84:a1:a8:
85:8d:51:68:e9:39:d9:f5:21:f1:f2:f2:e2:3c:11:
e6:25:86:bf:2f:16:50:16:da:f1:65:df:06:bb:f7:
26:e6:6d:98:1e:f5:6c:b4:e4:e1:19:89:74:f7:a6:
68:b9:76:59:fe:55:03:d3:3b:49:f5:70:7a:9e:2a:
0d:fc:e1:47:35:f6:c5:19:b1:fb:07:25:8d:35:44:
dd:a6:a0:8f:64:c1:a3:1c:fd:fc:10:14:56:16:4e:
50:f0:39:5e:1f:c5:20:ae:68:c6:80:dc:89:c7:af:
ca:a3:2b:20:bd:bb:fb:a4:76:74:8e:15:39:57:a5:
4b:f6:fd:c3:f4:fd:79:e5:96:71:1a:eb:32:8b:0e:
2c:38:0f:6a:3a:bf:3d:80:dc:a3:40:c7:5f:0e:1b:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:36:A5:5A:8B:30:BB:8C:03:50:34:C2:48:B8:19:A3:B0:E3:05
X509v3 Authority Key Identifier:
keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/BLw2pVqLMLuMA1A0wki4GaOw4wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.100.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:25:80:7e:60:31:9f:ad:de:1c:a8:5e:19:a4:58:2b:94:e4:
47:19:89:6f:ca:af:1e:77:5c:b0:9f:fa:0c:16:2e:28:c7:c1:
c0:21:a6:fb:91:eb:fe:be:a5:9c:d5:cc:83:4b:0b:9e:e8:72:
8e:ae:fa:ca:4a:da:d0:65:0a:ec:93:54:4b:6d:81:ac:e0:15:
6d:be:d3:19:d1:83:41:63:da:d7:84:12:c8:7a:2e:6d:33:31:
c7:db:e3:23:be:fd:06:69:80:2c:7f:0d:7b:9c:10:48:00:c0:
49:d8:9c:af:33:84:48:60:7a:bf:57:71:0f:87:51:af:07:e4:
5a:64:9b:bc:da:f1:7c:16:93:d5:a0:44:8e:a7:62:34:3e:fb:
6d:c8:13:28:22:08:41:28:da:98:a3:ce:92:39:ed:63:53:24:
a0:99:f4:38:81:c4:e5:d8:14:2d:dd:44:53:df:20:d8:42:a7:
47:8a:11:54:87:90:b4:7a:3d:17:c2:eb:46:7e:83:d6:a4:f5:
09:7e:b4:4a:70:2f:70:0c:eb:8c:e4:93:fe:87:d9:9f:a0:32:
f8:0f:18:53:c8:c1:b2:73:30:5d:8e:3a:e5:5e:55:9d:99:ab:
fd:3e:2a:eb:44:1f:99:55:c7:aa:f7:3a:42:4e:8a:fa:56:7e:
a0:49:4d:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPR0oBO0Tjf389BD15mOVScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZjZjZjA0NmRjMDA2MGNjNTNmMzlhOTRmNjI1NTdlZjAw
YTg5OTMwHhcNMjIxMDEzMTQ0OTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJjMzZhNTVhOGIzMGJiOGMwMzUwMzRjMjQ4YjgxOWEzYjBlMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8iMdG2YK0CTDf54psjS7/7kv7jN
m1l4Cbw8E+ZSrPvzMIOqvG9VIDiN0FiS2IPguB/P9lqZg8WbzbwQ2UVxcsZaLtTD
Gud1M2AHPPNv8EmZ+Z4/Vw+tGshIMvjUCAFp4Jn6R0OEoaiFjVFo6TnZ9SHx8vLi
PBHmJYa/LxZQFtrxZd8Gu/cm5m2YHvVstOThGYl096ZouXZZ/lUD0ztJ9XB6nioN
/OFHNfbFGbH7ByWNNUTdpqCPZMGjHP38EBRWFk5Q8DleH8UgrmjGgNyJx6/Koysg
vbv7pHZ0jhU5V6VL9v3D9P155ZZxGusyiw4sOA9qOr89gNyjQMdfDhuZywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAS8NqVaizC7jANQNMJIuBmjsOMFMB8GA1UdIwQY
MBaAFHH2zwRtwAYMxT85qU9iVX7wComTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3Mzct
NjkyZjZhODk4MzlhLzEvQkx3MnBWcUxNTHVNQTFBMHdraTRHYU93NHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3MzctNjkyZjZhODk4Mzlh
LzEvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk05kMA0G
CSqGSIb3DQEBCwUAA4IBAQB7JYB+YDGfrd4cqF4ZpFgrlORHGYlvyq8ed1ywn/oM
Fi4ox8HAIab7kev+vqWc1cyDSwue6HKOrvrKStrQZQrsk1RLbYGs4BVtvtMZ0YNB
Y9rXhBLIei5tMzHH2+Mjvv0GaYAsfw17nBBIAMBJ2JyvM4RIYHq/V3EPh1GvB+Ra
ZJu82vF8FpPVoESOp2I0PvttyBMoIghBKNqYo86SOe1jUySgmfQ4gcTl2BQt3URT
3yDYQqdHihFUh5C0ej0XwutGfoPWpPUJfrRKcC9wDOuM5JP+h9mfoDL4DxhTyMGy
czBdjjrlXlWdmav9PirrRB+ZVceq9zpCTor6Vn6gSU1Z
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:14 2025 by rpki-client