Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/SxBEH5FV-H34sH1mT6JySJbO0SA.roa
File: SxBEH5FV-H34sH1mT6JySJbO0SA.roa (raw, json)
Hash identifier: fOwUCD/bASKYP9bOInx20PoomVxsCU5oqnlnEKj9RO0=
Subject key identifier: 4B:10:44:1F:91:55:F8:7D:F8:B0:7D:66:4F:A2:72:48:96:CE:D1:20
Certificate issuer: /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial: 0183E972B56F77A2EE9C51D2E227D03FDCE1
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/SxBEH5FV-H34sH1mT6JySJbO0SA.roa
Signing time: Tue 18 Oct 2022 04:55:52 +0000
ROA not before: Tue 18 Oct 2022 04:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 147.78.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:72:b5:6f:77:a2:ee:9c:51:d2:e2:27:d0:3f:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Validity
Not Before: Oct 18 04:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b10441f9155f87df8b07d664fa2724896ced120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:9d:0c:6d:4d:39:f3:c7:a6:89:90:80:d2:
99:22:49:88:e0:2b:ef:22:9c:70:cd:23:9c:e6:a9:
87:16:8f:23:10:cf:ce:dd:c4:e7:5c:22:43:b1:30:
60:2b:9a:7c:3e:a6:5d:93:67:6e:82:7f:54:43:85:
8d:e8:2c:2e:ae:1d:df:ab:76:19:4d:d1:c3:52:8e:
dc:28:73:a1:46:52:1f:d5:b4:df:2f:aa:80:46:bf:
fc:c2:3e:b5:f6:1c:26:ca:de:83:29:90:63:78:5b:
14:b2:b1:01:64:90:87:50:10:df:c4:3b:bc:32:e3:
2a:8a:05:21:3f:99:72:ce:00:58:83:f3:75:93:b4:
ac:7c:89:4a:37:45:46:42:8c:c5:91:15:d9:06:8d:
45:48:45:ae:d8:08:d6:85:cd:67:ff:9a:dc:32:cb:
2d:59:26:61:88:8d:fb:a5:59:da:40:a8:b4:0f:ea:
e8:76:5d:ae:7e:a6:fc:e4:d9:96:b1:cc:be:20:38:
72:86:2e:db:d3:73:cf:ab:c4:ca:2c:b3:2a:59:be:
67:14:e5:66:96:26:a3:7e:7e:4a:d6:13:17:9c:13:
11:8a:df:a7:fc:47:60:88:c3:08:64:86:db:e6:b1:
3b:6f:bb:4e:a2:6c:87:b0:df:44:a0:f8:45:97:e5:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:44:1F:91:55:F8:7D:F8:B0:7D:66:4F:A2:72:48:96:CE:D1:20
X509v3 Authority Key Identifier:
keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/SxBEH5FV-H34sH1mT6JySJbO0SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.103.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f6:17:48:0a:21:f9:33:84:29:de:96:cc:04:f6:48:16:b5:
49:80:c5:89:7e:6f:ca:41:c4:9b:b2:76:8c:22:08:35:34:c1:
65:bc:cd:3e:48:ed:2a:e0:e4:84:b1:56:58:e2:58:a7:36:4e:
4f:70:d7:7d:fb:fa:6c:d6:77:d3:8f:c4:ce:61:59:69:63:fb:
58:7b:e3:fd:2b:d1:15:e9:70:91:a6:65:6c:19:68:d8:45:7b:
57:fb:cf:79:d6:9d:dc:7d:fc:0c:93:c2:26:c7:9f:e8:7a:45:
3c:a2:ca:02:7b:da:09:74:38:3d:3a:80:d4:8f:57:4a:95:15:
57:0a:20:04:bf:ce:27:8c:54:8b:59:06:77:ea:6b:48:c6:d1:
16:74:18:5a:6f:98:43:c7:71:3a:7a:cc:3d:ac:5b:e0:9e:a3:
00:8d:0f:6e:9d:3a:d4:ac:51:5b:3b:73:45:f9:ec:67:fe:bd:
98:1a:87:d2:ff:97:92:09:dd:a0:d5:f3:0c:ec:c7:6b:61:fd:
a3:8d:dd:bc:6e:29:b5:02:be:bd:0d:7f:5c:da:a0:91:bb:96:
ca:cd:34:6d:20:66:09:c5:ef:68:7e:2e:aa:29:8d:c0:4a:af:
9c:55:77:bd:06:8b:67:93:cb:95:88:c9:d7:f7:97:45:e9:b1:
e7:ec:26:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPpcrVvd6LunFHS4ifQP9zhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZjZjZjA0NmRjMDA2MGNjNTNmMzlhOTRmNjI1NTdlZjAw
YTg5OTMwHhcNMjIxMDE4MDQ1NTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjEwNDQxZjkxNTVmODdkZjhiMDdkNjY0ZmEyNzI0ODk2Y2VkMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh6dDG1NOfPHpomQgNKZIkmI4Cvv
IpxwzSOc5qmHFo8jEM/O3cTnXCJDsTBgK5p8PqZdk2dugn9UQ4WN6Cwurh3fq3YZ
TdHDUo7cKHOhRlIf1bTfL6qARr/8wj619hwmyt6DKZBjeFsUsrEBZJCHUBDfxDu8
MuMqigUhP5lyzgBYg/N1k7SsfIlKN0VGQozFkRXZBo1FSEWu2AjWhc1n/5rcMsst
WSZhiI37pVnaQKi0D+rodl2ufqb85NmWscy+IDhyhi7b03PPq8TKLLMqWb5nFOVm
liajfn5K1hMXnBMRit+n/EdgiMMIZIbb5rE7b7tOomyHsN9EoPhFl+VI1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsQRB+RVfh9+LB9Zk+ickiWztEgMB8GA1UdIwQY
MBaAFHH2zwRtwAYMxT85qU9iVX7wComTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3Mzct
NjkyZjZhODk4MzlhLzEvU3hCRUg1RlYtSDM0c0gxbVQ2SnlTSmJPMFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3MzctNjkyZjZhODk4Mzlh
LzEvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk05nMA0G
CSqGSIb3DQEBCwUAA4IBAQAA9hdICiH5M4Qp3pbMBPZIFrVJgMWJfm/KQcSbsnaM
Igg1NMFlvM0+SO0q4OSEsVZY4linNk5PcNd9+/ps1nfTj8TOYVlpY/tYe+P9K9EV
6XCRpmVsGWjYRXtX+8951p3cffwMk8Imx5/oekU8osoCe9oJdDg9OoDUj1dKlRVX
CiAEv84njFSLWQZ36mtIxtEWdBhab5hDx3E6esw9rFvgnqMAjQ9unTrUrFFbO3NF
+exn/r2YGofS/5eSCd2g1fMM7MdrYf2jjd28bim1Ar69DX9c2qCRu5bKzTRtIGYJ
xe9ofi6qKY3ASq+cVXe9Botnk8uViMnX95dF6bHn7Cbp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:39 2024 by rpki-client on console-fra.rpki-client.org