Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UnlppUNdunj-8YwDjFvzA_7mmOU.roa
File: UnlppUNdunj-8YwDjFvzA_7mmOU.roa (raw, json)
Hash identifier: PmeYNl5VPcddckNqSj/dqXpNzLZtpKuKeIlG7ERJmFw=
Subject key identifier: 52:79:69:A5:43:5D:BA:78:FE:F1:8C:03:8C:5B:F3:03:FE:E6:98:E5
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 1A5EBC
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UnlppUNdunj-8YwDjFvzA_7mmOU.roa
Signing time: Tue 08 Feb 2022 16:50:01 +0000
ROA not before: Tue 08 Feb 2022 16:50:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209889
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728188 (0x1a5ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 8 16:50:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=527969a5435dba78fef18c038c5bf303fee698e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:a0:98:1e:55:a5:29:07:78:92:d3:a9:3b:
c7:82:17:22:36:69:e6:4f:0e:6f:4b:72:fb:1d:5e:
18:1d:77:d6:6b:c2:ca:43:ed:48:d3:d8:8e:f7:f3:
1b:69:98:bc:ed:51:cd:10:fe:d9:da:95:60:6a:c3:
04:33:ed:7d:f2:10:1d:55:70:fc:2f:9d:12:f8:06:
4a:32:9d:72:a9:5b:b2:a0:6f:52:c3:e4:5e:ef:56:
f1:82:28:bb:dd:2f:23:84:8f:ac:0c:55:e5:5c:1c:
94:6f:c6:81:71:4a:6d:81:56:a5:fd:86:1d:ea:0d:
f6:85:33:de:9f:16:0a:86:12:0a:12:f9:d9:59:94:
c8:2a:e9:a6:6c:c1:48:a9:31:1e:2e:08:be:3d:b9:
42:d9:c2:c2:01:b9:66:0a:c5:54:9b:61:15:8a:93:
9b:ca:a1:ec:26:20:7c:be:c4:c9:08:0c:f9:8d:95:
9d:71:77:a9:35:c9:ff:ac:a4:4d:6f:34:dc:ac:64:
35:b6:f2:6f:14:11:d7:09:b8:9b:96:95:6c:11:25:
6f:d9:5f:7c:7a:0a:95:41:96:d7:56:49:70:4d:9c:
d6:b4:fa:54:b6:22:fb:a9:24:f2:f6:41:e5:b2:f1:
56:e3:a8:1d:9c:01:c0:0a:1c:6d:7d:b2:6b:90:53:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:69:A5:43:5D:BA:78:FE:F1:8C:03:8C:5B:F3:03:FE:E6:98:E5
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UnlppUNdunj-8YwDjFvzA_7mmOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
49:68:aa:af:ec:59:6a:14:77:97:08:43:31:12:62:67:b4:39:
32:91:55:9f:75:a6:2b:b8:a4:e0:1b:30:3f:5c:bf:82:66:dd:
66:5c:78:7e:29:ab:16:71:4f:4a:6c:0f:62:7e:34:09:1a:40:
1c:41:7a:d3:8e:09:4a:b4:da:06:72:c4:bd:76:13:c0:4b:67:
53:ef:5f:a5:31:52:80:68:c2:64:c8:f5:90:15:8d:57:8f:65:
91:52:de:dd:42:70:8f:cf:6f:78:bf:47:65:80:f4:1c:5d:5c:
0d:8e:f5:b2:26:0b:8e:8f:1c:92:03:a6:35:b5:3f:63:84:c2:
27:fb:ce:dc:ca:a3:a4:b8:4c:b0:4f:6f:60:44:59:b7:fe:8b:
d8:d3:b7:ce:ea:a9:d8:95:ad:8e:e3:d7:2d:c0:97:10:7a:96:
14:3b:4a:3a:bf:5a:a8:fa:78:34:7a:ed:bb:31:a7:aa:4c:e0:
e5:de:a6:22:99:dc:be:6f:1a:30:70:cc:c7:cb:52:55:dc:bc:
88:de:8f:10:da:13:4c:01:cb:2a:18:0e:95:7f:8f:ac:fc:ba:
d3:73:96:4d:bc:f1:3a:93:f3:f2:b5:18:a6:6a:1a:53:2a:ba:
2d:84:42:b1:63:d0:10:f7:d8:fa:57:43:89:fa:71:d0:6a:6d:
45:f2:b5:6f
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDGl68MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
MWVhMTVjMjFiN2Q1NWRlYTRiZGM4NjFiMWMwYWZjOWU0MzcwMzEwHhcNMjIwMjA4
MTY1MDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1Mjc5NjlhNTQzNWRi
YTc4ZmVmMThjMDM4YzViZjMwM2ZlZTY5OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA49CgmB5VpSkHeJLTqTvHghciNmnmTw5vS3L7HV4YHXfWa8LK
Q+1I09iO9/MbaZi87VHNEP7Z2pVgasMEM+198hAdVXD8L50S+AZKMp1yqVuyoG9S
w+Re71bxgii73S8jhI+sDFXlXByUb8aBcUptgVal/YYd6g32hTPenxYKhhIKEvnZ
WZTIKummbMFIqTEeLgi+PblC2cLCAblmCsVUm2EVipObyqHsJiB8vsTJCAz5jZWd
cXepNcn/rKRNbzTcrGQ1tvJvFBHXCbiblpVsESVv2V98egqVQZbXVklwTZzWtPpU
tiL7qSTy9kHlsvFW46gdnAHAChxtfbJrkFNhWQIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFFJ5aaVDXbp4/vGMA4xb8wP+5pjlMB8GA1UdIwQYMBaAFJseoVwht9Vd6kvc
hhscCvyeQ3AxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEv
VW5scHBVTmR1bmotOFl3RGpGdnpBXzdtbU9VLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85
ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEvbXg2aFhDRzMxVjNx
Uzl5R0d4d0tfSjVEY0RFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsCYAwQBXrDWAwQAvNBnMA0GCSqG
SIb3DQEBCwUAA4IBAQBJaKqv7FlqFHeXCEMxEmJntDkykVWfdaYruKTgGzA/XL+C
Zt1mXHh+KasWcU9KbA9ifjQJGkAcQXrTjglKtNoGcsS9dhPAS2dT71+lMVKAaMJk
yPWQFY1Xj2WRUt7dQnCPz294v0dlgPQcXVwNjvWyJguOjxySA6Y1tT9jhMIn+87c
yqOkuEywT29gRFm3/ovY07fO6qnYla2O49ctwJcQepYUO0o6v1qo+ng0eu27Maeq
TODl3qYimdy+bxowcMzHy1JV3LyI3o8Q2hNMAcsqGA6Vf4+s/LrTc5ZNvPE6k/Py
tRimahpTKrothEKxY9AQ99j6V0OJ+nHQam1F8rVv
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org