Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/X9a-ACHw7xLzii0alZNq6gADmGQ.roa
File: X9a-ACHw7xLzii0alZNq6gADmGQ.roa (raw, json)
Hash identifier: BITdAP3N+DFi57LmpyjMK4yBFH6dc3LiSBnziaQ0Lkg=
Subject key identifier: 5F:D6:BE:00:21:F0:EF:12:F3:8A:2D:1A:95:93:6A:EA:00:03:98:64
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 09CC6B
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/X9a-ACHw7xLzii0alZNq6gADmGQ.roa
Signing time: Thu 03 Feb 2022 16:57:16 +0000
ROA not before: Thu 03 Feb 2022 16:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642155 (0x9cc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd6be0021f0ef12f38a2d1a95936aea00039864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:6c:61:5b:d8:cb:3d:ee:9f:db:70:0f:44:
dd:68:3f:21:a1:62:3b:94:08:d9:7c:4f:47:49:c4:
65:a3:59:1b:48:13:9a:31:cb:17:34:9f:d1:85:fb:
22:f6:93:39:e6:4e:00:44:63:0a:a9:6f:10:2b:6b:
a7:0b:bb:5a:b9:0a:c7:91:c0:5c:78:f8:44:7e:2c:
b4:1c:66:b0:f2:06:22:89:fd:2e:06:e4:2c:48:00:
f4:db:91:4f:7e:3b:3c:83:cb:fa:c2:3c:02:5d:9a:
d0:b8:bf:7e:30:6c:ea:9d:e1:cb:de:73:0e:2d:b7:
50:97:53:46:be:b8:2f:95:26:4a:c3:dc:31:99:82:
eb:8a:6e:68:c0:db:3e:3d:41:25:a4:ca:25:0f:8e:
bd:bf:d4:e8:20:7c:a7:50:08:90:4b:e4:c3:0f:4a:
ea:83:6f:2a:1d:ae:6c:8a:dd:8c:5d:56:ca:4d:1d:
1b:1b:49:a0:8a:1b:e0:30:e4:44:63:fa:25:b9:91:
e5:f3:0d:1b:9f:8a:e9:d2:9a:ea:d6:42:cb:e9:30:
d2:ed:82:56:84:ec:bf:b6:ed:83:3e:25:f1:30:a9:
7b:12:ef:a3:6e:79:6f:2c:e7:7d:41:6a:5f:1f:de:
33:e9:7a:80:80:7a:54:e3:4e:ac:3c:a5:73:02:a4:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:BE:00:21:F0:EF:12:F3:8A:2D:1A:95:93:6A:EA:00:03:98:64
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/X9a-ACHw7xLzii0alZNq6gADmGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ec:b7:eb:bd:3d:90:3a:52:0c:e9:61:a0:21:7b:f8:8b:fd:
8d:15:5d:9e:c9:e2:c8:95:c2:91:e0:f5:0c:d0:6b:cf:0b:08:
5b:27:e0:44:c3:f1:0d:cd:29:4a:55:ba:d5:ed:21:e8:71:d2:
33:68:6e:9c:d5:53:37:78:31:ed:a9:f1:a9:69:d4:d4:1a:f1:
74:9c:c2:8a:76:9a:bf:ae:cf:a7:04:a6:a8:06:8b:ae:28:7d:
3c:81:28:ee:37:99:4f:ac:7a:54:e5:75:d6:9e:17:19:96:70:
48:ee:e5:4a:03:cf:50:4f:08:04:2d:cb:93:03:8c:6d:4c:27:
7e:7a:5e:e6:3a:a9:02:22:97:d2:92:f5:d6:f2:87:5a:2b:42:
ed:3b:73:4c:10:5b:8a:ec:a6:08:ea:ae:dd:cf:de:d6:a4:1b:
1e:9d:19:ca:8d:86:3e:67:3b:cd:6e:f3:75:7e:be:96:2a:7c:
66:2b:66:62:31:ad:e4:18:28:85:03:8a:5c:18:90:c4:c1:37:
a9:d2:42:89:c2:e1:aa:cc:da:06:4a:16:0d:5d:df:30:78:72:
85:aa:f7:9c:a0:dd:10:19:e6:d1:28:b3:b6:67:db:24:0b:c0:
36:17:04:cd:39:ea:a9:fe:16:dc:ce:a7:22:d5:36:56:d6:98:
bb:80:a7:bd
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDCcxrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
MWVhMTVjMjFiN2Q1NWRlYTRiZGM4NjFiMWMwYWZjOWU0MzcwMzEwHhcNMjIwMjAz
MTY1NzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZmQ2YmUwMDIxZjBl
ZjEyZjM4YTJkMWE5NTkzNmFlYTAwMDM5ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiVNsYVvYyz3un9twD0TdaD8hoWI7lAjZfE9HScRlo1kbSBOa
McsXNJ/Rhfsi9pM55k4ARGMKqW8QK2unC7tauQrHkcBcePhEfiy0HGaw8gYiif0u
BuQsSAD025FPfjs8g8v6wjwCXZrQuL9+MGzqneHL3nMOLbdQl1NGvrgvlSZKw9wx
mYLrim5owNs+PUElpMolD469v9ToIHynUAiQS+TDD0rqg28qHa5sit2MXVbKTR0b
G0mgihvgMOREY/oluZHl8w0bn4rp0prq1kLL6TDS7YJWhOy/tu2DPiXxMKl7Eu+j
bnlvLOd9QWpfH94z6XqAgHpU406sPKVzAqR55QIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFF/WvgAh8O8S84otGpWTauoAA5hkMB8GA1UdIwQYMBaAFJseoVwht9Vd6kvc
hhscCvyeQ3AxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEv
WDlhLUFDSHc3eEx6aWkwYWxaTnE2Z0FEbUdRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85
ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEvbXg2aFhDRzMxVjNx
Uzl5R0d4d0tfSjVEY0RFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsCYAwQBXrDWAwQAvNBnMA0GCSqG
SIb3DQEBCwUAA4IBAQBH7LfrvT2QOlIM6WGgIXv4i/2NFV2eyeLIlcKR4PUM0GvP
CwhbJ+BEw/ENzSlKVbrV7SHocdIzaG6c1VM3eDHtqfGpadTUGvF0nMKKdpq/rs+n
BKaoBouuKH08gSjuN5lPrHpU5XXWnhcZlnBI7uVKA89QTwgELcuTA4xtTCd+el7m
OqkCIpfSkvXW8odaK0LtO3NMEFuK7KYI6q7dz97WpBsenRnKjYY+ZzvNbvN1fr6W
KnxmK2ZiMa3kGCiFA4pcGJDEwTep0kKJwuGqzNoGShYNXd8weHKFqvecoN0QGebR
KLO2Z9skC8A2FwTNOeqp/hbczqci1TZW1pi7gKe9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org