Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/IqyPjhB4g7qu6yvwaEcRpEG3Ckg.roa
File: IqyPjhB4g7qu6yvwaEcRpEG3Ckg.roa (raw, json)
Hash identifier: EGsI6wkc+msYW3NIGThRXPRIpEWF7ZJhiZNkwRWwi3M=
Subject key identifier: 22:AC:8F:8E:10:78:83:BA:AE:EB:2B:F0:68:47:11:A4:41:B7:0A:48
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 06FA7437
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/IqyPjhB4g7qu6yvwaEcRpEG3Ckg.roa
Signing time: Sat 01 Jan 2022 00:56:20 +0000
ROA not before: Sat 01 Jan 2022 00:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117077047 (0x6fa7437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 00:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22ac8f8e107883baaeeb2bf0684711a441b70a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:e0:10:58:a6:f6:a1:c0:1a:ba:69:29:9e:
ca:74:51:71:8a:09:8a:3d:76:bd:3c:6c:93:14:9f:
bb:1a:ba:fe:15:9a:38:01:b9:9a:7c:93:cf:5d:bd:
a5:69:07:e1:45:5d:63:b4:a8:17:4b:15:95:ab:d0:
44:f2:17:e2:ba:eb:1a:d1:86:21:40:1e:75:f9:b2:
34:34:a0:1f:67:7d:81:b5:7d:dd:51:d6:1f:96:18:
84:ea:57:59:b0:40:20:a3:75:37:dd:db:d6:9d:dd:
4c:c9:37:cf:c8:a1:fd:29:80:4b:74:38:17:e1:92:
2c:61:4d:c7:5a:31:5a:fc:8a:36:47:34:8f:75:95:
d2:ed:ec:cb:4a:38:88:ff:33:6e:c1:f9:78:7f:01:
99:05:b6:e6:5d:ce:51:87:9b:1b:fb:fa:9d:bc:41:
d2:5d:22:a5:16:e1:3c:d3:92:8d:c5:54:63:63:5d:
b2:4e:82:06:0d:12:a3:71:a8:4f:4b:27:f6:19:7d:
de:4f:4e:48:48:70:4c:79:9e:81:3a:16:15:92:ec:
85:8c:68:24:96:6b:a3:9d:f8:88:56:3e:da:9d:e3:
3f:86:2f:d1:2d:f6:88:54:5a:88:b5:91:e1:ba:5d:
13:63:b0:7f:d5:68:a2:91:b9:f3:6f:b5:22:1f:a1:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:8F:8E:10:78:83:BA:AE:EB:2B:F0:68:47:11:A4:41:B7:0A:48
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/IqyPjhB4g7qu6yvwaEcRpEG3Ckg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2b:f3:b2:54:c0:4f:a3:84:f7:36:23:0d:7b:62:79:02:2b:
11:0d:63:56:7a:0a:66:ce:9a:e7:64:cc:47:59:f8:18:d4:1c:
9c:17:78:23:04:00:28:28:59:98:56:bb:14:3d:14:62:28:84:
4d:5b:31:c2:78:12:ef:aa:42:42:72:2a:51:47:35:68:64:02:
03:43:0e:c7:59:5e:77:87:0a:b2:82:a7:d9:12:d8:a3:64:0b:
c3:6e:c7:a6:d7:b1:e4:b1:e3:63:1a:21:8b:ef:1d:5c:91:c1:
18:40:f7:1b:66:9f:48:e6:5e:6b:e8:a3:f6:2e:2d:ce:98:a3:
8a:64:46:fd:17:a8:f3:2f:f8:96:39:88:e6:fa:bc:d1:6a:91:
ed:66:a4:06:2e:24:28:b8:41:de:23:5b:77:d8:d0:37:d3:0f:
80:4d:92:4b:a9:44:96:d3:b8:48:45:7f:f1:c8:2e:e8:a8:ac:
9e:ae:42:6a:df:50:f7:29:03:a7:d5:9d:d7:f3:0a:1a:13:51:
71:c5:de:ae:61:9b:bf:31:5b:75:93:0d:f1:d4:ac:1e:62:c4:
32:09:34:64:14:c1:53:73:28:db:fa:eb:6e:2d:dc:f8:fe:79:
4f:b0:af:78:b6:df:c7:b8:08:d3:b8:6f:65:fc:d5:de:44:eb:
3e:ca:bd:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBvp0NzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTk3ZDA2ZWRhMzYxZDkzNTU4OGU0MjdmM2Q5ODMzZjhmN2QxZDIwMB4XDTIyMDEw
MTAwNTYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJhYzhmOGUxMDc4
ODNiYWFlZWIyYmYwNjg0NzExYTQ0MWI3MGE0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMsV4BBYpvahwBq6aSmeynRRcYoJij12vTxskxSfuxq6/hWa
OAG5mnyTz129pWkH4UVdY7SoF0sVlavQRPIX4rrrGtGGIUAedfmyNDSgH2d9gbV9
3VHWH5YYhOpXWbBAIKN1N93b1p3dTMk3z8ih/SmAS3Q4F+GSLGFNx1oxWvyKNkc0
j3WV0u3sy0o4iP8zbsH5eH8BmQW25l3OUYebG/v6nbxB0l0ipRbhPNOSjcVUY2Nd
sk6CBg0So3GoT0sn9hl93k9OSEhwTHmegToWFZLshYxoJJZro534iFY+2p3jP4Yv
0S32iFRaiLWR4bpdE2Owf9VoopG582+1Ih+h58MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQirI+OEHiDuq7rK/BoRxGkQbcKSDAfBgNVHSMEGDAWgBTZl9Bu2jYdk1WI
5Cfz2YM/j30dIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJaZlFidG8ySFpOVmlPUW44OW1EUDQ5OUhTQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvNzAyZGE1LWMyY2ItNGI2Ni1iMjk5LWRjNWUwYzQ2ZTc2Yy8x
L0lxeVBqaEI0ZzdxdTZ5dndhRWNScEVHM0NrZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
NzAyZGE1LWMyY2ItNGI2Ni1iMjk5LWRjNWUwYzQ2ZTc2Yy8xLzJaZlFidG8ySFpO
VmlPUW44OW1EUDQ5OUhTQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKTLDANBgkqhkiG9w0BAQsFAAOC
AQEAZCvzslTAT6OE9zYjDXtieQIrEQ1jVnoKZs6a52TMR1n4GNQcnBd4IwQAKChZ
mFa7FD0UYiiETVsxwngS76pCQnIqUUc1aGQCA0MOx1led4cKsoKn2RLYo2QLw27H
ptex5LHjYxohi+8dXJHBGED3G2afSOZea+ij9i4tzpijimRG/Reo8y/4ljmI5vq8
0WqR7WakBi4kKLhB3iNbd9jQN9MPgE2SS6lEltO4SEV/8cgu6Kisnq5Cat9Q9ykD
p9Wd1/MKGhNRccXermGbvzFbdZMN8dSsHmLEMgk0ZBTBU3Mo2/rrbi3c+P55T7Cv
eLbfx7gI07hvZfzV3kTrPsq9sg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:08 2023 by rpki-client on console-fra.rpki-client.org