Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/K8axwLhJ9wREn67CDcW-aSZxYQw.roa
File: K8axwLhJ9wREn67CDcW-aSZxYQw.roa (raw, json)
Hash identifier: Y6ureAHgd3gHbEYRRf4XuWgTCD9Cn+8ByNcDkf7m82U=
Subject key identifier: 2B:C6:B1:C0:B8:49:F7:04:44:9F:AE:C2:0D:C5:BE:69:26:71:61:0C
Certificate issuer: /CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Certificate serial: 01835F60004DBA947A5D1231F7690203CD16
Authority key identifier: AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/K8axwLhJ9wREn67CDcW-aSZxYQw.roa
Signing time: Wed 21 Sep 2022 09:27:50 +0000
ROA not before: Wed 21 Sep 2022 09:27:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 193.163.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:60:00:4d:ba:94:7a:5d:12:31:f7:69:02:03:cd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Validity
Not Before: Sep 21 09:27:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc6b1c0b849f704449faec20dc5be692671610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:40:22:22:72:0b:3d:1d:24:86:b4:5d:26:
c2:82:69:83:20:f1:dc:6e:df:1e:79:45:0a:0b:0c:
bb:18:1e:f2:79:3e:69:78:8e:bf:f2:39:3b:62:9d:
77:0d:66:2b:91:69:1e:56:58:c1:22:32:7a:d7:9d:
c3:fa:0a:a7:e9:6d:11:08:c4:92:31:c0:9a:87:8b:
28:a6:2a:5f:d0:1b:3a:19:29:ab:5a:a4:a3:de:6f:
39:38:d1:e1:2f:4d:42:74:5c:1b:73:f1:ed:09:7d:
12:59:77:a7:90:20:f8:17:68:f5:2e:0f:a4:50:f6:
0b:7b:82:9c:23:0d:b2:82:c0:8d:38:21:76:07:26:
c4:83:34:f8:dc:6e:78:61:85:32:69:1a:dd:d3:8a:
0c:75:1e:f4:1c:12:f5:84:b5:f7:1e:29:f9:12:03:
f5:f2:f6:68:2a:ca:85:42:19:58:c3:42:b9:97:c0:
fb:56:af:c1:fa:e0:fb:a3:35:9d:c7:ae:1f:28:ca:
f1:b0:3a:6a:12:fd:ab:14:23:2e:42:12:87:98:8b:
21:7f:c0:1e:0f:75:02:75:81:1e:aa:8d:0b:b8:73:
61:75:cb:09:8a:b8:0a:59:42:5b:fb:2f:74:40:85:
8a:04:e1:e6:d7:4f:f3:68:05:13:57:db:54:fd:3e:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:B1:C0:B8:49:F7:04:44:9F:AE:C2:0D:C5:BE:69:26:71:61:0C
X509v3 Authority Key Identifier:
keyid:AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/K8axwLhJ9wREn67CDcW-aSZxYQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/qpMY7Gir9_6jvJlyvKO96KFMvVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d4:ec:b2:8b:71:61:b1:de:c2:1c:c3:f9:71:5c:4d:b7:49:
0a:55:c7:d7:af:d5:49:f5:27:96:1c:9f:80:fd:25:3e:db:80:
6c:8a:fe:df:d5:53:16:ad:e2:8d:f5:d9:3c:b1:d3:73:eb:ea:
f8:5e:e5:56:6e:0d:ef:ff:19:cc:e5:f8:84:05:07:6a:54:3f:
da:ee:55:00:13:17:88:6c:04:5f:81:2d:74:5a:0a:53:ad:26:
ac:19:47:8c:d8:69:76:8e:8c:7f:ef:f8:9e:a8:70:5d:cd:45:
d8:fd:1f:c2:42:e9:7a:a4:77:f7:f8:98:fd:b1:95:60:35:28:
21:1b:b1:ac:e5:d7:5c:b4:94:2b:f4:ba:2c:7a:86:57:40:fd:
b7:28:e5:23:2f:53:e2:9e:25:8d:c2:0f:ad:b5:e5:19:9a:30:
a4:de:2d:3f:5a:8c:2a:80:d5:8d:d2:f7:74:6a:6e:c5:32:25:
c3:f4:69:ed:b3:8b:6e:53:e2:d8:c4:86:c0:69:0c:fb:a7:46:
cc:86:cc:20:bb:09:9a:e3:ba:77:90:bd:49:13:4e:b3:bc:83:
b6:07:75:60:98:95:fa:bb:d7:2d:34:c5:98:57:e2:1d:0b:9d:
2f:85:96:96:dd:ad:44:ec:10:d1:93:0b:d6:a1:03:d0:b7:53:
99:76:c3:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNfYABNupR6XRIx92kCA80WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOTMxOGVjNjhhYmY3ZmVhM2JjOTk3MmJjYTNiZGU4YTE0
Y2JkNTQwHhcNMjIwOTIxMDkyNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmM2YjFjMGI4NDlmNzA0NDQ5ZmFlYzIwZGM1YmU2OTI2NzE2MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTRAIiJyCz0dJIa0XSbCgmmDIPHc
bt8eeUUKCwy7GB7yeT5peI6/8jk7Yp13DWYrkWkeVljBIjJ6153D+gqn6W0RCMSS
McCah4sopipf0Bs6GSmrWqSj3m85ONHhL01CdFwbc/HtCX0SWXenkCD4F2j1Lg+k
UPYLe4KcIw2ygsCNOCF2BybEgzT43G54YYUyaRrd04oMdR70HBL1hLX3Hin5EgP1
8vZoKsqFQhlYw0K5l8D7Vq/B+uD7ozWdx64fKMrxsDpqEv2rFCMuQhKHmIshf8Ae
D3UCdYEeqo0LuHNhdcsJirgKWUJb+y90QIWKBOHm10/zaAUTV9tU/T5MIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvGscC4SfcERJ+uwg3FvmkmcWEMMB8GA1UdIwQY
MBaAFKqTGOxoq/f+o7yZcryjveihTL1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBNWTdHaXI5XzZqdkpseXZLTzk2S0ZNdlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMWIxYTAtMjJmMi00MGU3LWE0NWYt
Y2I5NWEyODY5OTBkLzEvSzhheHdMaEo5d1JFbjY3Q0RjVy1hU1p4WVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMWIxYTAtMjJmMi00MGU3LWE0NWYtY2I5NWEyODY5OTBk
LzEvcXBNWTdHaXI5XzZqdkpseXZLTzk2S0ZNdlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPPMA0G
CSqGSIb3DQEBCwUAA4IBAQBI1Oyyi3Fhsd7CHMP5cVxNt0kKVcfXr9VJ9SeWHJ+A
/SU+24Bsiv7f1VMWreKN9dk8sdNz6+r4XuVWbg3v/xnM5fiEBQdqVD/a7lUAExeI
bARfgS10WgpTrSasGUeM2Gl2jox/7/ieqHBdzUXY/R/CQul6pHf3+Jj9sZVgNSgh
G7Gs5ddctJQr9LoseoZXQP23KOUjL1PiniWNwg+tteUZmjCk3i0/WowqgNWN0vd0
am7FMiXD9Gnts4tuU+LYxIbAaQz7p0bMhswguwma47p3kL1JE06zvIO2B3VgmJX6
u9ctNMWYV+IdC50vhZaW3a1E7BDRkwvWoQPQt1OZdsM5
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:26 2025 by rpki-client