Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/h8iuKrR9jNm-qJgJDh0pvZmF0No.roa
File: h8iuKrR9jNm-qJgJDh0pvZmF0No.roa (raw, json)
Hash identifier: sgV4LXONDC3pR2uXPvR2kdpA/w8hD7t+/DZ4xH2w6w0=
Subject key identifier: 87:C8:AE:2A:B4:7D:8C:D9:BE:A8:98:09:0E:1D:29:BD:99:85:D0:DA
Certificate issuer: /CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Certificate serial: 038903D2
Authority key identifier: 87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/h8iuKrR9jNm-qJgJDh0pvZmF0No.roa
Signing time: Sat 01 Jan 2022 10:05:34 +0000
ROA not before: Sat 01 Jan 2022 10:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204119
IP address blocks: 193.151.4.0/22 maxlen: 22
193.22.164.0/24 maxlen: 24
193.238.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59311058 (0x38903d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Validity
Not Before: Jan 1 10:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c8ae2ab47d8cd9bea898090e1d29bd9985d0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:26:10:62:a7:36:2d:7b:16:8d:2a:ef:3e:
03:e3:36:87:6d:93:5a:75:b7:1d:8f:c0:a1:7f:3a:
36:13:96:24:59:57:c2:15:ef:a2:9b:e2:be:43:a2:
2c:3f:7c:7a:b0:2b:36:c2:c1:59:4c:9e:5e:b9:4c:
ee:86:ae:29:a6:eb:3b:18:9a:a0:2c:27:de:a3:83:
28:2e:85:70:10:ce:66:c6:f6:18:59:46:6e:1b:09:
7d:06:41:9e:2a:83:f1:1d:8d:da:93:a1:da:5e:8d:
65:9c:72:c2:43:46:b6:d0:30:67:d8:d6:b4:71:f5:
d1:46:a7:b7:1e:c9:3a:b5:28:9b:14:35:68:48:13:
99:5f:fc:38:e7:a4:f9:1f:cf:79:c8:73:57:50:7a:
eb:d7:26:ae:c5:cf:c1:31:ac:75:82:7d:8c:fc:4b:
1b:10:c5:52:43:da:63:ef:60:d8:ad:cb:44:45:44:
c9:73:34:c5:94:07:a0:7a:c6:2e:70:c7:55:db:ba:
c6:11:93:20:a4:40:37:2f:49:d0:7f:0a:c2:e4:be:
98:5c:4b:7b:16:f8:c3:47:5e:ac:bb:0b:74:49:ab:
90:d8:99:71:c9:7d:1e:53:9a:89:ef:91:46:43:5e:
69:6a:89:a2:f7:12:1d:ec:d5:3a:71:3a:db:da:4d:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:AE:2A:B4:7D:8C:D9:BE:A8:98:09:0E:1D:29:BD:99:85:D0:DA
X509v3 Authority Key Identifier:
keyid:87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/h8iuKrR9jNm-qJgJDh0pvZmF0No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.164.0/24
193.151.4.0/22
193.238.104.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a4:2a:90:c1:4a:88:49:b2:8b:7d:08:ab:d5:de:01:ec:dc:
31:73:c6:53:e5:a6:9a:dc:09:ed:00:e6:f1:21:d3:40:a0:5e:
6e:34:76:c3:5f:ca:42:84:83:13:bd:6b:9c:ce:25:a2:55:fb:
8b:df:cb:38:d8:48:28:46:75:8f:30:41:37:2e:d2:df:cd:04:
c3:11:53:14:5a:77:1f:c2:31:dc:0a:56:e5:b9:94:26:d2:fb:
16:06:3a:f1:c5:f2:22:d4:ac:01:c5:12:9a:a6:49:a8:63:a5:
ad:18:2a:e7:d3:ee:91:c0:1a:95:6f:4f:14:09:27:a6:cc:0a:
88:66:8b:58:5c:4f:dc:14:9d:f1:05:40:52:83:cc:37:bb:8f:
14:be:e2:1c:7f:c2:40:0c:8b:82:58:a4:31:91:2c:fb:7a:6e:
e5:04:6f:0f:bd:0e:ac:83:94:9a:95:4c:bc:09:5c:90:84:8f:
5d:6b:cb:e0:18:de:d9:98:23:9c:df:35:ac:d1:76:ae:ef:88:
37:4d:09:48:42:9d:15:67:c3:f1:b3:9d:27:c6:01:5f:71:03:
03:f4:26:07:af:8c:60:8c:18:f3:5c:fd:67:02:10:4a:1c:b3:
a5:50:19:e6:a0:a7:c3:d7:e9:72:35:35:0b:e1:0d:fe:47:59:
e8:6c:78:41
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA4kD0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NzFkOWIxODIxYzBhOWQxNjIyYmRkZGY5ZWMwYzkxOGU5MmE0MzdlMB4XDTIyMDEw
MTEwMDUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODdjOGFlMmFiNDdk
OGNkOWJlYTg5ODA5MGUxZDI5YmQ5OTg1ZDBkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+nJhBipzYtexaNKu8+A+M2h22TWnW3HY/AoX86NhOWJFlX
whXvopvivkOiLD98erArNsLBWUyeXrlM7oauKabrOxiaoCwn3qODKC6FcBDOZsb2
GFlGbhsJfQZBniqD8R2N2pOh2l6NZZxywkNGttAwZ9jWtHH10Uantx7JOrUomxQ1
aEgTmV/8OOek+R/PechzV1B669cmrsXPwTGsdYJ9jPxLGxDFUkPaY+9g2K3LREVE
yXM0xZQHoHrGLnDHVdu6xhGTIKRANy9J0H8KwuS+mFxLexb4w0derLsLdEmrkNiZ
ccl9HlOaie+RRkNeaWqJovcSHezVOnE629pNJakCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSHyK4qtH2M2b6omAkOHSm9mYXQ2jAfBgNVHSMEGDAWgBSHHZsYIcCp0WIr
3d+ewMkY6SpDfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h4MmJHQ0hBcWRGaUs5M2Zuc0RKR09rcVEzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvNWJmYTkxLWI5Y2YtNDQ2MC1iMTI0LWE2NDdhNGFlZGVhNy8x
L2g4aXVLclI5ak5tLXFKZ0pEaDBwdlptRjBOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
NWJmYTkxLWI5Y2YtNDQ2MC1iMTI0LWE2NDdhNGFlZGVhNy8xL2h4MmJHQ0hBcWRG
aUs5M2Zuc0RKR09rcVEzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMEWpAMEAsGXBAMEAsHuaDANBgkq
hkiG9w0BAQsFAAOCAQEAMqQqkMFKiEmyi30Iq9XeAezcMXPGU+WmmtwJ7QDm8SHT
QKBebjR2w1/KQoSDE71rnM4lolX7i9/LONhIKEZ1jzBBNy7S380EwxFTFFp3H8Ix
3ApW5bmUJtL7FgY68cXyItSsAcUSmqZJqGOlrRgq59PukcAalW9PFAknpswKiGaL
WFxP3BSd8QVAUoPMN7uPFL7iHH/CQAyLglikMZEs+3pu5QRvD70OrIOUmpVMvAlc
kISPXWvL4Bje2ZgjnN81rNF2ru+IN00JSEKdFWfD8bOdJ8YBX3EDA/QmB6+MYIwY
81z9ZwIQShyzpVAZ5qCnw9fpcjU1C+EN/kdZ6Gx4QQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:42 2024 by rpki-client on console-fra.rpki-client.org