Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/UnM07P6UUOTXqln_yEn4PlSWGUo.roa
File: UnM07P6UUOTXqln_yEn4PlSWGUo.roa (raw, json)
Hash identifier: Y9pFH0y5MlXxgb8kAN3kC4pKeTDt+FQxsLWIQ4eeb2E=
Subject key identifier: 52:73:34:EC:FE:94:50:E4:D7:AA:59:FF:C8:49:F8:3E:54:96:19:4A
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 01856CCAEC87EFF205BBAF8480F8683D5EA0
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/UnM07P6UUOTXqln_yEn4PlSWGUo.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207464
IP address blocks: 84.214.116.0/22 maxlen: 22
84.214.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ec:87:ef:f2:05:bb:af:84:80:f8:68:3d:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=527334ecfe9450e4d7aa59ffc849f83e5496194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:5b:85:5f:dc:32:73:95:09:11:8d:7f:87:
bf:4c:1c:f2:76:75:46:af:75:f9:1f:2a:43:c1:95:
aa:5a:86:80:da:91:35:b4:26:20:ae:bd:c7:a0:cb:
a4:48:88:67:c9:e7:29:70:9c:32:70:33:63:d8:32:
59:52:7e:c4:6e:d0:87:c0:a6:2f:f8:5c:93:f0:ca:
8a:f9:97:1b:2f:b3:4e:ba:f4:99:d3:b1:e3:24:db:
2b:dd:de:47:91:ed:d7:6d:42:c2:ea:52:92:3e:5a:
c1:e2:02:e5:7a:42:5a:85:be:4c:24:5f:93:a2:6f:
c2:b5:76:24:94:9d:78:e6:95:2a:97:99:50:35:24:
d1:a2:fb:e6:0c:ed:5d:91:01:74:0d:66:00:39:e1:
1c:6d:9c:b5:08:6d:ab:8a:50:8d:22:cc:b5:87:9c:
05:49:e3:cb:8c:d5:bf:e3:7e:c2:25:83:a9:5b:e3:
f8:31:5d:35:c2:1b:e7:32:54:0d:f7:0d:31:94:1f:
1a:2f:35:b2:ce:37:4d:51:9f:13:e0:d8:b0:e6:9b:
5b:2d:d0:92:84:11:87:ad:18:02:2d:c7:34:af:c5:
3c:81:ad:9a:16:05:dd:e5:3a:d8:8a:20:1d:4e:a7:
99:ff:c2:74:a2:08:00:fb:95:ac:c6:e3:73:fa:f8:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:34:EC:FE:94:50:E4:D7:AA:59:FF:C8:49:F8:3E:54:96:19:4A
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/UnM07P6UUOTXqln_yEn4PlSWGUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.214.116.0/22
84.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
23:92:03:41:d2:75:46:34:62:64:93:2f:c5:65:ae:1e:b8:2e:
54:28:3b:c9:f1:69:75:70:a2:57:a7:fc:e3:38:3e:a9:0d:50:
40:28:80:9c:aa:87:f7:e0:d4:43:5e:6d:b5:93:0b:2f:92:96:
a9:5f:df:57:f7:e1:3a:45:bc:7d:59:e8:50:0e:12:59:30:46:
f7:8c:38:06:40:00:18:d2:fe:d7:3e:31:dd:96:4c:8b:82:3e:
85:aa:36:9c:68:60:96:26:7f:79:48:aa:9d:41:51:db:0d:c2:
fb:fd:3f:c2:17:aa:0c:ee:03:9e:de:45:70:b2:77:e9:df:e7:
9a:32:b4:5a:ae:3f:ed:07:2a:c7:4c:4c:ac:d1:16:a3:f4:f4:
82:05:90:bd:b9:ad:b1:fe:da:b0:ef:74:0a:04:30:96:6b:2c:
65:ea:f2:53:ac:aa:d2:41:0a:1d:77:f8:93:b7:17:be:8e:1d:
ef:8d:b2:ec:c2:d2:ff:ea:8e:70:ad:a5:43:fa:89:5a:0f:4e:
d0:32:c8:96:8b:6f:02:e8:9a:19:97:3a:cd:cc:92:e3:99:10:
9d:1c:9c:a5:30:25:a1:23:75:46:d4:72:9c:cf:3c:16:6a:7f:
60:fa:05:9c:33:62:ab:18:36:ad:02:c1:b5:a4:2a:b7:0e:6a:
e8:f2:8d:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsyuyH7/IFu6+EgPhoPV6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzRkZjYxMTM0YzBhYjk0NDVhNmNjYmIzZWM2M2VhZjBm
YTAyNTUwHhcNMjMwMTAxMTAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjczMzRlY2ZlOTQ1MGU0ZDdhYTU5ZmZjODQ5ZjgzZTU0OTYxOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIxbhV/cMnOVCRGNf4e/TBzydnVG
r3X5HypDwZWqWoaA2pE1tCYgrr3HoMukSIhnyecpcJwycDNj2DJZUn7EbtCHwKYv
+FyT8MqK+ZcbL7NOuvSZ07HjJNsr3d5Hke3XbULC6lKSPlrB4gLlekJahb5MJF+T
om/CtXYklJ145pUql5lQNSTRovvmDO1dkQF0DWYAOeEcbZy1CG2rilCNIsy1h5wF
SePLjNW/437CJYOpW+P4MV01whvnMlQN9w0xlB8aLzWyzjdNUZ8T4Niw5ptbLdCS
hBGHrRgCLcc0r8U8ga2aFgXd5TrYiiAdTqeZ/8J0oggA+5WsxuNz+vgMTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFJzNOz+lFDk16pZ/8hJ+D5UlhlKMB8GA1UdIwQY
MBaAFFs032ETTAq5RFpsy7PsY+rw+gJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pUZllSTk1DcmxFV216THMteGo2dkQ2QWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xOTI2MTctOTYxYi00MzAwLWIxNDIt
YjIzOWY1MGYwMDI5LzEvVW5NMDdQNlVVT1RYcWxuX3lFbjRQbFNXR1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xOTI2MTctOTYxYi00MzAwLWIxNDItYjIzOWY1MGYwMDI5
LzEvV3pUZllSTk1DcmxFV216THMteGo2dkQ2QWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVNZ0AwQC
VNboMA0GCSqGSIb3DQEBCwUAA4IBAQAjkgNB0nVGNGJkky/FZa4euC5UKDvJ8Wl1
cKJXp/zjOD6pDVBAKICcqof34NRDXm21kwsvkpapX99X9+E6Rbx9WehQDhJZMEb3
jDgGQAAY0v7XPjHdlkyLgj6FqjacaGCWJn95SKqdQVHbDcL7/T/CF6oM7gOe3kVw
snfp3+eaMrRarj/tByrHTEys0Raj9PSCBZC9ua2x/tqw73QKBDCWayxl6vJTrKrS
QQodd/iTtxe+jh3vjbLswtL/6o5wraVD+olaD07QMsiWi28C6JoZlzrNzJLjmRCd
HJylMCWhI3VG1HKczzwWan9g+gWcM2KrGDatAsG1pCq3Dmro8o04
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org