Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa
File: mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa (raw, json)
Hash identifier: vzwBIo/oD5jUXOcp1R1dGYgiGMreN0kOSDxtNv+MDME=
Subject key identifier: 99:1B:BC:2D:70:16:2D:B2:84:5D:DD:A3:32:C6:1A:52:37:E2:06:DF
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 0183360794A25FC4DFA50CB8933227FE0E14
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa
Signing time: Tue 13 Sep 2022 08:46:49 +0000
ROA not before: Tue 13 Sep 2022 08:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.246.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:07:94:a2:5f:c4:df:a5:0c:b8:93:32:27:fe:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Sep 13 08:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=991bbc2d70162db2845ddda332c61a5237e206df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:b8:f1:17:b7:a7:b9:02:5e:57:d5:d7:85:
f9:b5:c9:be:16:05:7d:0b:34:d2:95:a0:0a:df:d9:
b7:43:9c:ea:f0:05:aa:65:e5:f7:e5:cc:06:d4:90:
5a:b4:96:b2:5d:49:36:f2:26:ed:91:e2:7e:a8:00:
13:c6:da:e3:c3:92:b0:6a:bb:19:7f:18:45:cc:fd:
33:78:7f:89:76:38:0d:83:d8:e1:ea:7d:e4:eb:37:
02:b3:92:b0:89:b3:24:95:1a:24:1d:04:60:8d:55:
45:5c:a5:7b:a9:4e:d5:92:e4:3a:fe:7a:fc:3b:8b:
1f:e4:7c:aa:da:a1:2c:a8:04:7e:d0:dd:28:a0:c3:
81:71:ce:09:fe:6a:38:a2:f2:5b:7b:ed:01:1a:f8:
a9:78:2a:65:72:34:20:6d:91:8e:65:b1:81:7d:49:
dc:ad:0c:f3:05:f7:d8:50:81:7b:5c:03:68:21:65:
cf:fc:9b:94:fa:71:94:53:f6:08:d8:52:8b:a6:07:
ab:96:f4:28:68:b4:51:af:a8:c0:e2:7a:98:62:ab:
4b:7c:9b:7b:27:68:a6:29:3e:6a:e4:a6:8d:5f:d5:
90:ca:7f:37:77:10:f1:0c:9f:c9:b1:df:75:32:a4:
0d:ec:ff:19:7f:d3:a3:88:a1:77:54:97:19:61:a9:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:BC:2D:70:16:2D:B2:84:5D:DD:A3:32:C6:1A:52:37:E2:06:DF
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/23
Signature Algorithm: sha256WithRSAEncryption
da:21:9f:c4:8e:b3:fa:08:b5:e5:33:5b:4c:60:9b:a6:86:f9:
b7:c5:66:b3:2b:48:a0:fe:3a:9f:79:d8:d7:6e:21:bb:c2:e6:
20:bb:01:36:d5:06:1f:02:71:2e:6f:81:3e:60:c8:91:f4:b5:
a3:c9:5f:30:07:3b:2b:f4:c2:5a:48:73:da:f2:8c:02:70:45:
b0:ec:6d:8a:2a:1f:9e:dc:68:6f:76:4a:bd:ce:ce:25:cb:d9:
4f:26:b5:d3:82:91:24:a7:4a:b9:3d:e7:f1:ee:dc:bc:2d:ac:
79:8f:18:b2:e4:86:03:71:ab:25:a7:39:ba:a9:0b:bd:37:d8:
76:19:53:c5:8d:ca:d0:9c:c2:cc:21:0b:5a:bf:76:7f:c6:ff:
4a:2c:7b:f7:17:62:df:a9:12:34:f7:7d:e6:61:f4:b4:fd:44:
e2:55:53:f8:31:b5:b2:b0:b1:d5:b4:77:da:5f:1c:08:84:74:
1c:c3:3e:91:91:78:39:65:f9:2b:9c:6c:e6:a6:5e:f3:98:9a:
0e:13:05:fa:b1:98:96:9c:40:97:d0:37:6d:32:c9:02:30:bd:
d9:ea:29:d3:77:03:36:37:82:69:da:a1:6b:7c:e2:89:35:fa:
64:4b:00:c5:2f:62:3a:1b:9c:84:8d:25:ce:a7:ec:25:f4:e0:
e5:68:1f:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM2B5SiX8TfpQy4kzIn/g4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmMwYzA2MzNjYmVmMmU5N2ZjZWFjNzk3NjMzZDQ5MTJm
NzZmOTYwHhcNMjIwOTEzMDg0NjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTFiYmMyZDcwMTYyZGIyODQ1ZGRkYTMzMmM2MWE1MjM3ZTIwNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkC48Re3p7kCXlfV14X5tcm+FgV9
CzTSlaAK39m3Q5zq8AWqZeX35cwG1JBatJayXUk28ibtkeJ+qAATxtrjw5KwarsZ
fxhFzP0zeH+JdjgNg9jh6n3k6zcCs5KwibMklRokHQRgjVVFXKV7qU7VkuQ6/nr8
O4sf5Hyq2qEsqAR+0N0ooMOBcc4J/mo4ovJbe+0BGvipeCplcjQgbZGOZbGBfUnc
rQzzBffYUIF7XANoIWXP/JuU+nGUU/YI2FKLpgerlvQoaLRRr6jA4nqYYqtLfJt7
J2imKT5q5KaNX9WQyn83dxDxDJ/Jsd91MqQN7P8Zf9OjiKF3VJcZYak+cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkbvC1wFi2yhF3dozLGGlI34gbfMB8GA1UdIwQY
MBaAFE28DAYzy+8ul/zqx5djPUkS92+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQt
NTNlNDEwODI1Njc2LzEvbVJ1OExYQVdMYktFWGQyak1zWWFVamZpQnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNGI1MDktNGEwNi00YmM0LTkzODQtNTNlNDEwODI1Njc2
LzEvVGJ3TUJqUEw3eTZYX09ySGwyTTlTUkwzYjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfYEMA0G
CSqGSIb3DQEBCwUAA4IBAQDaIZ/EjrP6CLXlM1tMYJumhvm3xWazK0ig/jqfedjX
biG7wuYguwE21QYfAnEub4E+YMiR9LWjyV8wBzsr9MJaSHPa8owCcEWw7G2KKh+e
3Ghvdkq9zs4ly9lPJrXTgpEkp0q5Pefx7ty8Lax5jxiy5IYDcaslpzm6qQu9N9h2
GVPFjcrQnMLMIQtav3Z/xv9KLHv3F2LfqRI0933mYfS0/UTiVVP4MbWysLHVtHfa
XxwIhHQcwz6RkXg5ZfkrnGzmpl7zmJoOEwX6sZiWnECX0DdtMskCML3Z6inTdwM2
N4Jp2qFrfOKJNfpkSwDFL2I6G5yEjSXOp+wl9ODlaB8G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org