Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/be3414-817a-4667-9b5b-95f2071bfcad/1/xU0fWXgRGYHugANvy8IFpoyeGwA.roa
File: xU0fWXgRGYHugANvy8IFpoyeGwA.roa (raw, json)
Hash identifier: srpeoZChzq1oPSAwWBh3A/bd7FaEkcDFbwmwcESkX4E=
Subject key identifier: C5:4D:1F:59:78:11:19:81:EE:80:03:6F:CB:C2:05:A6:8C:9E:1B:00
Certificate issuer: /CN=e378bdb7682f28fba3a7029b1c98431d664a840c
Certificate serial: 08D505C6
Authority key identifier: E3:78:BD:B7:68:2F:28:FB:A3:A7:02:9B:1C:98:43:1D:66:4A:84:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43i9t2gvKPujpwKbHJhDHWZKhAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/be3414-817a-4667-9b5b-95f2071bfcad/1/xU0fWXgRGYHugANvy8IFpoyeGwA.roa
Signing time: Sat 01 Jan 2022 12:56:51 +0000
ROA not before: Sat 01 Jan 2022 12:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209363
IP address blocks: 185.253.124.0/22 maxlen: 22
193.34.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148178374 (0x8d505c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378bdb7682f28fba3a7029b1c98431d664a840c
Validity
Not Before: Jan 1 12:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c54d1f5978111981ee80036fcbc205a68c9e1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:16:70:00:4f:02:90:5d:0e:dd:4b:0f:e7:
59:4d:47:8f:b3:f5:06:9f:01:dc:36:de:f8:15:72:
cc:d5:d7:c8:ef:54:66:e4:57:f7:e5:7f:52:08:5a:
e2:05:68:f8:16:76:05:de:04:5e:cc:33:9c:0e:a3:
29:7c:b9:4f:32:0d:c5:88:e2:96:dc:2c:c4:f4:2b:
07:59:a1:a7:e1:dd:2c:e2:d1:cf:7e:00:db:a4:03:
88:b6:73:92:31:0f:65:74:b8:73:79:4e:81:03:2c:
96:1c:93:fe:ed:3d:20:c3:e1:d3:3f:e4:52:cf:f4:
93:95:a9:c4:15:ce:ac:f5:32:a3:4b:61:42:bc:e8:
94:f3:21:66:19:1a:da:59:c4:85:a8:cc:30:db:0b:
cc:65:c4:f0:f9:ee:45:d4:b4:48:d4:ff:26:0d:21:
7d:73:f3:48:86:fc:ce:aa:d8:ca:45:01:0d:e8:d2:
2d:d2:fc:19:68:99:df:dc:d9:67:b8:57:18:8a:f8:
d4:e6:b3:02:fa:e8:1e:f4:ca:fd:1e:e5:dd:53:63:
ce:09:14:bc:1a:82:37:05:3f:af:b5:6a:14:6f:d3:
e4:f3:52:a2:45:6a:3c:2e:fd:b1:74:2e:07:33:4a:
dc:b6:6e:9d:98:0e:0e:6e:9a:dc:66:87:01:99:2f:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:1F:59:78:11:19:81:EE:80:03:6F:CB:C2:05:A6:8C:9E:1B:00
X509v3 Authority Key Identifier:
keyid:E3:78:BD:B7:68:2F:28:FB:A3:A7:02:9B:1C:98:43:1D:66:4A:84:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43i9t2gvKPujpwKbHJhDHWZKhAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/be3414-817a-4667-9b5b-95f2071bfcad/1/xU0fWXgRGYHugANvy8IFpoyeGwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/be3414-817a-4667-9b5b-95f2071bfcad/1/43i9t2gvKPujpwKbHJhDHWZKhAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.124.0/22
193.34.148.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:e6:e2:c5:5f:74:69:94:39:0a:c9:ae:30:26:63:63:58:5e:
85:35:5f:6a:dd:cf:ed:07:a6:e2:33:9a:d6:10:70:8d:09:ff:
03:74:fd:6c:a9:65:05:47:29:4c:4e:8c:31:a0:fc:59:36:d0:
82:e9:11:43:47:61:b9:33:c2:90:fa:7b:fb:c2:99:be:e9:e3:
3c:72:d9:e0:2b:88:8c:97:65:06:a0:73:48:4f:01:34:c9:22:
2a:e0:bf:97:50:ed:84:ed:94:d8:d3:bf:9a:5f:0e:23:7b:41:
d0:19:1d:a2:51:40:4a:4a:79:10:80:89:8d:be:03:62:20:12:
f4:5a:72:43:03:30:a1:24:7f:88:31:14:91:c6:3d:6f:ef:5d:
14:04:07:31:2c:75:e1:29:da:53:c7:48:e7:40:fa:71:e0:88:
f8:79:64:17:fa:3b:04:85:46:5f:17:85:35:d1:5f:63:ef:ef:
73:e9:44:ff:76:de:7f:f2:de:5f:80:f9:38:8c:2a:57:73:f9:
09:9e:ae:8f:fb:67:b9:4d:fd:45:53:3b:7b:d0:b7:02:83:48:
8a:64:5d:3f:eb:a7:74:be:18:f6:65:6d:c1:07:c6:95:c7:e0:
09:c2:2e:62:c4:8e:e1:11:2a:3f:7f:50:50:31:1e:ec:de:25:
4d:f9:88:75
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECNUFxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Mzc4YmRiNzY4MmYyOGZiYTNhNzAyOWIxYzk4NDMxZDY2NGE4NDBjMB4XDTIyMDEw
MTEyNTY1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzU0ZDFmNTk3ODEx
MTk4MWVlODAwMzZmY2JjMjA1YTY4YzllMWIwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIukFnAATwKQXQ7dSw/nWU1Hj7P1Bp8B3Dbe+BVyzNXXyO9U
ZuRX9+V/Ugha4gVo+BZ2Bd4EXswznA6jKXy5TzINxYjiltwsxPQrB1mhp+HdLOLR
z34A26QDiLZzkjEPZXS4c3lOgQMslhyT/u09IMPh0z/kUs/0k5WpxBXOrPUyo0th
QrzolPMhZhka2lnEhajMMNsLzGXE8PnuRdS0SNT/Jg0hfXPzSIb8zqrYykUBDejS
LdL8GWiZ39zZZ7hXGIr41OazAvroHvTK/R7l3VNjzgkUvBqCNwU/r7VqFG/T5PNS
okVqPC79sXQuBzNK3LZunZgODm6a3GaHAZkvUCkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTFTR9ZeBEZge6AA2/LwgWmjJ4bADAfBgNVHSMEGDAWgBTjeL23aC8o+6On
ApscmEMdZkqEDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQzaTl0Mmd2S1B1anB3S2JISmhESFdaS2hBdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYmUzNDE0LTgxN2EtNDY2Ny05YjViLTk1ZjIwNzFiZmNhZC8x
L3hVMGZXWGdSR1lIdWdBTnZ5OElGcG95ZUd3QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YmUzNDE0LTgxN2EtNDY2Ny05YjViLTk1ZjIwNzFiZmNhZC8xLzQzaTl0Mmd2S1B1
anB3S2JISmhESFdaS2hBdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArn9fAMEAcEilDANBgkqhkiG9w0B
AQsFAAOCAQEAyebixV90aZQ5CsmuMCZjY1hehTVfat3P7Qem4jOa1hBwjQn/A3T9
bKllBUcpTE6MMaD8WTbQgukRQ0dhuTPCkPp7+8KZvunjPHLZ4CuIjJdlBqBzSE8B
NMkiKuC/l1DthO2U2NO/ml8OI3tB0BkdolFASkp5EICJjb4DYiAS9FpyQwMwoSR/
iDEUkcY9b+9dFAQHMSx14SnaU8dI50D6ceCI+HlkF/o7BIVGXxeFNdFfY+/vc+lE
/3bef/LeX4D5OIwqV3P5CZ6uj/tnuU39RVM7e9C3AoNIimRdP+undL4Y9mVtwQfG
lcfgCcIuYsSO4REqP39QUDEe7N4lTfmIdQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org