Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/TDUozrqjSRtjqy17DGQZyaAQiq0.roa
File: TDUozrqjSRtjqy17DGQZyaAQiq0.roa (raw, json)
Hash identifier: LRbUmMF0inUxFwPmgOonADW89dzd+jv2dyDKdNvBaN4=
Subject key identifier: 4C:35:28:CE:BA:A3:49:1B:63:AB:2D:7B:0C:64:19:C9:A0:10:8A:AD
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 1B04B7CE
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/TDUozrqjSRtjqy17DGQZyaAQiq0.roa
Signing time: Sat 01 Jan 2022 07:59:21 +0000
ROA not before: Sat 01 Jan 2022 07:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28917
IP address blocks: 91.209.127.0/24 maxlen: 24
185.16.116.0/22 maxlen: 22
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453294030 (0x1b04b7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Jan 1 07:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c3528cebaa3491b63ab2d7b0c6419c9a0108aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:6a:b8:f0:35:4e:5b:b6:72:26:5e:44:38:
d1:b7:47:49:20:08:16:6b:fd:ef:09:9a:a9:83:bc:
3d:57:5b:8a:61:3a:26:e5:ec:7f:44:c6:ee:1a:a4:
15:b5:2f:d9:e5:39:cf:c5:a9:96:c9:b6:56:d4:0d:
f8:3e:4e:52:1f:71:29:18:2b:ca:8d:37:f9:7b:a7:
da:fa:cb:d5:84:8e:8f:25:92:19:0f:ea:a5:d5:c2:
0e:64:c5:4c:87:15:77:01:06:b2:e3:f8:df:b2:31:
cf:f0:16:23:a1:c3:5a:b2:37:c3:b6:74:4f:09:ad:
2a:c1:13:cc:28:9e:3f:d8:0e:9b:d9:7a:a6:24:e7:
b1:a5:aa:9d:fc:db:17:37:35:a1:2b:5a:89:b0:56:
9b:79:8c:d3:d0:e4:cb:6a:77:8c:f0:c8:67:da:c2:
46:bc:9b:48:7e:ad:a8:25:f2:a4:ea:1d:b5:b6:69:
bf:7b:64:2e:e7:71:85:0f:aa:df:4a:cc:6a:ae:5d:
e8:f9:29:2c:2e:a4:51:99:f3:98:da:ea:1d:4e:d6:
4e:76:93:19:22:79:39:ca:ea:3f:9f:5e:99:43:dd:
cf:9f:8b:75:11:68:07:d2:1b:90:b0:ef:18:85:01:
06:f7:74:d4:7c:68:9c:03:d5:d1:be:d2:3b:7d:c9:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:28:CE:BA:A3:49:1B:63:AB:2D:7B:0C:64:19:C9:A0:10:8A:AD
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/TDUozrqjSRtjqy17DGQZyaAQiq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.127.0/24
185.16.116.0/22
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
67:f3:97:52:87:ee:6f:f9:e6:f0:ca:f6:60:94:0b:8d:6a:e0:
2c:a5:22:08:05:9a:b8:9c:26:4b:1c:b4:8d:20:17:4e:ba:7a:
a7:c8:f1:0c:38:66:01:44:4f:e9:96:e9:94:88:1f:2c:3b:96:
73:ff:0f:7c:c7:95:32:51:ed:56:79:e7:c6:de:35:ae:bd:c8:
1b:4b:4a:7c:c2:c4:6a:c3:0a:9f:30:69:9e:eb:0a:76:cd:7e:
2b:f7:32:94:a3:be:c5:d1:88:70:12:26:96:e2:62:2d:05:7f:
c9:2c:7f:13:ee:79:37:83:f6:fa:97:27:19:7d:e8:10:3e:9d:
81:87:5c:46:9b:0e:8d:df:26:12:71:61:c3:62:ac:35:ec:52:
93:83:6e:7d:4e:7c:61:3a:52:df:31:22:ba:a8:77:b4:ec:2e:
3b:51:19:90:30:cb:a7:45:a1:80:ab:a7:57:db:f0:d5:dc:f0:
fb:5b:82:a5:42:b3:ff:b2:b8:48:fa:90:d5:3a:f1:c5:24:a0:
27:44:de:c3:a1:20:eb:f2:fb:b5:97:bd:d4:70:62:28:5c:fb:
ff:96:cc:b6:01:40:e1:5d:d0:77:12:95:d0:2a:50:f8:05:68:
85:bc:aa:0c:b5:c5:57:a4:0c:3d:08:e9:e3:9f:e9:be:05:77:
b3:03:e0:bf
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEGwS3zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZDkwOTI3Mzg0MWI1MGE4MWViZDIxZjVjYTAxMTBmY2VlZTFmZjNkMB4XDTIyMDEw
MTA3NTkyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGMzNTI4Y2ViYWEz
NDkxYjYzYWIyZDdiMGM2NDE5YzlhMDEwOGFhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNrarjwNU5btnImXkQ40bdHSSAIFmv97wmaqYO8PVdbimE6
JuXsf0TG7hqkFbUv2eU5z8Wplsm2VtQN+D5OUh9xKRgryo03+Xun2vrL1YSOjyWS
GQ/qpdXCDmTFTIcVdwEGsuP437Ixz/AWI6HDWrI3w7Z0TwmtKsETzCieP9gOm9l6
piTnsaWqnfzbFzc1oStaibBWm3mM09Dky2p3jPDIZ9rCRrybSH6tqCXypOodtbZp
v3tkLudxhQ+q30rMaq5d6PkpLC6kUZnzmNrqHU7WTnaTGSJ5OcrqP59emUPdz5+L
dRFoB9IbkLDvGIUBBvd01HxonAPV0b7SO33JsPcCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRMNSjOuqNJG2OrLXsMZBnJoBCKrTAfBgNVHSMEGDAWgBT9kJJzhBtQqB69
IfXKARD87uH/PTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19aQ1NjNFFiVUtnZXZTSDF5Z0VRX083aF96MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDMwMjE4LTdmYzctNDFmNS1iZTQzLTFiNGExMTdiYjM5NC8x
L1REVW96cnFqU1J0anF5MTdER1FaeWFBUWlxMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDMwMjE4LTdmYzctNDFmNS1iZTQzLTFiNGExMTdiYjM5NC8xL19aQ1NjNFFiVUtn
ZXZTSDF5Z0VRX083aF96MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwEgQCAAEwDAMEAFvRfwMEArkQdDAWBAIAAjAQAwcA
IAEGfBSEAwUDKgQCgDANBgkqhkiG9w0BAQsFAAOCAQEAZ/OXUofub/nm8Mr2YJQL
jWrgLKUiCAWauJwmSxy0jSAXTrp6p8jxDDhmAURP6ZbplIgfLDuWc/8PfMeVMlHt
Vnnnxt41rr3IG0tKfMLEasMKnzBpnusKds1+K/cylKO+xdGIcBImluJiLQV/ySx/
E+55N4P2+pcnGX3oED6dgYdcRpsOjd8mEnFhw2KsNexSk4NufU58YTpS3zEiuqh3
tOwuO1EZkDDLp0WhgKunV9vw1dzw+1uCpUKz/7K4SPqQ1TrxxSSgJ0Tew6Eg6/L7
tZe91HBiKFz7/5bMtgFA4V3QdxKV0CpQ+AVohbyqDLXFV6QMPQjp45/pvgV3swPg
vw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:02 2024 by rpki-client on console-ams.rpki-client.org