Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/BGdKSMbIqValL3x-PJ5om5rkFLI.roa
File: BGdKSMbIqValL3x-PJ5om5rkFLI.roa (raw, json)
Hash identifier: RzH/7CJl+yy6j0JG7wdWHmZH/sP6Lxm5RZBTsWo41rA=
Subject key identifier: 04:67:4A:48:C6:C8:A9:56:A5:2F:7C:7E:3C:9E:68:9B:9A:E4:14:B2
Certificate issuer: /CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
Certificate serial: 01856F2FEC90FE1695E7725C8F6D63D5FA33
Authority key identifier: ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/BGdKSMbIqValL3x-PJ5om5rkFLI.roa
Signing time: Sun 01 Jan 2023 21:14:49 +0000
ROA not before: Sun 01 Jan 2023 21:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6876
IP address blocks: 193.163.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ec:90:fe:16:95:e7:72:5c:8f:6d:63:d5:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
Validity
Not Before: Jan 1 21:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04674a48c6c8a956a52f7c7e3c9e689b9ae414b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:31:4f:ad:4d:81:6c:f8:28:38:36:c4:a3:
24:4c:72:50:11:4f:39:4a:ec:c0:c2:b5:43:11:86:
d4:d2:85:16:d8:ef:32:aa:85:bb:e6:49:7d:3d:68:
0b:40:0a:f4:31:08:8a:33:f0:d5:4f:a1:0f:16:b4:
67:b4:d5:aa:4f:8f:52:0a:fc:a6:e2:c4:1e:75:31:
74:86:90:3a:d6:17:8c:89:4f:3c:36:4c:99:47:2a:
47:2e:4c:7e:49:c5:f6:19:00:c3:3c:13:d9:be:d7:
a7:ab:bf:80:f9:db:6d:0a:b8:ea:89:8f:f6:17:3b:
3d:a3:01:de:20:e3:6e:7d:c1:4a:a5:63:15:0b:31:
68:0e:f3:41:8e:ea:c7:6a:0f:4e:9d:98:8e:38:ea:
7b:b4:41:16:d4:c2:3d:e4:21:3f:be:c9:83:b9:71:
3a:ff:e5:9d:ae:9a:92:21:db:16:9a:73:89:80:84:
62:6d:43:83:a2:bc:5e:b0:bc:6d:3e:ec:f2:73:96:
97:37:a6:49:cc:a6:27:cf:de:cf:dd:dd:74:e9:fe:
42:f5:3d:89:54:73:90:2e:d0:49:c2:4a:50:e1:7e:
6b:3c:a1:e6:24:98:08:a3:e7:9d:32:21:5c:2f:34:
c3:a7:b8:7a:49:2b:87:34:e2:0f:cd:06:04:8f:2e:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:4A:48:C6:C8:A9:56:A5:2F:7C:7E:3C:9E:68:9B:9A:E4:14:B2
X509v3 Authority Key Identifier:
keyid:ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/BGdKSMbIqValL3x-PJ5om5rkFLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:7d:11:9e:72:8f:59:bd:26:9d:c3:19:6c:ed:a0:8f:b2:07:
5b:d2:1d:89:ef:82:1b:0a:ef:4e:f0:e9:b8:6c:4c:ac:63:5b:
de:b0:0b:ce:52:a0:47:f6:a4:e7:86:b3:7c:f3:c6:cf:d2:87:
a9:e7:af:fd:b8:81:7c:bc:4b:a8:d5:82:21:36:f8:c1:80:e0:
c8:39:c1:ff:62:81:4d:60:55:7c:c1:3f:5e:90:d3:f9:03:67:
3c:89:49:d6:5d:30:0f:3f:91:d7:a7:4c:84:f1:f9:27:dd:b2:
b2:1c:26:10:5f:4d:3d:b6:c7:d1:75:89:57:62:8f:7a:ae:fa:
c2:94:72:d7:83:08:e9:1b:f3:90:c8:23:be:60:65:aa:4e:33:
08:80:d9:b2:3f:60:ab:2a:ff:61:63:eb:60:1d:bd:b2:1f:0e:
1f:5e:b7:3c:ed:65:e5:20:5b:c7:3a:63:e7:23:02:b6:22:73:
26:22:f5:15:8f:52:fe:ba:4d:65:6c:f2:94:cf:b3:38:98:36:
df:5d:ab:02:a9:9f:df:85:a9:6b:2d:bd:ba:f4:6d:eb:84:c6:
8b:89:9b:6b:5b:3f:73:28:99:31:69:7a:b8:a1:2d:4a:7e:1b:
c1:de:8b:4d:74:16:5b:67:8f:e3:1b:cc:17:cf:ff:15:da:e4:
45:5a:4e:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvL+yQ/haV53Jcj21j1fozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMThjNmVlNmM4MjA0NTNjM2YyNTliYmUyYTdkZDYzYzk4
MDhhYjkwHhcNMjMwMTAxMjExNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDY3NGE0OGM2YzhhOTU2YTUyZjdjN2UzYzllNjg5YjlhZTQxNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx8xT61NgWz4KDg2xKMkTHJQEU85
SuzAwrVDEYbU0oUW2O8yqoW75kl9PWgLQAr0MQiKM/DVT6EPFrRntNWqT49SCvym
4sQedTF0hpA61heMiU88NkyZRypHLkx+ScX2GQDDPBPZvtenq7+A+dttCrjqiY/2
Fzs9owHeIONufcFKpWMVCzFoDvNBjurHag9OnZiOOOp7tEEW1MI95CE/vsmDuXE6
/+WdrpqSIdsWmnOJgIRibUODorxesLxtPuzyc5aXN6ZJzKYnz97P3d106f5C9T2J
VHOQLtBJwkpQ4X5rPKHmJJgIo+edMiFcLzTDp7h6SSuHNOIPzQYEjy5LmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARnSkjGyKlWpS98fjyeaJua5BSyMB8GA1UdIwQY
MBaAFO0Yxu5sggRTw/JZu+Kn3WPJgIq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1JqRzdteUNCRlBEOGxtNzRxZmRZOG1BaXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9iYjJmZWItNzM0MS00MTgxLWIwMTkt
YzVjM2U2ZTAyY2VhLzEvQkdkS1NNYklxVmFsTDN4LVBKNW9tNXJrRkxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9iYjJmZWItNzM0MS00MTgxLWIwMTktYzVjM2U2ZTAyY2Vh
LzEvN1JqRzdteUNCRlBEOGxtNzRxZmRZOG1BaXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPEMA0G
CSqGSIb3DQEBCwUAA4IBAQDAfRGeco9ZvSadwxls7aCPsgdb0h2J74IbCu9O8Om4
bEysY1vesAvOUqBH9qTnhrN888bP0oep56/9uIF8vEuo1YIhNvjBgODIOcH/YoFN
YFV8wT9ekNP5A2c8iUnWXTAPP5HXp0yE8fkn3bKyHCYQX009tsfRdYlXYo96rvrC
lHLXgwjpG/OQyCO+YGWqTjMIgNmyP2CrKv9hY+tgHb2yHw4fXrc87WXlIFvHOmPn
IwK2InMmIvUVj1L+uk1lbPKUz7M4mDbfXasCqZ/fhalrLb269G3rhMaLiZtrWz9z
KJkxaXq4oS1KfhvB3otNdBZbZ4/jG8wXz/8V2uRFWk4G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:07 2024 by rpki-client on console-ams.rpki-client.org