Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/oTS9nXUFSMjmlGy4CY1llNgoTlY.roa
File: oTS9nXUFSMjmlGy4CY1llNgoTlY.roa (raw, json)
Hash identifier: fg04FCTCX2ZMxlGSJLkgVaybMZoQZufwaPQwFqbeJ+8=
Subject key identifier: A1:34:BD:9D:75:05:48:C8:E6:94:6C:B8:09:8D:65:94:D8:28:4E:56
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 01856EB907B2273B99BF5866EB3590B75F20
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/oTS9nXUFSMjmlGy4CY1llNgoTlY.roa
Signing time: Sun 01 Jan 2023 19:04:57 +0000
ROA not before: Sun 01 Jan 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204330
IP address blocks: 109.95.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:07:b2:27:3b:99:bf:58:66:eb:35:90:b7:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 1 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a134bd9d750548c8e6946cb8098d6594d8284e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:8e:e9:98:22:ee:ee:44:87:f5:1f:27:64:
ad:5e:f8:d7:45:26:eb:ff:00:bd:52:e7:23:ee:aa:
c4:84:5f:61:cc:6e:80:71:5c:46:76:23:8a:43:e2:
9d:0f:94:62:e9:38:39:6d:10:49:8d:04:9c:1a:e5:
d0:5a:e8:45:42:34:23:4e:ce:a4:0c:0f:8d:d6:87:
11:12:f2:ee:56:db:f0:78:d8:37:cc:b4:e0:98:9d:
ff:01:60:4e:36:18:68:d4:44:f6:68:7d:12:b9:f6:
8d:5d:fa:ad:1c:57:bc:45:cb:f4:70:da:74:3c:b7:
d2:66:3f:39:09:5b:7f:6c:8a:a9:f5:02:91:58:d6:
65:4c:38:15:f4:a3:de:a4:f9:55:bb:b7:df:86:98:
9e:c4:74:01:e5:c6:3e:62:6d:67:2e:bc:b6:86:6a:
1c:fd:50:aa:a8:0c:c4:8d:3f:30:c7:92:8f:d6:cd:
46:71:a7:a6:8d:76:b5:0b:ba:ee:71:38:b4:4d:bd:
c4:34:b7:91:59:fc:3e:b2:f1:ff:e0:13:8d:13:7d:
71:39:e6:33:db:d5:e6:c7:da:a6:4c:13:1a:97:6e:
68:18:88:a7:0a:12:bb:59:61:3c:8e:f2:9a:81:df:
d3:5e:68:c9:e9:ad:63:7a:7c:1f:63:ae:ac:e3:ac:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:BD:9D:75:05:48:C8:E6:94:6C:B8:09:8D:65:94:D8:28:4E:56
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/oTS9nXUFSMjmlGy4CY1llNgoTlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
be:7a:66:35:5b:b6:08:aa:72:b2:04:5d:b1:06:3d:a3:98:9d:
77:9e:d2:74:44:80:ad:51:5e:e5:59:5a:59:52:dc:62:66:f4:
2f:e9:6d:93:7f:e4:71:81:6b:42:ae:82:27:9e:c5:eb:7d:43:
81:c6:ff:53:4e:c6:f9:46:0b:c7:dc:3b:d5:ff:2f:ab:b1:b5:
7d:9f:66:80:68:e2:20:9d:55:e8:d8:73:6a:99:0e:37:fe:00:
c0:dd:52:7f:17:c7:69:e3:fa:21:5f:fb:f3:0a:6e:c7:37:81:
d6:84:54:de:f5:70:8e:1c:d8:e4:e2:d4:b9:31:a3:49:d8:e0:
48:a5:9b:67:1e:2f:eb:11:9b:56:a2:df:c2:2d:4c:2c:0d:90:
e0:80:87:59:f3:01:f7:48:1f:2f:77:19:d4:4b:04:8e:1d:3f:
d1:9d:f5:32:24:53:50:94:9e:55:7e:b5:65:01:89:3b:ac:51:
22:67:d9:6c:b0:d4:b2:7f:49:fc:27:c4:3b:a4:7d:b1:b6:2d:
81:e9:42:ac:7b:41:5f:d2:cd:2b:a9:23:1a:2f:c9:65:3a:19:
db:43:02:e0:84:65:6b:17:d7:c5:4c:4a:73:26:b4:01:b4:f6:
96:b9:71:b6:e4:50:bd:43:10:3e:b7:03:03:bd:d9:7e:7d:b4:
2a:f7:31:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuQeyJzuZv1hm6zWQt18gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjAyNzc0YjdkZTY0MWQ4ZWExOGJlNTZhNzVmZjYwOTg3
NDc2MTgwHhcNMjMwMTAxMTkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTM0YmQ5ZDc1MDU0OGM4ZTY5NDZjYjgwOThkNjU5NGQ4Mjg0ZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzCO6Zgi7u5Eh/UfJ2StXvjXRSbr
/wC9Uucj7qrEhF9hzG6AcVxGdiOKQ+KdD5Ri6Tg5bRBJjQScGuXQWuhFQjQjTs6k
DA+N1ocREvLuVtvweNg3zLTgmJ3/AWBONhho1ET2aH0SufaNXfqtHFe8Rcv0cNp0
PLfSZj85CVt/bIqp9QKRWNZlTDgV9KPepPlVu7ffhpiexHQB5cY+Ym1nLry2hmoc
/VCqqAzEjT8wx5KP1s1GcaemjXa1C7rucTi0Tb3ENLeRWfw+svH/4BONE31xOeYz
29Xmx9qmTBMal25oGIinChK7WWE8jvKagd/TXmjJ6a1jenwfY66s46y5JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKE0vZ11BUjI5pRsuAmNZZTYKE5WMB8GA1UdIwQY
MBaAFNMgJ3S33mQdjqGL5Wp1/2CYdHYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlBbmRMZmVaQjJPb1l2bGFuWF9ZSmgwZGhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYjRiNmItMThhYS00ZTJjLWE0MDUt
ZTdlNzdiNmZhYzFlLzEvb1RTOW5YVUZTTWptbEd5NENZMWxsTmdvVGxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYjRiNmItMThhYS00ZTJjLWE0MDUtZTdlNzdiNmZhYzFl
LzEvMHlBbmRMZmVaQjJPb1l2bGFuWF9ZSmgwZGhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbV98MA0G
CSqGSIb3DQEBCwUAA4IBAQC+emY1W7YIqnKyBF2xBj2jmJ13ntJ0RICtUV7lWVpZ
UtxiZvQv6W2Tf+RxgWtCroInnsXrfUOBxv9TTsb5RgvH3DvV/y+rsbV9n2aAaOIg
nVXo2HNqmQ43/gDA3VJ/F8dp4/ohX/vzCm7HN4HWhFTe9XCOHNjk4tS5MaNJ2OBI
pZtnHi/rEZtWot/CLUwsDZDggIdZ8wH3SB8vdxnUSwSOHT/RnfUyJFNQlJ5VfrVl
AYk7rFEiZ9lssNSyf0n8J8Q7pH2xti2B6UKse0Ff0s0rqSMaL8llOhnbQwLghGVr
F9fFTEpzJrQBtPaWuXG25FC9QxA+twMDvdl+fbQq9zFe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org