Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/WiOhbvQon60oYuY3mdkloR-5DPM.roa
File: WiOhbvQon60oYuY3mdkloR-5DPM.roa (raw, json)
Hash identifier: 4I4Z7FtAZ76yjRozHdlIxZCtXOo7HwO0zlPKQ6mi/9c=
Subject key identifier: 5A:23:A1:6E:F4:28:9F:AD:28:62:E6:37:99:D9:25:A1:1F:B9:0C:F3
Certificate issuer: /CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
Certificate serial: 0181D7EE9E956CD53F96A077E2CFF1F15ECC
Authority key identifier: B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/WiOhbvQon60oYuY3mdkloR-5DPM.roa
Signing time: Thu 07 Jul 2022 09:12:28 +0000
ROA not before: Thu 07 Jul 2022 09:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 91.239.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:ee:9e:95:6c:d5:3f:96:a0:77:e2:cf:f1:f1:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
Validity
Not Before: Jul 7 09:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a23a16ef4289fad2862e63799d925a11fb90cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:a7:ba:d5:fd:67:79:dd:5d:21:7e:e8:de:
80:ae:da:d8:48:fb:ae:ad:e9:00:46:47:3e:7b:26:
93:19:2e:76:35:e6:15:e9:21:91:e9:ba:4e:3e:f8:
8f:59:76:f3:f9:5f:f8:01:d1:67:c6:38:45:c3:18:
a4:38:2a:0d:d5:b9:3b:ac:a8:1a:8c:8d:a0:1e:f8:
9a:4f:b0:26:a4:37:09:53:66:d5:88:12:81:68:35:
ed:f1:9a:ee:41:a5:7f:d8:b6:ba:e6:bb:7a:4b:c8:
37:59:ac:ac:78:9b:1f:db:90:24:29:e1:17:b7:94:
c8:55:ce:b5:97:8c:68:61:b2:cc:1a:43:80:b2:ba:
1f:10:21:db:9b:4a:90:2b:1b:53:39:88:6b:20:ce:
1c:2e:31:00:6d:ee:ca:04:b7:43:95:f4:dc:34:77:
1d:9d:66:0c:3b:6a:d3:53:d3:a6:4a:d3:0f:10:96:
61:cb:0d:04:b1:09:8e:13:e9:df:8f:c1:2a:fb:16:
ae:33:51:89:11:65:93:9e:19:5b:d4:b8:45:3e:6d:
a6:10:95:35:eb:9a:e8:56:d2:c7:bd:1a:2e:a7:8f:
62:83:42:38:6c:d4:5a:9d:fb:6f:92:ad:63:ac:3b:
e7:3d:1e:85:d1:bc:b2:8a:0c:1f:e4:a8:7f:57:f6:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:23:A1:6E:F4:28:9F:AD:28:62:E6:37:99:D9:25:A1:1F:B9:0C:F3
X509v3 Authority Key Identifier:
keyid:B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/WiOhbvQon60oYuY3mdkloR-5DPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.59.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f8:95:60:74:8a:58:f4:07:1a:86:bd:49:1c:60:02:e6:a0:
10:15:88:55:05:01:10:d2:21:92:77:84:cd:93:a2:46:01:30:
43:06:bb:67:aa:f8:96:20:e1:16:83:39:8a:5e:af:4e:d5:58:
5b:9a:fd:99:ac:88:5a:06:33:49:18:fa:55:48:80:00:db:65:
32:d0:61:57:51:f4:10:be:1e:ba:20:b8:de:69:e4:b9:2f:4f:
32:cf:5a:3e:18:30:35:fb:3e:53:3a:a2:81:5d:71:f8:3d:d0:
57:c2:df:dd:80:52:d4:6f:95:bc:af:89:2d:ea:59:fc:a2:2f:
15:f9:6f:c8:87:01:fc:5e:e9:58:3c:af:71:75:60:41:ca:3e:
40:a2:79:af:22:2c:fa:24:51:94:d9:0f:eb:eb:df:0e:e7:a2:
cb:b0:ca:6f:df:a8:c5:05:73:0b:a1:8f:c5:0e:5e:dc:f4:c9:
ff:a7:f9:ef:ce:a1:bf:65:2a:ba:5a:74:cb:e6:b6:e3:a4:bc:
6b:3b:e3:4a:7e:15:d2:52:55:5c:57:ee:e0:64:75:8f:cf:fc:
89:9e:80:16:5f:22:82:f0:5d:79:4e:16:99:51:83:af:e4:02:
a0:b9:e0:c1:26:4b:62:8a:f2:34:a5:a5:28:72:7a:f5:38:b9:
11:db:53:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHX7p6VbNU/lqB34s/x8V7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzhmZDkzYzQ3Mjc1YTFmMTRhODdlNWFlYTg2MDA1NDlh
OTExODAwHhcNMjIwNzA3MDkxMjI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTIzYTE2ZWY0Mjg5ZmFkMjg2MmU2Mzc5OWQ5MjVhMTFmYjkwY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw6nutX9Z3ndXSF+6N6ArtrYSPuu
rekARkc+eyaTGS52NeYV6SGR6bpOPviPWXbz+V/4AdFnxjhFwxikOCoN1bk7rKga
jI2gHviaT7AmpDcJU2bViBKBaDXt8ZruQaV/2La65rt6S8g3WayseJsf25AkKeEX
t5TIVc61l4xoYbLMGkOAsrofECHbm0qQKxtTOYhrIM4cLjEAbe7KBLdDlfTcNHcd
nWYMO2rTU9OmStMPEJZhyw0EsQmOE+nfj8Eq+xauM1GJEWWTnhlb1LhFPm2mEJU1
65roVtLHvRoup49ig0I4bNRanftvkq1jrDvnPR6F0byyigwf5Kh/V/bblQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFojoW70KJ+tKGLmN5nZJaEfuQzzMB8GA1UdIwQY
MBaAFLDI/ZPEcnWh8UqH5a6oYAVJqRGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01qOWs4UnlkYUh4U29mbHJxaGdCVW1wRVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZmI2ZDQtZTgyZS00ODM3LWFlNGUt
Y2NkMzU5ZmMyZjQyLzEvV2lPaGJ2UW9uNjBvWXVZM21ka2xvUi01RFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85ZmI2ZDQtZTgyZS00ODM3LWFlNGUtY2NkMzU5ZmMyZjQy
LzEvc01qOWs4UnlkYUh4U29mbHJxaGdCVW1wRVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+87MA0G
CSqGSIb3DQEBCwUAA4IBAQAG+JVgdIpY9Acahr1JHGAC5qAQFYhVBQEQ0iGSd4TN
k6JGATBDBrtnqviWIOEWgzmKXq9O1Vhbmv2ZrIhaBjNJGPpVSIAA22Uy0GFXUfQQ
vh66ILjeaeS5L08yz1o+GDA1+z5TOqKBXXH4PdBXwt/dgFLUb5W8r4kt6ln8oi8V
+W/IhwH8XulYPK9xdWBByj5AonmvIiz6JFGU2Q/r698O56LLsMpv36jFBXMLoY/F
Dl7c9Mn/p/nvzqG/ZSq6WnTL5rbjpLxrO+NKfhXSUlVcV+7gZHWPz/yJnoAWXyKC
8F15ThaZUYOv5AKgueDBJktiivI0paUocnr1OLkR21NN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:28 2023 by rpki-client on console-fra.rpki-client.org