Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/IIULY-hFxIHg-qyxkGxWrnF94Ok.roa
File: IIULY-hFxIHg-qyxkGxWrnF94Ok.roa (raw, json)
Hash identifier: cKFwKLSTF/iLUfX/ATjPWpOsCc69WElFF61lgLji5IA=
Subject key identifier: 20:85:0B:63:E8:45:C4:81:E0:FA:AC:B1:90:6C:56:AE:71:7D:E0:E9
Certificate issuer: /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial: 0605CD64
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/IIULY-hFxIHg-qyxkGxWrnF94Ok.roa
Signing time: Fri 07 Jan 2022 13:00:53 +0000
ROA not before: Fri 07 Jan 2022 13:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 194.156.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101043556 (0x605cd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
Validity
Not Before: Jan 7 13:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20850b63e845c481e0faacb1906c56ae717de0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:5f:e1:f0:a8:79:2b:f0:23:47:09:62:01:
ec:51:92:00:3d:25:05:22:52:d5:ce:1d:29:22:71:
a0:f9:fe:cd:e0:ba:d5:ca:46:52:fc:54:5e:ce:7c:
a7:20:04:18:35:94:30:f3:ce:0a:e1:dc:b6:60:64:
fc:1e:0d:f7:b7:25:e8:13:3e:8c:84:f7:02:5d:0f:
83:36:96:8a:e8:05:4b:ea:fe:39:be:85:f0:a0:fc:
8c:a4:53:58:e2:c1:15:4d:af:e9:4a:39:4d:ab:33:
f4:70:73:1e:99:47:60:36:11:12:18:56:e8:74:11:
b3:7e:2c:1f:e1:10:be:53:c5:17:9a:7e:3f:0f:67:
9d:67:85:f1:5d:c8:85:13:9e:a8:04:b1:90:d0:95:
20:01:8c:53:b5:ba:fb:c7:39:23:4a:55:f9:7d:ca:
d4:cc:fd:85:ba:b9:7e:c8:31:55:6d:86:5c:fc:29:
ec:53:20:b3:ba:5c:94:b6:f3:86:f8:24:d4:30:9b:
c0:e5:a4:76:ee:a3:da:6e:bb:d6:63:c8:f3:a1:19:
d4:20:28:36:e1:30:a3:c8:11:36:61:67:e6:f2:a5:
28:67:f3:65:ab:1f:eb:80:f8:f4:9f:e7:46:d4:89:
e7:5d:f3:fe:53:7f:d9:a2:33:fc:24:1c:4f:ee:75:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:0B:63:E8:45:C4:81:E0:FA:AC:B1:90:6C:56:AE:71:7D:E0:E9
X509v3 Authority Key Identifier:
keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/IIULY-hFxIHg-qyxkGxWrnF94Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:c1:94:1f:97:93:a0:ed:20:42:d4:06:0d:0f:59:5d:77:8c:
99:6b:0a:f7:a4:f5:22:e8:31:61:ee:00:cf:22:25:dd:1b:5a:
f9:ca:0b:22:b2:48:d7:ef:9d:65:20:4f:68:68:83:49:f8:4e:
b7:bc:36:b5:8f:d2:98:91:90:b3:0a:7c:b0:97:8f:18:02:c8:
b8:bf:f4:47:f1:96:88:0f:88:37:ef:ed:b4:49:3a:b7:c0:12:
b7:55:03:94:f0:23:29:4e:63:66:0a:59:30:b7:d5:73:f5:5c:
61:aa:4f:97:1d:5f:b1:1a:32:a6:d1:a4:40:8a:ef:f6:92:90:
49:17:d2:1c:66:cf:1a:ff:20:18:62:62:80:84:7e:c4:ae:fa:
28:5c:d2:f9:69:31:15:d8:8e:94:86:8a:d8:9b:57:81:d2:8e:
66:21:4e:0d:a2:22:34:30:96:67:00:02:28:09:d2:bd:1a:ce:
40:c2:30:7e:be:6f:0a:b2:fd:76:d4:f2:e3:7e:40:7a:8d:2e:
2a:ce:7f:9b:59:16:07:03:ef:bf:cc:64:60:71:64:58:a7:47:
9f:1d:41:4c:68:ac:c9:6d:4b:30:3e:f6:0e:da:40:ca:2f:1e:
ce:9f:96:25:09:ef:aa:9c:d1:a9:77:d9:fb:ee:5b:79:b6:17:
91:ff:b6:72
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBgXNZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MzdiMzc2NTZjZDE0ZDQ4OGE3MDUxMjkyMTg3NTcxN2EwZDkxMGI2MB4XDTIyMDEw
NzEzMDA1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA4NTBiNjNlODQ1
YzQ4MWUwZmFhY2IxOTA2YzU2YWU3MTdkZTBlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQrX+HwqHkr8CNHCWIB7FGSAD0lBSJS1c4dKSJxoPn+zeC6
1cpGUvxUXs58pyAEGDWUMPPOCuHctmBk/B4N97cl6BM+jIT3Al0PgzaWiugFS+r+
Ob6F8KD8jKRTWOLBFU2v6Uo5Tasz9HBzHplHYDYREhhW6HQRs34sH+EQvlPFF5p+
Pw9nnWeF8V3IhROeqASxkNCVIAGMU7W6+8c5I0pV+X3K1Mz9hbq5fsgxVW2GXPwp
7FMgs7pclLbzhvgk1DCbwOWkdu6j2m671mPI86EZ1CAoNuEwo8gRNmFn5vKlKGfz
Zasf64D49J/nRtSJ513z/lN/2aIz/CQcT+51yekCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQghQtj6EXEgeD6rLGQbFaucX3g6TAfBgNVHSMEGDAWgBRTezdlbNFNSIpw
USkhh1cXoNkQtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1UzczNaV3pSVFVpS2NGRXBJWWRYRjZEWkVMWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvMjcyN2I1LTRjOTMtNDllNy1iN2VlLWY5ODk1YmI4NWZiMS8x
L0lJVUxZLWhGeElIZy1xeXhrR3hXcm5GOTRPay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
MjcyN2I1LTRjOTMtNDllNy1iN2VlLWY5ODk1YmI4NWZiMS8xL1UzczNaV3pSVFVp
S2NGRXBJWWRYRjZEWkVMWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsKccDANBgkqhkiG9w0BAQsFAAOC
AQEAp8GUH5eToO0gQtQGDQ9ZXXeMmWsK96T1IugxYe4AzyIl3Rta+coLIrJI1++d
ZSBPaGiDSfhOt7w2tY/SmJGQswp8sJePGALIuL/0R/GWiA+IN+/ttEk6t8ASt1UD
lPAjKU5jZgpZMLfVc/VcYapPlx1fsRoyptGkQIrv9pKQSRfSHGbPGv8gGGJigIR+
xK76KFzS+WkxFdiOlIaK2JtXgdKOZiFODaIiNDCWZwACKAnSvRrOQMIwfr5vCrL9
dtTy435Aeo0uKs5/m1kWBwPvv8xkYHFkWKdHnx1BTGisyW1LMD72DtpAyi8ezp+W
JQnvqpzRqXfZ++5bebYXkf+2cg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org