Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f63349-f469-4b01-a272-c6cae90d70b7/1/LvmwyGhU6Fet_zuD_5_OL_bx1kc.roa
File: LvmwyGhU6Fet_zuD_5_OL_bx1kc.roa (raw, json)
Hash identifier: 4axQmEtlOsE7HiCxUjR9heyPwxCtYn2fiZ1FWB6q7oo=
Subject key identifier: 2E:F9:B0:C8:68:54:E8:57:AD:FF:3B:83:FF:9F:CE:2F:F6:F1:D6:47
Certificate issuer: /CN=f96cab2f9272a910a152832bfaaabb898f757278
Certificate serial: 10B2165A
Authority key identifier: F9:6C:AB:2F:92:72:A9:10:A1:52:83:2B:FA:AA:BB:89:8F:75:72:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WyrL5JyqRChUoMr-qq7iY91cng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f63349-f469-4b01-a272-c6cae90d70b7/1/LvmwyGhU6Fet_zuD_5_OL_bx1kc.roa
Signing time: Sat 01 Jan 2022 14:55:38 +0000
ROA not before: Sat 01 Jan 2022 14:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60876
IP address blocks: 185.166.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280106586 (0x10b2165a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96cab2f9272a910a152832bfaaabb898f757278
Validity
Not Before: Jan 1 14:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef9b0c86854e857adff3b83ff9fce2ff6f1d647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:4b:51:c0:76:0f:ff:5c:71:e1:4f:6e:a2:
e6:29:15:6b:18:d0:c3:49:2d:bb:b9:26:08:1b:96:
7c:0d:b3:06:f3:a9:0f:93:78:37:02:23:30:85:e9:
ee:00:c9:2c:f6:cf:db:f3:31:96:31:ad:2f:e7:5d:
76:75:2b:fd:ac:60:82:c8:9a:44:70:e9:9d:f7:62:
77:3a:ff:c5:8b:0e:93:0b:7c:78:18:1b:2e:c7:18:
0b:bb:b5:51:45:cd:0c:9a:bc:a4:63:83:47:f6:f8:
97:a7:0e:0d:72:ca:5f:68:3b:52:5f:87:78:68:97:
6a:cf:a0:b2:f3:d9:b0:66:f9:69:2e:69:4a:0d:a6:
af:7f:e4:55:4f:79:1f:50:0d:2e:e7:88:87:39:0d:
02:ab:e9:09:8c:98:32:45:05:87:f4:9c:11:59:3d:
21:7f:48:48:65:99:8b:c6:5d:ad:33:9c:02:b5:57:
d0:39:40:82:85:c7:ef:1b:21:b2:e3:d4:cd:cd:b1:
2a:b8:d5:94:93:40:53:d3:3b:1e:62:cf:77:2f:fa:
31:b4:a5:8c:7d:95:bb:38:c6:02:60:65:b5:4a:04:
ac:87:b9:12:8a:5b:64:c4:fb:af:9e:8f:92:40:ec:
42:72:46:42:05:73:3b:71:01:cb:51:0b:46:6a:a0:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:B0:C8:68:54:E8:57:AD:FF:3B:83:FF:9F:CE:2F:F6:F1:D6:47
X509v3 Authority Key Identifier:
keyid:F9:6C:AB:2F:92:72:A9:10:A1:52:83:2B:FA:AA:BB:89:8F:75:72:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WyrL5JyqRChUoMr-qq7iY91cng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f63349-f469-4b01-a272-c6cae90d70b7/1/LvmwyGhU6Fet_zuD_5_OL_bx1kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f63349-f469-4b01-a272-c6cae90d70b7/1/1-WyrL5JyqRChUoMr-qq7iY91cng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:ba:83:49:b7:2d:df:7a:01:f6:5a:d8:1d:21:5e:4d:31:c3:
62:20:2c:25:c5:aa:28:63:15:53:6e:20:2f:32:f2:3e:80:59:
55:22:49:5d:6f:e2:9d:4e:78:b0:9f:e9:10:b4:7f:2d:8a:0b:
c6:19:f5:42:7f:38:0d:f7:0d:a1:35:1c:dc:8c:82:99:ae:b5:
b3:21:27:d5:ca:e1:3d:d6:c2:c6:17:e8:86:1b:c1:27:23:33:
1a:3b:34:6e:6d:14:c5:4d:ff:30:55:cf:05:dc:ec:f8:01:31:
c5:b2:63:47:57:79:2e:5d:33:f3:73:92:16:bb:c3:25:2b:31:
52:d4:5d:93:b2:11:86:12:08:4a:23:ca:5e:23:80:9c:3f:23:
70:bd:d1:62:07:7c:10:3c:9d:c6:8c:d8:f4:aa:ff:bc:1e:a4:
02:50:f2:d7:f2:51:dd:f7:f6:94:f4:6e:9c:6b:24:6a:21:bc:
ac:00:91:c6:69:ec:bc:37:0d:8d:ea:6b:26:31:fb:72:2f:fe:
e5:2f:2b:bb:a9:4a:cc:77:14:92:ee:cc:a1:67:2a:ee:68:5f:
2c:27:9d:94:76:46:8b:4f:d3:4b:73:87:cb:c8:e8:0c:88:2e:
a2:ba:0c:e8:d3:a4:31:86:c6:6d:7d:dd:b3:2b:0e:02:63:87:
aa:b0:9d:b2
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEELIWWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OTZjYWIyZjkyNzJhOTEwYTE1MjgzMmJmYWFhYmI4OThmNzU3Mjc4MB4XDTIyMDEw
MTE0NTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVmOWIwYzg2ODU0
ZTg1N2FkZmYzYjgzZmY5ZmNlMmZmNmYxZDY0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+JS1HAdg//XHHhT26i5ikVaxjQw0ktu7kmCBuWfA2zBvOp
D5N4NwIjMIXp7gDJLPbP2/MxljGtL+dddnUr/axggsiaRHDpnfdidzr/xYsOkwt8
eBgbLscYC7u1UUXNDJq8pGODR/b4l6cODXLKX2g7Ul+HeGiXas+gsvPZsGb5aS5p
Sg2mr3/kVU95H1ANLueIhzkNAqvpCYyYMkUFh/ScEVk9IX9ISGWZi8ZdrTOcArVX
0DlAgoXH7xshsuPUzc2xKrjVlJNAU9M7HmLPdy/6MbSljH2VuzjGAmBltUoErIe5
EopbZMT7r56PkkDsQnJGQgVzO3EBy1ELRmqgQEcCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQu+bDIaFToV63/O4P/n84v9vHWRzAfBgNVHSMEGDAWgBT5bKsvknKpEKFS
gyv6qruJj3VyeDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtV3lyTDVKeXFSQ2hVb01yLXFxN2lZOTFjbmcuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2RiL2Y2MzM0OS1mNDY5LTRiMDEtYTI3Mi1jNmNhZTkwZDcwYjcv
MS9Mdm13eUdoVTZGZXRfenVEXzVfT0xfYngxa2Mucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ri
L2Y2MzM0OS1mNDY5LTRiMDEtYTI3Mi1jNmNhZTkwZDcwYjcvMS8xLVd5ckw1Snlx
UkNoVW9Nci1xcTdpWTkxY25nLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaZ4MA0GCSqGSIb3DQEBCwUA
A4IBAQC3uoNJty3fegH2WtgdIV5NMcNiICwlxaooYxVTbiAvMvI+gFlVIkldb+Kd
Tniwn+kQtH8tigvGGfVCfzgN9w2hNRzcjIKZrrWzISfVyuE91sLGF+iGG8EnIzMa
OzRubRTFTf8wVc8F3Oz4ATHFsmNHV3kuXTPzc5IWu8MlKzFS1F2TshGGEghKI8pe
I4CcPyNwvdFiB3wQPJ3GjNj0qv+8HqQCUPLX8lHd9/aU9G6cayRqIbysAJHGaey8
Nw2N6msmMftyL/7lLyu7qUrMdxSS7syhZyruaF8sJ52UdkaLT9NLc4fLyOgMiC6i
ugzo06QxhsZtfd2zKw4CY4eqsJ2y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-ams.rpki-client.org