Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/VN9pp7MR6DYeUUMKb4PuKSBk88Y.roa
File: VN9pp7MR6DYeUUMKb4PuKSBk88Y.roa (raw, json)
Hash identifier: wsicseAa6T849bT2qGavtW85WgYud4bBDUTKFMT7/lg=
Subject key identifier: 54:DF:69:A7:B3:11:E8:36:1E:51:43:0A:6F:83:EE:29:20:64:F3:C6
Certificate issuer: /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial: 0185799E6503855485A7D8525773C39F45D6
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/VN9pp7MR6DYeUUMKb4PuKSBk88Y.roa
Signing time: Tue 03 Jan 2023 21:51:41 +0000
ROA not before: Tue 03 Jan 2023 21:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 195.234.93.0/24 maxlen: 24
195.234.92.0/22 maxlen: 22
195.234.92.0/24 maxlen: 24
195.234.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:9e:65:03:85:54:85:a7:d8:52:57:73:c3:9f:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Validity
Not Before: Jan 3 21:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54df69a7b311e8361e51430a6f83ee292064f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:cd:7c:62:8a:c1:0f:00:a1:7e:e5:5f:2f:
9d:44:8b:53:e5:0f:a5:4f:dc:0c:03:bc:d5:ef:fe:
7e:e3:18:a3:85:04:d2:99:9c:72:5c:4a:d5:8e:65:
d5:d7:da:50:58:aa:20:32:fb:56:35:e0:a5:ad:fa:
20:7b:d8:f2:bf:9c:dd:69:6b:6d:b7:5d:f2:73:73:
96:6a:14:dd:99:8d:16:8c:8a:f3:cb:d8:0f:5c:93:
cb:89:ac:21:97:3d:93:f3:18:ea:e2:1d:bd:ef:66:
64:18:ae:3e:d0:4e:58:ed:d2:7d:3a:4a:4d:e6:6a:
74:b4:92:65:fa:a4:bb:ac:98:ce:56:55:d2:07:7c:
50:c3:2d:0d:da:30:1e:45:79:bc:03:dd:8c:5d:6a:
b3:79:bf:be:b2:4c:0e:db:32:9e:94:97:ae:28:26:
83:69:2a:16:bb:f9:76:ec:a3:bb:3d:3e:bc:46:cb:
01:0d:2b:ca:c5:69:b9:23:01:a8:f7:fb:2d:d3:1e:
bb:36:ec:7c:03:d5:4b:1a:92:b9:a9:54:15:d2:10:
9d:d2:e4:8a:61:2a:9f:58:0c:a9:bd:2f:44:3e:d3:
54:99:26:26:e6:98:bd:bd:e2:81:67:d2:9b:5e:70:
1c:eb:f7:f9:4a:fb:7c:eb:88:4d:3f:0b:fe:68:9f:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:69:A7:B3:11:E8:36:1E:51:43:0A:6F:83:EE:29:20:64:F3:C6
X509v3 Authority Key Identifier:
keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/VN9pp7MR6DYeUUMKb4PuKSBk88Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c9:7b:3c:12:67:ed:81:03:8b:0a:67:d3:ca:30:6b:03:52:
e2:18:d7:28:4b:7f:66:8e:c2:25:3f:8c:98:36:88:96:33:70:
e9:1f:d8:85:00:c1:df:f4:c2:63:67:0a:0b:cb:b9:e1:c4:cc:
80:1c:27:f9:30:3c:92:06:52:b1:b8:28:3a:34:b6:ef:db:7a:
5b:83:d1:e4:56:14:30:9a:38:21:ed:d5:ec:48:2b:0a:6e:1f:
4e:4e:c0:66:60:bb:85:e0:62:40:0f:ab:96:ce:1b:f3:23:75:
22:17:01:91:f6:cf:2d:ab:e7:2d:5f:ce:d3:7b:7f:ad:da:2a:
4b:96:b8:e9:7e:11:8a:36:d1:d2:f9:2f:5f:d4:52:c3:3c:21:
c1:bb:8a:69:71:46:29:84:52:13:34:93:c3:a6:fe:b3:20:f5:
fd:e5:a2:5e:4f:ad:19:27:8a:0a:44:bf:a8:fe:ff:d9:27:d2:
f1:9b:4d:06:8e:58:e9:19:1f:41:0b:f0:bc:e3:e7:7f:bc:b4:
6f:38:bc:09:5c:bd:0b:c8:a0:d5:c3:11:bf:d0:11:61:d3:87:
88:5e:b2:fd:34:e7:74:19:df:f3:62:26:b8:99:a7:13:7a:a9:
3b:74:70:dd:3b:20:5f:b1:2c:fe:e6:76:8d:3f:1b:13:d0:0d:
ea:2f:06:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV5nmUDhVSFp9hSV3PDn0XWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTI3ZGM5OThiMTEwMWUxNmM3OGU1YjM2YjEzMDdiZjI1
YzhiYWEwHhcNMjMwMTAzMjE1MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGRmNjlhN2IzMTFlODM2MWU1MTQzMGE2ZjgzZWUyOTIwNjRmM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI3NfGKKwQ8AoX7lXy+dRItT5Q+l
T9wMA7zV7/5+4xijhQTSmZxyXErVjmXV19pQWKogMvtWNeClrfoge9jyv5zdaWtt
t13yc3OWahTdmY0WjIrzy9gPXJPLiawhlz2T8xjq4h2972ZkGK4+0E5Y7dJ9OkpN
5mp0tJJl+qS7rJjOVlXSB3xQwy0N2jAeRXm8A92MXWqzeb++skwO2zKelJeuKCaD
aSoWu/l27KO7PT68RssBDSvKxWm5IwGo9/st0x67Nux8A9VLGpK5qVQV0hCd0uSK
YSqfWAypvS9EPtNUmSYm5pi9veKBZ9KbXnAc6/f5Svt864hNPwv+aJ+8rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTfaaezEeg2HlFDCm+D7ikgZPPGMB8GA1UdIwQY
MBaAFEOSfcmYsRAeFseOWzaxMHvyXIuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVKOXlaaXhFQjRXeDQ1Yk5yRXdlX0pjaTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MjFkNzMtN2Y2Zi00YmE1LThmOTgt
YjY1MTdkYzQxYTc4LzEvVk45cHA3TVI2RFllVVVNS2I0UHVLU0JrODhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MjFkNzMtN2Y2Zi00YmE1LThmOTgtYjY1MTdkYzQxYTc4
LzEvUTVKOXlaaXhFQjRXeDQ1Yk5yRXdlX0pjaTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+pcMA0G
CSqGSIb3DQEBCwUAA4IBAQCayXs8EmftgQOLCmfTyjBrA1LiGNcoS39mjsIlP4yY
NoiWM3DpH9iFAMHf9MJjZwoLy7nhxMyAHCf5MDySBlKxuCg6NLbv23pbg9HkVhQw
mjgh7dXsSCsKbh9OTsBmYLuF4GJAD6uWzhvzI3UiFwGR9s8tq+ctX87Te3+t2ipL
lrjpfhGKNtHS+S9f1FLDPCHBu4ppcUYphFITNJPDpv6zIPX95aJeT60ZJ4oKRL+o
/v/ZJ9Lxm00GjljpGR9BC/C84+d/vLRvOLwJXL0LyKDVwxG/0BFh04eIXrL9NOd0
Gd/zYia4macTeqk7dHDdOyBfsSz+5naNPxsT0A3qLwbS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org