Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/U53pjmGrubKNodd3EALhjdfr_K8.roa
File: U53pjmGrubKNodd3EALhjdfr_K8.roa (raw, json)
Hash identifier: fIAahM2nkPPCmhP0Lq4W+fGXjOo4Quoin+7EkFM6VZI=
Subject key identifier: 53:9D:E9:8E:61:AB:B9:B2:8D:A1:D7:77:10:02:E1:8D:D7:EB:FC:AF
Certificate issuer: /CN=a61db78c7f21285866dab4a45a544dce559f43da
Certificate serial: 01BC80A1
Authority key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/U53pjmGrubKNodd3EALhjdfr_K8.roa
Signing time: Sat 01 Jan 2022 14:03:56 +0000
ROA not before: Sat 01 Jan 2022 14:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 193.32.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29130913 (0x1bc80a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61db78c7f21285866dab4a45a544dce559f43da
Validity
Not Before: Jan 1 14:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=539de98e61abb9b28da1d7771002e18dd7ebfcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:4b:9d:bc:4f:e5:37:7c:6c:91:eb:aa:eb:
6a:5f:ba:c2:bc:5f:ab:50:19:a9:68:9c:cc:b7:43:
89:b4:6f:23:e6:90:c1:c8:b6:70:f9:7b:39:a9:03:
a8:75:7e:3c:0b:da:39:41:db:0a:05:6f:57:aa:a6:
44:3f:ee:24:48:86:46:67:1b:0d:7e:65:0c:e4:54:
39:21:12:8c:ae:86:eb:28:b8:eb:32:cf:54:e7:35:
d3:44:f3:6b:a0:d6:c3:dc:30:c5:16:c0:aa:cf:4e:
96:ba:ae:61:81:08:91:c3:06:e0:36:78:d7:37:5a:
04:2d:4b:a4:b6:4d:85:cd:b6:a8:99:b4:4c:b8:88:
ee:03:c9:e1:16:25:a8:07:77:af:b7:0e:21:51:0d:
02:13:9c:66:6e:0b:2b:7e:15:86:17:9b:5d:9c:ed:
92:11:cd:5e:9c:df:e3:a5:ea:f1:12:74:0c:73:6a:
d6:db:e4:9d:3a:2a:50:25:b4:fa:3a:ba:ce:55:20:
fc:c3:f3:6c:cc:53:04:9a:db:11:d8:44:99:4b:e8:
c3:5b:bb:68:b5:ce:64:63:bb:55:f8:17:b2:5c:29:
34:db:34:2a:df:9f:bb:b1:a1:77:cd:66:71:12:98:
86:e9:72:76:bf:cc:66:4e:00:b2:46:1f:62:07:3e:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:E9:8E:61:AB:B9:B2:8D:A1:D7:77:10:02:E1:8D:D7:EB:FC:AF
X509v3 Authority Key Identifier:
keyid:A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/U53pjmGrubKNodd3EALhjdfr_K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.236.0/22
Signature Algorithm: sha256WithRSAEncryption
46:b0:eb:cd:e1:93:d9:c7:de:7b:c6:ca:bb:e9:2b:c4:13:d0:
52:5f:8e:1c:68:70:77:bb:74:1d:c8:38:25:7f:25:e1:07:67:
5a:6e:46:b0:d9:7c:f9:25:23:ef:1c:87:a7:1d:0d:96:f1:30:
8f:7a:d3:b8:75:c5:ac:11:a8:c7:8e:42:17:9e:4a:14:5f:af:
61:b2:a2:a1:dd:68:40:3a:26:57:ce:19:13:55:b9:59:1b:d4:
51:0a:6f:ec:2a:01:99:4a:32:25:56:01:e7:c7:77:22:33:8a:
d9:ea:03:a6:58:64:74:7b:59:c5:b7:76:a6:cd:45:e4:ab:0c:
16:6d:b5:0c:1d:69:44:2e:e9:2b:dd:08:6a:df:00:20:5e:00:
11:c4:56:83:c2:37:47:70:d1:0b:82:bd:c0:4d:9b:ae:7f:62:
ba:65:7f:7d:01:7c:a4:80:2f:03:30:a4:6c:b3:01:f5:53:c6:
bb:63:74:f6:00:d1:54:5f:cd:99:fe:3c:f0:6d:64:77:a4:70:
6a:9b:77:65:f6:d7:a4:85:dc:ba:f6:b8:3a:dc:87:99:eb:58:
de:b3:ac:9b:69:68:12:9d:98:94:fa:ca:90:5b:6a:69:4a:93:
69:26:9a:ce:44:1b:fc:4f:db:ba:eb:cb:5d:8b:50:64:fb:f1:
10:eb:94:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbyAoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjFkYjc4YzdmMjEyODU4NjZkYWI0YTQ1YTU0NGRjZTU1OWY0M2RhMB4XDTIyMDEw
MTE0MDM1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTM5ZGU5OGU2MWFi
YjliMjhkYTFkNzc3MTAwMmUxOGRkN2ViZmNhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDtS528T+U3fGyR66rral+6wrxfq1AZqWiczLdDibRvI+aQ
wci2cPl7OakDqHV+PAvaOUHbCgVvV6qmRD/uJEiGRmcbDX5lDORUOSESjK6G6yi4
6zLPVOc100Tza6DWw9wwxRbAqs9OlrquYYEIkcMG4DZ41zdaBC1LpLZNhc22qJm0
TLiI7gPJ4RYlqAd3r7cOIVENAhOcZm4LK34VhhebXZztkhHNXpzf46Xq8RJ0DHNq
1tvknToqUCW0+jq6zlUg/MPzbMxTBJrbEdhEmUvow1u7aLXOZGO7VfgXslwpNNs0
Kt+fu7Ghd81mcRKYhulydr/MZk4AskYfYgc+410CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTnemOYau5so2h13cQAuGN1+v8rzAfBgNVHSMEGDAWgBSmHbeMfyEoWGba
tKRaVE3OVZ9D2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BoMjNqSDhoS0ZobTJyU2tXbFJOemxXZlE5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8x
L1U1M3BqbUdydWJLTm9kZDNFQUxoamRmcl9LOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8xL3BoMjNqSDhoS0Zo
bTJyU2tXbFJOemxXZlE5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEg7DANBgkqhkiG9w0BAQsFAAOC
AQEARrDrzeGT2cfee8bKu+krxBPQUl+OHGhwd7t0Hcg4JX8l4QdnWm5GsNl8+SUj
7xyHpx0NlvEwj3rTuHXFrBGox45CF55KFF+vYbKiod1oQDomV84ZE1W5WRvUUQpv
7CoBmUoyJVYB58d3IjOK2eoDplhkdHtZxbd2ps1F5KsMFm21DB1pRC7pK90Iat8A
IF4AEcRWg8I3R3DRC4K9wE2brn9iumV/fQF8pIAvAzCkbLMB9VPGu2N09gDRVF/N
mf488G1kd6Rwapt3ZfbXpIXcuva4OtyHmetY3rOsm2loEp2YlPrKkFtqaUqTaSaa
zkQb/E/buuvLXYtQZPvxEOuUPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org