Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/tstrYMdpaQEbBy85PDy0EGbC9jw.roa
File: tstrYMdpaQEbBy85PDy0EGbC9jw.roa (raw, json)
Hash identifier: Y4WLOh4YLZffQ4VMqgdAeVg25og0t7IJ44d8OXDB5k0=
Subject key identifier: B6:CB:6B:60:C7:69:69:01:1B:07:2F:39:3C:3C:B4:10:66:C2:F6:3C
Certificate issuer: /CN=26851d8d0c5cc4f5eec7662b7760688d8b652c52
Certificate serial: 018A41CE573E8088E982F0AAF8598F01B769
Authority key identifier: 26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoUdjQxcxPXux2Yrd2BojYtlLFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/tstrYMdpaQEbBy85PDy0EGbC9jw.roa
Signing time: Tue 29 Aug 2023 14:59:16 +0000
ROA not before: Tue 29 Aug 2023 14:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202128
IP address blocks: 185.148.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:ce:57:3e:80:88:e9:82:f0:aa:f8:59:8f:01:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26851d8d0c5cc4f5eec7662b7760688d8b652c52
Validity
Not Before: Aug 29 14:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6cb6b60c76969011b072f393c3cb41066c2f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:8d:fa:74:3e:4a:22:0e:3c:8f:76:aa:c4:
85:60:8f:5b:d1:e9:39:0e:7c:83:26:f2:b8:87:61:
cd:4c:61:0a:99:6e:ee:64:44:1d:f2:7d:b2:c5:53:
f3:d0:03:8e:f2:0a:73:ee:2e:b6:ad:22:3b:37:ab:
ad:1b:11:bd:1f:e5:d1:94:51:7a:6b:aa:9a:5d:d2:
5e:8e:5f:4a:fb:27:52:c3:8e:4f:06:81:eb:16:6c:
ec:0c:3f:43:d1:e0:00:49:ba:ef:0a:52:56:2a:bb:
7b:51:8b:2d:bb:25:3f:82:a6:50:45:90:78:f1:ce:
72:7c:44:9d:f8:95:3e:f6:7d:66:d3:a1:cb:ed:41:
d9:50:71:68:19:2b:8e:c7:2d:8f:1c:81:d9:79:b8:
a3:e6:2a:1f:8a:c6:4f:d2:09:f1:b9:94:f3:25:11:
9c:91:de:cf:80:f7:d6:49:8c:57:0d:1f:5f:61:ae:
1c:a1:c6:fa:e4:08:42:9a:98:36:bc:61:da:f5:e3:
98:b9:52:2b:65:84:3a:71:f9:b7:72:bb:6e:23:01:
e8:c9:a2:18:01:ba:e1:fc:89:d0:74:b4:59:2e:2e:
1c:9a:a4:6d:aa:8f:9c:21:c4:4b:fd:66:10:d1:bf:
a1:13:8b:28:0a:7c:8a:8b:5c:dd:8d:a0:32:3f:9c:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:6B:60:C7:69:69:01:1B:07:2F:39:3C:3C:B4:10:66:C2:F6:3C
X509v3 Authority Key Identifier:
keyid:26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoUdjQxcxPXux2Yrd2BojYtlLFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/tstrYMdpaQEbBy85PDy0EGbC9jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/JoUdjQxcxPXux2Yrd2BojYtlLFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:d2:d1:97:9b:d2:2c:e2:e6:f7:a0:3b:07:8f:23:67:d5:70:
21:ca:8e:e3:1f:06:f3:32:54:a7:a9:1c:56:68:94:f3:1e:02:
49:3e:1b:78:96:38:82:a5:0f:68:10:eb:de:08:f7:5b:ac:d5:
89:ed:12:98:bf:c7:c6:1a:13:65:e1:38:a4:53:d4:ae:39:df:
6a:6d:7a:7e:2c:e9:a4:b1:a2:4e:80:47:4e:d1:a8:f5:d5:52:
bc:e1:6e:78:72:8a:c7:72:ee:8d:91:e7:43:09:1f:87:51:68:
36:f9:57:33:4a:0c:1f:4e:dd:8e:94:f0:d8:55:f2:f2:e4:db:
5f:5d:11:e8:87:cd:e1:69:0f:08:b3:53:10:bc:d6:20:55:e6:
67:b2:79:b8:40:16:19:67:cd:f7:f1:39:3f:22:14:24:dd:a2:
4e:4a:f3:ea:32:00:ed:a7:7d:e1:59:05:05:57:f8:e5:84:6c:
4c:07:5a:3e:f9:e5:d8:b7:f0:07:1f:99:c4:e9:5a:2f:ce:88:
c5:87:50:40:a0:7e:92:5e:57:63:b3:7a:bb:b8:14:65:50:84:
e0:0d:45:d6:e6:d0:2a:a4:0d:7d:33:a6:17:bd:c8:0a:e6:0c:
1f:d6:33:39:5e:e2:0f:a4:be:61:32:50:e1:f6:51:68:fc:a7:
44:e0:01:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpBzlc+gIjpgvCq+FmPAbdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODUxZDhkMGM1Y2M0ZjVlZWM3NjYyYjc3NjA2ODhkOGI2
NTJjNTIwHhcNMjMwODI5MTQ1OTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmNiNmI2MGM3Njk2OTAxMWIwNzJmMzkzYzNjYjQxMDY2YzJmNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDGN+nQ+SiIOPI92qsSFYI9b0ek5
DnyDJvK4h2HNTGEKmW7uZEQd8n2yxVPz0AOO8gpz7i62rSI7N6utGxG9H+XRlFF6
a6qaXdJejl9K+ydSw45PBoHrFmzsDD9D0eAASbrvClJWKrt7UYstuyU/gqZQRZB4
8c5yfESd+JU+9n1m06HL7UHZUHFoGSuOxy2PHIHZebij5iofisZP0gnxuZTzJRGc
kd7PgPfWSYxXDR9fYa4cocb65AhCmpg2vGHa9eOYuVIrZYQ6cfm3crtuIwHoyaIY
Abrh/InQdLRZLi4cmqRtqo+cIcRL/WYQ0b+hE4soCnyKi1zdjaAyP5wFjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbLa2DHaWkBGwcvOTw8tBBmwvY8MB8GA1UdIwQY
MBaAFCaFHY0MXMT17sdmK3dgaI2LZSxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9VZGpReGN4UFh1eDJZcmQyQm9qWXRsTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yZjlhM2QtNTQyOC00YzQwLThjYWEt
YTI2ZTgwNzcwMGI2LzEvdHN0cllNZHBhUUViQnk4NVBEeTBFR2JDOWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yZjlhM2QtNTQyOC00YzQwLThjYWEtYTI2ZTgwNzcwMGI2
LzEvSm9VZGpReGN4UFh1eDJZcmQyQm9qWXRsTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZQQMA0G
CSqGSIb3DQEBCwUAA4IBAQCM0tGXm9Is4ub3oDsHjyNn1XAhyo7jHwbzMlSnqRxW
aJTzHgJJPht4ljiCpQ9oEOveCPdbrNWJ7RKYv8fGGhNl4TikU9SuOd9qbXp+LOmk
saJOgEdO0aj11VK84W54corHcu6NkedDCR+HUWg2+VczSgwfTt2OlPDYVfLy5Ntf
XRHoh83haQ8Is1MQvNYgVeZnsnm4QBYZZ8338Tk/IhQk3aJOSvPqMgDtp33hWQUF
V/jlhGxMB1o++eXYt/AHH5nE6VovzojFh1BAoH6SXldjs3q7uBRlUITgDUXW5tAq
pA19M6YXvcgK5gwf1jM5XuIPpL5hMlDh9lFo/KdE4AFE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:33 2024 by rpki-client on console-ams.rpki-client.org