Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/_-aLLJW2yYAbH8cMJA2g8z1e2OM.roa
File: _-aLLJW2yYAbH8cMJA2g8z1e2OM.roa (raw, json)
Hash identifier: ZQ6jtUD7RKT8FXlUNk8b8Pj7mxsiFKBCN8V1N0vkKNY=
Subject key identifier: FF:E6:8B:2C:95:B6:C9:80:1B:1F:C7:0C:24:0D:A0:F3:3D:5E:D8:E3
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 0610A125
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/_-aLLJW2yYAbH8cMJA2g8z1e2OM.roa
Signing time: Sat 02 Jul 2022 14:08:25 +0000
ROA not before: Sat 02 Jul 2022 14:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101753125 (0x610a125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Jul 2 14:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe68b2c95b6c9801b1fc70c240da0f33d5ed8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:cd:37:d9:87:e8:5f:dc:c0:6d:28:36:db:
30:bc:86:4d:41:f0:76:5a:1c:3a:1f:e5:ba:22:75:
c2:a2:1a:52:ea:a2:1c:05:6b:3d:69:fb:be:69:aa:
13:31:89:6a:da:42:94:09:6d:ce:7e:09:9e:c1:03:
f3:bb:8c:43:b3:d2:1e:78:7f:87:59:02:55:2e:1d:
90:88:61:6d:13:d0:43:d8:59:77:76:16:a9:1c:98:
c3:f6:b3:7c:7d:de:f9:b6:a1:6a:d4:da:d0:f4:59:
ee:f4:c5:4f:e4:7a:03:8c:bc:69:e1:e2:61:c7:ed:
0a:0c:58:72:9d:31:10:ce:1e:44:87:f1:78:9e:00:
bd:36:81:2c:ab:c7:b3:b5:c5:2d:5b:de:c2:af:95:
e0:77:e4:e3:9b:fb:12:53:bc:e6:71:5e:7b:77:49:
48:40:a9:d4:3d:37:83:a6:1d:ad:15:fc:47:32:07:
11:9f:7e:94:f3:5c:2f:a6:23:42:f3:75:b5:fc:dc:
1e:62:1a:d7:b8:17:d1:f5:ac:fe:53:b2:74:ff:63:
74:dd:0f:1a:2b:c7:bf:f4:98:cd:8f:33:cd:10:15:
e0:84:1b:33:9e:9e:e1:51:2b:36:58:36:91:09:14:
a9:8c:c2:1b:55:14:ca:54:f5:bd:c2:ff:a9:c0:06:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:8B:2C:95:B6:C9:80:1B:1F:C7:0C:24:0D:A0:F3:3D:5E:D8:E3
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/_-aLLJW2yYAbH8cMJA2g8z1e2OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ee:db:03:34:22:51:6e:52:52:60:36:5c:e9:5b:91:a4:e0:
b7:cf:37:cd:06:17:d4:d1:1f:c9:25:8f:78:8e:74:d9:ad:39:
b6:59:34:e9:de:37:d7:52:9b:c1:26:a5:13:c9:09:a2:18:75:
5d:8d:78:44:80:2c:a4:66:19:61:80:37:c0:4e:25:18:72:a6:
91:aa:38:9b:77:94:08:5d:71:bf:10:56:2f:78:f4:8e:e0:9c:
3a:b2:d9:62:8f:b7:64:00:bb:4c:99:70:44:00:c2:c6:f5:2d:
a0:ae:26:e0:23:f9:3a:89:8b:31:84:53:32:99:76:6c:3b:33:
7e:bb:58:c5:9f:e4:35:a1:a3:18:c0:fc:6a:51:db:7f:03:6c:
8b:c2:66:4f:1f:63:7b:43:66:61:2f:88:93:ae:93:bc:e9:2f:
71:63:7d:79:38:c5:55:65:97:f9:b9:39:d9:9a:51:ff:5b:a0:
d8:23:c7:27:55:10:02:69:49:21:fe:5a:b8:59:6a:07:ab:12:
67:a1:71:cc:2d:a2:7c:ec:ce:68:10:94:90:28:7f:78:f9:be:
1c:6b:1a:bd:85:7f:6e:3c:eb:fe:81:02:ce:65:6a:ed:a5:07:
d1:28:a7:e8:87:11:3e:92:1c:dd:25:9e:9e:ec:89:15:cb:33:
55:75:46:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhChJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZWZmZjZhZTUxZWEyYTY3OWY3NDVmZDhjYzM5ODQzMTVlNTcyOTliMB4XDTIyMDcw
MjE0MDgyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZlNjhiMmM5NWI2
Yzk4MDFiMWZjNzBjMjQwZGEwZjMzZDVlZDhlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIAkzTfZh+hf3MBtKDbbMLyGTUHwdlocOh/luiJ1wqIaUuqi
HAVrPWn7vmmqEzGJatpClAltzn4JnsED87uMQ7PSHnh/h1kCVS4dkIhhbRPQQ9hZ
d3YWqRyYw/azfH3e+bahatTa0PRZ7vTFT+R6A4y8aeHiYcftCgxYcp0xEM4eRIfx
eJ4AvTaBLKvHs7XFLVvewq+V4Hfk45v7ElO85nFee3dJSECp1D03g6YdrRX8RzIH
EZ9+lPNcL6YjQvN1tfzcHmIa17gX0fWs/lOydP9jdN0PGivHv/SYzY8zzRAV4IQb
M56e4VErNlg2kQkUqYzCG1UUylT1vcL/qcAG9xkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/5osslbbJgBsfxwwkDaDzPV7Y4zAfBgNVHSMEGDAWgBTO//auUeoqZ590
X9jMOYQxXlcpmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3p2XzJybEhxS21lZmRGX1l6RG1FTVY1WEtacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvY2U4NjE5LTBiM2MtNGQxNS1iZDdiLWMwZTcyZTJhYjgwMi8x
L18tYUxMSlcyeVlBYkg4Y01KQTJnOHoxZTJPTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
Y2U4NjE5LTBiM2MtNGQxNS1iZDdiLWMwZTcyZTJhYjgwMi8xL3p2XzJybEhxS21l
ZmRGX1l6RG1FTVY1WEtacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIyBDANBgkqhkiG9w0BAQsFAAOC
AQEAvu7bAzQiUW5SUmA2XOlbkaTgt883zQYX1NEfySWPeI502a05tlk06d4311Kb
wSalE8kJohh1XY14RIAspGYZYYA3wE4lGHKmkao4m3eUCF1xvxBWL3j0juCcOrLZ
Yo+3ZAC7TJlwRADCxvUtoK4m4CP5OomLMYRTMpl2bDszfrtYxZ/kNaGjGMD8alHb
fwNsi8JmTx9je0NmYS+Ik66TvOkvcWN9eTjFVWWX+bk52ZpR/1ug2CPHJ1UQAmlJ
If5auFlqB6sSZ6FxzC2ifOzOaBCUkCh/ePm+HGsavYV/bjzr/oECzmVq7aUH0Sin
6IcRPpIc3SWenuyJFcszVXVG8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org