Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/wrCDGraOu8f83j8wxky0CPNC_Cw.roa
File: wrCDGraOu8f83j8wxky0CPNC_Cw.roa (raw, json)
Hash identifier: P8Ug7gJqvoBZROmRpZs+1U8ollRZtCigkI/7lff/OVs=
Subject key identifier: C2:B0:83:1A:B6:8E:BB:C7:FC:DE:3F:30:C6:4C:B4:08:F3:42:FC:2C
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 093B3329
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/wrCDGraOu8f83j8wxky0CPNC_Cw.roa
Signing time: Sat 01 Jan 2022 09:53:03 +0000
ROA not before: Sat 01 Jan 2022 09:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 91.188.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154874665 (0x93b3329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 1 09:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b0831ab68ebbc7fcde3f30c64cb408f342fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:c0:90:20:95:46:40:1b:eb:06:33:f3:d3:
ba:39:54:84:ad:8f:88:ab:83:50:cf:72:54:d9:8f:
af:0a:b0:2a:bc:29:3f:7e:28:16:e2:e0:80:ea:ce:
80:90:a0:cb:7c:60:89:5b:ed:52:54:c4:90:e7:65:
26:69:21:71:47:a9:25:8b:ab:5c:7c:21:ac:31:aa:
db:28:15:a2:71:a3:90:b9:c6:b8:86:29:1a:ac:43:
0c:02:f8:18:37:e1:40:6b:76:cf:03:f7:25:e6:e7:
99:2e:cd:5d:1c:db:fe:7f:ae:84:69:c5:1a:29:d0:
c6:f9:2c:5f:5f:f8:3a:60:57:3d:d3:6d:d0:77:42:
ae:15:fa:f3:32:5c:74:e0:4a:db:3a:38:cd:b8:e7:
56:f8:32:10:b9:b8:65:53:49:f9:33:16:05:07:0a:
0f:01:de:86:2c:b1:96:08:bf:15:7b:33:34:c1:ec:
71:4f:1c:64:ad:58:be:25:84:10:e3:2d:f5:8f:46:
b8:6e:ed:14:f7:07:cf:e1:96:79:9b:33:71:fd:17:
f9:ce:8d:1c:06:c8:29:83:3f:36:52:ee:b1:52:ba:
d4:73:ad:30:69:83:71:d1:3a:c5:db:47:a7:8d:bb:
e9:d3:47:bc:05:d3:4a:6a:00:3c:54:b2:e0:f6:a9:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:83:1A:B6:8E:BB:C7:FC:DE:3F:30:C6:4C:B4:08:F3:42:FC:2C
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/wrCDGraOu8f83j8wxky0CPNC_Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:31:b0:b3:a9:72:75:d9:5c:38:d6:79:53:32:6a:f8:f2:1e:
86:3c:96:20:87:78:05:22:4e:8e:64:9d:d2:f8:89:4f:bb:00:
59:49:df:2b:1e:8b:e8:63:01:b9:e0:8d:a5:cb:1f:80:03:2b:
1f:00:e2:c4:85:b9:68:8e:04:23:6b:3b:91:f4:62:9a:44:71:
29:f5:e7:3b:cf:f8:4e:89:78:62:48:ff:73:a1:9e:6a:70:1e:
6c:56:ba:de:0b:0a:14:c6:79:0c:01:c5:55:72:07:07:b5:1d:
c5:f3:fc:53:53:e1:f6:01:e6:c5:8b:81:76:9e:87:fa:15:de:
05:2c:2f:34:71:89:e5:54:3b:3b:4b:e9:33:e3:64:2b:45:08:
2c:62:f5:45:81:f8:b3:a3:55:db:66:7f:b1:33:b2:8a:1e:64:
7d:4d:aa:6c:4e:63:95:2d:26:af:e6:9d:74:92:dc:1c:98:23:
39:05:fe:91:a1:95:c7:67:93:59:99:98:ed:d6:9c:1e:c8:c1:
9c:9d:0d:a7:ad:45:fe:c0:f6:73:54:e9:63:4b:23:ad:d5:2e:
1e:f2:c0:dc:90:cb:29:d2:7f:45:02:15:89:6a:1f:77:1d:e4:
0d:5d:84:e9:80:c7:f4:bb:b5:91:35:d4:7e:f7:a2:f8:ae:97:
a6:42:b0:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECTszKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjM2ZWQzMzc1YTZhODk1Y2FkZDQ5ZTBlY2Q0Mjk5NDU0YjNiODljMB4XDTIyMDEw
MTA5NTMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJiMDgzMWFiNjhl
YmJjN2ZjZGUzZjMwYzY0Y2I0MDhmMzQyZmMyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALn/wJAglUZAG+sGM/PTujlUhK2PiKuDUM9yVNmPrwqwKrwp
P34oFuLggOrOgJCgy3xgiVvtUlTEkOdlJmkhcUepJYurXHwhrDGq2ygVonGjkLnG
uIYpGqxDDAL4GDfhQGt2zwP3JebnmS7NXRzb/n+uhGnFGinQxvksX1/4OmBXPdNt
0HdCrhX68zJcdOBK2zo4zbjnVvgyELm4ZVNJ+TMWBQcKDwHehiyxlgi/FXszNMHs
cU8cZK1YviWEEOMt9Y9GuG7tFPcHz+GWeZszcf0X+c6NHAbIKYM/NlLusVK61HOt
MGmDcdE6xdtHp4276dNHvAXTSmoAPFSy4PapNQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCsIMato67x/zePzDGTLQI80L8LDAfBgNVHSMEGDAWgBT/Nu0zdaaolcrd
SeDs1CmUVLO4nDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L196YnRNM1dtcUpYSzNVbmc3TlFwbEZTenVKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvM2JjODQwLTgzMjktNDM4OS1hMzRiLWVjMTkwYjFjZWFjYS8x
L3dyQ0RHcmFPdThmODNqOHd4a3kwQ1BOQ19Ddy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
M2JjODQwLTgzMjktNDM4OS1hMzRiLWVjMTkwYjFjZWFjYS8xL196YnRNM1dtcUpY
SzNVbmc3TlFwbEZTenVKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFu8/jANBgkqhkiG9w0BAQsFAAOC
AQEAuTGws6lyddlcONZ5UzJq+PIehjyWIId4BSJOjmSd0viJT7sAWUnfKx6L6GMB
ueCNpcsfgAMrHwDixIW5aI4EI2s7kfRimkRxKfXnO8/4Tol4Ykj/c6GeanAebFa6
3gsKFMZ5DAHFVXIHB7UdxfP8U1Ph9gHmxYuBdp6H+hXeBSwvNHGJ5VQ7O0vpM+Nk
K0UILGL1RYH4s6NV22Z/sTOyih5kfU2qbE5jlS0mr+addJLcHJgjOQX+kaGVx2eT
WZmY7dacHsjBnJ0Np61F/sD2c1TpY0sjrdUuHvLA3JDLKdJ/RQIViWofdx3kDV2E
6YDH9Lu1kTXUfvei+K6XpkKwJQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-fra.rpki-client.org