Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/O18Lkp-VGJF7WoJF7yRjwPCHbD4.roa
File: O18Lkp-VGJF7WoJF7yRjwPCHbD4.roa (raw, json)
Hash identifier: 9JijgpWz6EivDe8PJGzI2ZD2FtgFYBODQNYGQaH6yxc=
Subject key identifier: 3B:5F:0B:92:9F:95:18:91:7B:5A:82:45:EF:24:63:C0:F0:87:6C:3E
Certificate issuer: /CN=f2aa7841643ab912508e610cd00adb6d0088da48
Certificate serial: 018572B4113FA3A4B0390F0752D4BEF25495
Authority key identifier: F2:AA:78:41:64:3A:B9:12:50:8E:61:0C:D0:0A:DB:6D:00:88:DA:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/O18Lkp-VGJF7WoJF7yRjwPCHbD4.roa
Signing time: Mon 02 Jan 2023 13:38:01 +0000
ROA not before: Mon 02 Jan 2023 13:38:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203641
IP address blocks: 5.182.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:11:3f:a3:a4:b0:39:0f:07:52:d4:be:f2:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aa7841643ab912508e610cd00adb6d0088da48
Validity
Not Before: Jan 2 13:38:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b5f0b929f9518917b5a8245ef2463c0f0876c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:84:31:87:21:b9:d7:7c:6e:92:b7:20:86:
a3:b3:9e:91:6b:d4:fd:7c:bd:e0:dc:ac:e0:8a:b5:
41:29:ee:c8:1f:84:c0:45:eb:25:5c:6e:5f:39:55:
71:d5:58:eb:cb:a6:79:6c:93:ab:26:a0:d3:43:2a:
c3:42:cf:30:ca:51:3d:21:c3:76:8c:00:78:f5:38:
5f:5b:45:3b:f2:7d:fe:9e:9a:1e:de:b2:35:03:24:
3f:fc:99:82:a1:df:20:af:41:dd:78:b3:2e:f0:da:
21:d3:3e:97:5a:a5:13:65:ce:28:78:b3:ee:1f:84:
18:e7:0f:22:10:c4:ab:e5:dc:b2:5a:69:3f:61:ec:
bb:08:65:89:11:0b:62:ce:05:3b:a4:d5:2d:20:9e:
3d:50:6c:49:c8:75:48:ee:74:f8:1c:7c:bc:c1:10:
db:4b:3e:63:e4:de:87:0e:78:76:88:04:de:b3:6f:
e6:d2:8d:50:ca:0f:6e:42:20:da:67:3b:d6:b4:f0:
2f:c9:6c:8d:e0:76:1b:7c:a7:77:07:a3:15:ef:1a:
2a:74:e7:6d:ce:32:4e:1d:f8:02:df:f8:6b:cb:cf:
21:65:00:12:a6:03:31:db:05:a2:f0:bc:51:7b:a1:
4a:7c:54:22:0c:74:98:22:0d:0f:5f:f3:48:be:60:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:0B:92:9F:95:18:91:7B:5A:82:45:EF:24:63:C0:F0:87:6C:3E
X509v3 Authority Key Identifier:
keyid:F2:AA:78:41:64:3A:B9:12:50:8E:61:0C:D0:0A:DB:6D:00:88:DA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/O18Lkp-VGJF7WoJF7yRjwPCHbD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f8:b8:a6:3f:fb:8c:a5:16:81:62:0c:02:c3:93:b3:f1:c8:
39:ab:0b:fe:7f:66:a8:10:29:02:0e:85:f1:99:d7:dd:22:92:
b6:93:6b:76:fa:20:e4:70:c1:b4:04:95:7c:f0:be:b7:38:f5:
c8:97:6f:5a:fd:6a:d5:58:35:52:70:37:a2:88:48:cd:74:c4:
88:13:11:cf:c1:ca:d0:6b:9b:24:2e:25:7c:6d:ed:64:51:45:
2c:a1:71:0c:59:6f:06:99:7d:8c:e4:42:35:8d:9e:2d:43:24:
57:36:dd:3f:c1:1c:98:c6:c4:0a:19:c2:e7:1e:93:5f:70:ba:
67:12:00:1b:ee:21:1c:83:ae:9a:f9:be:3c:99:ca:fc:23:09:
ad:3a:f1:b3:e3:ed:8e:68:bc:48:6c:27:30:13:77:ff:92:00:
7e:6b:40:fc:a2:ac:f5:0b:1b:a0:03:17:a0:45:77:aa:a8:1e:
fe:44:9e:fa:42:af:66:01:de:a9:51:10:aa:37:c0:17:44:ac:
8f:41:e7:a8:70:2d:a5:bb:65:11:d1:fe:7e:78:de:73:ed:f8:
b1:c5:22:26:02:fe:24:46:fe:14:19:c4:86:01:4a:a2:44:cb:
94:9e:9d:1d:0a:8e:52:2f:19:c3:9a:db:3e:de:0a:9e:9b:73:
79:99:28:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVytBE/o6SwOQ8HUtS+8lSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWE3ODQxNjQzYWI5MTI1MDhlNjEwY2QwMGFkYjZkMDA4
OGRhNDgwHhcNMjMwMTAyMTMzODAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjVmMGI5MjlmOTUxODkxN2I1YTgyNDVlZjI0NjNjMGYwODc2YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDCEMYchudd8bpK3IIajs56Ra9T9
fL3g3KzgirVBKe7IH4TAReslXG5fOVVx1Vjry6Z5bJOrJqDTQyrDQs8wylE9IcN2
jAB49ThfW0U78n3+npoe3rI1AyQ//JmCod8gr0HdeLMu8Noh0z6XWqUTZc4oeLPu
H4QY5w8iEMSr5dyyWmk/Yey7CGWJEQtizgU7pNUtIJ49UGxJyHVI7nT4HHy8wRDb
Sz5j5N6HDnh2iATes2/m0o1Qyg9uQiDaZzvWtPAvyWyN4HYbfKd3B6MV7xoqdOdt
zjJOHfgC3/hry88hZQASpgMx2wWi8LxRe6FKfFQiDHSYIg0PX/NIvmAj6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtfC5KflRiRe1qCRe8kY8Dwh2w+MB8GA1UdIwQY
MBaAFPKqeEFkOrkSUI5hDNAK220AiNpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFwNFFXUTZ1UkpRam1FTTBBcmJiUUNJMmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iODhmZjgtZmE2Ni00YjdiLWE5YTAt
NjljNDM1ZDMyYmM0LzEvTzE4TGtwLVZHSkY3V29KRjd5Ump3UENIYkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iODhmZjgtZmE2Ni00YjdiLWE5YTAtNjljNDM1ZDMyYmM0
LzEvOHFwNFFXUTZ1UkpRam1FTTBBcmJiUUNJMmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbagMA0G
CSqGSIb3DQEBCwUAA4IBAQCn+LimP/uMpRaBYgwCw5Oz8cg5qwv+f2aoECkCDoXx
mdfdIpK2k2t2+iDkcMG0BJV88L63OPXIl29a/WrVWDVScDeiiEjNdMSIExHPwcrQ
a5skLiV8be1kUUUsoXEMWW8GmX2M5EI1jZ4tQyRXNt0/wRyYxsQKGcLnHpNfcLpn
EgAb7iEcg66a+b48mcr8IwmtOvGz4+2OaLxIbCcwE3f/kgB+a0D8oqz1CxugAxeg
RXeqqB7+RJ76Qq9mAd6pURCqN8AXRKyPQeeocC2lu2UR0f5+eN5z7fixxSImAv4k
Rv4UGcSGAUqiRMuUnp0dCo5SLxnDmts+3gqem3N5mSjv
-----END CERTIFICATE-----
Generated at Mon Oct 9 12:28:25 2023 by rpki-client on console-ams.rpki-client.org