Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/pyc8GQeXcvR-5PrJt9O92y2xrmQ.roa
File: pyc8GQeXcvR-5PrJt9O92y2xrmQ.roa (raw, json)
Hash identifier: uERkDr8brMJ0zHAdOfPM6CKLuBOCyPODIKlqTQ7/O8Q=
Subject key identifier: A7:27:3C:19:07:97:72:F4:7E:E4:FA:C9:B7:D3:BD:DB:2D:B1:AE:64
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 7925
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/pyc8GQeXcvR-5PrJt9O92y2xrmQ.roa
Signing time: Tue 08 Feb 2022 18:37:52 +0000
ROA not before: Tue 08 Feb 2022 18:37:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31013 (0x7925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Feb 8 18:37:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7273c19079772f47ee4fac9b7d3bddb2db1ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:b7:7f:a6:54:36:bd:3d:f8:d8:cf:8f:cd:
7f:91:94:91:72:7c:35:d8:06:25:3e:9c:79:ed:a4:
34:fe:92:c7:31:fb:a2:e7:b2:25:ab:b2:bd:2c:03:
e7:5f:e6:1d:15:b8:8e:f6:f3:d5:71:c3:22:0c:56:
fd:4f:e3:50:25:11:2f:c9:55:83:7b:03:e6:0a:f8:
ca:a2:62:86:89:60:4f:eb:5b:c3:4b:61:7e:86:89:
b6:ae:90:a6:26:d9:4f:f0:47:d7:4d:b5:0c:f7:06:
e9:a4:b5:ad:44:8e:aa:0d:c3:64:7d:ac:51:c4:1b:
02:85:5a:fc:d4:5b:13:78:d7:03:d7:22:88:9c:52:
0f:bd:b3:3f:ca:80:7d:d9:fa:55:02:c4:9a:e3:42:
2a:4b:be:ef:26:fb:c0:4f:6f:4b:75:ee:09:d5:33:
c0:89:19:6c:14:6f:75:20:d9:35:9a:58:04:62:5c:
e1:58:c0:48:a6:13:b8:c6:dc:50:a6:be:b2:3e:42:
79:e2:cf:e4:bc:f2:e6:c5:22:26:98:9c:61:db:95:
08:5a:7a:12:68:e7:f8:76:ed:be:8e:2c:6b:0b:d3:
72:7a:2d:ce:58:79:12:cc:9c:36:78:e6:b9:3b:38:
f3:f1:72:2d:0f:23:fc:94:8c:6b:de:15:61:ac:02:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:3C:19:07:97:72:F4:7E:E4:FA:C9:B7:D3:BD:DB:2D:B1:AE:64
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/pyc8GQeXcvR-5PrJt9O92y2xrmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7d:d7:26:ee:ce:67:8b:ca:45:7f:f5:a4:b0:ea:f0:e1:39:
8e:64:01:75:c4:a5:21:87:25:5a:d8:7f:8a:eb:41:a2:89:cb:
56:32:42:c3:ec:f0:77:90:e5:87:55:45:af:36:70:26:ff:b0:
73:0f:e8:ae:12:0b:00:d2:bc:d2:a1:d9:8e:e4:8c:d9:ac:24:
e6:32:64:58:9b:b7:d3:10:09:79:34:f1:e7:31:d8:a9:e6:ba:
02:46:4f:9a:d8:56:a6:1b:ac:86:94:d4:1c:23:fd:be:96:54:
18:a1:67:84:7f:af:d1:13:9a:18:0c:ec:fc:d1:9c:fd:31:fc:
a5:a9:ce:2b:c5:5f:1e:af:1f:84:d6:13:a5:e7:af:85:5a:bb:
ba:9c:84:df:c3:26:86:33:64:a4:ae:ae:ae:c0:5d:16:e4:9a:
13:aa:65:66:f7:e2:f5:24:c1:5b:41:0b:c5:0c:92:dc:30:a1:
4f:28:77:70:dc:06:5c:88:55:f7:88:b8:f6:f7:c4:3f:ff:f6:
9d:ee:c1:c8:e6:2b:c9:05:f5:8d:78:1d:b4:75:e8:95:d4:db:
60:8e:79:2d:3a:bc:85:f4:51:43:73:3c:88:46:4a:22:5e:90:
76:7f:a3:b8:80:29:f6:41:94:8f:e9:88:4d:0c:30:3b:d5:ea:
b3:1e:92:04
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICeSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTJl
NDk4Mjg5MjZmYzYxYzdmNmI3N2U5YTNkOGZkMDM2ZTQ2Mzg0NTAeFw0yMjAyMDgx
ODM3NTJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGE3MjczYzE5MDc5Nzcy
ZjQ3ZWU0ZmFjOWI3ZDNiZGRiMmRiMWFlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Ybd/plQ2vT342M+PzX+RlJFyfDXYBiU+nHntpDT+kscx+6Ln
siWrsr0sA+df5h0VuI7289VxwyIMVv1P41AlES/JVYN7A+YK+MqiYoaJYE/rW8NL
YX6GibaukKYm2U/wR9dNtQz3Bumkta1EjqoNw2R9rFHEGwKFWvzUWxN41wPXIoic
Ug+9sz/KgH3Z+lUCxJrjQipLvu8m+8BPb0t17gnVM8CJGWwUb3Ug2TWaWARiXOFY
wEimE7jG3FCmvrI+Qnniz+S88ubFIiaYnGHblQhaehJo5/h27b6OLGsL03J6Lc5Y
eRLMnDZ45rk7OPPxci0PI/yUjGveFWGsAvDdAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUpyc8GQeXcvR+5PrJt9O92y2xrmQwHwYDVR0jBBgwFoAUouSYKJJvxhx/a3fp
o9j9A25GOEUwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9v
dVNZS0pKdnhoeF9hM2ZwbzlqOUEyNUdPRVUuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2Y2L2NmZmU3Yi02OTZjLTRhMTgtOGM0MC02NDFhMzQ5OTU2NWIvMS9w
eWM4R1FlWGN2Ui01UHJKdDlPOTJ5MnhybVEucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2Nm
ZmU3Yi02OTZjLTRhMTgtOGM0MC02NDFhMzQ5OTU2NWIvMS9vdVNZS0pKdnhoeF9h
M2ZwbzlqOUEyNUdPRVUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZxrYwDQYJKoZIhvcNAQELBQADggEB
AJF91ybuzmeLykV/9aSw6vDhOY5kAXXEpSGHJVrYf4rrQaKJy1YyQsPs8HeQ5YdV
Ra82cCb/sHMP6K4SCwDSvNKh2Y7kjNmsJOYyZFibt9MQCXk08ecx2KnmugJGT5rY
VqYbrIaU1Bwj/b6WVBihZ4R/r9ETmhgM7PzRnP0x/KWpzivFXx6vH4TWE6Xnr4Va
u7qchN/DJoYzZKSurq7AXRbkmhOqZWb34vUkwVtBC8UMktwwoU8od3DcBlyIVfeI
uPb3xD//9p3uwcjmK8kF9Y14HbR16JXU22COeS06vIX0UUNzPIhGSiJekHZ/o7iA
KfZBlI/piE0MMDvV6rMekgQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:31 2025 by rpki-client