Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/iGYn1D22bB-eiNLRtTFlEZC9qo8.roa
File: iGYn1D22bB-eiNLRtTFlEZC9qo8.roa (raw, json)
Hash identifier: 3bhX2TdK83YbyS4dS03sfaKa5SJWcCujk0Mp+LpGMfE=
Subject key identifier: 88:66:27:D4:3D:B6:6C:1F:9E:88:D2:D1:B5:31:65:11:90:BD:AA:8F
Certificate issuer: /CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Certificate serial: 37DEE6
Authority key identifier: 92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/iGYn1D22bB-eiNLRtTFlEZC9qo8.roa
Signing time: Sat 01 Jan 2022 01:03:03 +0000
ROA not before: Sat 01 Jan 2022 01:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.178.157.0/24 maxlen: 24
193.178.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3661542 (0x37dee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Validity
Not Before: Jan 1 01:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=886627d43db66c1f9e88d2d1b531651190bdaa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:a8:6f:aa:91:4f:10:19:e9:aa:66:cd:22:
24:29:fd:bf:eb:71:ec:27:21:9b:19:8b:9c:84:e1:
e3:f0:e8:51:1d:9c:76:98:b8:5d:27:40:70:a5:77:
07:39:26:7d:ec:ce:c7:31:46:27:37:17:e8:d7:91:
6c:f8:42:d4:e1:5e:4b:ec:a0:f7:b5:33:9e:7c:21:
36:38:8f:e5:fe:37:f0:f4:3e:97:a9:d8:5a:79:f8:
35:3f:1a:f0:04:fd:e6:e2:84:44:3f:af:e0:56:1a:
84:33:e1:39:e1:28:b9:93:49:24:fc:b9:a5:14:91:
52:b3:2d:72:74:2f:24:48:29:00:4f:dd:19:9e:2d:
0c:c5:da:76:3a:75:b5:5f:a8:0c:34:7b:45:48:a9:
1e:3a:9c:8d:42:6b:ff:19:c0:3f:7e:28:db:bd:50:
00:a0:10:c2:f9:12:97:0b:b6:57:c1:66:d9:06:e7:
ee:21:b4:d1:af:e6:8d:dd:80:44:8b:e3:de:c2:63:
04:6f:7d:4d:bb:62:63:21:06:88:f1:ca:4c:b5:60:
05:88:db:ad:76:e9:71:98:3d:0a:53:f1:b5:85:1c:
14:b1:79:2a:e5:87:a3:d1:05:2e:f2:6b:b0:c0:fb:
25:05:53:a4:42:dc:13:85:24:64:9a:a8:65:8d:a0:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:66:27:D4:3D:B6:6C:1F:9E:88:D2:D1:B5:31:65:11:90:BD:AA:8F
X509v3 Authority Key Identifier:
keyid:92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/iGYn1D22bB-eiNLRtTFlEZC9qo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d8:38:da:ca:30:25:81:20:bb:71:8a:7a:1a:a1:d6:5f:14:
8f:df:4a:4c:75:fc:3f:32:67:e4:7a:ba:7f:7d:da:c3:37:08:
a8:ff:05:55:8c:85:25:5a:62:d2:e2:c4:ed:81:0e:8f:51:19:
2b:8a:4a:ca:f4:54:6e:80:da:09:d3:09:9f:3a:b9:71:a1:5c:
8b:9b:ad:ef:6a:5f:58:c9:a4:31:35:d6:1a:a9:cc:bb:57:88:
a3:c2:d5:e5:da:ee:a6:d2:bd:b2:a3:1e:2d:58:05:7c:58:84:
43:44:56:ea:6c:08:5a:47:bb:2c:a1:0c:39:fc:3e:20:6e:a3:
5d:4e:29:1e:b8:5e:d9:96:c9:45:ca:8c:4d:15:10:f1:e1:37:
e4:d7:cb:9e:37:ec:78:cd:42:07:f1:40:36:34:7f:e1:62:57:
b6:fb:e1:08:f4:9f:8c:c9:ca:4e:c4:80:94:73:59:d8:63:a4:
8f:2a:52:0f:79:49:0d:f8:5e:9d:c0:4b:08:e5:1a:0c:e3:74:
e8:3d:97:fd:9b:a9:1f:91:f9:47:11:2b:12:28:18:b6:54:7f:
bb:f9:64:42:4d:7b:96:c2:46:1b:c1:01:cc:e8:da:f6:a9:99:
09:69:7d:d4:48:2d:38:54:6c:46:5a:a1:a1:e5:17:bc:c0:d8:
e9:24:62:84
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDN97mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
Mzc5MjUxOTBiZmVhNjVlOTJmODI5ZTRmNjdmN2Y4YTQ2ZDJmZjUwHhcNMjIwMTAx
MDEwMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ODY2MjdkNDNkYjY2
YzFmOWU4OGQyZDFiNTMxNjUxMTkwYmRhYThmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArNyob6qRTxAZ6apmzSIkKf2/63HsJyGbGYuchOHj8OhRHZx2
mLhdJ0BwpXcHOSZ97M7HMUYnNxfo15Fs+ELU4V5L7KD3tTOefCE2OI/l/jfw9D6X
qdhaefg1PxrwBP3m4oREP6/gVhqEM+E54Si5k0kk/LmlFJFSsy1ydC8kSCkAT90Z
ni0Mxdp2OnW1X6gMNHtFSKkeOpyNQmv/GcA/fijbvVAAoBDC+RKXC7ZXwWbZBufu
IbTRr+aN3YBEi+PewmMEb31Nu2JjIQaI8cpMtWAFiNutdulxmD0KU/G1hRwUsXkq
5Yej0QUu8muwwPslBVOkQtwThSRkmqhljaCwJwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIhmJ9Q9tmwfnojS0bUxZRGQvaqPMB8GA1UdIwQYMBaAFJI3klGQv+pl6S+C
nk9n9/ikbS/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
a2plU1VaQ182bVhwTDRLZVQyZjMtS1J0TF9VLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mNy8zYWJjN2UtMTg2MS00NTVmLWE3MzMtYWE5OWY0ZTUwMjljLzEv
aUdZbjFEMjJiQi1laU5MUnRURmxFWkM5cW84LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8z
YWJjN2UtMTg2MS00NTVmLWE3MzMtYWE5OWY0ZTUwMjljLzEva2plU1VaQ182bVhw
TDRLZVQyZjMtS1J0TF9VLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbKcMA0GCSqGSIb3DQEBCwUAA4IB
AQA92DjayjAlgSC7cYp6GqHWXxSP30pMdfw/Mmfkerp/fdrDNwio/wVVjIUlWmLS
4sTtgQ6PURkrikrK9FRugNoJ0wmfOrlxoVyLm63val9YyaQxNdYaqcy7V4ijwtXl
2u6m0r2yox4tWAV8WIRDRFbqbAhaR7ssoQw5/D4gbqNdTikeuF7ZlslFyoxNFRDx
4Tfk18ueN+x4zUIH8UA2NH/hYle2++EI9J+MycpOxICUc1nYY6SPKlIPeUkN+F6d
wEsI5RoM43ToPZf9m6kfkflHESsSKBi2VH+7+WRCTXuWwkYbwQHM6Nr2qZkJaX3U
SC04VGxGWqGh5Re8wNjpJGKE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org