Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/8HmlqhoB0wpCeQCRJa36wOANOA4.roa
File: 8HmlqhoB0wpCeQCRJa36wOANOA4.roa (raw, json)
Hash identifier: BdXt647wAwiog2Lq/Hj6pA3P2iHAk91BIOopwHf0yMA=
Subject key identifier: F0:79:A5:AA:1A:01:D3:0A:42:79:00:91:25:AD:FA:C0:E0:0D:38:0E
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA5B2931F38AFD2761EB0E7880A93
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/8HmlqhoB0wpCeQCRJa36wOANOA4.roa
Signing time: Mon 02 Jan 2023 03:35:43 +0000
ROA not before: Mon 02 Jan 2023 03:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.124.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a5:b2:93:1f:38:af:d2:76:1e:b0:e7:88:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f079a5aa1a01d30a4279009125adfac0e00d380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:7d:b2:cf:02:8d:8c:0d:e3:6b:48:d6:dd:
34:60:f4:64:02:f4:39:7a:98:ae:2c:fa:d4:00:8e:
29:e4:f0:13:0a:b7:35:9e:4b:70:8f:14:82:89:1b:
1f:f5:b0:bc:ba:c6:95:45:64:d4:d3:98:ba:15:2d:
14:23:31:e9:c9:83:11:06:cd:7f:59:cc:02:f0:b1:
49:25:e2:c7:a2:8f:9f:d9:c8:6d:2d:1a:d0:e5:fb:
26:d2:8d:7c:b6:15:43:e3:d8:e7:09:8f:ff:6d:60:
ec:9f:49:c8:04:f8:c3:1d:b2:79:28:c6:90:33:36:
00:a2:56:c9:8a:2e:85:6f:cd:38:f7:5f:20:d1:24:
8b:5a:1a:6c:5e:35:e5:e5:a2:a4:64:d1:68:2a:34:
b0:eb:3f:b0:22:b3:85:73:bf:b3:c6:81:9a:22:84:
48:26:59:13:ca:6c:e1:28:4f:50:d3:af:7e:2a:eb:
90:a6:ed:fb:f6:6e:2b:ae:e8:6b:53:2a:90:a4:0a:
a2:64:b9:cb:95:47:bc:bb:0e:97:de:ae:75:f4:63:
9a:cf:18:35:0b:a9:9c:bd:c2:fd:08:99:ef:ef:5d:
0f:56:13:e8:5e:9b:9b:95:cc:f7:96:d5:22:6b:ca:
12:02:ad:70:d1:9c:71:7d:d2:e2:dc:88:91:e5:e3:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:A5:AA:1A:01:D3:0A:42:79:00:91:25:AD:FA:C0:E0:0D:38:0E
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/8HmlqhoB0wpCeQCRJa36wOANOA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c0:76:01:75:bf:c5:83:f5:06:7f:70:4d:e9:6f:27:9a:ca:
83:ee:ef:7c:12:36:af:be:18:8e:9a:69:53:f3:f4:b9:c6:fb:
14:d0:45:72:5c:84:c7:07:35:82:0c:19:87:d3:92:94:a7:ff:
8b:2d:6c:cc:a9:ac:df:bd:29:fa:d6:e0:ba:72:4f:87:ff:98:
a6:ed:78:03:b0:62:ff:24:bd:6d:47:3a:29:14:2f:53:a3:41:
1d:2d:78:87:14:ba:d6:b2:b1:d0:4f:68:f9:32:ca:8e:e5:f7:
df:89:d4:8e:83:62:3c:d1:f9:1d:e8:89:8f:71:ee:8e:4a:b6:
38:55:93:24:0a:8f:d9:a2:f4:ac:16:c8:fe:e5:32:7c:4f:13:
75:7f:15:d4:c6:ec:9a:30:c7:92:14:72:cb:08:2c:91:93:6d:
4c:6c:69:89:ba:92:34:6c:6d:4a:1f:3c:6c:c4:45:a2:92:8f:
6a:7e:51:c6:76:b4:96:a9:e4:a2:65:de:f0:c7:98:2d:2f:07:
c6:5e:0a:46:4c:fb:92:2b:7d:22:1c:de:92:69:e2:6c:23:31:
33:38:e7:cf:70:c8:2c:45:6c:6b:0f:45:16:8b:e3:a0:42:f4:
72:72:52:bf:5b:b0:22:e3:3d:91:4c:e2:93:d6:e2:4d:2a:ce:
99:ab:2b:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjKWykx84r9J2HrDniAqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjMwMTAyMDMzNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDc5YTVhYTFhMDFkMzBhNDI3OTAwOTEyNWFkZmFjMGUwMGQzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikh9ss8CjYwN42tI1t00YPRkAvQ5
epiuLPrUAI4p5PATCrc1nktwjxSCiRsf9bC8usaVRWTU05i6FS0UIzHpyYMRBs1/
WcwC8LFJJeLHoo+f2chtLRrQ5fsm0o18thVD49jnCY//bWDsn0nIBPjDHbJ5KMaQ
MzYAolbJii6Fb804918g0SSLWhpsXjXl5aKkZNFoKjSw6z+wIrOFc7+zxoGaIoRI
JlkTymzhKE9Q069+KuuQpu379m4rruhrUyqQpAqiZLnLlUe8uw6X3q519GOazxg1
C6mcvcL9CJnv710PVhPoXpublcz3ltUia8oSAq1w0ZxxfdLi3IiR5eP0iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPB5paoaAdMKQnkAkSWt+sDgDTgOMB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEvOEhtbHFob0Iwd3BDZVFDUkphMzZ3T0FOT0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnwpMA0G
CSqGSIb3DQEBCwUAA4IBAQBSwHYBdb/Fg/UGf3BN6W8nmsqD7u98EjavvhiOmmlT
8/S5xvsU0EVyXITHBzWCDBmH05KUp/+LLWzMqazfvSn61uC6ck+H/5im7XgDsGL/
JL1tRzopFC9To0EdLXiHFLrWsrHQT2j5MsqO5fffidSOg2I80fkd6ImPce6OSrY4
VZMkCo/ZovSsFsj+5TJ8TxN1fxXUxuyaMMeSFHLLCCyRk21MbGmJupI0bG1KHzxs
xEWiko9qflHGdrSWqeSiZd7wx5gtLwfGXgpGTPuSK30iHN6SaeJsIzEzOOfPcMgs
RWxrD0UWi+OgQvRyclK/W7Ai4z2RTOKT1uJNKs6ZqyuV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org