Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/CuguyO_pXlolZ1mrciXBE1z5z0U.roa
File: CuguyO_pXlolZ1mrciXBE1z5z0U.roa (raw, json)
Hash identifier: aYS4uhYc36v1eyjBVDy8HY+zLgIwC8SKPYEVrjLLVZo=
Subject key identifier: 0A:E8:2E:C8:EF:E9:5E:5A:25:67:59:AB:72:25:C1:13:5C:F9:CF:45
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0A39E1B8
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/CuguyO_pXlolZ1mrciXBE1z5z0U.roa
Signing time: Thu 19 May 2022 19:43:29 +0000
ROA not before: Thu 19 May 2022 19:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.124.41.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171565496 (0xa39e1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: May 19 19:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae82ec8efe95e5a256759ab7225c1135cf9cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:8b:b7:51:28:87:c3:05:43:31:2f:a8:bd:
51:dd:b8:3c:54:81:db:0d:b6:0f:13:f5:10:05:4d:
6c:01:d6:29:d5:10:b3:de:b5:a5:50:aa:66:ef:ba:
38:14:bb:51:51:bf:08:bc:57:99:c4:d4:02:5b:ad:
16:57:91:89:78:f4:bb:5f:7c:e9:f3:86:a4:c7:59:
17:0d:1a:b8:94:1f:8f:3e:4d:6a:31:5d:c5:c7:e4:
c1:c7:ca:02:4b:8b:9d:65:4e:13:7c:bc:cb:cd:3c:
7e:4a:f2:e9:5e:1a:ba:8c:2c:d2:18:80:a7:95:c0:
30:59:bd:c6:38:ea:9e:c9:7b:d2:11:93:64:4e:92:
9d:a7:a5:02:94:42:5c:35:49:9a:ce:bd:8d:07:0c:
53:7e:aa:bd:f3:b0:0a:64:d1:ca:fe:a5:ca:7b:9e:
23:4c:df:29:66:3d:84:31:da:71:19:b5:a9:c5:d0:
d3:07:f0:bb:ab:cb:a1:fd:bd:d6:ac:2a:8d:c8:bc:
f5:14:96:7d:6a:72:69:72:95:90:a7:c9:14:e8:e0:
4d:2b:1b:b4:84:94:6c:99:29:2d:76:55:29:93:d1:
1b:1f:e6:ec:93:06:db:63:ca:81:5b:9b:a0:b3:31:
71:31:f4:0b:b5:48:dd:23:f0:34:95:8e:e1:6f:50:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:2E:C8:EF:E9:5E:5A:25:67:59:AB:72:25:C1:13:5C:F9:CF:45
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/CuguyO_pXlolZ1mrciXBE1z5z0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.239.0/24
95.214.92.0/24
95.214.95.0/24
194.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f4:46:71:53:6f:ac:fe:6b:0e:6c:c7:36:12:b4:c7:42:1f:
1f:8f:f2:6b:4c:f5:d8:48:a4:e2:14:31:c4:93:34:51:d9:55:
28:5e:29:5c:c7:70:e2:44:42:1f:5c:d4:2f:30:ec:4f:c3:f5:
e4:7f:d1:5c:20:ae:6f:46:50:ee:bd:64:9e:01:b5:de:f0:16:
70:30:41:44:14:a8:ae:4f:79:2c:64:b3:be:1e:17:09:13:4e:
c3:bc:e2:89:21:88:ab:4a:0c:49:26:b7:1c:2f:26:1d:22:ea:
b4:bc:c6:42:90:61:6d:41:29:85:f5:5d:2c:f2:45:5b:21:3f:
7a:ed:14:e1:46:6c:e9:c0:94:36:06:ac:ea:b8:09:e7:ea:7d:
a6:99:ad:a3:78:51:a4:ee:f7:f6:ff:ca:46:56:df:d8:e8:f8:
f3:ff:83:94:a3:66:bb:a3:02:ea:f6:26:7f:e4:99:29:bb:06:
84:52:2e:b6:b2:cd:39:26:30:52:98:22:49:ed:a1:f6:5d:44:
d0:6e:b8:49:ce:8d:a6:ed:0c:17:82:88:3d:be:24:95:e5:0c:
92:ee:b1:9c:07:e1:b8:ae:8e:3a:14:44:6e:97:12:40:51:00:
01:a5:c1:28:53:33:6a:9d:86:56:74:22:18:f9:fe:4c:d5:8f:
59:9e:86:49
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECjnhuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjY2OTdjOWVmZGE5NTVjYmEzZTZmODk3MGQ3MmU5OTZiZjNjMTY1MB4XDTIyMDUx
OTE5NDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGFlODJlYzhlZmU5
NWU1YTI1Njc1OWFiNzIyNWMxMTM1Y2Y5Y2Y0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJyi7dRKIfDBUMxL6i9Ud24PFSB2w22DxP1EAVNbAHWKdUQ
s961pVCqZu+6OBS7UVG/CLxXmcTUAlutFleRiXj0u1986fOGpMdZFw0auJQfjz5N
ajFdxcfkwcfKAkuLnWVOE3y8y808fkry6V4auows0hiAp5XAMFm9xjjqnsl70hGT
ZE6SnaelApRCXDVJms69jQcMU36qvfOwCmTRyv6lynueI0zfKWY9hDHacRm1qcXQ
0wfwu6vLof291qwqjci89RSWfWpyaXKVkKfJFOjgTSsbtISUbJkpLXZVKZPRGx/m
7JMG22PKgVuboLMxcTH0C7VI3SPwNJWO4W9QpMUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQK6C7I7+leWiVnWatyJcETXPnPRTAfBgNVHSMEGDAWgBSSZpfJ79qVXLo+
b4lw1y6Za/PBZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ttYVh5ZV9hbFZ5NlBtLUpjTmN1bVd2endXVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvMGM0ZmJkLWUwN2YtNGY1OS1iOGY0LTJhNDcxM2VlYmZmMy8x
L0N1Z3V5T19wWGxvbFoxbXJjaVhCRTF6NXowVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
MGM0ZmJkLWUwN2YtNGY1OS1iOGY0LTJhNDcxM2VlYmZmMy8xL2ttYVh5ZV9hbFZ5
NlBtLUpjTmN1bVd2endXVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFv17wMEAF/WXAMEAF/WXwMEAMJ8
KTANBgkqhkiG9w0BAQsFAAOCAQEAIPRGcVNvrP5rDmzHNhK0x0IfH4/ya0z12Eik
4hQxxJM0UdlVKF4pXMdw4kRCH1zULzDsT8P15H/RXCCub0ZQ7r1kngG13vAWcDBB
RBSork95LGSzvh4XCRNOw7ziiSGIq0oMSSa3HC8mHSLqtLzGQpBhbUEphfVdLPJF
WyE/eu0U4UZs6cCUNgas6rgJ5+p9ppmto3hRpO739v/KRlbf2Oj48/+DlKNmu6MC
6vYmf+SZKbsGhFIutrLNOSYwUpgiSe2h9l1E0G64Sc6Npu0MF4KIPb4kleUMku6x
nAfhuK6OOhREbpcSQFEAAaXBKFMzap2GVnQiGPn+TNWPWZ6GSQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org