Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/P1F8q64UgNmTHwvwwP_6_6BOxns.roa
File: P1F8q64UgNmTHwvwwP_6_6BOxns.roa (raw, json)
Hash identifier: S0MQiKFNoV7imI0Vq8tuckkTViAYRtXQe7I2GqYl+iU=
Subject key identifier: 3F:51:7C:AB:AE:14:80:D9:93:1F:0B:F0:C0:FF:FA:FF:A0:4E:C6:7B
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA8BB75B92B54C9D4B33A03F9296D
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/P1F8q64UgNmTHwvwwP_6_6BOxns.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 178.20.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a8:bb:75:b9:2b:54:c9:d4:b3:3a:03:f9:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f517cabae1480d9931f0bf0c0fffaffa04ec67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:3a:3d:1b:25:13:0f:31:29:39:7d:0d:83:
f8:37:69:d6:13:4c:3a:72:63:cd:8b:67:c3:fa:bb:
72:22:dd:42:08:6c:d4:c0:f0:6a:f8:e5:17:d0:44:
12:9b:1b:40:a9:92:17:54:04:69:9f:45:21:8e:cf:
a5:89:0f:0c:93:69:35:0a:fb:e2:6e:dc:aa:35:c6:
4a:00:c0:38:e4:ba:48:18:cd:ca:9d:ee:d7:fd:18:
96:76:54:b2:6b:eb:be:4a:74:38:bc:1f:6f:b0:16:
f8:1a:66:e9:c8:96:8b:1b:98:eb:e4:67:c5:74:42:
4b:df:a3:61:f3:95:ae:bf:d4:f0:d7:11:a7:be:72:
bf:5c:72:e9:9d:3d:02:ae:c5:e5:3c:c4:ab:fa:f6:
54:b7:3d:bb:24:72:cf:94:b7:1e:b3:54:b0:d4:b0:
5a:0e:d0:13:65:c9:09:ab:e4:55:6c:1a:f4:84:01:
43:97:1f:c0:4f:ae:42:b7:68:9f:e3:6c:53:d0:89:
58:55:a3:a2:70:07:0d:06:8f:3f:e1:f2:11:68:98:
e8:e8:55:6b:b1:10:a0:4b:7d:a9:91:69:7a:e8:82:
eb:24:c5:bc:20:79:92:c0:42:31:8b:47:c7:d0:14:
7a:ea:28:df:10:50:28:0e:1e:2b:b5:32:f1:7e:da:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:7C:AB:AE:14:80:D9:93:1F:0B:F0:C0:FF:FA:FF:A0:4E:C6:7B
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/P1F8q64UgNmTHwvwwP_6_6BOxns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:1b:cc:93:1b:c3:8f:8c:4b:e0:fa:94:01:ac:3c:75:b6:5b:
17:af:6a:ea:f5:b5:1a:92:15:8c:e6:8c:af:32:44:be:fa:56:
12:d6:19:f1:0c:2b:b6:42:6e:cf:e5:b4:bb:83:15:24:52:c6:
a6:26:fb:2c:68:3a:14:b3:b0:70:6e:32:2a:1a:83:39:9b:77:
d7:b4:51:ac:09:f4:59:6c:02:55:ef:6e:dc:ec:bb:93:2e:ef:
27:73:82:9e:67:10:ae:8f:11:85:7f:c3:d9:81:aa:85:b0:d5:
a3:00:01:e9:2c:21:38:c9:26:e1:e7:e1:3d:1a:be:0a:4f:78:
c2:3d:37:32:ef:ff:87:1e:fb:fb:86:20:bd:ae:6b:b8:19:da:
94:6f:7b:95:99:8a:4b:e3:58:b4:62:1e:cc:71:f4:f2:90:54:
9d:64:86:52:d4:2e:13:50:f3:a6:f1:86:29:4d:c7:cd:e1:e6:
38:3c:e7:8c:cd:ce:62:98:d9:0a:ae:41:a2:10:e7:97:31:51:
5f:ef:09:fc:ce:27:1e:e1:e4:f0:4e:b6:0b:83:b5:e2:90:fa:
fc:20:26:22:fa:46:64:93:b2:59:3d:e6:25:86:4c:0e:06:74:
5a:2e:49:4f:e2:3a:ce:36:90:fe:91:78:96:ed:07:b5:29:28:
e3:28:54:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjKi7dbkrVMnUszoD+SltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjMwMTAyMDMzNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjUxN2NhYmFlMTQ4MGQ5OTMxZjBiZjBjMGZmZmFmZmEwNGVjNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DY6PRslEw8xKTl9DYP4N2nWE0w6
cmPNi2fD+rtyIt1CCGzUwPBq+OUX0EQSmxtAqZIXVARpn0Uhjs+liQ8Mk2k1Cvvi
btyqNcZKAMA45LpIGM3Kne7X/RiWdlSya+u+SnQ4vB9vsBb4GmbpyJaLG5jr5GfF
dEJL36Nh85Wuv9Tw1xGnvnK/XHLpnT0CrsXlPMSr+vZUtz27JHLPlLces1Sw1LBa
DtATZckJq+RVbBr0hAFDlx/AT65Ct2if42xT0IlYVaOicAcNBo8/4fIRaJjo6FVr
sRCgS32pkWl66ILrJMW8IHmSwEIxi0fH0BR66ijfEFAoDh4rtTLxftpAowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9RfKuuFIDZkx8L8MD/+v+gTsZ7MB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEvUDFGOHE2NFVnTm1USHd2d3dQXzZfNkJPeG5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCshQcMA0G
CSqGSIb3DQEBCwUAA4IBAQBOG8yTG8OPjEvg+pQBrDx1tlsXr2rq9bUakhWM5oyv
MkS++lYS1hnxDCu2Qm7P5bS7gxUkUsamJvssaDoUs7BwbjIqGoM5m3fXtFGsCfRZ
bAJV727c7LuTLu8nc4KeZxCujxGFf8PZgaqFsNWjAAHpLCE4ySbh5+E9Gr4KT3jC
PTcy7/+HHvv7hiC9rmu4GdqUb3uVmYpL41i0Yh7McfTykFSdZIZS1C4TUPOm8YYp
TcfN4eY4POeMzc5imNkKrkGiEOeXMVFf7wn8zice4eTwTrYLg7XikPr8ICYi+kZk
k7JZPeYlhkwOBnRaLklP4jrONpD+kXiW7Qe1KSjjKFTC
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:13 2025 by rpki-client