Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/vc27gNW82_ES9c8eCXwPHTbWZd4.roa
File: vc27gNW82_ES9c8eCXwPHTbWZd4.roa (raw, json)
Hash identifier: 1X242MkmPhwHRZ3uy3YLib7p2YaoLt8AVKubr4zuBWs=
Subject key identifier: BD:CD:BB:80:D5:BC:DB:F1:12:F5:CF:1E:09:7C:0F:1D:36:D6:65:DE
Certificate issuer: /CN=b89fd0738d945f209334a2ed626cd9a2d7feea5b
Certificate serial: 019375
Authority key identifier: B8:9F:D0:73:8D:94:5F:20:93:34:A2:ED:62:6C:D9:A2:D7:FE:EA:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJ_Qc42UXyCTNKLtYmzZotf-6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/vc27gNW82_ES9c8eCXwPHTbWZd4.roa
Signing time: Tue 05 Apr 2022 15:54:40 +0000
ROA not before: Tue 05 Apr 2022 15:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.131.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103285 (0x19375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b89fd0738d945f209334a2ed626cd9a2d7feea5b
Validity
Not Before: Apr 5 15:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdcdbb80d5bcdbf112f5cf1e097c0f1d36d665de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:63:46:90:41:ae:a4:be:e5:b5:c0:e2:50:
a3:2b:33:6a:bf:7c:51:8b:8b:0d:3b:15:5a:b2:ec:
64:d7:d4:ca:79:eb:a6:94:dc:9f:75:48:bb:c8:37:
11:92:f4:54:4c:55:fc:3b:05:3e:8a:d2:50:a7:0a:
69:e6:4d:8f:cd:03:0c:9b:b9:6d:4d:29:b3:36:79:
0a:2b:01:7b:63:09:0a:77:85:7c:2d:0f:71:58:3f:
d6:25:d5:2a:8c:ca:61:d7:1d:48:fc:79:84:cc:ea:
53:7b:0d:79:4d:6b:53:90:81:49:78:4e:2f:69:75:
f4:0c:61:79:b5:6a:30:7a:2f:d1:1f:ef:1b:81:92:
2f:23:1d:ed:52:a7:ce:f9:7a:74:69:d5:84:27:0a:
9c:44:97:31:fd:63:93:5d:b0:ba:6a:05:c3:c5:7f:
36:d2:9c:78:d9:b5:3e:31:16:ce:bc:13:af:5e:da:
27:f6:41:00:44:23:83:45:86:8d:89:a1:a7:9d:52:
31:e4:1b:90:38:f3:69:3c:89:ae:52:90:08:06:99:
de:63:f3:b4:54:f2:49:7a:09:e7:78:15:c7:e1:3e:
77:7b:8a:4a:5b:cb:bf:b1:36:c9:92:62:cd:71:2a:
60:88:e0:e4:d2:eb:2e:f1:e2:98:be:3f:d6:4e:82:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:BB:80:D5:BC:DB:F1:12:F5:CF:1E:09:7C:0F:1D:36:D6:65:DE
X509v3 Authority Key Identifier:
keyid:B8:9F:D0:73:8D:94:5F:20:93:34:A2:ED:62:6C:D9:A2:D7:FE:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJ_Qc42UXyCTNKLtYmzZotf-6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/vc27gNW82_ES9c8eCXwPHTbWZd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/uJ_Qc42UXyCTNKLtYmzZotf-6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.131.114.0/23
Signature Algorithm: sha256WithRSAEncryption
81:a4:c6:1f:b2:b8:81:ca:49:01:fd:cc:4b:06:b9:8a:ed:2e:
59:e9:87:9f:ad:e7:c7:2d:b3:42:00:0e:18:61:c6:63:19:a7:
49:99:b4:96:67:01:34:99:7c:25:02:9e:1f:92:b6:4a:b7:3b:
57:b4:8e:5f:ce:95:a4:a8:81:7a:29:4c:25:51:93:b8:f8:b9:
42:0d:87:34:ae:c0:4d:8c:6e:02:84:37:2c:8a:85:d4:2c:69:
30:68:e8:c2:d3:ee:6e:a0:34:6f:b3:3f:c9:72:85:54:db:e8:
8e:14:94:28:10:41:32:87:4a:ae:de:0d:bd:34:6c:18:6a:d6:
77:b5:93:9e:2c:30:1e:8b:6e:18:18:d3:2c:ac:f2:e7:aa:22:
bc:cf:fe:80:b8:e7:c3:46:3c:9b:5c:6f:51:a6:a4:fb:a2:80:
c6:7c:56:00:e0:95:de:bb:99:34:85:31:d1:67:f5:a5:69:95:
b9:01:6a:a0:ce:aa:54:b9:3a:82:3c:67:63:8e:a3:79:80:2f:
38:31:58:74:f6:8c:c2:72:8e:dd:b8:dd:2f:23:ad:19:68:1a:
f9:ab:e9:6e:93:88:70:dd:d1:8d:c7:d9:00:97:36:1b:a2:d5:
4b:5b:4c:6f:9f:0f:4d:91:69:96:e5:d3:e4:72:c9:c8:61:d8:
fd:86:33:35
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAZN1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
OWZkMDczOGQ5NDVmMjA5MzM0YTJlZDYyNmNkOWEyZDdmZWVhNWIwHhcNMjIwNDA1
MTU1NDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZGNkYmI4MGQ1YmNk
YmYxMTJmNWNmMWUwOTdjMGYxZDM2ZDY2NWRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5YxjRpBBrqS+5bXA4lCjKzNqv3xRi4sNOxVasuxk19TKeeum
lNyfdUi7yDcRkvRUTFX8OwU+itJQpwpp5k2PzQMMm7ltTSmzNnkKKwF7YwkKd4V8
LQ9xWD/WJdUqjMph1x1I/HmEzOpTew15TWtTkIFJeE4vaXX0DGF5tWowei/RH+8b
gZIvIx3tUqfO+Xp0adWEJwqcRJcx/WOTXbC6agXDxX820px42bU+MRbOvBOvXton
9kEARCODRYaNiaGnnVIx5BuQOPNpPImuUpAIBpneY/O0VPJJegnneBXH4T53e4pK
W8u/sTbJkmLNcSpgiODk0usu8eKYvj/WToLxbwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFL3Nu4DVvNvxEvXPHgl8Dx021mXeMB8GA1UdIwQYMBaAFLif0HONlF8gkzSi
7WJs2aLX/upbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dUpfUWM0MlVYeUNUTktMdFltelpvdGYtNmxzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mOS9jN2M2MTgtMWEzNC00NDk2LTk5OTAtZWViMTk4MTUzM2ZkLzEv
dmMyN2dOVzgyX0VTOWM4ZUNYd1BIVGJXWmQ0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9j
N2M2MTgtMWEzNC00NDk2LTk5OTAtZWViMTk4MTUzM2ZkLzEvdUpfUWM0MlVYeUNU
TktMdFltelpvdGYtNmxzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwYNyMA0GCSqGSIb3DQEBCwUAA4IB
AQCBpMYfsriBykkB/cxLBrmK7S5Z6YefrefHLbNCAA4YYcZjGadJmbSWZwE0mXwl
Ap4fkrZKtztXtI5fzpWkqIF6KUwlUZO4+LlCDYc0rsBNjG4ChDcsioXULGkwaOjC
0+5uoDRvsz/JcoVU2+iOFJQoEEEyh0qu3g29NGwYatZ3tZOeLDAei24YGNMsrPLn
qiK8z/6AuOfDRjybXG9RpqT7ooDGfFYA4JXeu5k0hTHRZ/WlaZW5AWqgzqpUuTqC
PGdjjqN5gC84MVh09ozCco7duN0vI60ZaBr5q+luk4hw3dGNx9kAlzYbotVLW0xv
nw9NkWmW5dPkcsnIYdj9hjM1
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:40 2025 by rpki-client