Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/Ur_MyTN6Mn-eso9Idrx5sO8FX7U.roa
File: Ur_MyTN6Mn-eso9Idrx5sO8FX7U.roa (raw, json)
Hash identifier: 94HHDWH5Bl/d/OY4fBdfNb2YncryJMZ1FNqkYqdpuYc=
Subject key identifier: 52:BF:CC:C9:33:7A:32:7F:9E:B2:8F:48:76:BC:79:B0:EF:05:5F:B5
Certificate issuer: /CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Certificate serial: 01882086B582A33BABF8A1BB0AD795ECE76C
Authority key identifier: FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/Ur_MyTN6Mn-eso9Idrx5sO8FX7U.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.38.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b5:82:a3:3b:ab:f8:a1:bb:0a:d7:95:ec:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52bfccc9337a327f9eb28f4876bc79b0ef055fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:a8:36:a8:fc:ba:23:9c:b9:53:45:22:4d:
b1:54:1f:67:c3:01:68:46:ac:b1:68:d3:ec:d0:66:
6e:6d:36:93:d0:bd:35:0e:5a:0e:73:66:d5:2b:5e:
2f:60:2a:7d:e9:ba:e9:12:00:93:a2:aa:f3:cb:24:
eb:c7:3d:d3:9d:ff:11:e9:a6:a6:15:da:2a:e0:5d:
c9:3c:f6:21:6a:0d:4b:07:a2:84:3d:18:b1:d4:05:
0f:f9:52:84:94:2e:30:bf:90:f5:7c:6a:d3:af:57:
d2:2d:83:79:76:0d:0a:05:ac:4d:a5:92:1f:2b:91:
f8:4d:ae:b4:89:66:e8:6e:b8:85:9f:23:c9:c6:3e:
33:00:81:46:0c:a5:ad:8f:dc:1a:72:f7:75:3a:cf:
38:32:40:2a:08:40:4c:88:ad:5f:1a:19:d0:0e:2e:
61:ea:da:4c:40:ca:c2:4e:1b:48:98:82:4b:c6:da:
94:f4:c4:91:2f:73:8f:44:30:84:12:b3:f8:75:17:
a2:1c:c5:be:40:9a:27:e4:30:29:88:d5:0e:76:d9:
3c:f3:68:11:b3:00:90:d0:e7:c5:9f:7b:0e:b6:84:
87:be:5e:a8:0e:f7:55:a5:de:27:bb:2e:8c:2d:96:
e3:30:51:36:e6:b1:44:85:c1:cb:cf:37:1e:98:75:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:CC:C9:33:7A:32:7F:9E:B2:8F:48:76:BC:79:B0:EF:05:5F:B5
X509v3 Authority Key Identifier:
keyid:FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/Ur_MyTN6Mn-eso9Idrx5sO8FX7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
01:53:2d:a3:46:46:3d:eb:dd:ee:eb:f5:60:cc:d7:5e:b6:a9:
f2:00:f1:79:6b:54:6a:40:e8:f7:96:ac:a0:6e:91:57:ca:01:
96:27:ec:68:f8:42:c8:dd:e3:85:42:35:3e:69:ec:76:96:37:
4c:7f:78:10:7d:7f:67:c6:24:a4:14:ff:bb:18:3a:5b:29:1e:
5d:a5:f0:a4:1e:81:62:c2:04:f4:86:33:ce:78:bf:41:29:9d:
31:a5:04:1d:67:fd:32:93:6f:53:33:e8:12:18:49:6c:a3:91:
84:18:f8:12:95:aa:02:38:24:ac:b7:32:a5:25:c1:b3:cf:25:
34:52:d6:93:b3:43:29:d5:16:18:81:f6:f4:f6:ef:89:7b:6e:
67:34:da:aa:ef:b6:04:ef:37:7e:d2:7a:33:18:0e:3b:c6:7a:
96:89:60:f1:52:a1:d2:21:20:2b:1d:51:0e:33:70:2f:ba:37:
84:07:8d:39:50:03:8d:69:84:04:7b:46:dc:13:e4:e6:09:82:
1b:e7:44:78:30:5b:d4:be:2c:78:3e:30:ec:e2:ac:da:8b:47:
c5:f7:ea:23:53:ec:a2:09:8e:15:f0:22:b2:e7:aa:c4:dc:21:
33:cb:0f:62:d4:9a:97:5a:cd:3f:8c:01:8e:fb:c1:3c:c3:5a:
9f:76:3b:ae
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYgghrWCozur+KG7CteV7OdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOGRjN2FlNTVlODE2NGE3MWVhOGM1ZGIzYzI4ZmZjOTBl
ZGY5YzkwHhcNMjMwNTE1MTc0NzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmJmY2NjOTMzN2EzMjdmOWViMjhmNDg3NmJjNzliMGVmMDU1ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TuoNqj8uiOcuVNFIk2xVB9nwwFo
RqyxaNPs0GZubTaT0L01DloOc2bVK14vYCp96brpEgCToqrzyyTrxz3Tnf8R6aam
Fdoq4F3JPPYhag1LB6KEPRix1AUP+VKElC4wv5D1fGrTr1fSLYN5dg0KBaxNpZIf
K5H4Ta60iWbobriFnyPJxj4zAIFGDKWtj9wacvd1Os84MkAqCEBMiK1fGhnQDi5h
6tpMQMrCThtImIJLxtqU9MSRL3OPRDCEErP4dReiHMW+QJon5DApiNUOdtk882gR
swCQ0OfFn3sOtoSHvl6oDvdVpd4nuy6MLZbjMFE25rFEhcHLzzcemHVBfwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFK/zMkzejJ/nrKPSHa8ebDvBV+1MB8GA1UdIwQY
MBaAFPuNx65V6BZKceqMXbPCj/yQ7fnJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS00M0hybFhvRmtweDZveGRzOEtQX0pEdC1jay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvZjA4MTc3LWEzMDYtNDA1YS04Njlm
LTRmMGFiYzE2YTk2NC8xL1VyX015VE42TW4tZXNvOUlkcng1c084Rlg3VS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjkvZjA4MTc3LWEzMDYtNDA1YS04NjlmLTRmMGFiYzE2YTk2
NC8xLzEtNDNIcmxYb0ZrcHg2b3hkczhLUF9KRHQtY2suY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBJpow
DQYJKoZIhvcNAQELBQADggEBAAFTLaNGRj3r3e7r9WDM1162qfIA8XlrVGpA6PeW
rKBukVfKAZYn7Gj4Qsjd44VCNT5p7HaWN0x/eBB9f2fGJKQU/7sYOlspHl2l8KQe
gWLCBPSGM854v0EpnTGlBB1n/TKTb1Mz6BIYSWyjkYQY+BKVqgI4JKy3MqUlwbPP
JTRS1pOzQynVFhiB9vT274l7bmc02qrvtgTvN37SejMYDjvGepaJYPFSodIhICsd
UQ4zcC+6N4QHjTlQA41phAR7RtwT5OYJghvnRHgwW9S+LHg+MOzirNqLR8X36iNT
7KIJjhXwIrLnqsTcITPLD2LUmpdazT+MAY77wTzDWp92O64=
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:43:48 2023 by rpki-client on console-ams.rpki-client.org