Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/sxWSgx_daej-s0uH76mOTfYPyXU.roa
File: sxWSgx_daej-s0uH76mOTfYPyXU.roa (raw, json)
Hash identifier: rHL109rpo3eLf2tkYDct3LwRle/I8+p4ZxKkVyHVR1s=
Subject key identifier: B3:15:92:83:1F:DD:69:E8:FE:B3:4B:87:EF:A9:8E:4D:F6:0F:C9:75
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: 01BB7602
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/sxWSgx_daej-s0uH76mOTfYPyXU.roa
Signing time: Mon 13 Jun 2022 05:49:06 +0000
ROA not before: Mon 13 Jun 2022 05:49:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205960
IP address blocks: 193.239.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29062658 (0x1bb7602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Jun 13 05:49:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31592831fdd69e8feb34b87efa98e4df60fc975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:7c:86:6d:4b:c3:e5:9d:12:25:7b:25:14:
04:58:aa:56:ef:15:4f:bf:7c:3a:de:79:71:10:cc:
80:4b:fa:21:cf:d4:f2:29:cc:7a:25:2b:98:04:f6:
05:74:22:7f:92:ad:1e:37:fc:4d:a7:f5:ea:72:b0:
43:f4:1a:fe:32:ba:8c:e4:eb:e9:c5:70:9b:eb:d3:
d3:75:c0:6e:d2:f5:49:76:ca:f6:e0:63:d0:3b:bf:
0f:83:30:61:05:7a:aa:6b:79:ac:cc:2d:91:03:e5:
22:05:f1:59:ba:7b:bd:bb:7a:34:1a:0e:56:64:02:
9a:df:2f:78:12:08:89:18:92:af:50:a3:c3:b7:b9:
81:cf:d9:b1:a9:5b:61:70:4f:34:54:a4:ea:66:57:
5a:9a:86:85:ec:3a:62:f4:3d:b5:d5:92:ea:e2:8f:
96:1a:1a:52:94:51:a4:01:40:9e:ad:b3:06:8c:76:
eb:18:a7:2f:a7:32:25:ca:58:3c:31:b9:82:e9:23:
b9:48:c9:78:32:a7:53:99:f0:5f:d4:c5:d1:e7:cf:
f8:71:0b:4f:56:a5:92:25:c7:88:ee:ef:59:ab:ea:
3c:d0:5d:ca:4d:c5:14:41:8b:96:e5:42:a8:6e:73:
a1:3e:7d:2b:af:b5:55:2e:90:84:da:e3:15:b1:74:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:92:83:1F:DD:69:E8:FE:B3:4B:87:EF:A9:8E:4D:F6:0F:C9:75
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/sxWSgx_daej-s0uH76mOTfYPyXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.151.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:15:6c:71:75:c1:23:2b:51:a6:40:52:22:a4:08:cc:db:af:
1c:cf:8c:01:7e:03:f0:1a:7a:9f:c9:17:e3:fa:6c:4d:da:63:
d7:cf:d7:41:9d:2a:57:06:7c:68:cb:e6:7c:53:99:a8:68:75:
6e:89:38:d8:52:ea:a4:25:a0:eb:41:8a:86:b4:b9:3e:51:3e:
e1:d8:b0:7b:db:5a:61:5a:89:08:29:97:e7:6b:eb:a6:ff:ec:
1b:39:73:f6:5c:58:bf:f6:95:54:3a:8f:b6:19:00:eb:1c:dd:
6e:81:5e:d6:79:df:f9:09:5c:c7:49:92:74:99:4a:1a:be:d7:
1a:cc:df:76:04:97:41:ac:32:52:6b:67:2f:a6:30:61:13:46:
a1:78:60:f4:36:bd:be:21:7c:60:6c:df:0e:6f:5c:37:12:85:
c5:3d:d2:3d:8c:5c:a8:73:4f:fb:93:c2:63:85:cd:ee:24:ae:
fb:78:ee:09:37:1f:45:71:1c:b1:81:ac:7d:f3:1e:f2:8a:c4:
04:48:44:03:d3:82:d4:55:28:a0:1a:fc:dd:17:28:f1:74:f2:
16:14:4d:21:89:39:17:4c:30:ec:e8:a9:af:1e:22:34:a2:9e:
9d:82:e8:c0:04:24:aa:47:9b:a1:5c:b7:b5:01:ff:08:24:f0:
69:5a:c8:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbt2AjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjFkMDQ4MDc1MDRkY2JlMWFiODBlZjg0ZDg2ZTUxNGM1N2U3ZThkMB4XDTIyMDYx
MzA1NDkwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMxNTkyODMxZmRk
NjllOGZlYjM0Yjg3ZWZhOThlNGRmNjBmYzk3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+UfIZtS8PlnRIleyUUBFiqVu8VT798Ot55cRDMgEv6Ic/U
8inMeiUrmAT2BXQif5KtHjf8Taf16nKwQ/Qa/jK6jOTr6cVwm+vT03XAbtL1SXbK
9uBj0Du/D4MwYQV6qmt5rMwtkQPlIgXxWbp7vbt6NBoOVmQCmt8veBIIiRiSr1Cj
w7e5gc/ZsalbYXBPNFSk6mZXWpqGhew6YvQ9tdWS6uKPlhoaUpRRpAFAnq2zBox2
6xinL6cyJcpYPDG5gukjuUjJeDKnU5nwX9TF0efP+HELT1alkiXHiO7vWavqPNBd
yk3FFEGLluVCqG5zoT59K6+1VS6QhNrjFbF0wbcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzFZKDH91p6P6zS4fvqY5N9g/JdTAfBgNVHSMEGDAWgBQfHQSAdQTcvhq4
DvhNhuUUxX5+jTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0h4MEVnSFVFM0w0YXVBNzRUWWJsRk1WLWZvMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvNDJhYzUyLWJhNjYtNDhhMi1hMDdhLWI2MzY5ODhlYWQ0ZC8x
L3N4V1NneF9kYWVqLXMwdUg3Nm1PVGZZUHlYVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
NDJhYzUyLWJhNjYtNDhhMi1hMDdhLWI2MzY5ODhlYWQ0ZC8xL0h4MEVnSFVFM0w0
YXVBNzRUWWJsRk1WLWZvMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHvlzANBgkqhkiG9w0BAQsFAAOC
AQEAqhVscXXBIytRpkBSIqQIzNuvHM+MAX4D8Bp6n8kX4/psTdpj18/XQZ0qVwZ8
aMvmfFOZqGh1bok42FLqpCWg60GKhrS5PlE+4diwe9taYVqJCCmX52vrpv/sGzlz
9lxYv/aVVDqPthkA6xzdboFe1nnf+Qlcx0mSdJlKGr7XGszfdgSXQawyUmtnL6Yw
YRNGoXhg9Da9viF8YGzfDm9cNxKFxT3SPYxcqHNP+5PCY4XN7iSu+3juCTcfRXEc
sYGsffMe8orEBEhEA9OC1FUooBr83Rco8XTyFhRNIYk5F0ww7Oiprx4iNKKenYLo
wAQkqkeboVy3tQH/CCTwaVrI/g==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:30 2025 by rpki-client