Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa
File: IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa (raw, json)
Hash identifier: CoYJRSmXgfnZJI0PtK/GeeDb80den9bBD/REVtxRvjU=
Subject key identifier: 22:F1:7D:8E:98:72:E5:6B:FF:64:D7:21:5B:26:20:17:92:3A:81:04
Certificate issuer: /CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Certificate serial: 0130D380
Authority key identifier: 19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa
Signing time: Sat 01 Jan 2022 11:03:18 +0000
ROA not before: Sat 01 Jan 2022 11:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.149.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19977088 (0x130d380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Validity
Not Before: Jan 1 11:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22f17d8e9872e56bff64d7215b262017923a8104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:ec:73:a2:19:6d:fc:e6:c7:32:ba:14:1b:
e4:a4:9d:bd:e6:f8:b7:ec:9c:9d:89:ce:17:f5:b1:
1f:b0:e0:b6:f7:d6:0a:92:82:77:e9:ae:92:ad:4e:
3a:03:57:1b:b2:52:3d:38:34:fc:ed:2f:82:6d:5d:
4e:2a:16:ca:1e:ae:8f:48:ff:83:05:c6:db:23:f6:
8d:1a:67:97:51:d7:d4:f6:c6:f6:f1:94:7e:09:67:
10:6b:1c:c4:a6:d2:62:cb:46:aa:7e:90:75:f6:3f:
b7:3c:fa:00:8f:02:c1:32:df:7b:2b:a6:f3:7f:10:
33:10:92:d0:89:15:42:1c:c7:85:c9:e7:f4:dd:c9:
f9:d1:39:22:92:46:23:c2:32:65:55:9e:5a:6c:f2:
41:5d:42:63:41:ca:bb:18:9f:3c:71:34:40:6d:d6:
50:0a:4e:cc:1d:3a:09:60:3a:4f:89:48:b5:49:16:
1a:f4:02:d6:f8:a3:f8:bd:4a:66:f1:ef:9e:c0:ca:
bc:87:de:72:d0:48:96:50:31:38:41:8b:ef:17:60:
a7:b3:5d:c3:3d:ae:d2:6f:1d:53:70:8c:d2:cb:04:
bb:1b:94:86:eb:86:9c:86:18:1b:0e:8d:bd:5b:25:
b4:d9:2e:0b:b5:48:e7:80:cd:ee:e5:fb:68:19:cc:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:7D:8E:98:72:E5:6B:FF:64:D7:21:5B:26:20:17:92:3A:81:04
X509v3 Authority Key Identifier:
keyid:19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.151.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:70:54:33:3f:2c:88:2d:7a:4a:b3:42:43:1a:db:09:d3:
f2:8f:8f:05:88:04:6e:03:39:60:c7:93:c6:d2:40:1b:8e:91:
89:ce:6d:43:37:78:de:a8:5e:12:0a:29:01:85:ee:08:e7:51:
2e:29:c7:eb:47:38:43:24:4f:b8:ea:e5:fc:68:99:43:60:a6:
dd:32:f4:22:f6:b6:87:df:d4:18:f3:69:68:69:24:15:33:c0:
6c:8e:b4:d7:3d:c4:d1:07:33:76:e6:de:f7:00:a0:c4:c4:de:
15:f1:d4:79:03:d4:05:11:28:53:1a:d9:d9:0b:0a:a8:52:dd:
20:55:b2:c3:91:63:02:71:64:a1:01:3a:04:71:0e:73:cb:66:
dc:82:44:89:26:15:17:af:a7:49:f2:48:f6:5f:44:a7:50:cd:
7b:e2:16:09:4f:b8:36:b4:6e:71:ae:46:49:45:2e:39:1f:df:
82:6c:e2:f5:01:98:54:71:16:a8:4c:d2:22:c0:cc:57:ba:5b:
09:22:b6:3c:34:fb:69:9a:46:39:b1:c3:1f:fe:fc:f0:a2:94:
53:64:70:ce:fc:59:a3:d0:73:09:a6:77:da:86:b3:f7:cd:1f:
c9:81:4b:1d:c3:33:1b:23:de:2e:c5:5f:ea:53:f5:97:8f:c5:
eb:3e:3a:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATDTgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTY1MDlhODgxZTU5ZmZhZmFhMzFjZjQ4YmY1ZTI3NjFiYjgyMmVkMB4XDTIyMDEw
MTExMDMxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJmMTdkOGU5ODcy
ZTU2YmZmNjRkNzIxNWIyNjIwMTc5MjNhODEwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIWO7HOiGW385scyuhQb5KSdveb4t+ycnYnOF/WxH7DgtvfW
CpKCd+mukq1OOgNXG7JSPTg0/O0vgm1dTioWyh6uj0j/gwXG2yP2jRpnl1HX1PbG
9vGUfglnEGscxKbSYstGqn6QdfY/tzz6AI8CwTLfeyum838QMxCS0IkVQhzHhcnn
9N3J+dE5IpJGI8IyZVWeWmzyQV1CY0HKuxifPHE0QG3WUApOzB06CWA6T4lItUkW
GvQC1vij+L1KZvHvnsDKvIfectBIllAxOEGL7xdgp7Ndwz2u0m8dU3CM0ssEuxuU
huuGnIYYGw6NvVsltNkuC7VI54DN7uX7aBnMplcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQi8X2OmHLla/9k1yFbJiAXkjqBBDAfBgNVHSMEGDAWgBQZZQmogeWf+vqj
HPSL9eJ2G7gi7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dXVUpxSUhsbl9yNm94ejBpX1hpZGh1NEl1MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOTQ0YTg3LWE2MDctNDU1Mi05NTM3LTc4OGI0NDNiOTM5Zi8x
L0l2RjlqcGh5NVd2X1pOY2hXeVlnRjVJNmdRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OTQ0YTg3LWE2MDctNDU1Mi05NTM3LTc4OGI0NDNiOTM5Zi8xL0dXVUpxSUhsbl9y
Nm94ejBpX1hpZGh1NEl1MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmVlzANBgkqhkiG9w0BAQsFAAOC
AQEABYpwVDM/LIgtekqzQkMa2wnT8o+PBYgEbgM5YMeTxtJAG46Ric5tQzd43qhe
EgopAYXuCOdRLinH60c4QyRPuOrl/GiZQ2Cm3TL0Iva2h9/UGPNpaGkkFTPAbI60
1z3E0Qczdube9wCgxMTeFfHUeQPUBREoUxrZ2QsKqFLdIFWyw5FjAnFkoQE6BHEO
c8tm3IJEiSYVF6+nSfJI9l9Ep1DNe+IWCU+4NrRuca5GSUUuOR/fgmzi9QGYVHEW
qEzSIsDMV7pbCSK2PDT7aZpGObHDH/788KKUU2RwzvxZo9BzCaZ32oaz980fyYFL
HcMzGyPeLsVf6lP1l4/F6z462w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:58 2023 by rpki-client on console-fra.rpki-client.org