Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa
File: 37d0XDszHvlulIUapVZFzqC1uW4.roa (raw, json)
Hash identifier: Jju4DgaEqE+Clorv022w5GZryO+nMMBT+8U/mP8oaTY=
Subject key identifier: DF:B7:74:5C:3B:33:1E:F9:6E:94:85:1A:A5:56:45:CE:A0:B5:B9:6E
Certificate issuer: /CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
Certificate serial: 12613061
Authority key identifier: F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa
Signing time: Sat 01 Jan 2022 13:05:18 +0000
ROA not before: Sat 01 Jan 2022 13:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3304
IP address blocks: 193.28.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308359265 (0x12613061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
Validity
Not Before: Jan 1 13:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfb7745c3b331ef96e94851aa55645cea0b5b96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:5c:8a:a3:c4:3a:70:73:92:c9:27:40:3c:
e4:48:8f:2d:cd:b6:ea:b9:d5:f2:0e:74:3b:b9:ee:
f4:e8:26:5b:66:22:4d:5c:74:85:d5:58:12:fe:a8:
58:31:d7:9c:93:7d:85:f6:16:36:f3:0f:11:39:90:
17:ac:97:9a:a0:d2:12:2b:ce:bd:25:61:d6:ca:40:
5f:14:5a:d6:4f:d8:18:17:2b:df:20:a8:d6:0c:4c:
af:4a:90:54:7c:1c:03:12:51:48:81:f6:f2:16:91:
08:9b:70:4f:73:4e:c5:7f:83:2f:57:af:4f:65:61:
4a:0e:db:a1:02:d3:24:27:0f:92:f6:33:7f:02:8b:
d5:56:ad:c4:7d:ab:59:ff:ec:d7:4d:38:1c:29:fc:
9f:28:19:00:a4:46:66:f0:d1:a3:bd:d7:79:54:19:
0f:b5:bf:0d:6c:00:85:6e:7c:96:be:6c:dc:70:09:
5c:f4:70:86:95:c5:68:26:e4:63:f7:67:51:1c:89:
88:da:ea:2d:8f:81:49:e6:6e:47:f8:4b:6f:0a:ce:
29:6c:26:9e:ae:a6:ca:57:75:8b:ef:7a:5d:e0:2f:
c8:63:ed:22:fc:9c:c4:39:a5:0a:71:84:91:d6:5c:
31:69:18:ca:11:36:51:d3:75:45:e9:72:5e:99:5a:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:74:5C:3B:33:1E:F9:6E:94:85:1A:A5:56:45:CE:A0:B5:B9:6E
X509v3 Authority Key Identifier:
keyid:F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/37d0XDszHvlulIUapVZFzqC1uW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/8WV-kMpyvz6dm9mP0HGZhMsHirg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3e:9e:ad:e6:d5:2e:a4:39:27:e8:96:e3:0e:07:d9:18:67:
1f:fe:73:53:a1:b8:6e:d1:60:86:5e:e6:7e:8c:5c:16:df:b4:
a5:22:ba:7c:15:44:59:4c:3d:bd:f4:c7:5f:61:b0:85:e9:09:
9a:e2:c8:d9:68:4a:82:bd:b6:c7:88:9e:4a:f5:ea:7b:7e:36:
f6:74:5f:cd:a1:1d:b2:39:d1:d6:c0:e5:48:4d:46:3e:a0:ae:
04:48:93:10:42:fb:32:6a:74:2e:73:bf:ac:9c:b5:ff:0d:7e:
1b:95:00:b6:05:76:f5:e5:5c:61:ad:70:08:b8:8d:12:e0:13:
7d:d4:a9:f6:0a:c4:bb:a7:07:de:34:a4:55:46:db:9d:90:4e:
88:01:54:7d:bb:68:c2:70:60:28:2a:95:10:32:da:1c:4a:c8:
d0:c7:d5:60:fe:59:d2:5e:46:bc:71:69:d0:81:5a:39:15:25:
cd:b7:aa:56:20:d4:58:ee:c0:f0:3c:c5:8c:7d:96:30:35:27:
33:2b:c7:fc:48:cc:3f:e4:72:b0:f8:d9:3d:5f:36:b6:39:8b:
18:c0:b6:53:f8:19:25:f6:0a:38:95:c7:6e:59:6e:26:7a:f8:
5a:0c:26:39:67:d0:b6:88:6f:da:f9:47:2a:12:37:c3:1c:08:
a3:a9:7a:df
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEmEwYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MTY1N2U5MGNhNzJiZjNlOWQ5YmQ5OGZkMDcxOTk4NGNiMDc4YWI4MB4XDTIyMDEw
MTEzMDUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGZiNzc0NWMzYjMz
MWVmOTZlOTQ4NTFhYTU1NjQ1Y2VhMGI1Yjk2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuMXIqjxDpwc5LJJ0A85EiPLc226rnV8g50O7nu9OgmW2Yi
TVx0hdVYEv6oWDHXnJN9hfYWNvMPETmQF6yXmqDSEivOvSVh1spAXxRa1k/YGBcr
3yCo1gxMr0qQVHwcAxJRSIH28haRCJtwT3NOxX+DL1evT2VhSg7boQLTJCcPkvYz
fwKL1VatxH2rWf/s1004HCn8nygZAKRGZvDRo73XeVQZD7W/DWwAhW58lr5s3HAJ
XPRwhpXFaCbkY/dnURyJiNrqLY+BSeZuR/hLbwrOKWwmnq6myld1i+96XeAvyGPt
IvycxDmlCnGEkdZcMWkYyhE2UdN1RelyXplasZ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTft3RcOzMe+W6UhRqlVkXOoLW5bjAfBgNVHSMEGDAWgBTxZX6QynK/Pp2b
2Y/QcZmEyweKuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhXVi1rTXB5dno2ZG05bVAwSEdaaE1zSGlyZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNTYyOWI3LTg1MWQtNDU3Yi1iZDFiLTg4NTU4ZjRkYjlhNS8x
LzM3ZDBYRHN6SHZsdWxJVWFwVlpGenFDMXVXNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NTYyOWI3LTg1MWQtNDU3Yi1iZDFiLTg4NTU4ZjRkYjlhNS8xLzhXVi1rTXB5dno2
ZG05bVAwSEdaaE1zSGlyZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEcLzANBgkqhkiG9w0BAQsFAAOC
AQEAND6erebVLqQ5J+iW4w4H2RhnH/5zU6G4btFghl7mfoxcFt+0pSK6fBVEWUw9
vfTHX2GwhekJmuLI2WhKgr22x4ieSvXqe3429nRfzaEdsjnR1sDlSE1GPqCuBEiT
EEL7Mmp0LnO/rJy1/w1+G5UAtgV29eVcYa1wCLiNEuATfdSp9grEu6cH3jSkVUbb
nZBOiAFUfbtownBgKCqVEDLaHErI0MfVYP5Z0l5GvHFp0IFaORUlzbeqViDUWO7A
8DzFjH2WMDUnMyvH/EjMP+RysPjZPV82tjmLGMC2U/gZJfYKOJXHblluJnr4Wgwm
OWfQtohv2vlHKhI3wxwIo6l63w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net