Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa
File: kH4570unXFa0x8BUJJNO0Rev4rY.roa (raw, json)
Hash identifier: fYAw6q1hiiNn2OIWuyudO2uswPu1t44aTeBdL0jDI4U=
Subject key identifier: 90:7E:39:EF:4B:A7:5C:56:B4:C7:C0:54:24:93:4E:D1:17:AF:E2:B6
Certificate issuer: /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial: 070D741B
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa
Signing time: Sat 01 Jan 2022 11:59:33 +0000
ROA not before: Sat 01 Jan 2022 11:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 160.19.94.0/23 maxlen: 24
185.254.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118322203 (0x70d741b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Validity
Not Before: Jan 1 11:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=907e39ef4ba75c56b4c7c05424934ed117afe2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:2c:bd:42:14:c2:de:10:d0:e8:64:14:45:
2c:94:76:12:57:9f:94:64:33:78:56:cb:a4:d5:b3:
f7:14:aa:64:cf:18:27:9a:69:d4:87:c5:6f:fd:be:
8a:40:39:68:06:be:c1:81:4d:88:0f:4b:45:4e:bb:
32:c6:e1:67:51:0a:90:64:4c:bd:e9:20:24:0f:02:
20:e7:81:32:c9:d7:c3:3b:41:27:e8:06:76:97:7f:
c6:5f:b1:23:37:d9:ae:f7:91:02:0e:9d:d2:46:f7:
dd:de:5d:07:2d:34:76:fc:8a:af:b7:5d:80:6e:81:
3f:42:c5:16:02:02:c9:03:80:dd:d1:a9:38:7b:e1:
d9:59:67:54:4a:45:49:2a:f2:5d:24:d7:44:43:61:
78:55:57:67:17:51:a9:3d:2b:28:81:2c:89:94:b4:
76:84:f5:1e:57:34:f6:b9:1e:ad:6c:99:24:b9:21:
b5:9c:82:76:56:6d:7d:10:a2:d9:92:44:6b:f6:16:
c1:e2:12:eb:37:12:61:38:bc:7e:7f:8a:23:fb:6c:
f7:93:d2:a5:05:50:b3:8b:9a:c3:8d:5b:49:36:7f:
35:df:68:89:9a:07:c9:dc:5b:3b:0d:99:d5:78:ba:
f5:94:7b:c5:5a:f4:2c:47:3a:31:b2:96:27:4b:c5:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7E:39:EF:4B:A7:5C:56:B4:C7:C0:54:24:93:4E:D1:17:AF:E2:B6
X509v3 Authority Key Identifier:
keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/kH4570unXFa0x8BUJJNO0Rev4rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/23
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
72:08:f6:28:8c:6e:f0:89:94:e0:ed:69:38:b7:17:0d:77:1f:
c5:9f:b9:fe:ad:66:90:60:97:e1:d2:7d:94:53:8e:c2:a9:60:
44:09:bc:b6:99:60:27:37:44:72:1c:35:ac:0d:2b:40:b6:d0:
5b:0b:06:27:8c:3a:c3:40:38:47:c4:d3:0b:1a:7c:bc:97:bd:
28:b1:97:89:1c:38:87:b2:44:f0:18:e1:f1:51:a1:a0:d2:1d:
dd:69:c8:fd:ce:8d:83:47:4d:5a:88:df:71:4b:b3:11:ca:33:
ca:34:c7:9b:11:75:f6:eb:53:5d:30:d2:c7:25:c2:5c:da:f5:
6c:01:4b:0b:54:b9:66:d7:56:59:0e:59:cc:99:a9:b6:51:e4:
d3:cd:e0:02:c6:4c:ae:c8:42:20:59:ed:87:a9:e8:2b:4f:d0:
29:e4:a2:f5:6a:f6:8a:f5:a3:d0:00:d6:8a:04:e3:bf:c7:b7:
da:70:ae:2a:09:d8:4e:33:0f:0d:18:f6:5f:38:ca:53:1d:8b:
b3:f8:ae:61:b4:71:e0:ae:bc:e5:4b:04:e2:7c:40:c9:2e:bb:
ff:0d:37:af:1d:d0:45:87:c3:65:da:c2:4d:7a:82:ef:20:18:
df:fb:d5:1f:87:18:58:f0:8a:8e:97:3e:04:07:e2:d5:96:5a:
04:de:c1:1b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBw10GzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY2MWFkY2JmNjk2MmVlZWM4MjVjNmQ0ZGU5YjQ0OWYwMmU4NDFkMB4XDTIyMDEw
MTExNTkzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTA3ZTM5ZWY0YmE3
NWM1NmI0YzdjMDU0MjQ5MzRlZDExN2FmZTJiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtMLL1CFMLeENDoZBRFLJR2EleflGQzeFbLpNWz9xSqZM8Y
J5pp1IfFb/2+ikA5aAa+wYFNiA9LRU67MsbhZ1EKkGRMvekgJA8CIOeBMsnXwztB
J+gGdpd/xl+xIzfZrveRAg6d0kb33d5dBy00dvyKr7ddgG6BP0LFFgICyQOA3dGp
OHvh2VlnVEpFSSryXSTXRENheFVXZxdRqT0rKIEsiZS0doT1Hlc09rkerWyZJLkh
tZyCdlZtfRCi2ZJEa/YWweIS6zcSYTi8fn+KI/ts95PSpQVQs4uaw41bSTZ/Nd9o
iZoHydxbOw2Z1Xi69ZR7xVr0LEc6MbKWJ0vFNAkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSQfjnvS6dcVrTHwFQkk07RF6/itjAfBgNVHSMEGDAWgBRbZhrcv2li7uyC
XG1N6bRJ8C6EHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cyWWEzTDlwWXU3c2dseHRUZW0wU2ZBdWhCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvY2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8x
L2tINDU3MHVuWEZhMHg4QlVKSk5PMFJldjRyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
Y2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8xL1cyWWEzTDlwWXU3
c2dseHRUZW0wU2ZBdWhCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAaATXgMEAbn+EDANBgkqhkiG9w0B
AQsFAAOCAQEAcgj2KIxu8ImU4O1pOLcXDXcfxZ+5/q1mkGCX4dJ9lFOOwqlgRAm8
tplgJzdEchw1rA0rQLbQWwsGJ4w6w0A4R8TTCxp8vJe9KLGXiRw4h7JE8Bjh8VGh
oNId3WnI/c6Ng0dNWojfcUuzEcozyjTHmxF19utTXTDSxyXCXNr1bAFLC1S5ZtdW
WQ5ZzJmptlHk083gAsZMrshCIFnth6noK0/QKeSi9Wr2ivWj0ADWigTjv8e32nCu
KgnYTjMPDRj2XzjKUx2Ls/iuYbRx4K685UsE4nxAyS67/w03rx3QRYfDZdrCTXqC
7yAY3/vVH4cYWPCKjpc+BAfi1ZZaBN7BGw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net