Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/KwFXbOHFgQPQ4hqUA95iNeuFBc0.roa
File: KwFXbOHFgQPQ4hqUA95iNeuFBc0.roa (raw, json)
Hash identifier: +DophL+awuIlgcoSWZZYNWIKoSFqDpiiyDNp677Uz3w=
Subject key identifier: 2B:01:57:6C:E1:C5:81:03:D0:E2:1A:94:03:DE:62:35:EB:85:05:CD
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018796B9F5934B4F4986F8A3561644875659
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/KwFXbOHFgQPQ4hqUA95iNeuFBc0.roa
Signing time: Tue 18 Apr 2023 23:36:22 +0000
ROA not before: Tue 18 Apr 2023 23:36:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.218.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:b9:f5:93:4b:4f:49:86:f8:a3:56:16:44:87:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 18 23:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b01576ce1c58103d0e21a9403de6235eb8505cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:86:bf:de:37:70:71:63:4a:41:5c:95:d6:
4d:3f:95:e7:b9:71:1a:57:61:5f:26:11:4c:f9:dd:
43:be:c5:2d:29:64:a0:44:b2:a4:57:f3:60:81:f8:
c8:db:e2:4e:70:c0:84:9a:26:88:2c:0e:7b:6b:81:
0c:ad:15:5e:70:86:46:85:68:a8:e0:26:d3:c6:09:
66:0b:c2:5e:9d:cf:8b:8f:57:1c:40:bb:97:4c:6f:
c8:d0:9c:9c:e5:31:8e:c7:0f:df:6d:f3:6e:30:94:
c9:f5:56:5f:3b:13:ac:36:a5:8a:ce:a4:ed:9c:aa:
f9:fa:a5:2a:16:03:30:aa:16:b6:57:60:de:66:8d:
3f:01:f0:6b:9e:ef:61:24:1f:0f:d5:6a:e9:e0:7c:
7f:b0:df:85:98:cd:fd:8b:e2:86:f4:b5:92:b8:95:
f7:1b:7c:d6:2e:8e:e0:18:38:e1:32:b9:70:dc:0a:
5c:54:ab:90:d9:5a:c2:16:71:3c:a0:d8:5e:b6:21:
8c:01:55:44:38:2b:10:ac:46:95:88:52:c1:31:05:
df:b9:f4:b1:7a:a2:eb:33:a8:2c:59:5c:55:94:ee:
c1:04:50:9a:07:14:99:08:1d:5b:45:6a:6c:1a:35:
ec:12:50:e7:22:1d:b2:6b:0c:d1:6c:a0:c3:9e:f2:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:57:6C:E1:C5:81:03:D0:E2:1A:94:03:DE:62:35:EB:85:05:CD
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/KwFXbOHFgQPQ4hqUA95iNeuFBc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.208.0/24
85.237.218.0/24
185.93.35.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e1:1b:16:30:ab:0e:4f:6f:db:2d:d8:c4:12:3f:9d:44:4f:
78:63:2b:2c:00:23:3d:1d:dc:d7:3c:19:4b:11:98:4d:c0:18:
fb:88:1f:2b:7e:ea:7a:be:25:25:69:41:10:70:99:7e:d1:f1:
50:62:a2:1a:cd:8a:02:5f:58:3c:b6:22:fe:55:c6:50:c5:53:
05:c9:f7:7f:e0:e9:5f:06:5e:7b:ed:e1:21:29:c1:db:8b:88:
62:f3:66:ac:b1:17:07:f5:d7:26:45:ac:18:46:48:33:de:04:
5c:ff:d2:bf:39:df:dc:ec:31:1f:20:7f:8b:b7:9d:2b:0f:40:
40:98:44:e6:cd:1d:81:42:c8:f3:64:ae:fe:2d:f7:40:69:5c:
ea:12:ac:cd:67:ea:59:c8:20:8b:8e:6a:4d:35:10:5b:9a:7e:
97:7c:2b:2d:27:c5:8d:ce:3c:0f:1c:e5:da:54:b2:0c:3a:4e:
3b:68:b7:f4:63:3a:84:f0:5c:e2:c3:6a:18:6b:1c:ea:0f:1d:
bc:12:01:98:a4:51:b9:27:c0:b6:29:9e:87:d1:35:db:df:30:
d1:4c:cb:ef:af:55:4c:5c:da:2c:0b:a0:97:d9:3b:2a:72:2c:
67:1d:44:c1:3c:6d:b7:bd:5b:de:00:0d:85:0f:7f:55:6d:8f:
e7:c5:cf:75
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYeWufWTS09JhvijVhZEh1ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNDE4MjMzNjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjAxNTc2Y2UxYzU4MTAzZDBlMjFhOTQwM2RlNjIzNWViODUwNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmyGv943cHFjSkFcldZNP5XnuXEa
V2FfJhFM+d1DvsUtKWSgRLKkV/NggfjI2+JOcMCEmiaILA57a4EMrRVecIZGhWio
4CbTxglmC8Jenc+Lj1ccQLuXTG/I0Jyc5TGOxw/fbfNuMJTJ9VZfOxOsNqWKzqTt
nKr5+qUqFgMwqha2V2DeZo0/AfBrnu9hJB8P1Wrp4Hx/sN+FmM39i+KG9LWSuJX3
G3zWLo7gGDjhMrlw3ApcVKuQ2VrCFnE8oNhetiGMAVVEOCsQrEaViFLBMQXfufSx
eqLrM6gsWVxVlO7BBFCaBxSZCB1bRWpsGjXsElDnIh2yawzRbKDDnvL9eQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCsBV2zhxYED0OIalAPeYjXrhQXNMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvS3dGWGJPSEZnUVBRNGhxVUE5NWlOZXVGQmMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVe3KAwQA
Ve3QAwQAVe3aAwQAuV0jAwQAwW3GMA0GCSqGSIb3DQEBCwUAA4IBAQCx4RsWMKsO
T2/bLdjEEj+dRE94YyssACM9HdzXPBlLEZhNwBj7iB8rfup6viUlaUEQcJl+0fFQ
YqIazYoCX1g8tiL+VcZQxVMFyfd/4OlfBl577eEhKcHbi4hi82assRcH9dcmRawY
Rkgz3gRc/9K/Od/c7DEfIH+Lt50rD0BAmETmzR2BQsjzZK7+LfdAaVzqEqzNZ+pZ
yCCLjmpNNRBbmn6XfCstJ8WNzjwPHOXaVLIMOk47aLf0YzqE8Fziw2oYaxzqDx28
EgGYpFG5J8C2KZ6H0TXb3zDRTMvvr1VMXNosC6CX2TsqcixnHUTBPG23vVveAA2F
D39VbY/nxc91
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org