Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/g_Tw8kBxCNmHf6t9iEDMBwGlCPw.roa
File: g_Tw8kBxCNmHf6t9iEDMBwGlCPw.roa (raw, json)
Hash identifier: FUU8GSOpm6am841N1cZUoAEEX99il43uHkOoFpfhegw=
Subject key identifier: 83:F4:F0:F2:40:71:08:D9:87:7F:AB:7D:88:40:CC:07:01:A5:08:FC
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0187700378FCFAEF9B1C8B5358FF72437DAD
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/g_Tw8kBxCNmHf6t9iEDMBwGlCPw.roa
Signing time: Tue 11 Apr 2023 11:11:28 +0000
ROA not before: Tue 11 Apr 2023 11:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:03:78:fc:fa:ef:9b:1c:8b:53:58:ff:72:43:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 11 11:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83f4f0f2407108d9877fab7d8840cc0701a508fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:c2:e5:60:3e:53:3f:90:88:c0:02:b3:c5:
85:cf:54:93:d1:05:fe:62:14:82:da:63:c0:77:84:
e1:fa:d8:8f:30:be:2d:0b:0d:cf:ff:c8:05:d7:f4:
26:6c:29:7e:46:45:63:94:68:ad:0c:be:2c:1a:4d:
88:db:44:cb:3c:ff:2e:39:52:2a:4f:8f:93:5c:03:
ab:64:e2:f5:96:b6:42:8a:a7:7b:bd:87:78:9d:32:
b4:64:8d:5f:d0:c0:9b:6d:c7:9b:b3:c1:c8:58:20:
f5:1c:df:59:38:c7:6a:ce:1f:8a:52:de:6e:15:78:
ea:e0:a1:57:2e:42:95:90:61:d4:ad:3b:c6:ee:dd:
1f:7c:55:8c:de:95:06:47:0d:2e:19:4c:3a:29:72:
26:d9:fc:05:d2:64:d5:cf:18:29:b0:01:f3:f6:18:
96:76:04:64:ff:fd:dd:9d:73:5e:62:da:18:e6:b9:
01:3b:f7:c7:5a:69:05:62:24:94:b1:a8:75:a5:41:
7a:32:b9:9f:85:ec:2f:a8:f4:47:3d:d2:73:d9:16:
c9:ed:70:1c:99:5c:1c:97:bb:8b:e1:47:ac:bc:61:
75:2c:23:1c:38:86:6c:da:ba:66:94:24:a8:12:a2:
e6:70:b6:f4:be:4e:63:bc:82:11:54:7e:2e:2e:a5:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:F0:F2:40:71:08:D9:87:7F:AB:7D:88:40:CC:07:01:A5:08:FC
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/g_Tw8kBxCNmHf6t9iEDMBwGlCPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
85.158.63.0/24
85.237.202.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0b:2b:6c:e8:07:e0:0a:43:d8:10:07:72:1d:e8:91:58:06:
42:32:f3:86:d6:27:69:16:62:28:6b:9d:7d:87:e0:6f:1c:48:
b8:6d:9d:6d:ed:30:83:be:55:9a:aa:75:cf:d7:fd:66:d4:35:
24:b3:0a:78:77:10:44:a7:31:80:6b:44:2e:5c:f3:d8:06:2f:
ab:fc:b0:02:5b:64:ac:f4:30:59:97:70:ee:d6:1b:78:4b:dc:
51:63:9e:bb:08:a0:f6:52:b5:05:f4:60:7b:3c:c0:da:31:8a:
e0:72:0c:46:cf:34:3f:18:d2:48:24:52:ad:a9:cd:21:34:fd:
ae:e9:c9:71:49:17:50:f9:82:e5:d7:df:da:82:11:bc:93:c1:
22:5d:4d:70:b0:08:27:e2:dc:03:f4:29:17:85:df:72:6f:f5:
93:b7:c4:e6:8f:ba:2f:6d:9c:95:24:22:65:45:82:c1:d7:5d:
63:c7:b1:b6:a7:c0:95:84:1f:33:36:3f:4b:e4:8e:ed:51:76:
c0:16:0e:25:46:e6:90:a4:95:8d:96:b8:90:61:b2:ae:e3:ea:
5c:e4:10:7f:0a:27:aa:90:13:fa:b6:4b:91:16:34:be:9d:7e:
a4:d0:ed:0c:a3:cf:0b:35:11:1b:d2:7d:72:47:e0:f9:37:8b:
0a:89:0d:5f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYdwA3j8+u+bHItTWP9yQ32tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNDExMTExMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Y0ZjBmMjQwNzEwOGQ5ODc3ZmFiN2Q4ODQwY2MwNzAxYTUwOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni/C5WA+Uz+QiMACs8WFz1ST0QX+
YhSC2mPAd4Th+tiPML4tCw3P/8gF1/QmbCl+RkVjlGitDL4sGk2I20TLPP8uOVIq
T4+TXAOrZOL1lrZCiqd7vYd4nTK0ZI1f0MCbbcebs8HIWCD1HN9ZOMdqzh+KUt5u
FXjq4KFXLkKVkGHUrTvG7t0ffFWM3pUGRw0uGUw6KXIm2fwF0mTVzxgpsAHz9hiW
dgRk//3dnXNeYtoY5rkBO/fHWmkFYiSUsah1pUF6MrmfhewvqPRHPdJz2RbJ7XAc
mVwcl7uL4UesvGF1LCMcOIZs2rpmlCSoEqLmcLb0vk5jvIIRVH4uLqUa+wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIP08PJAcQjZh3+rfYhAzAcBpQj8MB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvZ19UdzhrQnhDTm1IZjZ0OWlFRE1Cd0dsQ1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVZ49AwQA
VZ4/AwQAVe3KAwQAwW3GMA0GCSqGSIb3DQEBCwUAA4IBAQBsCyts6AfgCkPYEAdy
HeiRWAZCMvOG1idpFmIoa519h+BvHEi4bZ1t7TCDvlWaqnXP1/1m1DUkswp4dxBE
pzGAa0QuXPPYBi+r/LACW2Ss9DBZl3Du1ht4S9xRY567CKD2UrUF9GB7PMDaMYrg
cgxGzzQ/GNJIJFKtqc0hNP2u6clxSRdQ+YLl19/aghG8k8EiXU1wsAgn4twD9CkX
hd9yb/WTt8Tmj7ovbZyVJCJlRYLB111jx7G2p8CVhB8zNj9L5I7tUXbAFg4lRuaQ
pJWNlriQYbKu4+pc5BB/CieqkBP6tkuRFjS+nX6k0O0Mo88LNREb0n1yR+D5N4sK
iQ1f
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org