Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/cvwxKpd26DbwUMs_B8OdnuEc-IU.roa
File: cvwxKpd26DbwUMs_B8OdnuEc-IU.roa (raw, json)
Hash identifier: D6LBBBUogf3u8QuHUV6Y0ML/E3aovZOPVbqHwGm1ruw=
Subject key identifier: 72:FC:31:2A:97:76:E8:36:F0:50:CB:3F:07:C3:9D:9E:E1:1C:F8:85
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 03461F7F
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/cvwxKpd26DbwUMs_B8OdnuEc-IU.roa
Signing time: Mon 31 Jan 2022 15:37:00 +0000
ROA not before: Mon 31 Jan 2022 15:37:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 213.255.212.0/22 maxlen: 22
213.255.220.0/22 maxlen: 22
78.138.4.0/22 maxlen: 22
213.255.232.0/22 maxlen: 22
213.255.236.0/22 maxlen: 22
213.255.252.0/22 maxlen: 22
78.138.36.0/22 maxlen: 22
83.229.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54927231 (0x3461f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: Jan 31 15:37:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72fc312a9776e836f050cb3f07c39d9ee11cf885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:d1:66:f2:8b:20:1b:74:8a:3e:be:49:df:
9e:b0:d6:d5:43:eb:0a:e4:cf:63:71:23:00:68:78:
82:c9:42:69:08:cb:24:c9:83:a6:85:53:38:5c:0c:
be:41:99:8e:d6:bd:02:96:a9:81:0f:34:c9:82:89:
1d:99:ac:71:b2:a5:db:ab:18:84:4a:f6:c8:f5:6a:
8b:d1:a2:d1:6f:46:97:45:67:5b:62:18:73:12:1b:
f7:8f:56:a5:3a:39:9c:c5:9f:56:74:e5:54:19:ed:
12:61:d8:a4:39:f6:5f:77:ed:63:0c:5d:1a:9e:ad:
b8:96:94:cb:55:7e:3a:c4:16:37:f8:d9:90:42:af:
ba:11:7e:92:d7:c1:c6:d4:74:1c:25:86:a6:15:a1:
d3:d4:fa:6c:e2:9b:48:9b:2a:df:e5:c2:3f:4c:44:
9b:3c:fe:8d:b7:1d:2e:ed:5a:14:96:65:ad:71:98:
a3:77:0a:00:a3:b0:1c:82:d1:79:27:98:30:4e:46:
78:b3:ba:4a:a8:31:a1:7f:25:8d:57:94:ac:16:19:
10:a0:b6:d0:90:8d:12:97:88:33:fd:f2:a6:ac:96:
96:b6:a7:db:69:8d:65:25:7e:d3:57:91:20:2e:b8:
6c:f8:42:44:eb:33:d1:ad:da:ab:b3:c0:ed:6e:d1:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:31:2A:97:76:E8:36:F0:50:CB:3F:07:C3:9D:9E:E1:1C:F8:85
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/cvwxKpd26DbwUMs_B8OdnuEc-IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.4.0/22
78.138.36.0/22
83.229.52.0/22
213.255.212.0/22
213.255.220.0/22
213.255.232.0/21
213.255.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b3:5f:41:8d:83:38:85:84:74:16:43:a2:2a:37:29:44:cf:
56:91:b7:de:15:52:5a:1c:7c:d5:a4:cd:1e:47:6d:1b:fc:9c:
84:eb:5c:cb:0b:c6:05:93:8f:c1:cd:7a:4f:9a:12:e0:1f:94:
30:53:43:a3:b4:6a:f2:26:e7:77:c7:47:c6:ee:f9:82:f1:14:
d9:e4:2e:af:81:14:4e:50:4a:0d:c6:79:0a:17:74:58:cc:6f:
29:40:46:94:32:fd:09:f2:b6:62:9b:66:ef:46:e6:6b:4a:dc:
ae:cd:07:37:16:75:ad:bd:ac:c8:7b:29:08:17:1d:4b:a8:23:
51:7e:07:fb:98:55:19:cd:0f:21:06:47:96:4f:72:fa:7b:88:
e2:4c:c7:fc:0c:84:83:de:2f:b4:04:c8:24:84:97:37:f8:85:
02:66:9e:d2:ce:45:da:27:4a:7e:e9:0d:b6:bb:f8:66:41:1f:
74:25:55:7c:26:87:b5:51:a7:9c:7f:36:d9:0d:f2:c5:98:d8:
51:04:25:fc:34:8f:81:d7:b8:8e:c4:92:7b:cd:4c:18:91:88:
09:bc:95:28:9c:f6:11:53:33:71:86:62:e0:37:bc:41:7e:56:
7d:ba:c2:6c:d3:20:b2:8c:68:a7:be:3e:01:08:99:60:f1:40:
06:03:fa:7a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEA0YffzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
M2Q0Yzg3NGE4ZmJhZjUxYzllYzQzY2EwMDliMjJkYzFkNTAzOTc2MB4XDTIyMDEz
MTE1MzcwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJmYzMxMmE5Nzc2
ZTgzNmYwNTBjYjNmMDdjMzlkOWVlMTFjZjg4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXd0WbyiyAbdIo+vknfnrDW1UPrCuTPY3EjAGh4gslCaQjL
JMmDpoVTOFwMvkGZjta9ApapgQ80yYKJHZmscbKl26sYhEr2yPVqi9Gi0W9Gl0Vn
W2IYcxIb949WpTo5nMWfVnTlVBntEmHYpDn2X3ftYwxdGp6tuJaUy1V+OsQWN/jZ
kEKvuhF+ktfBxtR0HCWGphWh09T6bOKbSJsq3+XCP0xEmzz+jbcdLu1aFJZlrXGY
o3cKAKOwHILReSeYME5GeLO6SqgxoX8ljVeUrBYZEKC20JCNEpeIM/3ypqyWlran
22mNZSV+01eRIC64bPhCROsz0a3aq7PA7W7RxlMCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRy/DEql3boNvBQyz8Hw52e4Rz4hTAfBgNVHSMEGDAWgBQD1Mh0qPuvUcns
Q8oAmyLcHVA5djAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E5VElkS2o3cjFISjdFUEtBSnNpM0IxUU9YWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8x
L2N2d3hLcGQyNkRid1VNc19COE9kbnVFYy1JVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
ZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8xL0E5VElkS2o3cjFI
SjdFUEtBSnNpM0IxUU9YWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAk6KBAMEAk6KJAMEAlPlNAMEAtX/
1AMEAtX/3AMEA9X/6AMEAtX//DANBgkqhkiG9w0BAQsFAAOCAQEAsLNfQY2DOIWE
dBZDoio3KUTPVpG33hVSWhx81aTNHkdtG/ychOtcywvGBZOPwc16T5oS4B+UMFND
o7Rq8ibnd8dHxu75gvEU2eQur4EUTlBKDcZ5Chd0WMxvKUBGlDL9CfK2Yptm70bm
a0rcrs0HNxZ1rb2syHspCBcdS6gjUX4H+5hVGc0PIQZHlk9y+nuI4kzH/AyEg94v
tATIJISXN/iFAmae0s5F2idKfukNtrv4ZkEfdCVVfCaHtVGnnH822Q3yxZjYUQQl
/DSPgde4jsSSe81MGJGICbyVKJz2EVMzcYZi4De8QX5WfbrCbNMgsoxop74+AQiZ
YPFABgP6eg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org