Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/t5N-QRbB4mKyb8rI7THvSzAkgYw.roa
File: t5N-QRbB4mKyb8rI7THvSzAkgYw.roa (raw, json)
Hash identifier: GgpHyFYzwX38mpSddZb5w7pGHcmkQrJ2Bk1nGcKKRBk=
Subject key identifier: B7:93:7E:41:16:C1:E2:62:B2:6F:CA:C8:ED:31:EF:4B:30:24:81:8C
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 0185724C620763C43803084E99E2BF5E87D5
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/t5N-QRbB4mKyb8rI7THvSzAkgYw.roa
Signing time: Mon 02 Jan 2023 11:44:46 +0000
ROA not before: Mon 02 Jan 2023 11:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25228
IP address blocks: 213.255.212.0/22 maxlen: 22
213.255.220.0/22 maxlen: 22
213.255.232.0/22 maxlen: 22
78.138.4.0/22 maxlen: 22
83.229.100.0/24 maxlen: 24
213.255.236.0/22 maxlen: 22
83.229.101.0/24 maxlen: 24
83.229.102.0/24 maxlen: 24
213.255.252.0/22 maxlen: 22
78.138.36.0/22 maxlen: 22
185.115.108.0/22 maxlen: 22
83.229.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:62:07:63:c4:38:03:08:4e:99:e2:bf:5e:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: Jan 2 11:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7937e4116c1e262b26fcac8ed31ef4b3024818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:e3:6b:4b:11:da:b4:f9:e8:33:4b:e9:d5:
e8:4d:d3:30:06:50:b5:65:62:5a:46:d8:21:73:08:
9e:8c:2c:35:ba:f0:05:a9:e4:88:d1:01:7c:99:e9:
b4:3a:f7:c8:5b:69:e0:c6:59:12:98:56:d0:e8:0d:
ed:ac:ad:8b:2c:c5:5a:48:32:a2:be:77:1d:dd:75:
2b:c8:bf:d6:48:b8:be:7f:1e:1a:a4:dd:15:64:af:
bd:1c:42:84:4b:2a:70:f4:7b:48:91:b4:c8:fb:28:
e2:36:b9:b0:f2:fd:23:e6:a7:5e:d8:48:6a:85:fc:
cf:af:43:05:f0:ae:7d:7c:0d:e5:91:d1:bc:7d:f0:
a7:a6:7c:39:e4:a6:eb:4c:8d:2b:3b:b2:d4:cf:ff:
df:80:51:e5:d8:d0:f3:00:d8:5d:52:7d:54:e5:26:
a4:3e:3a:f4:18:c9:7e:1a:4e:8b:6b:b4:1a:e4:59:
68:2e:3c:f2:f1:67:e9:f1:f4:42:58:ce:af:eb:ba:
0c:0a:87:20:ed:59:3c:5b:18:70:fd:fd:f0:6a:d5:
19:67:cc:09:a7:90:d9:f4:aa:9d:d9:ec:e7:a5:ed:
6d:c3:a9:b9:28:f2:b3:db:f9:6f:c9:70:e7:28:2b:
3c:a4:1a:b6:ff:26:ba:f9:64:84:d8:ab:34:58:2c:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:7E:41:16:C1:E2:62:B2:6F:CA:C8:ED:31:EF:4B:30:24:81:8C
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/t5N-QRbB4mKyb8rI7THvSzAkgYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.4.0/22
78.138.36.0/22
83.229.52.0/22
83.229.100.0-83.229.102.255
185.115.108.0/22
213.255.212.0/22
213.255.220.0/22
213.255.232.0/21
213.255.252.0/22
Signature Algorithm: sha256WithRSAEncryption
61:88:f3:87:4b:04:12:d3:d8:e5:12:29:67:3a:89:d1:66:8d:
79:cf:53:94:a3:7e:58:88:a5:f6:85:74:a0:f6:3b:71:1e:c4:
51:c6:a4:89:a9:a1:99:2c:2a:bf:18:4c:71:d5:90:c5:2d:91:
cb:60:a7:e5:64:cc:a5:6a:b2:b9:9b:79:cb:d0:b6:85:a4:6d:
c1:bb:63:6e:4a:14:3e:35:07:b2:0f:6b:bd:3a:37:df:c5:18:
c6:77:5f:83:3d:6f:bf:7f:18:97:da:1d:a9:93:84:f0:01:b1:
f1:43:e4:88:5a:fe:3b:db:d5:3c:d8:4d:40:63:c7:77:cc:47:
90:e9:ed:9b:6e:c8:92:b9:e2:bc:5b:50:34:0d:eb:4a:ea:64:
a4:79:12:ea:69:01:13:45:c8:22:24:b6:9a:16:0e:16:f7:1f:
08:df:ec:68:23:fd:0f:f5:b7:be:90:35:8e:49:66:a8:b8:03:
81:4c:61:5c:1b:a5:89:a2:7f:03:35:54:d1:d1:0f:7d:d6:81:
8a:e4:77:a9:f8:2e:62:d8:43:b1:6a:f0:dc:34:59:3a:d6:40:
2c:c4:12:b1:40:4c:7c:6e:9a:28:86:39:a8:56:1c:c5:63:a1:
fb:d8:de:57:b7:52:64:81:09:f9:32:9e:d8:54:81:25:9d:01:
84:50:d9:0a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYVyTGIHY8Q4AwhOmeK/XofVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDRjODc0YThmYmFmNTFjOWVjNDNjYTAwOWIyMmRjMWQ1
MDM5NzYwHhcNMjMwMTAyMTE0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzkzN2U0MTE2YzFlMjYyYjI2ZmNhYzhlZDMxZWY0YjMwMjQ4MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZzja0sR2rT56DNL6dXoTdMwBlC1
ZWJaRtghcwiejCw1uvAFqeSI0QF8mem0OvfIW2ngxlkSmFbQ6A3trK2LLMVaSDKi
vncd3XUryL/WSLi+fx4apN0VZK+9HEKESypw9HtIkbTI+yjiNrmw8v0j5qde2Ehq
hfzPr0MF8K59fA3lkdG8ffCnpnw55KbrTI0rO7LUz//fgFHl2NDzANhdUn1U5Sak
Pjr0GMl+Gk6La7Qa5FloLjzy8Wfp8fRCWM6v67oMCocg7Vk8Wxhw/f3watUZZ8wJ
p5DZ9Kqd2eznpe1tw6m5KPKz2/lvyXDnKCs8pBq2/ya6+WSE2Ks0WCwMDQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFLeTfkEWweJism/KyO0x70swJIGMMB8GA1UdIwQY
MBaAFAPUyHSo+69RyexDygCbItwdUDl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlUSWRLajdyMUhKN0VQS0FKc2kzQjFRT1hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDlhNmUtNTA4MS00Njc0LWFhNTct
MjQ0ZDg0MDk0YzBmLzEvdDVOLVFSYkI0bUt5YjhySTdUSHZTekFrZ1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMDlhNmUtNTA4MS00Njc0LWFhNTctMjQ0ZDg0MDk0YzBm
LzEvQTlUSWRLajdyMUhKN0VQS0FKc2kzQjFRT1hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCTooEAwQC
TookAwQCU+U0MAwDBAJT5WQDBABT5WYDBAK5c2wDBALV/9QDBALV/9wDBAPV/+gD
BALV//wwDQYJKoZIhvcNAQELBQADggEBAGGI84dLBBLT2OUSKWc6idFmjXnPU5Sj
fliIpfaFdKD2O3EexFHGpImpoZksKr8YTHHVkMUtkctgp+VkzKVqsrmbecvQtoWk
bcG7Y25KFD41B7IPa706N9/FGMZ3X4M9b79/GJfaHamThPABsfFD5Iha/jvb1TzY
TUBjx3fMR5Dp7ZtuyJK54rxbUDQN60rqZKR5EuppARNFyCIktpoWDhb3Hwjf7Ggj
/Q/1t76QNY5JZqi4A4FMYVwbpYmifwM1VNHRD33WgYrkd6n4LmLYQ7Fq8Nw0WTrW
QCzEErFATHxumiiGOahWHMVjofvY3le3UmSBCfkynthUgSWdAYRQ2Qo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:10 2024 by rpki-client on console-fra.rpki-client.org