Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/jUni7MHBBFzIwNFSURn3nrk2uOc.roa
File: jUni7MHBBFzIwNFSURn3nrk2uOc.roa (raw, json)
Hash identifier: qlHJV+OmNtOuNH6jgK2YZqb4E2/+wBVBt2bnfaHdGPA=
Subject key identifier: 8D:49:E2:EC:C1:C1:04:5C:C8:C0:D1:52:51:19:F7:9E:B9:36:B8:E7
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 0184864ED5950C00F5C97D53BB7B54FDD176
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/jUni7MHBBFzIwNFSURn3nrk2uOc.roa
Signing time: Thu 17 Nov 2022 15:57:04 +0000
ROA not before: Thu 17 Nov 2022 15:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25459
IP address blocks: 178.18.128.0/20 maxlen: 24
37.247.32.0/20 maxlen: 24
94.103.144.0/20 maxlen: 24
77.243.224.0/20 maxlen: 24
2a02:990::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:4e:d5:95:0c:00:f5:c9:7d:53:bb:7b:54:fd:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Nov 17 15:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d49e2ecc1c1045cc8c0d1525119f79eb936b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:a2:c5:10:b2:11:a1:b4:06:92:45:03:c6:
b4:8e:f8:c0:ac:57:4c:17:22:98:51:ed:3a:11:7f:
b1:1e:3c:ba:a7:b4:2e:39:be:61:a0:ff:55:13:65:
07:5f:f1:2b:f8:42:f6:30:71:92:c8:01:2b:b2:db:
13:6e:e2:17:a4:97:1c:37:4c:17:fd:cb:c7:fd:0b:
96:47:35:ae:48:5f:eb:98:4d:c7:a8:f0:df:f4:84:
ae:45:fd:9a:83:81:eb:d7:b2:c9:c0:2c:ee:9e:72:
8b:da:6c:fc:ae:d2:20:82:e3:dc:ea:b8:26:6b:de:
7b:3c:23:3c:21:4a:2f:f5:60:f6:11:6d:df:ca:87:
37:09:d0:26:e6:5e:34:e5:b5:78:81:df:d8:45:09:
7d:87:ca:09:38:63:1b:8d:c7:76:90:6b:73:78:f5:
a7:10:b8:ae:a8:67:9f:9d:8b:06:d7:3a:73:0f:b0:
08:59:13:8c:c9:5d:0c:eb:52:ad:2c:13:88:58:71:
fb:8d:91:bf:01:18:0d:6f:89:52:d2:5f:10:40:1c:
73:61:43:ac:f6:f0:b7:a6:ca:b7:8b:8b:8f:3f:e3:
3e:4f:be:cd:c8:0a:0d:87:39:a4:12:2b:a5:1b:69:
8a:23:80:11:f7:cc:3d:3d:ca:3b:78:54:e1:e0:87:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:E2:EC:C1:C1:04:5C:C8:C0:D1:52:51:19:F7:9E:B9:36:B8:E7
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/jUni7MHBBFzIwNFSURn3nrk2uOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
3d:10:ee:8b:48:a3:a4:1a:d5:50:3a:b1:00:8e:1c:09:d3:6e:
5c:ff:cb:ec:0b:d9:df:df:aa:54:97:0a:8b:7e:84:4c:ec:e5:
9a:f8:ca:53:c7:0a:9c:c5:32:11:78:e3:1e:9b:66:e0:06:1a:
c3:5b:51:29:57:fd:9e:18:4d:02:e3:d7:1c:07:bd:cf:42:56:
09:25:80:67:73:73:cd:c3:10:50:4e:11:c8:a4:be:c1:70:d8:
4c:bf:98:45:7f:cb:ba:5f:b3:e4:af:ea:21:26:ef:f2:ca:49:
8e:8e:e5:fe:5f:f1:05:ba:41:7b:90:1c:c0:b3:81:39:cb:81:
eb:cf:0c:68:cd:ed:83:5d:f0:fd:9e:f2:7c:80:c5:c9:b1:69:
26:d4:d4:24:ec:07:b4:ae:83:c5:7a:53:dc:e9:a2:d3:7e:85:
4b:25:65:33:b0:70:b3:12:20:a6:42:62:46:9f:71:1a:00:3e:
48:ad:e6:f2:c1:0e:d4:e5:e1:38:dc:3c:86:3f:37:4e:f5:8c:
8b:b5:cd:6f:87:db:bf:a8:b4:97:a0:e1:9d:8d:e1:9a:ad:d4:
f7:67:19:ea:f1:b5:e9:69:d4:9c:8d:d4:54:f4:00:61:fe:2c:
f6:49:60:80:f2:f9:66:02:c3:12:6f:cb:7b:bf:4c:ba:ea:a5:
f3:36:3c:1f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYSGTtWVDAD1yX1Tu3tU/dF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjNkM2QzNTgwMGVmM2NiMmE1NmMzOGJmOTE0Mzk3Mzgx
ZTBmZjEwHhcNMjIxMTE3MTU1NzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDQ5ZTJlY2MxYzEwNDVjYzhjMGQxNTI1MTE5Zjc5ZWI5MzZiOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnReixRCyEaG0BpJFA8a0jvjArFdM
FyKYUe06EX+xHjy6p7QuOb5hoP9VE2UHX/Er+EL2MHGSyAErstsTbuIXpJccN0wX
/cvH/QuWRzWuSF/rmE3HqPDf9ISuRf2ag4Hr17LJwCzunnKL2mz8rtIgguPc6rgm
a957PCM8IUov9WD2EW3fyoc3CdAm5l405bV4gd/YRQl9h8oJOGMbjcd2kGtzePWn
ELiuqGefnYsG1zpzD7AIWROMyV0M61KtLBOIWHH7jZG/ARgNb4lS0l8QQBxzYUOs
9vC3psq3i4uPP+M+T77NyAoNhzmkEiulG2mKI4AR98w9Pco7eFTh4IcauwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFI1J4uzBwQRcyMDRUlEZ9565NrjnMB8GA1UdIwQY
MBaAFIAj09NYAO88sqVsOL+RQ5c4Hg/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2Et
ZDFhMGMzMjBjMjhhLzEvalVuaTdNSEJCRnpJd05GU1VSbjNucmsydU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2EtZDFhMGMzMjBjMjhh
LzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE
TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB
AQA9EO6LSKOkGtVQOrEAjhwJ025c/8vsC9nf36pUlwqLfoRM7OWa+MpTxwqcxTIR
eOMem2bgBhrDW1EpV/2eGE0C49ccB73PQlYJJYBnc3PNwxBQThHIpL7BcNhMv5hF
f8u6X7Pkr+ohJu/yykmOjuX+X/EFukF7kBzAs4E5y4Hrzwxoze2DXfD9nvJ8gMXJ
sWkm1NQk7Ae0roPFelPc6aLTfoVLJWUzsHCzEiCmQmJGn3EaAD5IrebywQ7U5eE4
3DyGPzdO9YyLtc1vh9u/qLSXoOGdjeGardT3Zxnq8bXpadScjdRU9ABh/iz2SWCA
8vlmAsMSb8t7v0y66qXzNjwf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org