Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/kO8tY7zYylf6w5BvSu4uCQ7OhME.roa
File: kO8tY7zYylf6w5BvSu4uCQ7OhME.roa (raw, json)
Hash identifier: MYpW0gT+UmglX8UXgOh9uy5gFFwQEq+6Nuej0vUAczE=
Subject key identifier: 90:EF:2D:63:BC:D8:CA:57:FA:C3:90:6F:4A:EE:2E:09:0E:CE:84:C1
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 018480D61B77914D8C832E66387208F58ECC
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/kO8tY7zYylf6w5BvSu4uCQ7OhME.roa
Signing time: Wed 16 Nov 2022 14:27:06 +0000
ROA not before: Wed 16 Nov 2022 14:27:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25459
IP address blocks: 37.247.32.0/20 maxlen: 24
94.103.144.0/20 maxlen: 24
178.18.128.0/20 maxlen: 20
77.243.224.0/20 maxlen: 24
2a02:990::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:d6:1b:77:91:4d:8c:83:2e:66:38:72:08:f5:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Nov 16 14:27:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90ef2d63bcd8ca57fac3906f4aee2e090ece84c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:cf:a8:c1:63:73:eb:93:e6:96:b6:fd:31:
ea:7b:12:a6:3b:1d:a0:4c:c6:eb:4e:46:f8:7e:db:
04:f1:5e:e8:b1:54:1b:29:66:00:58:9d:63:02:bf:
75:58:bd:24:ad:67:ca:d1:1c:07:98:1f:8e:bb:85:
63:22:c6:0b:aa:f4:d2:64:bb:3c:d9:45:62:86:77:
e2:22:fd:2e:7f:dd:d5:2f:3f:e7:c2:0f:9c:36:01:
7c:6b:67:82:33:72:f0:24:90:6a:27:a5:39:4b:17:
ea:a6:b9:20:7a:3e:72:c5:c5:44:79:36:60:ed:61:
be:6b:91:b0:0c:7b:50:f7:2d:db:af:6f:96:4c:be:
e6:8a:e2:14:1b:e8:68:e0:4f:b3:b1:b3:e5:df:d9:
8f:b3:1e:35:19:1e:b4:af:02:d2:1a:a1:77:43:a2:
5d:37:19:e9:6e:ef:9f:ed:e9:da:1e:2a:c4:06:dc:
46:85:a7:9a:a5:7b:66:1e:79:3a:46:88:c8:53:b0:
98:87:5f:ae:3f:f4:e4:22:07:01:f9:f8:2c:2a:9b:
08:39:23:0d:f6:36:c1:e8:1b:27:b9:d1:af:9a:0a:
ed:e3:69:29:cf:c9:30:7b:5a:a7:a7:de:43:de:76:
b3:1f:d6:53:3f:7e:56:8a:95:fb:e2:a8:d5:28:53:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:2D:63:BC:D8:CA:57:FA:C3:90:6F:4A:EE:2E:09:0E:CE:84:C1
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/kO8tY7zYylf6w5BvSu4uCQ7OhME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
18:41:0a:75:f9:d8:62:77:2f:e3:a7:06:7f:33:69:91:ca:bd:
7d:c1:9e:71:5f:b6:b1:67:f0:6b:32:90:ba:c9:08:ba:b1:dd:
f6:26:93:3a:90:bc:95:16:f1:83:e6:4f:a3:2a:53:37:3b:20:
ab:13:36:b8:9d:76:7d:0f:0e:c0:0d:f8:c0:08:95:1c:c3:7d:
6b:b9:05:5e:19:e7:73:ac:13:0b:37:72:15:dd:03:31:09:f2:
8f:2a:fc:98:1c:75:86:af:67:b8:a6:03:27:5d:e4:8e:82:17:
03:1f:05:d4:c6:7f:7e:13:58:a9:6a:b2:e2:15:a1:42:4d:9c:
27:2c:1c:4a:73:eb:26:64:43:e0:3c:46:43:3c:f3:71:89:0e:
7e:7b:b7:25:03:74:5e:76:1b:62:bd:95:62:e4:28:ce:a2:db:
54:25:61:30:2f:87:a5:e9:b9:b7:32:56:9f:c7:65:cf:0f:de:
c0:b9:fa:5c:f7:ac:f9:80:43:01:cc:64:46:5a:1f:8e:da:d0:
6d:a5:f6:7b:f0:42:85:23:f6:7f:04:0e:0c:c5:71:4f:0c:cd:
88:0d:14:1d:42:0a:36:6e:66:67:7f:e6:a5:93:33:87:3e:7d:
74:53:36:f5:85:08:70:07:34:c3:dc:e6:5e:9b:b1:a6:f8:eb:
9c:2a:1f:04
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYSA1ht3kU2Mgy5mOHII9Y7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjNkM2QzNTgwMGVmM2NiMmE1NmMzOGJmOTE0Mzk3Mzgx
ZTBmZjEwHhcNMjIxMTE2MTQyNzA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGVmMmQ2M2JjZDhjYTU3ZmFjMzkwNmY0YWVlMmUwOTBlY2U4NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ/PqMFjc+uT5pa2/THqexKmOx2g
TMbrTkb4ftsE8V7osVQbKWYAWJ1jAr91WL0krWfK0RwHmB+Ou4VjIsYLqvTSZLs8
2UVihnfiIv0uf93VLz/nwg+cNgF8a2eCM3LwJJBqJ6U5Sxfqprkgej5yxcVEeTZg
7WG+a5GwDHtQ9y3br2+WTL7miuIUG+ho4E+zsbPl39mPsx41GR60rwLSGqF3Q6Jd
Nxnpbu+f7enaHirEBtxGhaeapXtmHnk6RojIU7CYh1+uP/TkIgcB+fgsKpsIOSMN
9jbB6BsnudGvmgrt42kpz8kwe1qnp95D3nazH9ZTP35WipX74qjVKFP/nQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJDvLWO82MpX+sOQb0ruLgkOzoTBMB8GA1UdIwQY
MBaAFIAj09NYAO88sqVsOL+RQ5c4Hg/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2Et
ZDFhMGMzMjBjMjhhLzEva084dFk3ell5bGY2dzVCdlN1NHVDUTdPaE1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2EtZDFhMGMzMjBjMjhh
LzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE
TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB
AQAYQQp1+dhidy/jpwZ/M2mRyr19wZ5xX7axZ/BrMpC6yQi6sd32JpM6kLyVFvGD
5k+jKlM3OyCrEza4nXZ9Dw7ADfjACJUcw31ruQVeGedzrBMLN3IV3QMxCfKPKvyY
HHWGr2e4pgMnXeSOghcDHwXUxn9+E1iparLiFaFCTZwnLBxKc+smZEPgPEZDPPNx
iQ5+e7clA3RedhtivZVi5CjOottUJWEwL4el6bm3Mlafx2XPD97Aufpc96z5gEMB
zGRGWh+O2tBtpfZ78EKFI/Z/BA4MxXFPDM2IDRQdQgo2bmZnf+alkzOHPn10Uzb1
hQhwBzTD3OZem7Gm+OucKh8E
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org