Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/tQs6K8gsxETEE-_genDbIGBvrx4.roa
File: tQs6K8gsxETEE-_genDbIGBvrx4.roa (raw, json)
Hash identifier: f+Z8urrJmSZR4IHeQwphXTZRSJRhHxy412b4prJy2gA=
Subject key identifier: B5:0B:3A:2B:C8:2C:C4:44:C4:13:EF:E0:7A:70:DB:20:60:6F:AF:1E
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 0AB166C3
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/tQs6K8gsxETEE-_genDbIGBvrx4.roa
Signing time: Sat 01 Jan 2022 10:55:40 +0000
ROA not before: Sat 01 Jan 2022 10:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25459
IP address blocks: 94.103.144.0/20 maxlen: 20
37.247.32.0/20 maxlen: 20
178.18.128.0/20 maxlen: 20
77.243.224.0/20 maxlen: 20
2a02:990::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179398339 (0xab166c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Jan 1 10:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b50b3a2bc82cc444c413efe07a70db20606faf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:5a:75:7e:31:5b:d6:f8:28:02:db:4c:3e:
5e:ee:c9:5c:42:11:d7:9d:6a:b7:82:68:29:29:d5:
f8:5e:0c:76:08:2c:a3:00:64:12:66:a8:4e:ef:13:
cf:e9:57:2f:2b:ce:25:7d:0c:4a:3a:a8:b7:bc:64:
38:6e:fb:9e:1c:4a:40:96:d3:9f:84:c4:99:e8:bc:
22:a4:d6:da:1a:14:72:9d:46:2e:d5:ca:7c:5c:4a:
37:6c:c2:71:2d:91:41:20:7a:57:fa:54:e3:fa:44:
27:48:d5:aa:27:5a:60:97:3c:b5:b7:91:79:45:8f:
63:58:52:b3:1e:ec:b2:09:28:9d:08:71:4f:06:77:
16:92:d4:f0:92:6c:6a:14:bf:04:8f:95:33:fd:b1:
e4:3e:71:33:77:ba:eb:8b:79:e0:e0:bd:e2:bd:29:
65:9f:a6:2f:cf:53:31:dd:97:43:02:bf:7a:9b:b7:
61:41:17:55:37:a6:6f:49:71:f8:71:b9:3f:1e:b2:
3e:90:a1:d3:3d:21:0d:4e:22:03:b8:a4:a9:55:4f:
d8:2b:d5:ce:30:0d:ea:1f:de:b9:01:5d:7d:24:4a:
47:98:84:af:ef:c2:d2:b9:7c:68:0b:9f:8b:c5:4b:
76:56:22:93:60:d5:15:66:bf:7f:fd:6b:3e:aa:97:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:3A:2B:C8:2C:C4:44:C4:13:EF:E0:7A:70:DB:20:60:6F:AF:1E
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/tQs6K8gsxETEE-_genDbIGBvrx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
6a:83:4b:7d:b2:37:87:a0:41:e8:64:db:04:2c:f1:5b:f1:9b:
62:c3:50:8d:07:79:6b:5a:a4:39:51:35:90:45:fa:6a:96:61:
63:d1:40:cf:fd:32:69:a3:53:d8:31:a7:d9:d5:68:38:ee:01:
5a:14:e0:08:a5:c4:80:67:81:db:fb:b1:2e:db:ae:70:cc:4b:
3c:4f:9b:40:cb:ed:13:75:e4:3d:13:49:69:d2:1b:f1:80:d1:
c6:e5:33:91:e0:79:4c:02:07:6e:b9:9d:f8:e9:ce:68:38:68:
d8:0c:28:c1:7e:61:9d:ea:82:82:9e:f5:0d:b0:ad:bd:a9:a3:
79:1b:ee:45:d8:0e:f4:6c:44:3e:a0:f5:4f:bc:bc:4a:0c:eb:
ab:bf:9b:da:67:d2:36:1b:67:af:1c:b4:2a:32:84:ee:08:5f:
0b:a4:98:e6:18:d6:ad:5e:67:ef:41:bd:bb:ca:10:1d:3f:81:
7b:c3:ee:71:ed:0d:77:78:9a:1e:69:d5:8c:52:b3:b4:5d:13:
35:ee:ea:ab:d9:88:12:a7:55:f7:69:61:1a:51:36:9a:73:03:
10:e9:9f:48:7d:93:ba:b0:1c:5d:55:e7:3e:b2:5f:d5:c1:10:
a5:a0:25:31:90:cd:32:e7:47:ec:4e:0b:69:aa:c9:2e:1f:86:
77:85:79:17
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIECrFmwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MDIzZDNkMzU4MDBlZjNjYjJhNTZjMzhiZjkxNDM5NzM4MWUwZmYxMB4XDTIyMDEw
MTEwNTU0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjUwYjNhMmJjODJj
YzQ0NGM0MTNlZmUwN2E3MGRiMjA2MDZmYWYxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKyWnV+MVvW+CgC20w+Xu7JXEIR151qt4JoKSnV+F4Mdggs
owBkEmaoTu8Tz+lXLyvOJX0MSjqot7xkOG77nhxKQJbTn4TEmei8IqTW2hoUcp1G
LtXKfFxKN2zCcS2RQSB6V/pU4/pEJ0jVqidaYJc8tbeReUWPY1hSsx7ssgkonQhx
TwZ3FpLU8JJsahS/BI+VM/2x5D5xM3e664t54OC94r0pZZ+mL89TMd2XQwK/epu3
YUEXVTemb0lx+HG5Px6yPpCh0z0hDU4iA7ikqVVP2CvVzjAN6h/euQFdfSRKR5iE
r+/C0rl8aAufi8VLdlYik2DVFWa/f/1rPqqXoDECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBS1CzoryCzERMQT7+B6cNsgYG+vHjAfBgNVHSMEGDAWgBSAI9PTWADvPLKl
bDi/kUOXOB4P8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dDUFQwMWdBN3p5eXBXdzR2NUZEbHpnZURfRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvMjAzOGFhLTdkZTUtNDU4MS05MzNhLWQxYTBjMzIwYzI4YS8x
L3RRczZLOGdzeEVURUUtX2dlbkRiSUdCdnJ4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
MjAzOGFhLTdkZTUtNDU4MS05MzNhLWQxYTBjMzIwYzI4YS8xL2dDUFQwMWdBN3p5
eXBXdzR2NUZEbHpnZURfRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBCX3IAMEBE3z4AMEBF5nkAMEBLIS
gDANBAIAAjAHAwUAKgIJkDANBgkqhkiG9w0BAQsFAAOCAQEAaoNLfbI3h6BB6GTb
BCzxW/GbYsNQjQd5a1qkOVE1kEX6apZhY9FAz/0yaaNT2DGn2dVoOO4BWhTgCKXE
gGeB2/uxLtuucMxLPE+bQMvtE3XkPRNJadIb8YDRxuUzkeB5TAIHbrmd+OnOaDho
2AwowX5hneqCgp71DbCtvamjeRvuRdgO9GxEPqD1T7y8Sgzrq7+b2mfSNhtnrxy0
KjKE7ghfC6SY5hjWrV5n70G9u8oQHT+Be8Puce0Nd3iaHmnVjFKztF0TNe7qq9mI
EqdV92lhGlE2mnMDEOmfSH2TurAcXVXnPrJf1cEQpaAlMZDNMudH7E4LaarJLh+G
d4V5Fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org