Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ug5VRT7awXBz29W4CBVu4KEZQqQ.roa
File: ug5VRT7awXBz29W4CBVu4KEZQqQ.roa (raw, json)
Hash identifier: kW6L/brqtKqdVQ6Ysp3Fz5/MUoNY0Dg5H4HBOe6fV3E=
Subject key identifier: BA:0E:55:45:3E:DA:C1:70:73:DB:D5:B8:08:15:6E:E0:A1:19:42:A4
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 018407
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ug5VRT7awXBz29W4CBVu4KEZQqQ.roa
Signing time: Thu 03 Feb 2022 17:11:22 +0000
ROA not before: Thu 03 Feb 2022 17:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203950
IP address blocks: 89.40.161.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99335 (0x18407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Feb 3 17:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba0e55453edac17073dbd5b808156ee0a11942a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:5d:12:b5:b7:ff:67:7f:88:25:74:62:f2:
dc:08:06:90:da:c5:f7:fc:6c:d4:56:33:21:90:ec:
49:27:5a:b7:59:35:c6:81:34:41:06:f9:56:26:4a:
c3:d8:e6:aa:b6:77:be:07:ac:8a:b1:5c:60:5e:40:
37:b5:98:85:49:a8:a1:96:b1:a0:94:78:fb:0e:3f:
bd:8e:93:92:8f:3f:fc:0d:f4:f1:7c:70:a4:be:08:
06:5e:31:8f:d7:8d:36:64:3d:bc:00:f3:53:d0:30:
f0:d2:a2:34:49:6b:1e:1f:86:7c:e7:7d:3d:64:26:
61:d1:00:18:13:09:78:1a:c8:86:59:09:15:0e:a2:
a0:a3:61:0d:57:17:d9:4b:ae:e7:64:1f:65:69:3d:
a1:fc:a3:b5:78:89:50:83:8b:b4:54:da:ea:a5:74:
a3:c1:61:4d:8b:e7:fd:41:04:ea:18:ee:48:da:f4:
5c:a6:5f:40:cc:98:60:30:27:df:dd:ab:8e:42:8d:
36:56:e6:97:f5:b7:97:cd:d0:b5:78:d0:e6:c1:b2:
75:52:93:0d:6a:5d:52:02:bd:51:c5:c1:32:a6:85:
9b:0a:d6:c6:06:95:d2:f4:69:66:d8:1e:31:fa:b3:
05:21:0f:4d:7c:78:f6:45:0e:0e:12:a2:07:ee:df:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0E:55:45:3E:DA:C1:70:73:DB:D5:B8:08:15:6E:E0:A1:19:42:A4
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/ug5VRT7awXBz29W4CBVu4KEZQqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.242.0/24
89.40.35.0/24
89.40.161.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e7:73:c7:35:df:a0:60:97:2b:d5:bc:60:43:c0:25:56:6e:
d2:c8:b9:a4:b9:65:f9:12:b7:f3:f9:6c:27:ef:15:f4:db:d5:
a6:74:3d:b0:0c:3b:70:be:85:fb:7b:ef:e9:4a:ab:37:96:51:
df:17:06:27:6b:59:f7:95:03:13:ba:2f:ce:d9:02:1b:62:ce:
e1:aa:c7:1e:d9:3d:38:8a:e6:b7:cb:a1:45:91:02:f8:e2:63:
48:31:c9:22:46:cd:9c:60:2b:d6:c9:50:de:94:fc:34:57:47:
19:5f:42:a4:20:39:23:fe:b8:af:16:be:97:db:08:1f:40:dc:
4b:69:4b:c5:e6:de:ac:45:fa:31:cf:c2:db:0d:59:2b:5a:ce:
9b:83:91:d1:df:85:2c:34:53:00:31:29:eb:50:c1:53:27:3a:
e3:42:11:2f:d8:fc:fc:69:66:18:db:f1:02:a5:7d:be:86:af:
6d:3d:8b:2c:5c:73:04:f3:01:c9:4c:b2:1f:e5:4f:81:1f:08:
67:f9:01:98:12:a8:f8:cc:c2:ef:ed:96:74:4f:c3:5d:3c:57:
89:e0:70:28:fc:df:b7:ab:aa:58:23:7a:5f:0a:54:62:13:e1:
a0:5e:21:5a:f2:d3:dd:2c:a8:09:f1:86:41:8f:b8:6e:3b:0d:
7c:e9:f5:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDAYQHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
MmIyZDJmYThiY2Y1ZjgzNjIxMGI5ZjQ5MjExZWU2ZDA5NGQwZDIwHhcNMjIwMjAz
MTcxMTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYTBlNTU0NTNlZGFj
MTcwNzNkYmQ1YjgwODE1NmVlMGExMTk0MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnbBdErW3/2d/iCV0YvLcCAaQ2sX3/GzUVjMhkOxJJ1q3WTXG
gTRBBvlWJkrD2Oaqtne+B6yKsVxgXkA3tZiFSaihlrGglHj7Dj+9jpOSjz/8DfTx
fHCkvggGXjGP1402ZD28APNT0DDw0qI0SWseH4Z85309ZCZh0QAYEwl4GsiGWQkV
DqKgo2ENVxfZS67nZB9laT2h/KO1eIlQg4u0VNrqpXSjwWFNi+f9QQTqGO5I2vRc
pl9AzJhgMCff3auOQo02VuaX9beXzdC1eNDmwbJ1UpMNal1SAr1RxcEypoWbCtbG
BpXS9Glm2B4x+rMFIQ9NfHj2RQ4OEqIH7t/kJwIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFLoOVUU+2sFwc9vVuAgVbuChGUKkMB8GA1UdIwQYMBaAFBIrLS+ovPX4NiEL
n0khHubQlNDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4LzEv
dWc1VlJUN2F3WEJ6MjlXNENCVnU0S0VaUXFRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9k
NTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4LzEvRWlzdEw2aTg5Zmcy
SVF1ZlNTRWU1dENVME5JLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSfyAwQAWSgjAwQAWSihAwQAuapB
MA0GCSqGSIb3DQEBCwUAA4IBAQCX53PHNd+gYJcr1bxgQ8AlVm7SyLmkuWX5Erfz
+Wwn7xX029WmdD2wDDtwvoX7e+/pSqs3llHfFwYna1n3lQMTui/O2QIbYs7hqsce
2T04iua3y6FFkQL44mNIMckiRs2cYCvWyVDelPw0V0cZX0KkIDkj/rivFr6X2wgf
QNxLaUvF5t6sRfoxz8LbDVkrWs6bg5HR34UsNFMAMSnrUMFTJzrjQhEv2Pz8aWYY
2/ECpX2+hq9tPYssXHME8wHJTLIf5U+BHwhn+QGYEqj4zMLv7ZZ0T8NdPFeJ4HAo
/N+3q6pYI3pfClRiE+GgXiFa8tPdLKgJ8YZBj7huOw186fWI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org