Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/TSzhRWgTg0Nqcw-zxsO9KjxII6k.roa
File: TSzhRWgTg0Nqcw-zxsO9KjxII6k.roa (raw, json)
Hash identifier: yeSG6qkRexyfSokMU3hpL4HFh0+DYelTpUcpR7tMnMY=
Subject key identifier: 4D:2C:E1:45:68:13:83:43:6A:73:0F:B3:C6:C3:BD:2A:3C:48:23:A9
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018B6CA5CAAB2709280AE555D92BB6CE9E12
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/TSzhRWgTg0Nqcw-zxsO9KjxII6k.roa
Signing time: Thu 26 Oct 2023 15:41:26 +0000
ROA not before: Thu 26 Oct 2023 15:41:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205056
IP address blocks: 37.72.184.0/23 maxlen: 23
5.157.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:a5:ca:ab:27:09:28:0a:e5:55:d9:2b:b6:ce:9e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Oct 26 15:41:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2ce145681383436a730fb3c6c3bd2a3c4823a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:fa:32:10:02:16:23:82:f9:a3:d3:86:5d:
47:c1:8a:8c:7a:e7:e8:40:99:a2:00:a2:76:66:5b:
7b:78:a7:43:36:98:66:3d:98:7b:8b:c9:f9:f3:c3:
fb:ce:55:1c:24:81:02:7c:2f:5a:be:15:df:09:a6:
de:31:c4:d3:1f:50:bc:d1:2e:b3:d7:bf:d5:19:67:
0c:57:e0:a6:2c:96:c4:f7:64:fd:45:22:2f:0d:6c:
55:c0:cc:4a:20:bc:04:41:10:4d:4b:92:f7:b4:68:
d3:e6:14:49:7e:bb:6b:18:f0:2c:b7:c3:99:65:d8:
24:5a:1c:9c:11:10:39:ac:a1:59:e5:39:86:aa:fd:
a7:f7:5e:24:3e:f4:65:9d:a3:54:3b:25:d9:e1:ac:
83:0b:8a:dc:be:94:5e:93:62:c8:30:a9:6a:de:4c:
ed:f4:6e:e7:05:c9:78:30:2a:90:c6:af:da:4b:4b:
dd:de:59:b3:8c:b3:d7:76:19:2a:f3:c9:84:15:17:
c2:7e:36:d0:0b:09:d4:bc:47:39:b6:93:45:15:20:
0e:d8:5f:22:01:49:4d:a5:5a:04:3d:8e:ed:94:1c:
ba:f6:90:6f:25:10:1c:44:f5:61:8b:a6:46:16:60:
dd:30:a1:da:e8:a9:92:d7:4f:a6:08:45:bc:35:80:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:E1:45:68:13:83:43:6A:73:0F:B3:C6:C3:BD:2A:3C:48:23:A9
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/TSzhRWgTg0Nqcw-zxsO9KjxII6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.2.0/23
37.72.184.0/23
Signature Algorithm: sha256WithRSAEncryption
18:3d:74:3b:9a:74:5a:92:22:28:8b:ca:e6:be:45:7d:35:e7:
6f:b2:04:57:85:2e:0d:d5:26:3c:db:b8:86:75:88:ed:ef:bf:
fe:7f:31:8f:46:29:f9:8e:8f:91:87:5c:9d:d6:20:81:bb:09:
f1:86:3c:3a:a8:5f:bf:5e:35:e6:f5:98:09:ae:4b:13:01:3d:
de:e0:c2:51:e6:99:6f:b6:7c:3f:1f:19:a9:a9:e7:dd:1e:4f:
ad:56:31:f6:e2:53:f2:72:38:dd:c8:1e:c5:a5:3a:c9:6e:ba:
da:7d:e1:c2:95:80:b9:14:82:1e:4b:3a:c4:42:ba:f8:8a:48:
f1:d3:85:65:b8:eb:a8:e8:75:d0:15:78:e4:38:bf:8d:1d:bf:
0f:e5:07:01:c9:57:77:69:f2:6d:1f:ca:b3:cc:ff:41:d8:18:
0a:3c:a3:9a:38:bd:e4:8d:88:8c:48:11:97:ba:eb:28:19:d2:
4e:1e:93:5e:6d:bd:d3:d0:cb:05:72:60:8e:44:f9:ca:d7:ed:
07:81:8b:ff:15:7e:d2:c1:b6:d6:68:de:c8:08:ea:98:fc:eb:
3a:2f:14:c8:5c:3f:2c:d8:18:26:50:91:42:07:ed:54:ee:74:
69:73:a5:77:ca:c9:5a:58:d8:46:e0:08:d4:65:e3:9d:18:6a:
03:ed:b7:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtspcqrJwkoCuVV2Su2zp4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM3NmRmNWY5ZWY0ODdjODJiMzFhODc1YzZhNDk2ZDc5
Y2EwZDcwHhcNMjMxMDI2MTU0MTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDJjZTE0NTY4MTM4MzQzNmE3MzBmYjNjNmMzYmQyYTNjNDgyM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEX6MhACFiOC+aPThl1HwYqMeufo
QJmiAKJ2Zlt7eKdDNphmPZh7i8n588P7zlUcJIECfC9avhXfCabeMcTTH1C80S6z
17/VGWcMV+CmLJbE92T9RSIvDWxVwMxKILwEQRBNS5L3tGjT5hRJfrtrGPAst8OZ
ZdgkWhycERA5rKFZ5TmGqv2n914kPvRlnaNUOyXZ4ayDC4rcvpRek2LIMKlq3kzt
9G7nBcl4MCqQxq/aS0vd3lmzjLPXdhkq88mEFRfCfjbQCwnUvEc5tpNFFSAO2F8i
AUlNpVoEPY7tlBy69pBvJRAcRPVhi6ZGFmDdMKHa6KmS10+mCEW8NYDaSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE0s4UVoE4NDanMPs8bDvSo8SCOpMB8GA1UdIwQY
MBaAFIDzdt9fnvSHyCsxqHXGpJbXnKDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMt
YTRiYzI4MTY2NDNhLzEvVFN6aFJXZ1RnME5xY3ctenhzTzlLanhJSTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMtYTRiYzI4MTY2NDNh
LzEvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBZ0CAwQB
JUi4MA0GCSqGSIb3DQEBCwUAA4IBAQAYPXQ7mnRakiIoi8rmvkV9NedvsgRXhS4N
1SY827iGdYjt77/+fzGPRin5jo+Rh1yd1iCBuwnxhjw6qF+/XjXm9ZgJrksTAT3e
4MJR5plvtnw/HxmpqefdHk+tVjH24lPycjjdyB7FpTrJbrrafeHClYC5FIIeSzrE
Qrr4ikjx04VluOuo6HXQFXjkOL+NHb8P5QcByVd3afJtH8qzzP9B2BgKPKOaOL3k
jYiMSBGXuusoGdJOHpNebb3T0MsFcmCORPnK1+0HgYv/FX7SwbbWaN7ICOqY/Os6
LxTIXD8s2BgmUJFCB+1U7nRpc6V3yslaWNhG4AjUZeOdGGoD7bf3
-----END CERTIFICATE-----
Generated at Fri Dec 8 13:10:53 2023 by rpki-client on console-ams.rpki-client.org