Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/f6suO1V5Gsv8pji3w_zLSufgcuM.roa
File: f6suO1V5Gsv8pji3w_zLSufgcuM.roa (raw, json)
Hash identifier: 5NzreeDmD7qhWrimdcCxJEnUcWbYdIhDs+6T0CW2Y9s=
Subject key identifier: 7F:AB:2E:3B:55:79:1A:CB:FC:A6:38:B7:C3:FC:CB:4A:E7:E0:72:E3
Certificate issuer: /CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Certificate serial: 01856F26B84A5DF3D04E5380993313FE9C77
Authority key identifier: 78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/f6suO1V5Gsv8pji3w_zLSufgcuM.roa
Signing time: Sun 01 Jan 2023 21:04:46 +0000
ROA not before: Sun 01 Jan 2023 21:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200738
IP address blocks: 134.255.215.0/24 maxlen: 24
185.159.252.0/22 maxlen: 22
109.230.216.0/23 maxlen: 23
92.114.56.0/22 maxlen: 22
109.230.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b8:4a:5d:f3:d0:4e:53:80:99:33:13:fe:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Validity
Not Before: Jan 1 21:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fab2e3b55791acbfca638b7c3fccb4ae7e072e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:75:3f:a6:e0:4a:fd:85:3b:58:2e:cd:b7:
16:98:03:f4:dd:49:74:08:df:40:0e:07:b8:54:02:
2a:e3:a7:d5:9b:60:5c:5f:b2:82:12:d4:7e:dc:45:
08:5e:a8:ec:a2:5f:bf:4f:1c:43:f9:17:72:9d:69:
13:4a:99:d1:14:2d:4b:73:22:4c:66:43:ee:f0:c2:
32:16:a4:dd:97:f6:89:d9:81:dc:75:dd:c2:3d:81:
59:32:48:98:f5:d1:29:40:e2:9e:55:d6:03:db:6e:
8b:6a:1b:3e:61:15:75:ef:f5:19:69:dd:39:6a:cd:
dd:fa:2b:9d:19:d9:cf:1d:5b:41:b5:4c:f8:ad:81:
ee:78:6f:7e:b2:3c:c6:ee:d0:1d:cc:30:f7:be:c7:
2b:19:ad:2b:2a:cc:55:34:8e:f1:78:99:8e:10:ef:
34:63:a9:17:76:42:fd:52:36:c0:5b:47:db:66:3b:
80:42:e5:54:2e:49:c2:9c:b9:a8:e8:ae:2c:e4:75:
2b:fe:f5:4e:43:3b:f2:7a:ef:58:f7:8e:64:de:79:
33:09:c4:ff:a3:87:db:84:a6:c3:55:2c:40:11:fc:
f8:b5:73:70:5d:74:a9:87:b2:28:2b:23:93:8d:5a:
eb:29:e5:4f:17:94:29:df:a6:48:13:75:fc:c1:b3:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:2E:3B:55:79:1A:CB:FC:A6:38:B7:C3:FC:CB:4A:E7:E0:72:E3
X509v3 Authority Key Identifier:
keyid:78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/f6suO1V5Gsv8pji3w_zLSufgcuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.56.0/22
109.230.216.0/23
109.230.222.0/24
134.255.215.0/24
185.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
04:55:35:9d:30:99:be:47:98:ce:fe:d4:b3:ba:8f:16:4b:73:
d5:c1:9d:47:81:30:24:51:85:28:f0:08:f2:10:54:6a:b0:0a:
b8:48:ef:39:cb:2e:be:03:a2:c6:ec:9d:d4:7f:7e:1f:dd:4f:
11:e7:1b:d3:9d:22:2d:95:55:67:05:b7:0f:50:de:7b:1a:4a:
de:84:03:c2:2e:45:3c:85:d3:fa:65:17:43:30:9b:16:b4:a8:
94:44:30:f4:58:0b:46:5e:33:66:9f:2d:5b:ec:41:ad:09:f6:
5a:4c:86:3b:2b:b4:2a:4c:9d:bc:71:90:cc:f5:6f:d7:f5:c2:
1f:51:e2:40:f0:7c:d4:9d:d8:5f:b8:da:91:4f:c5:ed:e8:05:
e0:9c:f2:da:74:f8:51:24:27:50:49:17:ec:1a:70:e9:89:e1:
b1:87:63:4f:7f:e5:3e:c8:ad:03:c3:09:1b:48:f0:cd:50:79:
91:f1:9e:83:78:6e:03:8d:64:e5:ce:30:8b:3a:05:f5:24:a4:
34:42:7b:f5:7d:d5:7e:18:3d:e9:1e:2c:94:80:24:8e:24:3d:
1b:8b:79:5b:de:95:2a:70:d5:a4:81:17:1a:73:67:6a:5e:df:
98:6e:9e:ba:bd:2d:68:6a:e5:18:de:be:0a:d7:f4:10:ab:ec:
4f:16:3e:e4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVvJrhKXfPQTlOAmTMT/px3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YmM2NjIxYWM5Yzg4OTI3YmQzNWE2YWVmNzkxZDZmZjYy
OWM2OTYwHhcNMjMwMTAxMjEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmFiMmUzYjU1NzkxYWNiZmNhNjM4YjdjM2ZjY2I0YWU3ZTA3MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidV1P6bgSv2FO1guzbcWmAP03Ul0
CN9ADge4VAIq46fVm2BcX7KCEtR+3EUIXqjsol+/TxxD+RdynWkTSpnRFC1LcyJM
ZkPu8MIyFqTdl/aJ2YHcdd3CPYFZMkiY9dEpQOKeVdYD226Lahs+YRV17/UZad05
as3d+iudGdnPHVtBtUz4rYHueG9+sjzG7tAdzDD3vscrGa0rKsxVNI7xeJmOEO80
Y6kXdkL9UjbAW0fbZjuAQuVULknCnLmo6K4s5HUr/vVOQzvyeu9Y945k3nkzCcT/
o4fbhKbDVSxAEfz4tXNwXXSph7IoKyOTjVrrKeVPF5Qp36ZIE3X8wbP29wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH+rLjtVeRrL/KY4t8P8y0rn4HLjMB8GA1UdIwQY
MBaAFHi8ZiGsnIiSe9Naau95HW/2KcaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUx4bUlheWNpSko3MDFwcTcza2RiX1lweHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YmI3MjMtNzg0MC00YzEzLTg2ZGUt
NGEwMjljZGU0YzJhLzEvZjZzdU8xVjVHc3Y4cGppM3dfekxTdWZnY3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85YmI3MjMtNzg0MC00YzEzLTg2ZGUtNGEwMjljZGU0YzJh
LzEvZUx4bUlheWNpSko3MDFwcTcza2RiX1lweHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCXHI4AwQB
bebYAwQAbebeAwQAhv/XAwQCuZ/8MA0GCSqGSIb3DQEBCwUAA4IBAQAEVTWdMJm+
R5jO/tSzuo8WS3PVwZ1HgTAkUYUo8AjyEFRqsAq4SO85yy6+A6LG7J3Uf34f3U8R
5xvTnSItlVVnBbcPUN57GkrehAPCLkU8hdP6ZRdDMJsWtKiURDD0WAtGXjNmny1b
7EGtCfZaTIY7K7QqTJ28cZDM9W/X9cIfUeJA8HzUndhfuNqRT8Xt6AXgnPLadPhR
JCdQSRfsGnDpieGxh2NPf+U+yK0DwwkbSPDNUHmR8Z6DeG4DjWTlzjCLOgX1JKQ0
Qnv1fdV+GD3pHiyUgCSOJD0bi3lb3pUqcNWkgRcac2dqXt+Ybp66vS1oauUY3r4K
1/QQq+xPFj7k
-----END CERTIFICATE-----
Generated at Mon Nov 6 10:35:13 2023 by rpki-client on console-fra.rpki-client.org