Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/Cf7IMW6Kzxu6691BrtPWU0XcJF8.roa
File: Cf7IMW6Kzxu6691BrtPWU0XcJF8.roa (raw, json)
Hash identifier: eYT2Fx5mtX0OzQk81wf1XsjRwFOczOXzLK+w4qRMYH8=
Subject key identifier: 09:FE:C8:31:6E:8A:CF:1B:BA:EB:DD:41:AE:D3:D6:53:45:DC:24:5F
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 01842D8C252BEB9BA48B1235E47608ECFC68
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/Cf7IMW6Kzxu6691BrtPWU0XcJF8.roa
Signing time: Mon 31 Oct 2022 10:17:50 +0000
ROA not before: Mon 31 Oct 2022 10:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24851
IP address blocks: 146.247.62.144/29 maxlen: 29
146.247.62.16/29 maxlen: 29
146.247.62.32/29 maxlen: 29
146.247.62.128/28 maxlen: 28
146.247.62.0/28 maxlen: 28
146.247.62.200/29 maxlen: 29
146.247.62.24/29 maxlen: 29
81.27.96.0/24 maxlen: 24
81.27.96.0/20 maxlen: 20
146.247.48.0/23 maxlen: 23
146.247.48.0/20 maxlen: 20
146.247.50.0/24 maxlen: 24
146.247.51.0/24 maxlen: 24
146.247.62.64/26 maxlen: 26
146.247.62.160/27 maxlen: 27
146.247.59.0/24 maxlen: 24
146.247.62.32/30 maxlen: 30
2a02:2bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:8c:25:2b:eb:9b:a4:8b:12:35:e4:76:08:ec:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Oct 31 10:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09fec8316e8acf1bbaebdd41aed3d65345dc245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:3d:de:24:9d:3f:05:2d:91:fe:3d:cc:6d:
3f:77:b4:65:da:da:c7:25:d0:26:85:81:7d:59:3c:
ea:85:7a:78:ea:a9:83:17:f6:cf:73:ce:04:20:d0:
ec:4e:4f:08:0d:ed:2a:aa:ad:b5:db:03:5b:d0:da:
65:e8:52:a1:5f:63:78:e6:9b:d2:cd:fa:ba:b8:10:
72:f2:53:b8:de:a4:84:59:5f:9f:3f:f3:b4:ce:75:
77:ae:4d:01:92:f9:87:f9:43:61:cb:b2:4d:00:1d:
c5:1b:03:3b:ef:1d:51:c1:81:3a:6d:aa:28:f5:6f:
20:8f:1a:3e:ee:a7:50:65:8c:fd:14:c2:fb:d8:ea:
ae:7f:8b:a2:1f:30:bd:ca:fb:bb:0f:25:5f:d9:b5:
d9:65:c6:47:b0:d1:df:a8:ec:34:89:42:12:88:d6:
af:e0:54:b8:a8:a7:9f:46:65:48:da:df:31:b3:41:
50:75:fd:f1:a5:32:12:fc:9e:3a:49:70:3e:b9:fc:
8c:0e:0a:ed:44:99:04:dc:c4:4c:6d:18:fd:80:da:
7a:96:94:07:07:71:0e:3c:aa:30:b6:b1:65:ec:d0:
21:4e:d3:c3:04:ce:8f:e9:fa:82:6a:de:89:c5:bc:
10:ed:00:e6:55:86:8f:65:5e:d2:8d:0c:b0:b9:0e:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:C8:31:6E:8A:CF:1B:BA:EB:DD:41:AE:D3:D6:53:45:DC:24:5F
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/Cf7IMW6Kzxu6691BrtPWU0XcJF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/20
146.247.48.0/20
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
04:0f:50:6c:56:fe:05:fa:56:ab:42:97:5b:33:f3:91:75:4c:
41:a9:5e:26:d9:49:12:a6:6b:66:c5:0e:2f:6f:59:c3:b1:41:
c8:ec:1f:69:c3:51:8b:5c:c4:28:ad:0d:db:39:42:8f:8a:51:
f1:b3:c7:f4:40:00:33:54:dd:88:73:83:b2:22:be:3e:ba:1e:
b7:51:71:ea:0c:79:5e:b1:aa:2d:ca:44:57:98:59:25:fb:f6:
6f:90:54:b8:82:b8:7e:f4:36:ae:e2:9e:dc:bf:c6:aa:d7:6b:
e7:af:5c:44:65:a9:85:c1:b6:53:7b:82:88:cd:55:2b:48:e3:
e9:b0:61:ad:78:41:73:77:5b:4d:1c:70:e9:9e:17:5c:3e:df:
48:43:49:13:02:75:f0:55:a0:ab:86:1a:6a:5b:83:9d:79:27:
9e:fd:4a:24:36:81:1d:ad:7c:42:90:f8:a4:fc:9c:26:bd:47:
ea:41:6f:2d:2c:e5:62:17:35:8f:34:63:5d:41:dd:df:6b:c9:
ee:4b:f4:5e:5e:c2:9c:9b:fc:7d:71:5e:1f:ea:2b:37:ec:89:
99:a1:01:27:64:11:09:4b:35:63:16:45:64:97:8e:27:14:dd:
b6:9f:56:f3:67:b1:1d:03:a2:5a:19:46:11:de:39:44:96:3b:
e0:4a:9a:f8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYQtjCUr65ukixI15HYI7PxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjIxMDMxMTAxNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWZlYzgzMTZlOGFjZjFiYmFlYmRkNDFhZWQzZDY1MzQ1ZGMyNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPk93iSdPwUtkf49zG0/d7Rl2trH
JdAmhYF9WTzqhXp46qmDF/bPc84EINDsTk8IDe0qqq212wNb0Npl6FKhX2N45pvS
zfq6uBBy8lO43qSEWV+fP/O0znV3rk0BkvmH+UNhy7JNAB3FGwM77x1RwYE6baoo
9W8gjxo+7qdQZYz9FML72Oquf4uiHzC9yvu7DyVf2bXZZcZHsNHfqOw0iUISiNav
4FS4qKefRmVI2t8xs0FQdf3xpTIS/J46SXA+ufyMDgrtRJkE3MRMbRj9gNp6lpQH
B3EOPKowtrFl7NAhTtPDBM6P6fqCat6JxbwQ7QDmVYaPZV7SjQywuQ6WBQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAn+yDFuis8buuvdQa7T1lNF3CRfMB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvQ2Y3SU1XNkt6eHU2NjkxQnJ0UFdVMFhjSkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURtgAwQE
kvcwMA0EAgACMAcDBQAqAiu4MA0GCSqGSIb3DQEBCwUAA4IBAQAED1BsVv4F+lar
QpdbM/ORdUxBqV4m2UkSpmtmxQ4vb1nDsUHI7B9pw1GLXMQorQ3bOUKPilHxs8f0
QAAzVN2Ic4OyIr4+uh63UXHqDHlesaotykRXmFkl+/ZvkFS4grh+9Dau4p7cv8aq
12vnr1xEZamFwbZTe4KIzVUrSOPpsGGteEFzd1tNHHDpnhdcPt9IQ0kTAnXwVaCr
hhpqW4OdeSee/UokNoEdrXxCkPik/JwmvUfqQW8tLOViFzWPNGNdQd3fa8nuS/Re
XsKcm/x9cV4f6is37ImZoQEnZBEJSzVjFkVkl44nFN22n1bzZ7EdA6JaGUYR3jlE
ljvgSpr4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:12 2023 by rpki-client on console-fra.rpki-client.org