Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/fyTRSfUMGoiurYWiL1i5pPP8hbI.roa
File: fyTRSfUMGoiurYWiL1i5pPP8hbI.roa (raw, json)
Hash identifier: V4cvBdwuL6B93JlINol8Eqtxnyc9P6etZTugMqxTiYg=
Subject key identifier: 7F:24:D1:49:F5:0C:1A:88:AE:AD:85:A2:2F:58:B9:A4:F3:FC:85:B2
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 01856E2F85EC1906818038190A45673E8D1C
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/fyTRSfUMGoiurYWiL1i5pPP8hbI.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24851
IP address blocks: 81.27.96.0/24 maxlen: 24
81.27.96.0/20 maxlen: 20
146.247.48.0/20 maxlen: 20
146.247.50.0/24 maxlen: 24
146.247.51.0/24 maxlen: 24
146.247.48.0/23 maxlen: 23
146.247.62.0/24 maxlen: 24
146.247.59.0/24 maxlen: 24
2a02:2bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:85:ec:19:06:81:80:38:19:0a:45:67:3e:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f24d149f50c1a88aead85a22f58b9a4f3fc85b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:a3:9e:c8:4c:8b:26:4e:fc:61:22:77:53:
2e:c3:42:b0:22:95:92:1a:d6:79:46:93:fd:df:94:
63:15:33:95:6d:aa:46:8b:6b:b1:40:e8:43:ff:84:
76:ce:d4:96:42:52:9a:a9:eb:90:26:49:26:d1:d6:
67:b0:3c:d9:0f:b9:0b:6b:aa:04:5f:20:eb:f5:b9:
0d:ed:0c:2c:86:e9:c7:72:d5:b2:1d:ef:8f:69:cd:
b8:08:52:a0:c6:35:53:ec:4f:19:d9:2b:70:b5:69:
e6:0e:56:fd:05:0f:37:ba:5f:40:3a:5b:b8:8f:2c:
da:20:ab:c8:13:8a:52:c1:ae:c0:30:a1:79:f5:39:
b8:23:9e:1e:6b:69:4d:76:b7:aa:dd:ca:4f:29:7d:
ee:5d:75:99:40:71:01:78:d5:00:ca:af:95:98:44:
8e:ac:49:2b:9c:76:4b:0c:09:6e:bd:67:2f:e4:55:
8c:65:0e:9c:29:e9:c5:0b:4d:81:41:11:6d:85:5f:
24:6a:46:28:c7:07:04:14:b3:2a:4b:ac:31:75:8a:
a3:b1:64:5c:9a:fd:50:15:9e:8b:0d:22:24:c2:34:
a3:f8:9f:84:8e:34:80:d5:2a:7d:b1:c7:b6:36:db:
b9:6a:41:d1:91:6d:14:a5:d0:f3:d3:13:da:f4:16:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:D1:49:F5:0C:1A:88:AE:AD:85:A2:2F:58:B9:A4:F3:FC:85:B2
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/fyTRSfUMGoiurYWiL1i5pPP8hbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/20
146.247.48.0/20
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
68:01:da:21:ac:9c:56:d6:98:5f:86:e5:ae:2a:42:a8:f9:a6:
54:75:ae:bb:16:0a:b2:3d:df:32:77:6c:0b:af:e3:92:0b:e1:
54:9d:db:ac:50:47:e0:2f:79:33:75:b3:a6:1a:f1:b0:97:b3:
9f:7e:aa:72:07:be:7e:ff:67:54:97:76:9e:a5:60:0d:8d:25:
5d:ee:c2:70:f3:55:36:56:81:d7:c1:72:c5:a2:e7:f1:8d:a0:
30:a0:11:42:95:bb:a2:23:17:ac:01:68:52:9f:96:80:72:e7:
4c:d2:13:65:93:18:3c:2b:33:b8:3a:16:8c:66:ce:cf:ef:86:
db:29:6f:15:55:da:4e:d9:a1:fb:7f:17:bb:51:d7:cd:17:3b:
65:eb:f5:d0:e5:da:d3:75:32:92:63:89:fa:d9:fc:d8:c7:f0:
84:3f:8d:01:27:21:8b:50:ec:5a:12:fa:b9:fe:b1:fb:c9:51:
24:f4:60:ce:bc:8b:be:61:c4:5b:18:7e:18:70:5e:fc:60:68:
9f:48:ec:37:e2:c6:62:d0:03:63:04:d4:93:0b:85:04:70:37:
4e:0b:2e:90:36:c6:97:83:35:c5:c3:5a:6c:9b:ea:37:5e:e1:
8f:6e:e4:71:eb:9c:6d:44:2e:10:de:b9:d0:46:a5:57:f2:82:
5b:69:7e:e2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVuL4XsGQaBgDgZCkVnPo0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjMwMTAxMTYzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjI0ZDE0OWY1MGMxYTg4YWVhZDg1YTIyZjU4YjlhNGYzZmM4NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosCjnshMiyZO/GEid1Muw0KwIpWS
GtZ5RpP935RjFTOVbapGi2uxQOhD/4R2ztSWQlKaqeuQJkkm0dZnsDzZD7kLa6oE
XyDr9bkN7QwshunHctWyHe+Pac24CFKgxjVT7E8Z2StwtWnmDlb9BQ83ul9AOlu4
jyzaIKvIE4pSwa7AMKF59Tm4I54ea2lNdreq3cpPKX3uXXWZQHEBeNUAyq+VmESO
rEkrnHZLDAluvWcv5FWMZQ6cKenFC02BQRFthV8kakYoxwcEFLMqS6wxdYqjsWRc
mv1QFZ6LDSIkwjSj+J+EjjSA1Sp9sce2Ntu5akHRkW0UpdDz0xPa9BYjJwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH8k0Un1DBqIrq2Foi9YuaTz/IWyMB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvZnlUUlNmVU1Hb2l1cllXaUwxaTVwUFA4aGJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURtgAwQE
kvcwMA0EAgACMAcDBQAqAiu4MA0GCSqGSIb3DQEBCwUAA4IBAQBoAdohrJxW1phf
huWuKkKo+aZUda67FgqyPd8yd2wLr+OSC+FUndusUEfgL3kzdbOmGvGwl7Offqpy
B75+/2dUl3aepWANjSVd7sJw81U2VoHXwXLFoufxjaAwoBFClbuiIxesAWhSn5aA
cudM0hNlkxg8KzO4OhaMZs7P74bbKW8VVdpO2aH7fxe7UdfNFztl6/XQ5drTdTKS
Y4n62fzYx/CEP40BJyGLUOxaEvq5/rH7yVEk9GDOvIu+YcRbGH4YcF78YGifSOw3
4sZi0ANjBNSTC4UEcDdOCy6QNsaXgzXFw1psm+o3XuGPbuRx65xtRC4Q3rnQRqVX
8oJbaX7i
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org