Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/gFD2c0Fu79cGyK9boLLY9C9hCIo.roa
File: gFD2c0Fu79cGyK9boLLY9C9hCIo.roa (raw, json)
Hash identifier: LkXuqDqZ/+ja6UBxuF3NuWk1FsjnlKqbEYJBKlyYGlg=
Subject key identifier: 80:50:F6:73:41:6E:EF:D7:06:C8:AF:5B:A0:B2:D8:F4:2F:61:08:8A
Certificate issuer: /CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Certificate serial: 018CC349448405DAE555EFD8CF5F4CD3E746
Authority key identifier: 88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/gFD2c0Fu79cGyK9boLLY9C9hCIo.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399114
IP address blocks: 185.234.115.0/24 maxlen: 24
94.154.8.0/24 maxlen: 24
2a10:e580::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:44:84:05:da:e5:55:ef:d8:cf:5f:4c:d3:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8050f673416eefd706c8af5ba0b2d8f42f61088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:3b:41:65:ea:f3:3a:34:7f:4c:f1:67:ed:
fa:39:58:67:2b:87:a9:68:4d:6f:6e:15:54:a7:eb:
b6:e9:21:59:e0:b9:b6:17:8a:e4:60:ba:3b:7e:df:
5c:b9:a0:81:bc:71:d2:d9:ce:ac:bf:a3:d1:c5:00:
30:b0:54:3a:19:be:37:0e:fa:f6:98:52:28:44:6a:
e8:db:6b:cd:24:8a:34:2e:e8:b6:f7:f4:3b:14:1b:
5a:26:88:a2:41:3c:db:34:06:6c:67:5c:86:f7:09:
f2:5a:04:9f:fa:88:88:1f:14:35:e7:e4:22:12:19:
37:c2:13:59:8a:18:4c:04:4d:10:2d:fb:b5:b7:98:
ad:2f:17:6e:fa:32:cb:e6:24:65:c7:d6:ed:ae:65:
e2:76:fb:1e:19:9b:e4:d9:2e:41:e6:e3:7a:31:bf:
fd:bb:85:75:8e:e6:a9:0a:68:4b:4b:24:15:73:bf:
08:94:19:5c:f6:d4:5a:7a:13:21:ff:1e:3d:9a:bd:
da:5f:0c:c0:40:95:69:5b:85:bb:3d:94:ba:27:f9:
28:7f:a9:ed:88:03:56:67:ec:aa:1d:2d:b4:81:82:
fd:c5:31:08:be:5a:51:36:39:cd:da:ac:4f:6d:12:
3a:06:a8:fa:f3:3a:28:5f:a1:1b:ce:07:28:10:66:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:F6:73:41:6E:EF:D7:06:C8:AF:5B:A0:B2:D8:F4:2F:61:08:8A
X509v3 Authority Key Identifier:
keyid:88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/gFD2c0Fu79cGyK9boLLY9C9hCIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
185.234.115.0/24
IPv6:
2a10:e580::/29
Signature Algorithm: sha256WithRSAEncryption
49:3d:78:68:e6:4b:bc:34:9f:77:3c:de:d2:3d:8f:4e:d9:ff:
8b:1a:20:5b:35:25:e9:ae:fe:df:04:fd:f2:e6:cd:f4:85:63:
cd:a2:ef:3d:74:cf:09:6b:a3:16:1a:0a:a5:ff:8a:be:6f:ac:
48:27:d0:14:c2:52:29:a3:3b:ad:0f:a9:aa:79:b6:c1:13:74:
f8:2c:40:c8:a0:8e:7d:13:19:c6:14:a2:0f:75:6b:34:c7:46:
cb:12:44:97:a7:a6:0c:88:96:f2:f3:df:fe:74:02:32:6f:84:
3b:28:62:a3:07:b4:bc:b6:72:ac:28:db:65:ad:40:dd:e9:d3:
1a:8c:8b:d0:9c:d8:aa:15:b7:7f:23:c3:18:78:ea:5f:0c:ec:
02:1c:57:3a:1b:fd:21:c7:ba:d6:05:9e:5e:50:f6:65:8f:fb:
a8:ef:9d:f0:57:aa:9d:a3:72:bb:34:3c:7c:6e:29:e1:38:57:
7d:15:bf:db:3a:66:78:60:81:f6:86:ff:00:34:42:aa:47:1c:
13:55:15:3c:b9:74:70:50:6f:28:5b:05:ae:b7:f3:77:07:42:
0a:c2:40:aa:fd:f8:12:cc:76:ac:6a:1a:82:20:58:d0:24:69:
8f:ec:82:05:bf:e6:a8:54:e4:8e:07:18:f0:b3:a4:7d:e5:08:
d7:e1:3c:46
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDSUSEBdrlVe/Yz19M0+dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjY1ODBhMjI5Y2NmZDUzNjllMTllMjUyYWRjYjcyOGNk
YWNkMzkwHhcNMjQwMTAxMDQzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDUwZjY3MzQxNmVlZmQ3MDZjOGFmNWJhMGIyZDhmNDJmNjEwODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrA7QWXq8zo0f0zxZ+36OVhnK4ep
aE1vbhVUp+u26SFZ4Lm2F4rkYLo7ft9cuaCBvHHS2c6sv6PRxQAwsFQ6Gb43Dvr2
mFIoRGro22vNJIo0Lui29/Q7FBtaJoiiQTzbNAZsZ1yG9wnyWgSf+oiIHxQ15+Qi
Ehk3whNZihhMBE0QLfu1t5itLxdu+jLL5iRlx9btrmXidvseGZvk2S5B5uN6Mb/9
u4V1juapCmhLSyQVc78IlBlc9tRaehMh/x49mr3aXwzAQJVpW4W7PZS6J/kof6nt
iANWZ+yqHS20gYL9xTEIvlpRNjnN2qxPbRI6Bqj68zooX6EbzgcoEGY74QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIBQ9nNBbu/XBsivW6Cy2PQvYQiKMB8GA1UdIwQY
MBaAFIj2WAoinM/VNp4Z4lKty3KM2s05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBaWUNpS2N6OVUybmhuaVVxM0xjb3phelRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNTJiMzAtY2Q0Ny00YzI3LWI2ZmMt
ZDA5N2NkMmM3ZDgyLzEvZ0ZEMmMwRnU3OWNHeUs5Ym9MTFk5QzloQ0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lNTJiMzAtY2Q0Ny00YzI3LWI2ZmMtZDA5N2NkMmM3ZDgy
LzEvaVBaWUNpS2N6OVUybmhuaVVxM0xjb3phelRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXpoIAwQA
uepzMA0EAgACMAcDBQMqEOWAMA0GCSqGSIb3DQEBCwUAA4IBAQBJPXho5ku8NJ93
PN7SPY9O2f+LGiBbNSXprv7fBP3y5s30hWPNou89dM8Ja6MWGgql/4q+b6xIJ9AU
wlIpozutD6mqebbBE3T4LEDIoI59ExnGFKIPdWs0x0bLEkSXp6YMiJby89/+dAIy
b4Q7KGKjB7S8tnKsKNtlrUDd6dMajIvQnNiqFbd/I8MYeOpfDOwCHFc6G/0hx7rW
BZ5eUPZlj/uo753wV6qdo3K7NDx8binhOFd9Fb/bOmZ4YIH2hv8ANEKqRxwTVRU8
uXRwUG8oWwWut/N3B0IKwkCq/fgSzHasahqCIFjQJGmP7IIFv+aoVOSOBxjws6R9
5QjX4TxG
-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:22 2024 by rpki-client on console-fra.rpki-client.org