Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa
File: FwjYu59IHrP1xjmjmN9SQelTdUI.roa (raw, json)
Hash identifier: SHA37VB59XxBBHafmsVB+ZcMkytFcgJUaCyzpBp/nww=
Subject key identifier: 17:08:D8:BB:9F:48:1E:B3:F5:C6:39:A3:98:DF:52:41:E9:53:75:42
Certificate issuer: /CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Certificate serial: 018CC50016611CF52612B85FC6DC22ACC360
Authority key identifier: 75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12778
IP address blocks: 212.72.96.0/19 maxlen: 24
77.234.128.0/19 maxlen: 24
2a02:d68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:16:61:1c:f5:26:12:b8:5f:c6:dc:22:ac:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1708d8bb9f481eb3f5c639a398df5241e9537542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:cd:67:57:e9:e3:d1:89:5e:6a:e1:aa:64:
f6:9e:85:72:32:8e:e4:57:97:af:06:46:85:a1:6a:
0d:b0:28:c6:15:c8:61:eb:56:39:d9:a4:b1:59:c7:
8f:3c:37:72:6b:41:11:af:5e:68:06:fb:d2:f9:98:
e9:26:11:82:3c:94:8e:3d:9e:c2:07:a2:22:8e:c0:
7f:2b:e7:92:63:52:97:cf:2d:64:3f:32:c7:5f:94:
09:3d:5b:af:6f:4b:62:cf:3d:41:15:3e:44:ad:28:
44:4b:ac:dd:8b:1b:54:2c:02:28:34:f5:ee:5f:44:
dd:52:4e:1f:06:9a:dc:b0:9e:db:fb:3f:45:3e:1a:
1f:97:4d:0f:44:36:45:80:dd:0d:5c:98:83:6b:d7:
24:02:45:2e:8d:6a:39:74:35:51:6e:07:84:20:cf:
c9:e1:76:04:c8:d5:55:ad:d1:d6:a6:77:96:5d:0b:
92:6f:9a:c6:0a:14:11:1b:bf:d7:33:7c:06:91:8b:
a7:64:69:2c:bb:b7:54:39:32:d3:af:25:52:0a:d5:
9f:b3:02:90:eb:7d:52:02:a2:93:8d:ff:73:b7:d7:
a5:6c:cc:77:aa:4e:17:a1:58:ac:48:0c:fc:d7:31:
f8:2f:ba:f4:84:2c:44:a8:e7:b2:ab:26:26:8a:6b:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:D8:BB:9F:48:1E:B3:F5:C6:39:A3:98:DF:52:41:E9:53:75:42
X509v3 Authority Key Identifier:
keyid:75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.128.0/19
212.72.96.0/19
IPv6:
2a02:d68::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d4:a1:d1:2a:ba:be:1e:d9:93:18:6d:12:b8:e8:a4:a0:27:
ac:29:a5:b5:78:b3:fd:05:ca:bf:a1:06:0e:be:e1:f1:a4:89:
99:20:d1:f3:cf:73:05:24:1f:a9:d1:1a:e4:1e:e5:62:5d:b6:
74:a0:97:e5:a6:a2:a8:99:53:bd:5e:1e:3f:49:b4:8a:61:b9:
f7:f0:e4:52:5a:27:eb:58:a9:fc:4f:d4:7c:96:be:22:e4:08:
52:cb:c7:0d:71:52:a1:fe:9a:f4:19:4a:d4:2d:5b:b2:23:99:
e6:db:44:79:2d:cf:24:12:41:cf:3c:1f:cc:f0:e6:6c:a0:07:
8b:76:2b:e1:c5:6a:cf:14:ed:30:bf:7c:f0:17:50:42:b1:b3:
0c:c3:37:53:14:be:97:30:69:98:d6:47:2e:cf:57:95:bd:0c:
de:7f:08:42:b3:00:50:20:5f:a6:97:d0:12:c7:b5:dd:82:e9:
d7:81:e4:85:58:c8:6b:29:3a:41:1f:d2:2b:d2:21:6b:52:b6:
07:9b:82:10:64:94:04:ae:6b:3c:e2:0d:52:b8:bb:e5:da:23:
82:08:55:9d:70:86:7b:8b:4c:1b:cb:a9:64:0a:62:34:2e:e2:
20:d3:17:7a:df:bc:1a:4a:3e:32:f5:dd:a4:b2:c8:bc:6d:13:
9a:d9:f5:04
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFABZhHPUmErhfxtwirMNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjgyODQ3ZjgzZGI4MjhlN2YwNGMyY2I1Y2ViNmQ4YzQy
MzdmYWIwHhcNMjQwMTAxMTIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzA4ZDhiYjlmNDgxZWIzZjVjNjM5YTM5OGRmNTI0MWU5NTM3NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY7NZ1fp49GJXmrhqmT2noVyMo7k
V5evBkaFoWoNsCjGFchh61Y52aSxWcePPDdya0ERr15oBvvS+ZjpJhGCPJSOPZ7C
B6IijsB/K+eSY1KXzy1kPzLHX5QJPVuvb0tizz1BFT5ErShES6zdixtULAIoNPXu
X0TdUk4fBprcsJ7b+z9FPhofl00PRDZFgN0NXJiDa9ckAkUujWo5dDVRbgeEIM/J
4XYEyNVVrdHWpneWXQuSb5rGChQRG7/XM3wGkYunZGksu7dUOTLTryVSCtWfswKQ
631SAqKTjf9zt9elbMx3qk4XoVisSAz81zH4L7r0hCxEqOeyqyYmimuPAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBcI2LufSB6z9cY5o5jfUkHpU3VCMB8GA1UdIwQY
MBaAFHVoKEf4Pbgo5/BMLLXOttjEI3+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMt
NWNjNzQxMWM2YWRhLzEvRndqWXU1OUlIclAxeGptam1OOVNRZWxUZFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMtNWNjNzQxMWM2YWRh
LzEvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTeqAAwQF
1EhgMA0EAgACMAcDBQAqAg1oMA0GCSqGSIb3DQEBCwUAA4IBAQAP1KHRKrq+HtmT
GG0SuOikoCesKaW1eLP9Bcq/oQYOvuHxpImZINHzz3MFJB+p0RrkHuViXbZ0oJfl
pqKomVO9Xh4/SbSKYbn38ORSWifrWKn8T9R8lr4i5AhSy8cNcVKh/pr0GUrULVuy
I5nm20R5Lc8kEkHPPB/M8OZsoAeLdivhxWrPFO0wv3zwF1BCsbMMwzdTFL6XMGmY
1kcuz1eVvQzefwhCswBQIF+ml9ASx7XdgunXgeSFWMhrKTpBH9Ir0iFrUrYHm4IQ
ZJQErms84g1SuLvl2iOCCFWdcIZ7i0wby6lkCmI0LuIg0xd637waSj4y9d2kssi8
bROa2fUE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org