Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/ICos3wYwDyehdOHlKDbYoPyEDR8.roa
File: ICos3wYwDyehdOHlKDbYoPyEDR8.roa (raw, json)
Hash identifier: xTeviH9A+1Hy8Llq7/GQ2aPTB/lYqdFGlbYwrH/ia4s=
Subject key identifier: 20:2A:2C:DF:06:30:0F:27:A1:74:E1:E5:28:36:D8:A0:FC:84:0D:1F
Certificate issuer: /CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Certificate serial: 018CC8DEB16165A2ECEA38FCD72BF56CB793
Authority key identifier: 27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/ICos3wYwDyehdOHlKDbYoPyEDR8.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 92.114.83.0/24 maxlen: 24
185.128.192.0/22 maxlen: 22
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b1:61:65:a2:ec:ea:38:fc:d7:2b:f5:6c:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=202a2cdf06300f27a174e1e52836d8a0fc840d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:4e:4f:95:c4:e3:99:c9:a7:41:db:0f:ce:
ec:79:63:59:10:17:2c:06:9f:47:a2:0b:40:a3:c6:
ba:7d:bc:9e:3d:50:06:c3:ed:a4:3b:57:27:79:76:
7b:66:5a:56:c6:78:e8:df:ca:6d:6e:dc:aa:84:9a:
b8:b0:04:a7:d4:31:f2:a9:eb:e0:0c:2b:94:9e:b3:
6e:d4:ce:03:c5:c9:f2:56:0e:5f:1e:bc:27:78:2b:
12:c7:8c:77:52:ea:b2:6b:f0:1a:5b:71:76:8d:09:
ba:80:5c:29:06:98:f3:93:69:2a:ac:3a:80:e8:1c:
52:b2:2c:6c:78:35:a8:d6:b2:9f:7b:a8:6c:3b:62:
e0:db:63:62:1d:79:bf:13:e2:6e:b6:ea:98:32:aa:
27:87:dd:69:c4:d6:d3:8a:ab:4a:8b:e6:5b:9a:60:
9c:ed:58:94:4e:10:0f:57:68:6f:97:53:43:c1:1c:
02:85:df:21:de:bc:96:53:65:c5:47:6d:13:d6:d9:
33:8f:ab:50:05:82:d8:10:87:d4:41:3a:9d:f3:50:
9c:76:26:61:24:93:a4:aa:45:e2:96:22:33:dd:3f:
73:ce:92:19:75:eb:d7:ef:a3:fc:0d:bb:ac:57:5b:
13:71:a5:9b:f3:30:0c:2f:83:bf:7a:f7:2c:25:20:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:2C:DF:06:30:0F:27:A1:74:E1:E5:28:36:D8:A0:FC:84:0D:1F
X509v3 Authority Key Identifier:
keyid:27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/ICos3wYwDyehdOHlKDbYoPyEDR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
185.128.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fc:98:5b:1f:af:e3:19:a5:15:ff:ce:10:72:7a:77:ca:8b:
a0:a6:fc:da:38:ee:62:d8:95:50:03:3b:14:c5:b9:6a:4e:82:
29:f6:36:aa:e4:8f:94:e8:e3:cd:5a:b5:24:f1:8c:47:08:3f:
5a:28:26:ee:3d:a6:81:2a:3c:2e:d5:1b:8e:94:c6:23:9f:92:
a7:9d:74:f6:c2:6e:49:e4:6b:6a:6a:f0:0e:fd:71:31:3b:09:
6f:d8:f7:92:53:bf:fb:ae:71:7b:7f:9e:a9:0a:6c:4e:72:27:
bc:47:09:69:10:26:5c:48:00:ec:75:47:83:13:cc:28:06:c4:
da:a0:21:4e:28:93:93:a1:72:0b:20:96:43:70:12:de:d9:d2:
0d:28:5c:b2:28:3e:d2:5e:2e:fe:50:5e:f4:a0:44:88:a0:1b:
c0:37:7f:1b:69:5c:d0:af:67:b2:06:35:17:42:5b:42:98:69:
59:27:85:c0:0e:b4:ab:05:0a:f8:1d:84:19:cb:80:6d:d8:e0:
b7:ed:58:ba:6a:69:c3:4e:95:5b:4d:1c:13:52:f3:d4:66:fd:
42:53:48:6b:74:c2:c0:ea:e5:b6:54:f1:0d:7c:0c:74:55:bd:
7f:79:e8:d4:06:78:48:11:55:45:4d:3f:f9:43:c8:7a:c2:58:
e9:82:bf:cd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzI3rFhZaLs6jj81yv1bLeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjZmODIzM2M5MDQ5ZDIwYzE1ZDllYjQ2YzliYjc5NzYx
N2RkYjcwHhcNMjQwMTAyMDYzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDJhMmNkZjA2MzAwZjI3YTE3NGUxZTUyODM2ZDhhMGZjODQwZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv9OT5XE45nJp0HbD87seWNZEBcs
Bp9HogtAo8a6fbyePVAGw+2kO1cneXZ7ZlpWxnjo38ptbtyqhJq4sASn1DHyqevg
DCuUnrNu1M4DxcnyVg5fHrwneCsSx4x3Uuqya/AaW3F2jQm6gFwpBpjzk2kqrDqA
6BxSsixseDWo1rKfe6hsO2Lg22NiHXm/E+JutuqYMqonh91pxNbTiqtKi+ZbmmCc
7ViUThAPV2hvl1NDwRwChd8h3ryWU2XFR20T1tkzj6tQBYLYEIfUQTqd81CcdiZh
JJOkqkXiliIz3T9zzpIZdevX76P8DbusV1sTcaWb8zAML4O/evcsJSCfZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCAqLN8GMA8noXTh5Sg22KD8hA0fMB8GA1UdIwQY
MBaAFCdm+CM8kEnSDBXZ60bJu3l2F923MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJiNEl6eVFTZElNRmRuclJzbTdlWFlYM2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2U4NDktMjM0Ni00YTU0LWI4ZTAt
ZGNiZmViZTc5OTE1LzEvSUNvczN3WXdEeWVoZE9IbEtEYllvUHlFRFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2U4NDktMjM0Ni00YTU0LWI4ZTAtZGNiZmViZTc5OTE1
LzEvSjJiNEl6eVFTZElNRmRuclJzbTdlWFlYM2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVGnAwQA
XHIkAwQAXHI1AwQAXHJTAwQCuYDAMA0GCSqGSIb3DQEBCwUAA4IBAQA8/JhbH6/j
GaUV/84Qcnp3yougpvzaOO5i2JVQAzsUxblqToIp9jaq5I+U6OPNWrUk8YxHCD9a
KCbuPaaBKjwu1RuOlMYjn5KnnXT2wm5J5GtqavAO/XExOwlv2PeSU7/7rnF7f56p
CmxOcie8RwlpECZcSADsdUeDE8woBsTaoCFOKJOToXILIJZDcBLe2dINKFyyKD7S
Xi7+UF70oESIoBvAN38baVzQr2eyBjUXQltCmGlZJ4XADrSrBQr4HYQZy4Bt2OC3
7Vi6amnDTpVbTRwTUvPUZv1CU0hrdMLA6uW2VPENfAx0Vb1/eejUBnhIEVVFTT/5
Q8h6wljpgr/N
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org