Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/TxviJtVi3l-vCJ1xZBNAryNdAWw.roa
File: TxviJtVi3l-vCJ1xZBNAryNdAWw.roa (raw, json)
Hash identifier: J9BYRPC/KuNUyKXbdYaW2FT/Za5hnWYgDlYSERdi4Kw=
Subject key identifier: 4F:1B:E2:26:D5:62:DE:5F:AF:08:9D:71:64:13:40:AF:23:5D:01:6C
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0309F2DE
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/TxviJtVi3l-vCJ1xZBNAryNdAWw.roa
Signing time: Sat 01 Jan 2022 01:50:27 +0000
ROA not before: Sat 01 Jan 2022 01:50:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.236.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
141.98.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50983646 (0x309f2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f1be226d562de5faf089d71641340af235d016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:5a:d1:a9:d8:70:fa:aa:7c:bb:9d:19:01:
b3:cd:5a:98:cf:58:bb:40:ab:3c:83:d7:a6:83:5d:
35:b7:ac:8c:0a:52:91:8f:d8:c2:81:bc:68:9f:16:
95:4b:fb:44:df:fc:e7:52:fa:4e:5c:7f:36:f6:e6:
33:6c:a1:dd:41:30:4c:13:15:e8:28:3c:85:30:ce:
d4:b1:6d:84:18:05:65:74:80:03:42:db:41:15:ef:
18:03:38:64:13:a5:bd:ae:67:5e:67:df:9a:ad:54:
8c:71:e1:bc:79:fa:2e:9f:af:7f:cd:e6:25:6e:80:
f8:ea:a9:ed:f8:44:9f:47:38:5f:6a:ff:48:61:d8:
17:dd:32:ac:1b:17:a3:08:d6:08:a8:3f:94:80:dd:
49:c2:1f:18:33:47:42:73:b3:79:89:e4:e1:de:f1:
24:e4:49:b5:50:0d:b6:9f:64:23:2e:84:82:90:75:
c3:d8:1b:9a:af:12:cd:3a:4c:08:6d:5b:ea:30:6f:
b1:12:02:66:f0:23:fb:90:ab:f6:e1:c2:5b:2b:5a:
b8:68:5b:8f:fb:56:00:d3:38:46:f7:2f:7e:f7:35:
6b:86:35:74:94:b6:22:ee:c9:77:47:1c:b5:18:ae:
cb:3e:83:88:1d:80:a7:ab:58:6e:74:20:1e:72:7d:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:E2:26:D5:62:DE:5F:AF:08:9D:71:64:13:40:AF:23:5D:01:6C
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/TxviJtVi3l-vCJ1xZBNAryNdAWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
141.98.72.0/22
212.2.236.0/22
213.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:07:56:de:46:ed:15:86:04:91:c2:2b:1e:2f:99:2e:2e:ca:
b2:d9:9b:e3:fb:02:58:e7:49:2b:df:cd:9a:c9:27:b1:a3:a6:
12:0f:dd:65:45:d9:67:c8:f9:e8:d8:36:4c:1b:6c:3c:99:3b:
58:4f:6f:1f:9d:5b:f9:c6:78:7a:61:25:c2:59:06:62:94:f7:
0c:31:29:1f:10:cd:3b:c5:e0:b8:9f:53:79:74:d6:7e:0c:8c:
fe:33:b3:ec:19:68:dc:21:0e:db:d4:04:fc:9b:de:bb:19:8a:
9e:cb:5a:86:59:dc:d8:b7:6b:48:52:15:b4:c5:be:74:30:32:
60:1e:1e:3b:83:2c:f3:99:ab:7c:27:f2:4a:11:eb:fc:d1:fc:
61:46:e9:e3:11:fd:97:6f:e5:90:5d:e8:6f:9d:04:33:c1:ee:
a3:d2:46:86:cf:13:50:c5:6a:82:da:2e:5b:0e:29:fc:62:e2:
24:28:27:a0:df:cb:3e:e1:7b:d2:58:89:7f:f9:9f:76:88:47:
1d:23:4d:e7:39:72:5f:7b:35:b7:b2:6a:93:fe:8c:ee:2e:6f:
31:4c:73:78:74:e0:a7:dd:3d:f2:1b:e4:cc:a5:a8:c5:b8:ef:
11:d5:9c:2e:f7:74:a3:a2:18:6b:27:b0:2f:c8:d0:cc:00:81:
65:7e:b0:91
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEAwny3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDEw
MTAxNTAyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGYxYmUyMjZkNTYy
ZGU1ZmFmMDg5ZDcxNjQxMzQwYWYyMzVkMDE2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkUWtGp2HD6qny7nRkBs81amM9Yu0CrPIPXpoNdNbesjApS
kY/YwoG8aJ8WlUv7RN/851L6Tlx/NvbmM2yh3UEwTBMV6Cg8hTDO1LFthBgFZXSA
A0LbQRXvGAM4ZBOlva5nXmffmq1UjHHhvHn6Lp+vf83mJW6A+Oqp7fhEn0c4X2r/
SGHYF90yrBsXowjWCKg/lIDdScIfGDNHQnOzeYnk4d7xJORJtVANtp9kIy6EgpB1
w9gbmq8SzTpMCG1b6jBvsRICZvAj+5Cr9uHCWytauGhbj/tWANM4Rvcvfvc1a4Y1
dJS2Iu7Jd0cctRiuyz6DiB2Ap6tYbnQgHnJ9fmMCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBRPG+Im1WLeX68InXFkE0CvI10BbDAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L1R4dmlKdFZpM2wtdkNKMXhaQk5BcnlOZEFXdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAi1QBAMEAi2EYAMEAC2SaAMEAC2S
ajAMAwQAUnYZAwQFUnYAAwQCjWJIAwQC1ALsAwQC1eHsMA0GCSqGSIb3DQEBCwUA
A4IBAQCKB1beRu0VhgSRwiseL5kuLsqy2Zvj+wJY50kr382aySexo6YSD91lRdln
yPno2DZMG2w8mTtYT28fnVv5xnh6YSXCWQZilPcMMSkfEM07xeC4n1N5dNZ+DIz+
M7PsGWjcIQ7b1AT8m967GYqey1qGWdzYt2tIUhW0xb50MDJgHh47gyzzmat8J/JK
Eev80fxhRunjEf2Xb+WQXehvnQQzwe6j0kaGzxNQxWqC2i5bDin8YuIkKCeg38s+
4XvSWIl/+Z92iEcdI03nOXJfezW3smqT/ozuLm8xTHN4dOCn3T3yG+TMpajFuO8R
1Zwu93SjohhrJ7AvyNDMAIFlfrCR
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org