Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/fOebQ8--9w6q50ba_gWg1cg8jYY.roa
File: fOebQ8--9w6q50ba_gWg1cg8jYY.roa (raw, json)
Hash identifier: 7wtR3HbMXQNTP6IbosygGl0YVwoLYHH72h5mLbm5CiU=
Subject key identifier: 7C:E7:9B:43:CF:BE:F7:0E:AA:E7:46:DA:FE:05:A0:D5:C8:3C:8D:86
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0187A3156763D84B6AB98D79E14508DE5D52
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/fOebQ8--9w6q50ba_gWg1cg8jYY.roa
Signing time: Fri 21 Apr 2023 09:11:41 +0000
ROA not before: Fri 21 Apr 2023 09:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.105.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
92.114.5.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:15:67:63:d8:4b:6a:b9:8d:79:e1:45:08:de:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 21 09:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ce79b43cfbef70eaae746dafe05a0d5c83c8d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:d7:15:e3:b5:62:e3:43:78:22:7a:b8:df:
f2:f4:de:3c:f3:d5:ed:e7:6b:fc:93:d5:0e:a1:32:
21:dd:56:36:dd:13:0c:5b:4e:c8:75:89:3d:12:fc:
b9:98:c6:50:16:4f:fd:3f:23:33:3d:0e:d3:5c:2b:
d7:f8:e5:19:9e:11:d5:07:e3:73:b3:75:7c:e8:33:
c4:7e:bc:64:43:eb:66:85:c6:88:9a:6f:f6:ba:a6:
38:63:0b:a1:f6:41:c3:4d:11:7b:b8:cc:9d:e4:24:
58:4f:9d:84:d6:14:68:e0:76:2a:c9:89:ad:45:44:
66:30:b8:f0:62:aa:0c:54:90:1c:d1:68:ec:29:52:
b7:14:b5:ef:78:a3:ba:97:d7:fb:f1:74:4e:1f:e4:
fd:85:07:e9:e6:b5:f8:2f:d7:1a:ab:30:7a:2c:7d:
21:20:a8:9d:26:df:2f:e7:98:20:cc:2b:5e:36:89:
85:bc:38:e8:25:aa:04:5d:1f:14:a5:58:c5:95:15:
19:42:c2:75:fb:71:1d:5e:ae:45:3f:3a:07:e6:a6:
2e:9e:b2:03:c6:29:02:c0:a9:38:aa:99:a8:cd:2d:
07:ef:f1:e7:de:97:d3:bd:7e:54:07:83:63:90:d7:
04:bf:76:f8:f5:ae:b3:22:5c:2b:a1:2a:d2:bb:a6:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E7:9B:43:CF:BE:F7:0E:AA:E7:46:DA:FE:05:A0:D5:C8:3C:8D:86
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/fOebQ8--9w6q50ba_gWg1cg8jYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.105.0-45.146.106.255
82.118.28.0/22
92.114.5.0/24
141.98.72.0/24
141.98.74.0/23
212.2.239.0/24
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
13:00:00:42:91:34:79:ac:c1:a5:48:5b:f0:6d:26:c9:5d:81:
88:35:ed:10:97:82:ef:56:ac:87:eb:42:25:0a:00:bc:32:80:
17:07:02:19:7d:92:c5:0f:dd:cd:bf:d9:a6:57:ed:67:47:79:
e9:d7:82:4d:cf:d7:49:3c:1b:49:fa:4e:c7:6e:7e:09:e6:75:
70:81:8d:a7:e2:e4:fe:9d:c7:36:d4:12:c8:71:f5:51:16:2d:
7c:7d:56:f1:de:9d:a2:fd:e3:31:c6:44:a7:27:20:f4:10:c9:
78:ae:0d:3c:c6:12:55:96:1b:e3:20:3c:43:ea:2d:21:be:f4:
a6:90:84:04:57:53:a1:35:93:18:0b:45:f2:97:c1:7b:29:2e:
29:96:68:28:a3:50:7d:a6:0f:f7:b2:0e:08:56:3e:c3:d9:66:
6b:37:0a:8a:86:7f:5e:64:34:03:12:65:9b:8a:27:91:34:5b:
df:c3:ff:df:20:d4:48:52:ff:11:f6:cf:c0:92:09:ca:78:7f:
25:53:28:84:54:77:84:a6:c1:0e:45:54:fe:95:59:33:99:d2:
18:91:b1:91:13:84:98:75:17:b4:13:e8:54:ef:30:87:5a:fb:
fe:8f:d5:7c:7c:ae:4b:07:13:2d:13:6f:9b:9d:2a:b5:bc:6d:
d3:c7:0e:7f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYejFWdj2EtquY154UUI3l1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwNDIxMDkxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2U3OWI0M2NmYmVmNzBlYWFlNzQ2ZGFmZTA1YTBkNWM4M2M4ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRjXFeO1YuNDeCJ6uN/y9N4889Xt
52v8k9UOoTIh3VY23RMMW07IdYk9Evy5mMZQFk/9PyMzPQ7TXCvX+OUZnhHVB+Nz
s3V86DPEfrxkQ+tmhcaImm/2uqY4Ywuh9kHDTRF7uMyd5CRYT52E1hRo4HYqyYmt
RURmMLjwYqoMVJAc0WjsKVK3FLXveKO6l9f78XROH+T9hQfp5rX4L9caqzB6LH0h
IKidJt8v55ggzCteNomFvDjoJaoEXR8UpVjFlRUZQsJ1+3EdXq5FPzoH5qYunrID
xikCwKk4qpmozS0H7/Hn3pfTvX5UB4NjkNcEv3b49a6zIlwroSrSu6bzWwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFHznm0PPvvcOqudG2v4FoNXIPI2GMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvZk9lYlE4LS05dzZxNTBiYV9nV2cxY2c4allZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCLVAEMAwD
BAAtkmkDBAAtkmoDBAJSdhwDBABccgUDBACNYkgDBAGNYkoDBADUAu8DBADV4e4w
DQYJKoZIhvcNAQELBQADggEBABMAAEKRNHmswaVIW/BtJsldgYg17RCXgu9WrIfr
QiUKALwygBcHAhl9ksUP3c2/2aZX7WdHeenXgk3P10k8G0n6TsdufgnmdXCBjafi
5P6dxzbUEshx9VEWLXx9VvHenaL94zHGRKcnIPQQyXiuDTzGElWWG+MgPEPqLSG+
9KaQhARXU6E1kxgLRfKXwXspLimWaCijUH2mD/eyDghWPsPZZms3CoqGf15kNAMS
ZZuKJ5E0W9/D/98g1EhS/xH2z8CSCcp4fyVTKIRUd4SmwQ5FVP6VWTOZ0hiRsZET
hJh1F7QT6FTvMIda+/6P1Xx8rksHEy0Tb5udKrW8bdPHDn8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org