Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/IqJWKFqROSkw0L47jX_F6D2VOF0.roa
File: IqJWKFqROSkw0L47jX_F6D2VOF0.roa (raw, json)
Hash identifier: P0GfXhSlXdNGAsSid8F7tec4WI8G8VsdMlGaCw8diIs=
Subject key identifier: 22:A2:56:28:5A:91:39:29:30:D0:BE:3B:8D:7F:C5:E8:3D:95:38:5D
Certificate issuer: /CN=b3b3db924602be529903dfc65663b7eaad78571d
Certificate serial: 056865BD
Authority key identifier: B3:B3:DB:92:46:02:BE:52:99:03:DF:C6:56:63:B7:EA:AD:78:57:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7PbkkYCvlKZA9_GVmO36q14Vx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/IqJWKFqROSkw0L47jX_F6D2VOF0.roa
Signing time: Sat 01 Jan 2022 16:02:53 +0000
ROA not before: Sat 01 Jan 2022 16:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47119
IP address blocks: 188.191.112.0/22 maxlen: 22
188.191.112.0/23 maxlen: 23
188.191.118.0/23 maxlen: 23
188.191.116.0/22 maxlen: 22
188.191.116.0/23 maxlen: 23
188.191.114.0/23 maxlen: 23
188.191.112.0/21 maxlen: 21
188.191.112.0/20 maxlen: 20
188.191.124.0/23 maxlen: 23
188.191.124.0/22 maxlen: 22
188.191.122.0/23 maxlen: 23
188.191.120.0/23 maxlen: 23
188.191.120.0/22 maxlen: 22
188.191.126.0/23 maxlen: 23
79.174.36.0/22 maxlen: 22
79.174.36.0/23 maxlen: 23
79.174.32.0/19 maxlen: 19
79.174.34.0/23 maxlen: 23
79.174.32.0/23 maxlen: 23
79.174.32.0/22 maxlen: 22
79.174.32.0/20 maxlen: 20
79.174.38.0/23 maxlen: 23
79.174.44.0/23 maxlen: 23
79.174.44.0/22 maxlen: 22
79.174.42.0/23 maxlen: 23
79.174.40.0/22 maxlen: 22
79.174.40.0/23 maxlen: 23
79.174.50.0/23 maxlen: 23
79.174.48.0/20 maxlen: 20
79.174.48.0/23 maxlen: 23
79.174.48.0/22 maxlen: 22
79.174.46.0/23 maxlen: 23
79.174.52.0/23 maxlen: 23
79.174.52.0/22 maxlen: 22
79.174.58.0/23 maxlen: 23
79.174.56.0/22 maxlen: 22
79.174.56.0/23 maxlen: 23
79.174.54.0/23 maxlen: 23
79.174.62.0/23 maxlen: 23
79.174.60.0/22 maxlen: 22
79.174.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90727869 (0x56865bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b3db924602be529903dfc65663b7eaad78571d
Validity
Not Before: Jan 1 16:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a256285a91392930d0be3b8d7fc5e83d95385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:41:17:7e:1e:73:76:d7:f1:20:1c:1d:e8:
b0:9a:a8:51:10:01:d4:32:8f:d6:9d:14:b7:80:c6:
9d:59:5e:6a:e4:b5:ae:e4:bc:14:0f:c6:98:24:b0:
6f:48:f0:ba:ae:c2:b1:ba:d6:aa:df:ac:b4:80:11:
f0:8a:ba:a3:4b:8d:71:6a:b7:71:f3:e6:ad:d2:5a:
f1:a7:5d:2b:d1:aa:07:9d:17:77:82:31:0b:ae:e3:
4e:33:fe:b1:c1:bc:e7:11:0e:1f:36:29:a6:38:05:
8e:2c:13:80:cc:6d:b6:5d:41:fb:5c:b9:25:e6:4f:
dc:9d:00:dd:fb:ce:fd:6f:51:8f:76:38:bf:bb:97:
52:de:b1:71:5f:36:b5:da:e3:df:30:f8:80:c4:91:
22:96:be:c8:ab:de:64:b5:29:60:0e:7f:5c:dd:41:
11:81:45:81:77:57:26:b9:8e:ca:e5:9f:50:61:89:
db:23:91:43:f0:ec:1b:88:13:98:67:8b:2c:c8:6a:
8d:96:29:3f:b7:e8:45:b0:ba:eb:47:ac:10:90:9d:
16:2e:aa:ea:98:77:05:6b:e2:ae:23:a7:83:73:96:
91:2c:8b:f4:0e:a8:72:2f:dd:a8:96:53:ac:33:b3:
ef:9a:10:01:b2:27:be:d1:91:fd:a4:74:40:a8:be:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:56:28:5A:91:39:29:30:D0:BE:3B:8D:7F:C5:E8:3D:95:38:5D
X509v3 Authority Key Identifier:
keyid:B3:B3:DB:92:46:02:BE:52:99:03:DF:C6:56:63:B7:EA:AD:78:57:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7PbkkYCvlKZA9_GVmO36q14Vx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/IqJWKFqROSkw0L47jX_F6D2VOF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/s7PbkkYCvlKZA9_GVmO36q14Vx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.32.0/19
188.191.112.0/20
Signature Algorithm: sha256WithRSAEncryption
22:69:52:1f:db:45:bb:a5:01:0e:b4:b9:6c:88:3a:1f:b2:a5:
28:c5:4b:84:95:75:da:83:13:61:bc:8a:97:39:6e:d3:cf:31:
11:13:e3:9e:04:33:8b:b5:30:77:3e:0d:ee:35:b9:59:be:38:
8c:02:7b:56:eb:b4:ab:95:85:b0:c8:02:4f:fa:9d:ec:30:8d:
58:fe:e8:b9:81:7f:11:61:2e:08:0d:18:6b:8e:0d:1e:c4:2a:
60:e2:36:b5:ae:b2:bc:a7:58:20:b1:38:5a:f8:b5:85:7a:d5:
55:03:08:9f:22:77:83:42:f8:9e:d2:a9:a7:93:94:60:49:1c:
2d:f2:eb:92:11:0b:79:51:8a:94:39:bd:31:97:10:d5:e2:fa:
a0:d3:5f:8a:12:b3:e2:ec:e1:ce:36:3d:3e:19:41:0e:e9:88:
5f:92:73:d8:eb:9f:45:21:ee:63:56:8e:0e:f0:dd:25:06:1f:
7f:e0:0a:79:e1:20:ae:72:0f:65:c5:d5:38:a4:38:f2:7a:dd:
ca:c7:9d:75:be:80:05:5e:9c:e6:77:8a:f6:2a:0c:05:77:f5:
5b:46:58:4f:a8:8b:2d:ae:d9:c7:a8:d7:1a:3c:ad:2c:8d:d4:
8f:10:4a:c7:b0:36:02:5f:03:35:6e:46:45:2c:a6:e8:04:c4:
35:8f:50:eb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBWhlvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2IzZGI5MjQ2MDJiZTUyOTkwM2RmYzY1NjYzYjdlYWFkNzg1NzFkMB4XDTIyMDEw
MTE2MDI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJhMjU2Mjg1YTkx
MzkyOTMwZDBiZTNiOGQ3ZmM1ZTgzZDk1Mzg1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOUhQRd+HnN21/EgHB3osJqoURAB1DKP1p0Ut4DGnVleauS1
ruS8FA/GmCSwb0jwuq7CsbrWqt+stIAR8Iq6o0uNcWq3cfPmrdJa8addK9GqB50X
d4IxC67jTjP+scG85xEOHzYppjgFjiwTgMxttl1B+1y5JeZP3J0A3fvO/W9Rj3Y4
v7uXUt6xcV82tdrj3zD4gMSRIpa+yKveZLUpYA5/XN1BEYFFgXdXJrmOyuWfUGGJ
2yORQ/DsG4gTmGeLLMhqjZYpP7foRbC660esEJCdFi6q6ph3BWviriOng3OWkSyL
9A6oci/dqJZTrDOz75oQAbInvtGR/aR0QKi+HT8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQiolYoWpE5KTDQvjuNf8XoPZU4XTAfBgNVHSMEGDAWgBSzs9uSRgK+UpkD
38ZWY7fqrXhXHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3M3UGJra1lDdmxLWkE5X0dWbU8zNnExNFZ4MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWIvZmU0M2JjLTc1ZTEtNDhkYS04Y2RlLTY4MjIyZmFiMWJmYi8x
L0lxSldLRnFST1NrdzBMNDdqWF9GNkQyVk9GMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIv
ZmU0M2JjLTc1ZTEtNDhkYS04Y2RlLTY4MjIyZmFiMWJmYi8xL3M3UGJra1lDdmxL
WkE5X0dWbU8zNnExNFZ4MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBU+uIAMEBLy/cDANBgkqhkiG9w0B
AQsFAAOCAQEAImlSH9tFu6UBDrS5bIg6H7KlKMVLhJV12oMTYbyKlzlu088xERPj
ngQzi7Uwdz4N7jW5Wb44jAJ7Vuu0q5WFsMgCT/qd7DCNWP7ouYF/EWEuCA0Ya44N
HsQqYOI2ta6yvKdYILE4Wvi1hXrVVQMInyJ3g0L4ntKpp5OUYEkcLfLrkhELeVGK
lDm9MZcQ1eL6oNNfihKz4uzhzjY9PhlBDumIX5Jz2OufRSHuY1aODvDdJQYff+AK
eeEgrnIPZcXVOKQ48nrdyseddb6ABV6c5neK9ioMBXf1W0ZYT6iLLa7Zx6jXGjyt
LI3UjxBKx7A2Al8DNW5GRSym6ATENY9Q6w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org