Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/e8Kix7HcErhFinhqKMaPhpvYFCU.roa
File: e8Kix7HcErhFinhqKMaPhpvYFCU.roa (raw, json)
Hash identifier: dzAtx5IsqkmcZpkR28rHw/c8ljzbMAOiiGAG2qlP2DA=
Subject key identifier: 7B:C2:A2:C7:B1:DC:12:B8:45:8A:78:6A:28:C6:8F:86:9B:D8:14:25
Certificate issuer: /CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Certificate serial: 01857183219C6B34C694E2A610FF43B6D47E
Authority key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/e8Kix7HcErhFinhqKMaPhpvYFCU.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202038
IP address blocks: 94.199.232.0/21 maxlen: 24
94.199.234.0/23 maxlen: 24
94.199.239.0/24 maxlen: 24
94.199.238.0/24 maxlen: 24
185.108.94.0/24 maxlen: 24
185.108.92.0/22 maxlen: 24
2a02:8d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:21:9c:6b:34:c6:94:e2:a6:10:ff:43:b6:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc2a2c7b1dc12b8458a786a28c68f869bd81425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:34:b9:cf:51:02:1d:c5:20:35:fc:79:22:
06:30:09:f1:95:16:07:03:f8:c7:1d:6b:6d:cc:dc:
7f:a1:89:aa:0a:15:ce:8d:7a:af:40:83:87:8e:b1:
c4:a7:ac:58:4e:34:c1:4a:db:03:48:81:36:bc:60:
18:eb:3d:fc:9f:94:90:ee:5f:f2:5c:e5:d7:6b:d4:
cf:e6:d7:c8:2a:3e:83:77:5a:9b:e6:53:6d:8c:b0:
dd:44:8e:07:b9:4a:7f:0e:31:a8:0e:7c:55:42:a3:
72:b8:fe:43:d1:72:71:01:da:45:85:44:01:fa:b3:
7a:fa:b9:c2:7c:39:51:51:46:60:52:a0:be:b0:f0:
2a:e9:8d:99:46:7f:2a:ba:0c:c6:c2:31:ad:44:dc:
2c:6d:c5:9a:7b:8f:82:ca:e1:8a:4b:a2:c5:9f:85:
82:cd:84:71:b7:f6:df:d4:11:ab:9a:63:c2:cd:93:
af:a3:df:1e:36:4b:dc:8f:e8:4f:ef:71:09:49:46:
2e:87:9e:39:a9:92:05:21:21:63:08:62:42:05:87:
36:bb:cf:66:ce:46:3a:4d:37:39:6d:e4:9e:77:9e:
5d:2f:ab:bd:8a:77:55:42:e6:be:f7:98:3a:1f:72:
02:2f:d1:a3:66:37:23:15:ce:d0:75:ec:b4:1a:d2:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:A2:C7:B1:DC:12:B8:45:8A:78:6A:28:C6:8F:86:9B:D8:14:25
X509v3 Authority Key Identifier:
keyid:D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/e8Kix7HcErhFinhqKMaPhpvYFCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.232.0/21
185.108.92.0/22
IPv6:
2a02:8d1::/32
Signature Algorithm: sha256WithRSAEncryption
9d:49:e5:b9:9d:95:05:d2:8c:05:29:c6:2d:a7:a2:d9:f8:c9:
82:69:df:ff:fb:c3:a7:3b:d0:11:a3:b2:2b:f3:19:75:a7:02:
cc:42:aa:b9:07:8a:e1:1b:03:10:fb:b2:2d:0e:73:26:19:cc:
52:32:74:86:51:bd:94:ba:be:22:99:c5:3f:d9:05:d7:4d:47:
5f:ac:4b:24:64:99:8a:3a:f6:da:10:07:28:90:13:50:77:d8:
24:e0:99:f4:96:74:f4:b8:13:f2:2f:06:5e:ed:31:a3:5b:6a:
a1:2e:a2:2a:47:31:c4:c3:37:49:d1:53:93:59:c0:67:43:5a:
5f:c8:2e:4f:35:69:ae:19:94:ce:db:25:5b:63:4c:18:d9:aa:
92:b5:83:ba:ec:09:92:c4:5b:0f:05:4f:1b:af:ea:a4:f5:b8:
aa:b4:c7:a6:83:38:1b:5e:a4:63:2b:e0:5b:cf:9e:d3:d2:63:
d6:07:b9:e4:fa:d8:b7:58:4a:65:2b:ab:0b:3c:4d:c3:8c:12:
19:19:08:24:eb:03:8b:91:a7:74:8a:f0:d7:40:2a:20:46:86:
be:22:b7:5f:07:fd:b5:a2:30:5c:37:43:8d:3e:f9:73:28:3f:
88:75:78:58:6a:68:23:89:af:14:d5:7c:2f:99:38:0a:12:01:
19:6c:83:c2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxgyGcazTGlOKmEP9DttR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YjI3MjE5MzI5MDNmOTgzMTNjZGMxYTZmZDRiN2YyZWRh
YTQzNTUwHhcNMjMwMTAyMDgwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMyYTJjN2IxZGMxMmI4NDU4YTc4NmEyOGM2OGY4NjliZDgxNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m00uc9RAh3FIDX8eSIGMAnxlRYH
A/jHHWttzNx/oYmqChXOjXqvQIOHjrHEp6xYTjTBStsDSIE2vGAY6z38n5SQ7l/y
XOXXa9TP5tfIKj6Dd1qb5lNtjLDdRI4HuUp/DjGoDnxVQqNyuP5D0XJxAdpFhUQB
+rN6+rnCfDlRUUZgUqC+sPAq6Y2ZRn8qugzGwjGtRNwsbcWae4+CyuGKS6LFn4WC
zYRxt/bf1BGrmmPCzZOvo98eNkvcj+hP73EJSUYuh545qZIFISFjCGJCBYc2u89m
zkY6TTc5beSed55dL6u9indVQua+95g6H3ICL9GjZjcjFc7Qdey0GtLEaQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHvCosex3BK4RYp4aijGj4ab2BQlMB8GA1UdIwQY
MBaAFNSychkykD+YMTzcGm/Ut/LtqkNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxKeUdUS1FQNWd4UE53YWI5UzM4dTJxUTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZmY0OGYtZjMwMC00ZDZkLTg0YjEt
MjE1YTM0YTAwNzc4LzEvZThLaXg3SGNFcmhGaW5ocUtNYVBocHZZRkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZmY0OGYtZjMwMC00ZDZkLTg0YjEtMjE1YTM0YTAwNzc4
LzEvMUxKeUdUS1FQNWd4UE53YWI5UzM4dTJxUTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXsfoAwQC
uWxcMA0EAgACMAcDBQAqAgjRMA0GCSqGSIb3DQEBCwUAA4IBAQCdSeW5nZUF0owF
KcYtp6LZ+MmCad//+8OnO9ARo7Ir8xl1pwLMQqq5B4rhGwMQ+7ItDnMmGcxSMnSG
Ub2Uur4imcU/2QXXTUdfrEskZJmKOvbaEAcokBNQd9gk4Jn0lnT0uBPyLwZe7TGj
W2qhLqIqRzHEwzdJ0VOTWcBnQ1pfyC5PNWmuGZTO2yVbY0wY2aqStYO67AmSxFsP
BU8br+qk9biqtMemgzgbXqRjK+Bbz57T0mPWB7nk+ti3WEplK6sLPE3DjBIZGQgk
6wOLkad0ivDXQCogRoa+IrdfB/21ojBcN0ONPvlzKD+IdXhYamgjia8U1XwvmTgK
EgEZbIPC
-----END CERTIFICATE-----
Generated at Thu Oct 5 08:16:20 2023 by rpki-client on console-ams.rpki-client.org