Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ffiKRJMAM6NYnYFUWoZldkhxjXk.roa
File: ffiKRJMAM6NYnYFUWoZldkhxjXk.roa (raw, json)
Hash identifier: lodJYU9OTcpTGRL/MR1DZUuUzAskVZUueg7rPUReOFA=
Subject key identifier: 7D:F8:8A:44:93:00:33:A3:58:9D:81:54:5A:86:65:76:48:71:8D:79
Certificate issuer: /CN=b420d25656835a10bebb08d66a40227a50e6acb4
Certificate serial: 09A57E4C
Authority key identifier: B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ffiKRJMAM6NYnYFUWoZldkhxjXk.roa
Signing time: Sat 01 Jan 2022 09:00:23 +0000
ROA not before: Sat 01 Jan 2022 09:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49402
IP address blocks: 193.169.48.0/23 maxlen: 23
185.56.221.0/24 maxlen: 24
185.56.222.0/24 maxlen: 24
185.56.223.0/24 maxlen: 24
185.56.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161840716 (0x9a57e4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b420d25656835a10bebb08d66a40227a50e6acb4
Validity
Not Before: Jan 1 09:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7df88a44930033a3589d81545a86657648718d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:0d:bf:e1:6d:71:5d:db:2d:df:11:d7:2c:
83:fd:fd:82:16:15:9a:f8:0d:aa:be:61:d5:18:fd:
fa:2c:9c:b2:fd:e5:6f:80:7c:aa:c0:d8:0b:81:d2:
ca:81:71:27:33:d6:9a:4c:c8:5f:23:f7:c3:7a:fb:
9c:27:5d:62:5a:1a:6a:05:8a:0b:f7:56:b7:9d:58:
35:a0:6a:39:0b:71:07:57:a4:b5:e2:4e:73:93:a3:
f9:0e:75:0a:96:e5:2e:64:d7:52:51:5e:00:26:f9:
b2:28:14:fd:48:df:46:a8:22:b5:4d:dd:43:d6:d2:
06:ec:32:3e:73:9a:dc:96:5d:58:f1:19:7c:38:3e:
f6:55:b4:25:24:d8:ea:23:91:5d:f0:4a:2d:55:2f:
ef:bd:58:02:33:fc:ef:64:7b:dc:98:0b:78:1c:0f:
95:36:45:e0:4e:38:29:ff:65:de:a6:5b:10:15:b5:
fd:a9:91:58:8b:e2:0d:17:fa:22:48:33:c7:04:20:
ab:77:dd:9c:7c:65:b8:13:5d:fc:b8:39:67:aa:c5:
a9:3f:96:d6:91:b0:3d:5f:db:a5:25:75:c6:27:88:
21:be:75:78:0d:96:fc:0f:e2:e3:47:83:58:03:60:
88:a0:82:91:5d:88:02:3a:b3:50:9b:d6:4d:76:18:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:8A:44:93:00:33:A3:58:9D:81:54:5A:86:65:76:48:71:8D:79
X509v3 Authority Key Identifier:
keyid:B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ffiKRJMAM6NYnYFUWoZldkhxjXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/tCDSVlaDWhC-uwjWakAielDmrLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.220.0/22
193.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
25:03:74:a1:45:57:3e:2d:cb:ce:fb:62:20:48:49:f5:97:6c:
9c:a1:fd:05:cf:6f:33:c8:9f:18:c2:50:69:11:ab:2c:8f:c8:
ea:cb:76:6a:45:0d:ab:f5:14:4c:cb:72:f7:83:fd:ae:f2:cd:
d9:be:dd:96:74:6b:4e:df:00:eb:8e:d0:4d:7f:12:e4:2e:8b:
07:0b:6e:62:e0:25:c0:30:f8:9c:6c:cd:0e:cb:e6:4e:07:62:
c9:e8:ac:17:23:d3:f0:b7:4f:dd:21:0f:2c:34:11:8f:22:5d:
9e:e3:95:0e:d9:ab:25:3d:8b:ef:15:b3:4d:15:92:48:8b:5c:
55:df:d8:22:52:f5:28:0f:f6:31:0c:e5:51:9e:76:ce:92:e0:
09:75:24:d3:6b:e4:5a:6f:d5:83:eb:71:64:57:a7:ef:dc:3b:
e1:ac:98:bd:73:84:86:92:41:55:b3:4d:74:e9:22:ee:6e:08:
cb:5c:af:49:0a:87:90:c7:19:62:32:da:09:43:75:f5:81:e8:
3d:b8:95:97:e8:db:87:c5:8a:91:be:63:1c:a8:a0:df:3f:c9:
31:0a:6d:87:99:68:8d:e6:15:90:d0:a2:6c:3e:8a:4c:2b:5b:
7f:fc:48:b6:61:66:aa:c3:80:5f:8a:b2:73:f8:eb:52:5d:40:
88:87:d5:d0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECaV+TDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDIwZDI1NjU2ODM1YTEwYmViYjA4ZDY2YTQwMjI3YTUwZTZhY2I0MB4XDTIyMDEw
MTA5MDAyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RmODhhNDQ5MzAw
MzNhMzU4OWQ4MTU0NWE4NjY1NzY0ODcxOGQ3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWhDb/hbXFd2y3fEdcsg/39ghYVmvgNqr5h1Rj9+iycsv3l
b4B8qsDYC4HSyoFxJzPWmkzIXyP3w3r7nCddYloaagWKC/dWt51YNaBqOQtxB1ek
teJOc5Oj+Q51CpblLmTXUlFeACb5sigU/UjfRqgitU3dQ9bSBuwyPnOa3JZdWPEZ
fDg+9lW0JSTY6iORXfBKLVUv771YAjP872R73JgLeBwPlTZF4E44Kf9l3qZbEBW1
/amRWIviDRf6IkgzxwQgq3fdnHxluBNd/Lg5Z6rFqT+W1pGwPV/bpSV1xieIIb51
eA2W/A/i40eDWANgiKCCkV2IAjqzUJvWTXYYcikCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR9+IpEkwAzo1idgVRahmV2SHGNeTAfBgNVHSMEGDAWgBS0INJWVoNaEL67
CNZqQCJ6UOastDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RDRFNWbGFEV2hDLXV3aldha0FpZWxEbXJMUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvOTViY2JhLTYxMWEtNGIzZC1hNzA1LWU0YjAxNDc5MTcyNi8x
L2ZmaUtSSk1BTTZOWW5ZRlVXb1psZGtoeGpYay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
OTViY2JhLTYxMWEtNGIzZC1hNzA1LWU0YjAxNDc5MTcyNi8xL3RDRFNWbGFEV2hD
LXV3aldha0FpZWxEbXJMUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArk43AMEAcGpMDANBgkqhkiG9w0B
AQsFAAOCAQEAJQN0oUVXPi3LzvtiIEhJ9ZdsnKH9Bc9vM8ifGMJQaRGrLI/I6st2
akUNq/UUTMty94P9rvLN2b7dlnRrTt8A647QTX8S5C6LBwtuYuAlwDD4nGzNDsvm
TgdiyeisFyPT8LdP3SEPLDQRjyJdnuOVDtmrJT2L7xWzTRWSSItcVd/YIlL1KA/2
MQzlUZ52zpLgCXUk02vkWm/Vg+txZFen79w74ayYvXOEhpJBVbNNdOki7m4Iy1yv
SQqHkMcZYjLaCUN19YHoPbiVl+jbh8WKkb5jHKig3z/JMQpth5lojeYVkNCibD6K
TCtbf/xItmFmqsOAX4qyc/jrUl1AiIfV0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:33 2024 by rpki-client on console-fra.rpki-client.org