Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/X05teSvqRN8SviFCQLftwRLHdCY.roa
File: X05teSvqRN8SviFCQLftwRLHdCY.roa (raw, json)
Hash identifier: 5a8U9bE0d5kLgs4t/rAys6NJG0lZNBTjr/g9baCjS1A=
Subject key identifier: 5F:4E:6D:79:2B:EA:44:DF:12:BE:21:42:40:B7:ED:C1:12:C7:74:26
Certificate issuer: /CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
Certificate serial: 018258E648B82529DAA067CD49DBCA19E5D8
Authority key identifier: 4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/X05teSvqRN8SviFCQLftwRLHdCY.roa
Signing time: Mon 01 Aug 2022 10:14:23 +0000
ROA not before: Mon 01 Aug 2022 10:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3232
IP address blocks: 193.105.132.0/24 maxlen: 24
91.216.220.0/24 maxlen: 24
194.165.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:e6:48:b8:25:29:da:a0:67:cd:49:db:ca:19:e5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
Validity
Not Before: Aug 1 10:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f4e6d792bea44df12be214240b7edc112c77426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:87:7a:d4:d2:d7:13:f1:d5:0b:3f:6f:1e:
05:bd:60:aa:67:b5:b1:25:e3:92:2f:db:5d:cf:d9:
17:2a:0e:4f:37:61:ca:d4:c2:4d:eb:30:a6:a5:29:
5f:cf:d7:62:2c:72:5e:d7:cc:90:58:a3:63:8a:d9:
e0:7d:a2:81:4b:47:5a:53:aa:c8:74:17:6e:cd:97:
86:8c:9e:ed:d0:57:b7:99:5e:b6:3e:f9:b9:e6:2a:
a0:85:4a:82:67:5c:98:76:8c:ae:02:75:f1:04:c2:
e5:4e:3f:8a:2b:44:16:9c:39:99:11:9d:b5:89:18:
0e:e9:9b:92:40:a0:8d:a0:c6:55:10:5d:22:d6:17:
58:ba:e0:e6:53:2a:45:fc:17:96:1b:14:64:4c:36:
27:ee:c7:4d:ae:f0:c1:e7:f5:c5:fd:77:67:65:93:
ae:c8:b3:d6:26:e9:fe:1f:7a:ca:32:4c:af:61:b5:
b1:2d:05:64:7f:75:bc:dc:4e:6b:1c:f8:7b:e1:be:
1d:c2:3d:e6:02:f4:6e:09:cf:a3:50:77:af:71:ea:
54:6f:ee:88:c9:5f:61:89:17:8d:44:4d:be:45:1b:
df:70:fd:a0:b4:21:28:cb:81:a5:9e:75:d5:08:55:
96:e7:dc:b3:fe:bc:66:41:f3:3a:a4:64:d7:a6:bd:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:6D:79:2B:EA:44:DF:12:BE:21:42:40:B7:ED:C1:12:C7:74:26
X509v3 Authority Key Identifier:
keyid:4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/X05teSvqRN8SviFCQLftwRLHdCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.220.0/24
193.105.132.0/24
194.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:b1:67:80:93:78:b4:30:ae:ed:e1:ee:d1:d1:9d:cd:1b:
03:f0:af:bf:3a:2f:28:cd:b9:05:96:0f:ab:d4:ed:a0:cb:70:
58:e8:55:98:98:9f:3b:d2:15:b1:ea:fd:d3:72:8d:f4:18:5f:
e1:2c:9d:08:a6:81:07:36:a5:a7:75:60:91:1b:90:a2:f5:4d:
17:b3:eb:ae:75:92:fc:67:99:0d:a1:54:57:29:fc:c3:dc:4a:
46:c3:88:a3:4d:b9:f1:b0:60:86:33:70:a0:e0:84:c4:62:1b:
15:55:c1:8d:22:4a:e3:49:4e:82:81:9a:01:6c:4d:b2:e7:06:
5a:d1:f7:fb:db:b8:75:50:a6:1b:14:d2:39:ca:67:dc:08:fc:
f6:92:f4:64:7f:df:1f:8e:44:51:8b:cb:3c:cc:40:96:c2:88:
81:61:42:4c:f1:71:d4:35:d7:d8:03:ca:11:58:5b:23:77:cd:
43:1b:fa:ae:f2:04:89:80:3e:d9:98:16:fc:57:0b:fb:0c:4e:
15:5e:d7:79:6f:99:e7:92:9a:93:56:c4:38:b0:b0:d0:cf:a2:
5f:83:10:52:d3:60:e9:ec:58:8a:c0:97:cd:b7:1c:72:27:17:
a6:2b:8b:e6:86:01:5f:27:f2:99:bb:b4:4e:d1:5f:b5:64:dc:
39:f2:9a:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYJY5ki4JSnaoGfNSdvKGeXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjUzMjNhYWZhNWYwNTAzNmVlMzA5MWZkOGI2YjQ0OWMx
MDE3YzMwHhcNMjIwODAxMTAxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRlNmQ3OTJiZWE0NGRmMTJiZTIxNDI0MGI3ZWRjMTEyYzc3NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6HetTS1xPx1Qs/bx4FvWCqZ7Wx
JeOSL9tdz9kXKg5PN2HK1MJN6zCmpSlfz9diLHJe18yQWKNjitngfaKBS0daU6rI
dBduzZeGjJ7t0Fe3mV62Pvm55iqghUqCZ1yYdoyuAnXxBMLlTj+KK0QWnDmZEZ21
iRgO6ZuSQKCNoMZVEF0i1hdYuuDmUypF/BeWGxRkTDYn7sdNrvDB5/XF/XdnZZOu
yLPWJun+H3rKMkyvYbWxLQVkf3W83E5rHPh74b4dwj3mAvRuCc+jUHevcepUb+6I
yV9hiReNRE2+RRvfcP2gtCEoy4GlnnXVCFWW59yz/rxmQfM6pGTXpr1B3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF9ObXkr6kTfEr4hQkC37cESx3QmMB8GA1UdIwQY
MBaAFExlMjqvpfBQNu4wkf2La0ScEBfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdVeU9xLWw4RkEyN2pDUl9ZdHJSSndRRjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjFjN2MtY2EzNi00MzFkLTkzMzYt
MmQ5YmY3ZDRlYzBkLzEvWDA1dGVTdnFSTjhTdmlGQ1FMZnR3UkxIZENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjFjN2MtY2EzNi00MzFkLTkzMzYtMmQ5YmY3ZDRlYzBk
LzEvVEdVeU9xLWw4RkEyN2pDUl9ZdHJSSndRRjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9jcAwQA
wWmEAwQAwqU1MA0GCSqGSIb3DQEBCwUAA4IBAQCzwbFngJN4tDCu7eHu0dGdzRsD
8K+/Oi8ozbkFlg+r1O2gy3BY6FWYmJ870hWx6v3Tco30GF/hLJ0IpoEHNqWndWCR
G5Ci9U0Xs+uudZL8Z5kNoVRXKfzD3EpGw4ijTbnxsGCGM3Cg4ITEYhsVVcGNIkrj
SU6CgZoBbE2y5wZa0ff727h1UKYbFNI5ymfcCPz2kvRkf98fjkRRi8s8zECWwoiB
YUJM8XHUNdfYA8oRWFsjd81DG/qu8gSJgD7ZmBb8Vwv7DE4VXtd5b5nnkpqTVsQ4
sLDQz6JfgxBS02Dp7FiKwJfNtxxyJxemK4vmhgFfJ/KZu7RO0V+1ZNw58ppO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org