Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-G90xPbGMQ9r7s5upWyGqOaW4T0.roa
File: 1-G90xPbGMQ9r7s5upWyGqOaW4T0.roa (raw, json)
Hash identifier: 47Btj1DNntuesFlWZw3x86yFG3duRhbWrUdJt32zcrE=
Subject key identifier: F8:6F:74:C4:F6:C6:31:0F:6B:EE:CE:6E:A5:6C:86:A8:E6:96:E1:3D
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 3937A8
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-G90xPbGMQ9r7s5upWyGqOaW4T0.roa
Signing time: Tue 22 Mar 2022 11:58:49 +0000
ROA not before: Tue 22 Mar 2022 11:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 24
185.254.17.0/24 maxlen: 24
185.254.16.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
185.244.105.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749800 (0x3937a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f86f74c4f6c6310f6beece6ea56c86a8e696e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:4e:d1:82:0d:f5:00:2b:20:50:50:20:ef:
3e:60:1f:06:71:95:12:0f:55:0f:58:e4:bb:ea:f9:
6a:04:79:46:05:1b:06:a4:07:a7:1e:08:6c:10:79:
e1:48:e5:4c:c6:4b:a7:1c:70:b1:63:98:c8:e9:d9:
a8:a1:52:89:99:03:83:64:7b:9b:ba:f5:36:40:63:
da:1d:ce:93:0f:66:2b:f6:f1:52:5e:08:13:37:0c:
6f:65:48:69:49:43:cf:31:b8:09:2d:4c:95:15:ba:
98:fb:e3:4d:ef:e8:4d:a3:46:29:9a:db:14:fb:89:
9f:60:0b:e3:e8:82:de:14:d9:d5:db:8d:34:6f:fe:
41:54:05:d5:30:d4:98:5c:e3:9e:b3:03:9d:ca:83:
b4:96:ca:89:c0:41:e6:42:60:92:6e:1b:12:07:79:
45:87:3c:43:17:45:a8:2f:8e:c6:2a:61:a9:8e:90:
db:bb:fb:3d:15:bc:ce:a7:66:e9:68:70:58:96:83:
c6:01:ce:ed:73:27:da:e8:f5:e1:55:7a:07:5c:15:
bf:3f:83:a8:39:1d:86:e9:02:c3:c8:59:b6:cd:06:
ad:68:7f:41:ac:94:12:a0:be:11:10:07:f8:b0:4f:
e1:ba:64:e7:5f:cb:b2:c1:d2:ff:6f:30:c1:1e:75:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:74:C4:F6:C6:31:0F:6B:EE:CE:6E:A5:6C:86:A8:E6:96:E1:3D
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-G90xPbGMQ9r7s5upWyGqOaW4T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.104.0/23
185.246.236.0/22
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:98:a9:fe:f6:d2:3c:87:07:e0:8c:ad:f4:4c:33:41:29:7e:
14:db:84:89:8b:3e:b1:72:3d:27:f2:78:8d:68:36:68:71:ea:
e7:6c:cc:b3:85:38:9c:14:ca:ef:80:32:eb:c0:8a:9b:32:89:
2a:1b:9c:bf:fa:3f:95:d1:0a:90:cc:e8:ef:43:35:1a:64:b8:
e2:ce:d9:2a:d8:de:f2:1b:c9:d1:c9:b5:31:86:3a:f1:d6:66:
db:99:84:ed:02:b0:bf:9b:d4:7d:34:db:be:a1:69:85:1b:96:
dc:3c:a5:cd:e5:7e:17:10:24:2c:47:1c:83:34:9c:bb:cf:ab:
dd:80:c0:15:e0:76:1c:a0:c1:80:7b:7b:75:4e:61:73:24:4a:
7f:9f:35:d1:ed:35:80:d2:7a:59:42:18:a9:0a:3d:8d:dc:32:
fe:01:b0:1a:45:cd:52:98:95:48:d5:ae:7d:b2:a2:0a:6e:49:
f3:6d:f1:c1:75:63:aa:51:b4:2d:f3:db:0a:7a:4e:73:d4:76:
ae:9c:66:2f:52:ab:04:de:49:a5:6d:52:50:db:46:f4:65:d1:
52:ef:ab:60:5f:3b:27:6e:97:85:33:be:f6:6e:c0:1e:70:89:
1d:ee:20:6b:57:c3:8e:2b:55:3a:57:86:34:ac:ac:ba:b6:61:
90:47:de:5c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIDOTeoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
MTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNlZmRiM2UwHhcNMjIwMzIy
MTE1ODQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODZmNzRjNGY2YzYz
MTBmNmJlZWNlNmVhNTZjODZhOGU2OTZlMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwJ5O0YIN9QArIFBQIO8+YB8GcZUSD1UPWOS76vlqBHlGBRsG
pAenHghsEHnhSOVMxkunHHCxY5jI6dmooVKJmQODZHubuvU2QGPaHc6TD2Yr9vFS
XggTNwxvZUhpSUPPMbgJLUyVFbqY++NN7+hNo0YpmtsU+4mfYAvj6ILeFNnV2400
b/5BVAXVMNSYXOOeswOdyoO0lsqJwEHmQmCSbhsSB3lFhzxDF0WoL47GKmGpjpDb
u/s9FbzOp2bpaHBYloPGAc7tcyfa6PXhVXoHXBW/P4OoOR2G6QLDyFm2zQataH9B
rJQSoL4REAf4sE/humTnX8uywdL/bzDBHnUMgwIDAQABo4ICIjCCAh4wHQYDVR0O
BBYEFPhvdMT2xjEPa+7ObqVshqjmluE9MB8GA1UdIwQYMBaAFCsUWovfK8oVDyXt
VKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
S3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2NkLzEv
MS1HOTB4UGJHTVE5cjdzNXVwV3lHcU9hVzRUMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8xL0t4UmFpOThyeWhV
UEplMVVvbmU0OWxQdjJ6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEALnv9AMEAbnv9gMEAbn0aAMEArn2
7AMEAbn+EDANBgkqhkiG9w0BAQsFAAOCAQEALJip/vbSPIcH4Iyt9EwzQSl+FNuE
iYs+sXI9J/J4jWg2aHHq52zMs4U4nBTK74Ay68CKmzKJKhucv/o/ldEKkMzo70M1
GmS44s7ZKtje8hvJ0cm1MYY68dZm25mE7QKwv5vUfTTbvqFphRuW3DylzeV+FxAk
LEccgzScu8+r3YDAFeB2HKDBgHt7dU5hcyRKf5810e01gNJ6WUIYqQo9jdwy/gGw
GkXNUpiVSNWufbKiCm5J823xwXVjqlG0LfPbCnpOc9R2rpxmL1KrBN5JpW1SUNtG
9GXRUu+rYF87J26XhTO+9m7AHnCJHe4ga1fDjitVOleGNKysurZhkEfeXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org