Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/uZu6hCCIFEF77AMDPDAloPVUaKQ.roa
File: uZu6hCCIFEF77AMDPDAloPVUaKQ.roa (raw, json)
Hash identifier: /e3Jr+bon9R6w3jOqs3lkshuAL05lI2XFPxTHl7bTxQ=
Subject key identifier: B9:9B:BA:84:20:88:14:41:7B:EC:03:03:3C:30:25:A0:F5:54:68:A4
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01825DE8F0D93453442390DD7EE53E644359
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/uZu6hCCIFEF77AMDPDAloPVUaKQ.roa
Signing time: Tue 02 Aug 2022 09:35:23 +0000
ROA not before: Tue 02 Aug 2022 09:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.46.37.0/24 maxlen: 24
193.57.27.0/24 maxlen: 24
193.57.33.0/24 maxlen: 24
193.57.35.0/24 maxlen: 24
193.57.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:e8:f0:d9:34:53:44:23:90:dd:7e:e5:3e:64:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Aug 2 09:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b99bba84208814417bec03033c3025a0f55468a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:84:c5:aa:72:8e:7b:b9:d9:1e:96:52:3c:
d9:d4:f8:60:84:12:4f:01:b1:94:89:b7:7d:87:1c:
64:e4:d3:aa:25:b8:3f:a4:c7:f7:f6:ee:83:3a:19:
f9:4d:9e:ff:88:01:c8:80:d9:18:f0:ac:07:68:e7:
0f:2e:0e:d9:62:fc:cf:29:dd:c9:0b:3e:c6:83:7c:
d4:47:c6:69:89:c4:0f:52:b4:90:1d:2c:da:eb:99:
94:7b:0f:a6:a0:c6:57:11:83:19:16:87:11:12:17:
01:13:a4:00:5a:b2:07:0f:3e:e1:d7:b2:e1:0d:18:
8a:b3:ec:c5:96:66:00:c3:03:36:cc:94:81:6b:c5:
b2:cb:42:bc:2e:1e:bc:90:bd:1c:16:e8:a6:a5:eb:
65:09:74:ce:75:2f:03:e2:df:df:1c:6d:2e:f8:02:
27:ba:38:39:11:06:bf:03:a3:c2:a7:b5:b3:a8:2e:
91:7a:af:48:40:bf:9d:02:9b:20:a8:7f:25:17:b4:
d7:ea:b5:61:77:8d:62:61:d6:5e:8b:a1:36:34:47:
0c:6b:68:c5:ed:2b:ba:c0:d9:b2:05:46:00:db:7a:
be:fb:c6:bc:3e:22:ff:93:88:af:86:38:a1:f7:ac:
9a:df:a2:a3:cc:94:5e:92:15:5e:33:25:fb:6b:1e:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:BA:84:20:88:14:41:7B:EC:03:03:3C:30:25:A0:F5:54:68:A4
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/uZu6hCCIFEF77AMDPDAloPVUaKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.27.0/24
193.57.33.0/24
193.57.35.0/24
193.57.57.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
36:16:de:5c:5c:80:80:c6:99:d3:e3:1e:cc:5f:b3:0b:c7:98:
2f:22:21:1d:81:eb:32:04:af:2b:7e:e0:1e:84:a5:e9:60:17:
49:0a:26:bf:3a:87:6d:4b:dd:e3:c6:a7:1f:64:31:19:1c:7d:
e9:00:34:2b:d9:c6:97:7a:ae:57:12:53:f7:e5:af:f3:e0:f7:
89:eb:49:3e:ff:e9:31:47:d7:c4:6f:1f:80:4a:cd:17:70:37:
89:ff:98:24:93:e6:92:17:0d:63:57:c1:b2:ee:0c:44:b5:fc:
24:36:f1:a8:a4:7c:a1:11:ff:dd:b0:fb:b0:6d:3f:16:2f:06:
37:5d:e4:36:84:12:74:be:7f:8e:48:a7:aa:66:af:7a:26:c2:
d7:ae:33:5e:9e:f0:7a:fd:75:e5:f4:0a:d3:66:dd:e8:fe:5b:
18:10:8a:bc:a1:b3:1e:8d:f7:9d:31:5e:60:25:c5:bb:10:f4:
b1:f4:c4:ca:fb:65:a8:76:dd:7a:dc:5e:fd:98:ee:3b:43:ae:
42:85:3e:97:9c:6e:35:5c:41:43:72:a2:71:57:21:67:90:b4:
17:34:8e:4c:54:5e:38:0a:5c:93:45:a9:0f:91:75:97:a5:fe:
7b:00:62:a7:dd:e4:27:ec:d1:e2:85:1f:3e:a9:37:af:34:fa:
b7:14:99:98
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYJd6PDZNFNEI5DdfuU+ZENZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjIwODAyMDkzNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTliYmE4NDIwODgxNDQxN2JlYzAzMDMzYzMwMjVhMGY1NTQ2OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyKExapyjnu52R6WUjzZ1PhghBJP
AbGUibd9hxxk5NOqJbg/pMf39u6DOhn5TZ7/iAHIgNkY8KwHaOcPLg7ZYvzPKd3J
Cz7Gg3zUR8ZpicQPUrSQHSza65mUew+moMZXEYMZFocREhcBE6QAWrIHDz7h17Lh
DRiKs+zFlmYAwwM2zJSBa8Wyy0K8Lh68kL0cFuimpetlCXTOdS8D4t/fHG0u+AIn
ujg5EQa/A6PCp7WzqC6Req9IQL+dApsgqH8lF7TX6rVhd41iYdZei6E2NEcMa2jF
7Su6wNmyBUYA23q++8a8PiL/k4ivhjih96ya36KjzJRekhVeMyX7ax62nQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLmbuoQgiBRBe+wDAzwwJaD1VGikMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvdVp1NmhDQ0lGRUY3N0FNRFBEQWxvUFZVYUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwTkbAwQA
wTkhAwQAwTkjAwQAwTk5AwQA1C4lMA0GCSqGSIb3DQEBCwUAA4IBAQA2Ft5cXICA
xpnT4x7MX7MLx5gvIiEdgesyBK8rfuAehKXpYBdJCia/OodtS93jxqcfZDEZHH3p
ADQr2caXeq5XElP35a/z4PeJ60k+/+kxR9fEbx+ASs0XcDeJ/5gkk+aSFw1jV8Gy
7gxEtfwkNvGopHyhEf/dsPuwbT8WLwY3XeQ2hBJ0vn+OSKeqZq96JsLXrjNenvB6
/XXl9ArTZt3o/lsYEIq8obMejfedMV5gJcW7EPSx9MTK+2Wodt163F79mO47Q65C
hT6XnG41XEFDcqJxVyFnkLQXNI5MVF44ClyTRakPkXWXpf57AGKn3eQn7NHihR8+
qTevNPq3FJmY
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org