Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b0209f-8b60-478a-b5cc-ec091e73b1ed/1/GGQOqkYpmW3dquap6qxblafgDto.roa
File: GGQOqkYpmW3dquap6qxblafgDto.roa (raw, json)
Hash identifier: eCHQBWjhfYQjWGEM2evmxPsuvufM6VUBlHc1p3m454I=
Subject key identifier: 18:64:0E:AA:46:29:99:6D:DD:AA:E6:A9:EA:AC:5B:95:A7:E0:0E:DA
Certificate issuer: /CN=e0c2b810a7f7268f695bd79a6f5fc7c750ecee48
Certificate serial: 0877C165
Authority key identifier: E0:C2:B8:10:A7:F7:26:8F:69:5B:D7:9A:6F:5F:C7:C7:50:EC:EE:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MK4EKf3Jo9pW9eab1_Hx1Ds7kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b0209f-8b60-478a-b5cc-ec091e73b1ed/1/GGQOqkYpmW3dquap6qxblafgDto.roa
Signing time: Sat 01 Jan 2022 03:56:16 +0000
ROA not before: Sat 01 Jan 2022 03:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57877
IP address blocks: 185.76.216.0/22 maxlen: 22
37.139.120.0/21 maxlen: 21
2a05:5cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142066021 (0x877c165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2b810a7f7268f695bd79a6f5fc7c750ecee48
Validity
Not Before: Jan 1 03:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18640eaa4629996dddaae6a9eaac5b95a7e00eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:70:06:4e:da:e1:3d:10:6e:3d:5f:f8:44:
5f:70:dd:2c:0e:d9:58:2c:91:28:4b:ab:64:13:3a:
33:87:47:3b:15:07:f1:55:4c:22:a2:9a:6c:ba:77:
20:71:03:68:27:46:ee:d1:48:d8:22:f0:7d:7f:c6:
4c:ab:77:6f:42:d4:24:e5:de:ca:60:3d:a7:d5:87:
df:25:bf:d4:d7:fb:2b:2f:f4:8b:7f:9a:85:aa:41:
f5:f2:b1:d5:2a:02:33:31:f4:a1:02:96:93:34:78:
25:e8:bb:e7:7d:eb:c3:a5:60:32:13:aa:36:25:9f:
e9:d6:83:bd:d9:4e:e6:a8:a0:2b:f1:8b:f9:78:85:
52:47:57:65:84:36:ac:94:7c:32:39:e5:49:ef:90:
20:f3:15:43:4d:b8:c5:96:79:2e:a9:86:1e:f1:0b:
5c:83:a2:01:fb:4b:6c:5f:71:77:c7:1b:4a:20:a5:
99:d7:a6:43:8b:0f:2e:86:2b:57:ba:17:47:6d:b0:
bd:cd:b9:1d:4c:d3:67:e7:e8:5d:06:03:94:44:0e:
b0:d3:c1:75:82:f8:26:29:60:5f:6c:ba:a4:bd:fc:
6b:fb:de:6e:ee:c2:aa:40:e0:3a:95:b1:e2:af:c6:
ad:4b:2a:b1:d7:fd:11:19:0a:ec:bf:75:60:f2:96:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:0E:AA:46:29:99:6D:DD:AA:E6:A9:EA:AC:5B:95:A7:E0:0E:DA
X509v3 Authority Key Identifier:
keyid:E0:C2:B8:10:A7:F7:26:8F:69:5B:D7:9A:6F:5F:C7:C7:50:EC:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MK4EKf3Jo9pW9eab1_Hx1Ds7kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b0209f-8b60-478a-b5cc-ec091e73b1ed/1/GGQOqkYpmW3dquap6qxblafgDto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b0209f-8b60-478a-b5cc-ec091e73b1ed/1/4MK4EKf3Jo9pW9eab1_Hx1Ds7kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.120.0/21
185.76.216.0/22
IPv6:
2a05:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
60:7b:67:7e:b0:b5:28:e7:64:d6:73:89:c3:8a:7a:29:4c:28:
93:9a:f2:7a:54:fb:87:51:29:5c:4b:22:72:6a:55:37:51:37:
23:be:7f:b8:40:a8:0c:c8:02:a9:78:0b:4b:cf:eb:80:b5:d1:
3f:e6:64:2e:18:cb:8f:1d:23:1d:4e:94:08:03:73:f6:87:76:
c5:8c:62:0d:18:89:f1:78:bf:54:12:ef:0c:bc:ef:6e:8c:76:
98:10:31:8a:ac:51:f6:df:df:2c:ad:70:d4:8c:53:9e:01:cd:
f8:eb:f4:2c:65:bd:20:fd:6c:4c:bb:12:76:bd:43:3c:08:b2:
b7:0a:8f:e6:15:1a:f9:83:8e:8c:55:42:05:4f:be:00:7e:5e:
5d:bd:b7:d4:a7:2b:c4:fc:63:19:e4:ee:58:b0:d2:93:1a:4d:
67:0f:3e:72:f3:4f:cb:94:0d:3d:1e:27:aa:18:59:e3:cd:84:
57:3b:44:4e:66:f4:09:3c:34:c1:01:7c:69:f6:7f:0c:94:a6:
5a:fb:a7:c1:4f:0f:f7:58:e2:69:01:76:27:46:7e:4f:cf:fc:
69:fb:e0:c2:fa:14:47:e0:e7:ac:dc:3a:8e:d9:65:da:cc:d7:
31:15:b1:f9:2b:e8:4c:15:d6:4c:ee:eb:19:bf:c4:ee:4b:25:
33:aa:a6:7b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECHfBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGMyYjgxMGE3ZjcyNjhmNjk1YmQ3OWE2ZjVmYzdjNzUwZWNlZTQ4MB4XDTIyMDEw
MTAzNTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTg2NDBlYWE0NjI5
OTk2ZGRkYWFlNmE5ZWFhYzViOTVhN2UwMGVkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXlcAZO2uE9EG49X/hEX3DdLA7ZWCyRKEurZBM6M4dHOxUH
8VVMIqKabLp3IHEDaCdG7tFI2CLwfX/GTKt3b0LUJOXeymA9p9WH3yW/1Nf7Ky/0
i3+ahapB9fKx1SoCMzH0oQKWkzR4Jei7533rw6VgMhOqNiWf6daDvdlO5qigK/GL
+XiFUkdXZYQ2rJR8MjnlSe+QIPMVQ024xZZ5LqmGHvELXIOiAftLbF9xd8cbSiCl
mdemQ4sPLoYrV7oXR22wvc25HUzTZ+foXQYDlEQOsNPBdYL4JilgX2y6pL38a/ve
bu7CqkDgOpWx4q/GrUsqsdf9ERkK7L91YPKWXLsCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQYZA6qRimZbd2q5qnqrFuVp+AO2jAfBgNVHSMEGDAWgBTgwrgQp/cmj2lb
15pvX8fHUOzuSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRNSzRFS2YzSm85cFc5ZWFiMV9IeDFEczdrZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvYjAyMDlmLThiNjAtNDc4YS1iNWNjLWVjMDkxZTczYjFlZC8x
L0dHUU9xa1lwbVczZHF1YXA2cXhibGFmZ0R0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
YjAyMDlmLThiNjAtNDc4YS1iNWNjLWVjMDkxZTczYjFlZC8xLzRNSzRFS2YzSm85
cFc5ZWFiMV9IeDFEczdrZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAyWLeAMEArlM2DANBAIAAjAHAwUD
KgVcwDANBgkqhkiG9w0BAQsFAAOCAQEAYHtnfrC1KOdk1nOJw4p6KUwok5ryelT7
h1EpXEsicmpVN1E3I75/uECoDMgCqXgLS8/rgLXRP+ZkLhjLjx0jHU6UCANz9od2
xYxiDRiJ8Xi/VBLvDLzvbox2mBAxiqxR9t/fLK1w1IxTngHN+Ov0LGW9IP1sTLsS
dr1DPAiytwqP5hUa+YOOjFVCBU++AH5eXb231KcrxPxjGeTuWLDSkxpNZw8+cvNP
y5QNPR4nqhhZ482EVztETmb0CTw0wQF8afZ/DJSmWvunwU8P91jiaQF2J0Z+T8/8
afvgwvoUR+DnrNw6jtll2szXMRWx+SvoTBXWTO7rGb/E7kslM6qmew==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org