Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/SYsN-XocYh4u6cFimhtpbEj_z-o.roa
File: SYsN-XocYh4u6cFimhtpbEj_z-o.roa (raw, json)
Hash identifier: mYC546L7IhSGlWraNxgRkyYMW+jaPB8UgPCqMK2zlkE=
Subject key identifier: 49:8B:0D:F9:7A:1C:62:1E:2E:E9:C1:62:9A:1B:69:6C:48:FF:CF:EA
Certificate issuer: /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial: 3881FBB5
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/SYsN-XocYh4u6cFimhtpbEj_z-o.roa
Signing time: Sat 01 Jan 2022 10:57:27 +0000
ROA not before: Sat 01 Jan 2022 10:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6848
IP address blocks: 188.188.112.0/23 maxlen: 23
188.188.0.0/15 maxlen: 24
185.23.244.0/22 maxlen: 24
188.189.112.0/23 maxlen: 23
217.72.224.0/20 maxlen: 24
2a00:1cf8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948042677 (0x3881fbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
Validity
Not Before: Jan 1 10:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498b0df97a1c621e2ee9c1629a1b696c48ffcfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:91:7b:77:df:e0:9f:4d:b4:ad:cf:e5:49:
b1:dc:81:60:ef:17:c6:65:e5:23:26:b5:9c:52:da:
19:66:aa:c7:ad:65:3d:78:89:ff:54:8a:fe:25:dc:
28:87:b1:7e:b0:c3:c1:6b:1a:86:b4:64:e5:d8:e6:
ab:69:3f:a4:2d:c1:13:aa:97:91:2b:01:48:41:6a:
02:44:62:87:d5:57:5e:04:de:a4:c1:76:a7:1a:a1:
71:29:24:45:6a:02:45:a4:09:81:bb:3c:06:87:97:
fb:94:7e:5f:fc:04:12:2d:3d:63:4e:87:da:e9:7e:
dd:0a:85:73:34:db:1e:cd:41:b8:8a:77:49:53:0b:
99:36:e2:17:d5:0a:57:a7:d6:ef:8f:54:91:75:9f:
4b:3a:1c:79:1f:36:3a:cb:02:a6:bb:c5:30:c9:c6:
ed:c8:18:42:bf:1f:26:e7:aa:15:80:3c:dc:47:4d:
0c:1c:b3:bb:1c:ab:f1:8e:7b:71:6a:e2:3c:04:33:
8d:a1:a5:bc:9f:23:ae:0d:0d:ef:18:fb:0c:24:2e:
95:f6:61:fa:7c:42:f1:26:00:7a:a7:c1:b0:1f:97:
68:f1:68:84:f2:d6:a6:52:f7:10:99:f4:2d:f8:4e:
25:68:e7:34:0f:d7:48:ca:c0:b4:5a:70:c8:db:de:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:0D:F9:7A:1C:62:1E:2E:E9:C1:62:9A:1B:69:6C:48:FF:CF:EA
X509v3 Authority Key Identifier:
keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/SYsN-XocYh4u6cFimhtpbEj_z-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
188.188.0.0/15
217.72.224.0/20
IPv6:
2a00:1cf8::/29
Signature Algorithm: sha256WithRSAEncryption
7b:83:11:4b:16:c9:ba:0e:75:87:f0:a0:8b:b8:da:07:23:61:
01:27:05:7c:ec:69:e2:4f:65:20:a8:44:15:e5:f4:d8:10:a0:
5d:f9:f4:01:1a:14:da:c3:26:1c:3e:3e:00:ea:fd:08:b7:ba:
0a:58:92:89:b1:7a:c4:78:d2:86:42:6d:06:d9:3c:a3:59:89:
cd:69:07:74:8c:c8:7b:c6:21:ce:98:32:2c:f4:91:2e:bd:d7:
2f:40:b3:bb:2c:8d:63:ec:71:24:e1:91:77:91:91:8c:05:80:
a8:56:df:3c:6b:ca:09:b4:44:8a:44:16:7f:fa:d7:23:33:76:
7d:ce:9d:a0:83:95:82:65:2d:bf:90:b6:3b:d2:65:0e:2b:45:
85:b0:72:eb:49:09:40:a5:40:fc:e0:dd:f5:a5:d8:69:e7:40:
a4:57:a1:94:35:26:ac:14:99:b9:63:3e:9b:94:ff:7f:fd:fd:
4d:60:06:be:ca:a9:01:2a:88:b7:90:f7:a9:76:f7:dc:8e:df:
57:94:31:ae:35:2e:7e:83:bd:9f:f9:23:69:59:21:9f:2f:d2:
50:8a:0d:b0:14:bf:66:2b:f1:64:db:dd:0d:f9:d0:a0:73:52:
f1:78:88:76:f8:23:a6:bb:89:a6:6d:43:12:36:0e:1b:6e:7b:
ec:65:4d:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEOIH7tTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzY1M2Q1OTJkOTFjYmM3MzhjNjkxODAxODYyNzdlODc4MzIzOGFmMB4XDTIyMDEw
MTEwNTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk4YjBkZjk3YTFj
NjIxZTJlZTljMTYyOWExYjY5NmM0OGZmY2ZlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAId5kXt33+CfTbStz+VJsdyBYO8XxmXlIya1nFLaGWaqx61l
PXiJ/1SK/iXcKIexfrDDwWsahrRk5djmq2k/pC3BE6qXkSsBSEFqAkRih9VXXgTe
pMF2pxqhcSkkRWoCRaQJgbs8BoeX+5R+X/wEEi09Y06H2ul+3QqFczTbHs1BuIp3
SVMLmTbiF9UKV6fW749UkXWfSzoceR82OssCprvFMMnG7cgYQr8fJueqFYA83EdN
DByzuxyr8Y57cWriPAQzjaGlvJ8jrg0N7xj7DCQulfZh+nxC8SYAeqfBsB+XaPFo
hPLWplL3EJn0LfhOJWjnNA/XSMrAtFpwyNvexT0CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBRJiw35ehxiHi7pwWKaG2lsSP/P6jAfBgNVHSMEGDAWgBQ8ZT1ZLZHLxzjG
kYAYYnfoeDI4rzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BHVTlXUzJSeThjNHhwR0FHR0ozNkhneU9LOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvMDI4ODNlLTM3MDctNGY2Zi05NGRjLTljNDZmOThkYTE4Yy8x
L1NZc04tWG9jWWg0dTZjRmltaHRwYkVqX3otby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
MDI4ODNlLTM3MDctNGY2Zi05NGRjLTljNDZmOThkYTE4Yy8xL1BHVTlXUzJSeThj
NHhwR0FHR0ozNkhneU9LOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwFwQCAAEwEQMEArkX9AMDAby8AwQE2UjgMA0EAgAC
MAcDBQMqABz4MA0GCSqGSIb3DQEBCwUAA4IBAQB7gxFLFsm6DnWH8KCLuNoHI2EB
JwV87GniT2UgqEQV5fTYEKBd+fQBGhTawyYcPj4A6v0It7oKWJKJsXrEeNKGQm0G
2TyjWYnNaQd0jMh7xiHOmDIs9JEuvdcvQLO7LI1j7HEk4ZF3kZGMBYCoVt88a8oJ
tESKRBZ/+tcjM3Z9zp2gg5WCZS2/kLY70mUOK0WFsHLrSQlApUD84N31pdhp50Ck
V6GUNSasFJm5Yz6blP9//f1NYAa+yqkBKoi3kPepdvfcjt9XlDGuNS5+g72f+SNp
WSGfL9JQig2wFL9mK/Fk290N+dCgc1LxeIh2+COmu4mmbUMSNg4bbnvsZU0g
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:18 2024 by rpki-client on console-ams.rpki-client.org