Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/j54wydFCPyo8I78g_wKkJIOBZ8Q.roa
File: j54wydFCPyo8I78g_wKkJIOBZ8Q.roa (raw, json)
Hash identifier: 5WfT+nJmAJvVaEDfvFZBT6h2pyWGZBMTTphr0ddjT3A=
Subject key identifier: 8F:9E:30:C9:D1:42:3F:2A:3C:23:BF:20:FF:02:A4:24:83:81:67:C4
Certificate issuer: /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial: 0182403007323D551F96190A097C3C6D2611
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/j54wydFCPyo8I78g_wKkJIOBZ8Q.roa
Signing time: Wed 27 Jul 2022 15:04:25 +0000
ROA not before: Wed 27 Jul 2022 15:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6848
IP address blocks: 188.188.0.0/15 maxlen: 24
185.23.244.0/22 maxlen: 24
217.72.224.0/20 maxlen: 24
2a00:1cf8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:30:07:32:3d:55:1f:96:19:0a:09:7c:3c:6d:26:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
Validity
Not Before: Jul 27 15:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f9e30c9d1423f2a3c23bf20ff02a424838167c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:a9:91:e6:d7:da:b5:f9:8d:72:4e:1a:09:
50:5c:86:c1:e6:7d:85:e4:65:27:f2:0a:ff:e3:8e:
13:df:16:17:08:c4:5d:ec:98:7a:38:17:39:18:88:
93:a3:ef:bf:e0:af:2e:11:62:68:e7:07:18:d6:f3:
c2:29:3a:30:5e:d3:54:b0:31:6c:0f:78:33:f2:52:
f6:7a:f3:7e:fe:fa:be:e4:de:f4:bd:50:df:89:f2:
1e:c4:ea:69:fa:27:a7:5b:bb:05:cb:25:28:40:be:
c1:65:64:56:6a:6b:dc:56:c8:84:df:d5:01:76:27:
68:1c:63:49:f1:12:d5:7a:09:fd:77:0c:d3:f7:73:
55:65:cf:a6:81:32:a8:9d:cd:1d:d7:47:21:62:36:
32:ba:67:ec:10:f9:57:25:1c:75:5f:13:63:e9:18:
48:13:70:8e:3d:d7:29:b2:56:9d:97:82:d1:7a:1e:
b7:ba:29:b8:f7:07:02:7d:4d:72:b2:e3:b5:ee:0a:
12:4f:55:ab:98:1e:c5:e4:69:9e:85:3a:fa:5e:d3:
30:08:e3:54:20:2e:fb:b0:de:ec:00:65:fd:82:da:
23:2b:44:d4:2a:f1:ea:72:b2:8e:4d:76:16:01:dd:
5c:af:53:af:ad:27:2e:a0:9a:67:fd:fe:ec:6b:9c:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:30:C9:D1:42:3F:2A:3C:23:BF:20:FF:02:A4:24:83:81:67:C4
X509v3 Authority Key Identifier:
keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/j54wydFCPyo8I78g_wKkJIOBZ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
188.188.0.0/15
217.72.224.0/20
IPv6:
2a00:1cf8::/29
Signature Algorithm: sha256WithRSAEncryption
58:7e:39:ce:03:82:d5:e9:4f:b8:c7:ec:29:6e:3d:c8:3f:29:
29:42:24:47:92:d0:cf:07:6f:8c:6e:6c:b2:7b:14:d1:d2:77:
f6:76:52:19:62:85:ad:a0:b2:10:32:3a:60:34:54:ef:1d:71:
37:de:e2:22:80:7e:a4:a9:51:55:1f:34:f0:cd:f6:dd:b2:0d:
85:aa:d7:4a:39:06:f3:8b:36:ee:8e:33:29:27:6c:3c:ad:2c:
45:d1:03:55:8b:d9:02:d5:32:62:e0:3a:21:63:9c:21:4b:9f:
b7:ea:1a:2c:ed:c7:4f:56:ae:96:9e:ff:ee:d8:1c:40:0a:92:
fc:c6:1e:e7:a8:cc:57:ab:60:b0:86:b9:82:88:f9:b2:2a:07:
85:32:f5:91:ce:23:35:b8:5a:11:96:f7:fb:ad:20:79:d5:79:
8a:70:30:55:66:dd:85:48:c8:70:73:3f:6c:a6:db:84:82:ea:
a9:4e:69:93:0e:9d:22:5e:17:a3:4d:8e:1f:42:18:71:41:f4:
4d:75:36:d0:77:04:f3:ca:56:ac:87:2a:86:89:40:d6:cb:e5:
07:57:66:51:16:42:38:06:ac:6b:8a:35:7e:62:fd:55:98:6a:
22:77:ea:db:9c:c8:b8:42:cb:75:7d:82:a0:17:85:62:44:87:
45:54:95:e7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYJAMAcyPVUflhkKCXw8bSYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNjUzZDU5MmQ5MWNiYzczOGM2OTE4MDE4NjI3N2U4Nzgz
MjM4YWYwHhcNMjIwNzI3MTUwNDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjllMzBjOWQxNDIzZjJhM2MyM2JmMjBmZjAyYTQyNDgzODE2N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaypkebX2rX5jXJOGglQXIbB5n2F
5GUn8gr/444T3xYXCMRd7Jh6OBc5GIiTo++/4K8uEWJo5wcY1vPCKTowXtNUsDFs
D3gz8lL2evN+/vq+5N70vVDfifIexOpp+ienW7sFyyUoQL7BZWRWamvcVsiE39UB
didoHGNJ8RLVegn9dwzT93NVZc+mgTKonc0d10chYjYyumfsEPlXJRx1XxNj6RhI
E3COPdcpsladl4LReh63uim49wcCfU1ysuO17goST1WrmB7F5GmehTr6XtMwCONU
IC77sN7sAGX9gtojK0TUKvHqcrKOTXYWAd1cr1OvrScuoJpn/f7sa5xRUQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI+eMMnRQj8qPCO/IP8CpCSDgWfEMB8GA1UdIwQY
MBaAFDxlPVktkcvHOMaRgBhid+h4MjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEdVOVdTMlJ5OGM0eHBHQUdHSjM2SGd5T0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMjg4M2UtMzcwNy00ZjZmLTk0ZGMt
OWM0NmY5OGRhMThjLzEvajU0d3lkRkNQeW84STc4Z193S2tKSU9CWjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wMjg4M2UtMzcwNy00ZjZmLTk0ZGMtOWM0NmY5OGRhMThj
LzEvUEdVOVdTMlJ5OGM0eHBHQUdHSjM2SGd5T0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCuRf0AwMB
vLwDBATZSOAwDQQCAAIwBwMFAyoAHPgwDQYJKoZIhvcNAQELBQADggEBAFh+Oc4D
gtXpT7jH7CluPcg/KSlCJEeS0M8Hb4xubLJ7FNHSd/Z2Uhliha2gshAyOmA0VO8d
cTfe4iKAfqSpUVUfNPDN9t2yDYWq10o5BvOLNu6OMyknbDytLEXRA1WL2QLVMmLg
OiFjnCFLn7fqGiztx09Wrpae/+7YHEAKkvzGHueozFerYLCGuYKI+bIqB4Uy9ZHO
IzW4WhGW9/utIHnVeYpwMFVm3YVIyHBzP2ym24SC6qlOaZMOnSJeF6NNjh9CGHFB
9E11NtB3BPPKVqyHKoaJQNbL5QdXZlEWQjgGrGuKNX5i/VWYaiJ36tucyLhCy3V9
gqAXhWJEh0VUlec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:03 2024 by rpki-client on console-fra.rpki-client.org