Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4ca0b4-1c7e-4707-8ca6-03602e8d5ad4/1/bCv8WImjekKbniGm8U8Fbpo1KNg.roa
File: bCv8WImjekKbniGm8U8Fbpo1KNg.roa (raw, json)
Hash identifier: PN6N60bmThpUp+bK2RBr/RG3ki13C5leZSAjSFQP280=
Subject key identifier: 6C:2B:FC:58:89:A3:7A:42:9B:9E:21:A6:F1:4F:05:6E:9A:35:28:D8
Certificate issuer: /CN=9f7f36ecc13e633010f64d123b6315899c61afe9
Certificate serial: 024B5281
Authority key identifier: 9F:7F:36:EC:C1:3E:63:30:10:F6:4D:12:3B:63:15:89:9C:61:AF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3827ME-YzAQ9k0SO2MViZxhr-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4ca0b4-1c7e-4707-8ca6-03602e8d5ad4/1/bCv8WImjekKbniGm8U8Fbpo1KNg.roa
Signing time: Sat 01 Jan 2022 05:01:39 +0000
ROA not before: Sat 01 Jan 2022 05:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51960
IP address blocks: 193.9.123.0/24 maxlen: 24
193.84.1.0/24 maxlen: 24
193.84.11.0/24 maxlen: 24
193.84.6.0/24 maxlen: 24
193.84.16.0/24 maxlen: 24
195.242.108.0/23 maxlen: 23
185.78.74.0/24 maxlen: 24
185.78.73.0/24 maxlen: 24
185.78.72.0/24 maxlen: 24
195.206.116.0/22 maxlen: 22
91.222.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38490753 (0x24b5281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7f36ecc13e633010f64d123b6315899c61afe9
Validity
Not Before: Jan 1 05:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c2bfc5889a37a429b9e21a6f14f056e9a3528d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:7c:8b:6d:96:11:e5:7a:b7:3a:4a:5d:63:
3c:cd:de:6c:d4:4d:50:d9:34:0d:c5:0f:a5:95:6e:
8f:57:aa:b4:d5:21:84:a9:4e:b2:9c:cb:75:ff:fa:
7c:d1:33:2b:02:29:84:57:58:c2:28:dc:11:04:ae:
da:4d:4a:5b:1a:94:3c:8d:d3:b8:42:3e:3a:2c:65:
82:0f:84:c7:b6:65:96:b8:f6:23:7e:9a:b7:df:c9:
ee:03:97:f5:8f:7a:69:47:42:2d:cd:7f:59:af:bc:
ec:c1:23:04:b9:4e:af:16:03:9d:1a:fc:98:f8:e6:
b0:ff:25:0d:b5:9e:2c:89:b2:90:81:7c:26:f4:4f:
a8:34:29:0e:aa:15:a5:18:66:39:c9:65:04:89:d1:
d8:0f:39:f0:d7:79:48:d8:4d:2a:3c:4f:57:b7:75:
59:09:d2:da:30:7c:2c:8b:99:b5:7b:bb:be:d9:7a:
f6:bb:d7:b3:04:1d:f8:e1:12:ca:a1:9d:e9:3c:37:
5a:b1:ab:aa:46:b5:f4:b1:eb:3d:19:37:e8:9d:2e:
15:99:fb:01:84:d7:d8:d2:6d:b3:86:37:04:af:c3:
78:50:71:43:72:1b:76:c5:b5:32:35:0c:34:bc:33:
02:40:74:1d:2f:ce:85:3b:60:2e:6d:01:94:05:93:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:FC:58:89:A3:7A:42:9B:9E:21:A6:F1:4F:05:6E:9A:35:28:D8
X509v3 Authority Key Identifier:
keyid:9F:7F:36:EC:C1:3E:63:30:10:F6:4D:12:3B:63:15:89:9C:61:AF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3827ME-YzAQ9k0SO2MViZxhr-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4ca0b4-1c7e-4707-8ca6-03602e8d5ad4/1/bCv8WImjekKbniGm8U8Fbpo1KNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4ca0b4-1c7e-4707-8ca6-03602e8d5ad4/1/n3827ME-YzAQ9k0SO2MViZxhr-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.24.0/22
185.78.72.0-185.78.74.255
193.9.123.0/24
193.84.1.0/24
193.84.6.0/24
193.84.11.0/24
193.84.16.0/24
195.206.116.0/22
195.242.108.0/23
Signature Algorithm: sha256WithRSAEncryption
58:4e:c3:e6:df:44:c8:84:7a:de:8c:23:94:e3:39:e5:e6:33:
2d:1a:b3:93:87:e5:e4:56:58:76:f8:7b:8b:71:7c:a3:27:9a:
e6:f1:49:2f:bc:07:b0:a5:b5:ce:31:7b:87:45:11:67:4e:e6:
5a:17:b1:fe:b6:e3:0d:dc:f1:dd:b5:b5:00:d1:71:69:01:a2:
7a:1b:29:af:df:d9:5b:ce:c4:df:f1:aa:53:fb:9b:d6:8a:09:
78:ee:8f:98:37:d5:ba:47:38:d2:0f:03:98:39:bc:03:cd:e2:
66:3b:4b:fb:d5:b6:2f:d6:4c:47:b4:2f:96:92:51:34:7f:f1:
e9:17:f5:58:a8:8a:2d:88:e5:93:04:e0:fb:47:dc:03:37:22:
09:15:91:19:65:70:3e:40:71:ce:5c:31:f5:db:01:04:cd:2a:
a5:5a:72:3f:99:68:93:df:e4:71:47:c7:97:32:d4:1d:28:0e:
33:d1:85:ee:f6:10:ec:9b:8d:5e:18:18:37:11:e6:4a:7d:b1:
c2:3e:09:cb:a0:e2:f1:9b:35:28:31:71:2f:84:0e:80:b0:0d:
ca:b5:93:1f:43:5a:84:2c:21:8b:8c:bc:00:7d:e5:41:dc:c1:
44:47:d7:d5:3c:57:43:98:6e:0b:6a:3b:8f:3d:85:d9:76:8b:
b7:6d:b5:1b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEAktSgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjdmMzZlY2MxM2U2MzMwMTBmNjRkMTIzYjYzMTU4OTljNjFhZmU5MB4XDTIyMDEw
MTA1MDEzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmMyYmZjNTg4OWEz
N2E0MjliOWUyMWE2ZjE0ZjA1NmU5YTM1MjhkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBofIttlhHlerc6Sl1jPM3ebNRNUNk0DcUPpZVuj1eqtNUh
hKlOspzLdf/6fNEzKwIphFdYwijcEQSu2k1KWxqUPI3TuEI+Oixlgg+Ex7Zllrj2
I36at9/J7gOX9Y96aUdCLc1/Wa+87MEjBLlOrxYDnRr8mPjmsP8lDbWeLImykIF8
JvRPqDQpDqoVpRhmOcllBInR2A858Nd5SNhNKjxPV7d1WQnS2jB8LIuZtXu7vtl6
9rvXswQd+OESyqGd6Tw3WrGrqka19LHrPRk36J0uFZn7AYTX2NJts4Y3BK/DeFBx
Q3IbdsW1MjUMNLwzAkB0HS/OhTtgLm0BlAWTj+8CAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBRsK/xYiaN6QpueIabxTwVumjUo2DAfBgNVHSMEGDAWgBSffzbswT5jMBD2
TRI7YxWJnGGv6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L24zODI3TUUtWXpBUTlrMFNPMk1WaVp4aHItay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNGNhMGI0LTFjN2UtNDcwNy04Y2E2LTAzNjAyZThkNWFkNC8x
L2JDdjhXSW1qZWtLYm5pR204VThGYnBvMUtOZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NGNhMGI0LTFjN2UtNDcwNy04Y2E2LTAzNjAyZThkNWFkNC8xL24zODI3TUUtWXpB
UTlrMFNPMk1WaVp4aHItay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAlveGDAMAwQDuU5IAwQAuU5KAwQA
wQl7AwQAwVQBAwQAwVQGAwQAwVQLAwQAwVQQAwQCw850AwQBw/JsMA0GCSqGSIb3
DQEBCwUAA4IBAQBYTsPm30TIhHrejCOU4znl5jMtGrOTh+XkVlh2+HuLcXyjJ5rm
8UkvvAewpbXOMXuHRRFnTuZaF7H+tuMN3PHdtbUA0XFpAaJ6Gymv39lbzsTf8apT
+5vWigl47o+YN9W6RzjSDwOYObwDzeJmO0v71bYv1kxHtC+WklE0f/HpF/VYqIot
iOWTBOD7R9wDNyIJFZEZZXA+QHHOXDH12wEEzSqlWnI/mWiT3+RxR8eXMtQdKA4z
0YXu9hDsm41eGBg3EeZKfbHCPgnLoOLxmzUoMXEvhA6AsA3KtZMfQ1qELCGLjLwA
feVB3MFER9fVPFdDmG4LajuPPYXZdou3bbUb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:05 2024 by rpki-client on console-fra.rpki-client.org