Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/wlqC2u28DAlQv2yUSEVr0QLfBqo.roa
File: wlqC2u28DAlQv2yUSEVr0QLfBqo.roa (raw, json)
Hash identifier: OEbMZEF4hJ25U3cF5NsbCjnOQFQBSDMXFkLrCLUrDoI=
Subject key identifier: C2:5A:82:DA:ED:BC:0C:09:50:BF:6C:94:48:45:6B:D1:02:DF:06:AA
Certificate issuer: /CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
Certificate serial: 0181F7EBC2276C287CD2F88F823B22E64E9B
Authority key identifier: 78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/wlqC2u28DAlQv2yUSEVr0QLfBqo.roa
Signing time: Wed 13 Jul 2022 14:17:11 +0000
ROA not before: Wed 13 Jul 2022 14:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205933
IP address blocks: 185.147.64.0/24 maxlen: 24
185.147.66.0/24 maxlen: 24
185.147.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:eb:c2:27:6c:28:7c:d2:f8:8f:82:3b:22:e6:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
Validity
Not Before: Jul 13 14:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c25a82daedbc0c0950bf6c9448456bd102df06aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:8a:4a:75:41:74:92:bc:4a:9e:39:d8:de:
38:9d:3e:e8:06:6c:88:76:f1:ff:94:18:27:55:b0:
e0:17:a6:5b:6b:d9:47:d0:4b:92:58:1a:a0:2a:b7:
ae:a3:7c:87:9f:ba:b8:ff:c4:03:e0:ae:47:b9:a0:
a3:50:05:49:29:03:0f:c0:ad:5f:43:a2:74:f5:b6:
e9:9c:cd:e4:aa:4f:91:81:32:a7:a6:8f:b5:e4:86:
70:13:ac:9f:59:ad:9c:6a:51:ee:7a:4a:96:01:0d:
9b:1d:9d:3e:e1:9a:e0:e9:58:08:f6:98:b6:d3:1a:
02:78:2b:4d:ca:ed:79:1e:31:a7:17:2a:79:79:e0:
d6:52:fc:60:30:90:02:c6:31:86:9a:da:1e:16:79:
36:cf:55:05:d3:7f:89:35:ee:40:c1:48:bd:04:90:
74:b2:1d:bd:e5:28:60:a2:0a:cf:6c:bc:f0:72:68:
79:ca:e1:ea:28:e7:da:5b:94:24:d8:7c:2a:f6:66:
9a:4b:bd:db:04:7b:e6:69:45:f7:07:2d:b1:cb:49:
ab:93:bf:8f:d2:03:42:80:78:ef:63:fc:a8:5d:cd:
e6:0c:d2:bd:1e:09:dd:78:9b:c6:00:25:35:22:94:
71:07:4f:44:0f:1a:bd:5d:b4:71:79:16:af:a5:74:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:82:DA:ED:BC:0C:09:50:BF:6C:94:48:45:6B:D1:02:DF:06:AA
X509v3 Authority Key Identifier:
keyid:78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/wlqC2u28DAlQv2yUSEVr0QLfBqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/eETIzrJz4pydXz9VBkNHp66ukys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.64.0-185.147.66.255
Signature Algorithm: sha256WithRSAEncryption
99:8c:65:87:82:d8:88:22:d9:fb:51:34:01:57:8f:b4:98:61:
bf:49:93:0f:97:9b:54:7a:fb:d1:9a:04:29:92:c3:30:15:0b:
e9:c2:00:71:4a:f6:c6:32:9e:b8:07:d1:a5:28:2c:cf:19:54:
b6:a3:73:73:91:51:f5:85:e2:6b:d5:a4:45:3d:0e:df:c7:46:
ef:d6:15:6b:ea:c7:a0:69:88:0d:ba:50:90:c8:c9:ee:66:51:
3c:99:6b:07:3f:a7:25:7c:24:0e:93:1f:9c:42:f8:97:d7:fd:
5c:e3:65:ea:ba:e2:a5:da:7f:2e:5c:f8:40:3a:d7:19:0a:a0:
d1:3b:6e:35:2e:aa:c7:e7:02:81:0e:a2:c8:41:9b:1a:1a:d1:
e2:64:d4:aa:d3:3c:da:a7:4f:0c:66:7c:cb:0f:7c:d3:63:96:
10:52:b6:36:94:c9:ce:b0:bb:15:3d:b0:0f:2c:20:74:79:33:
2c:dd:b1:3b:72:18:cf:e9:e5:b9:b4:4f:d2:4d:35:c3:1e:ae:
27:04:95:6e:fe:12:7d:b3:56:6c:ac:bc:ac:db:75:80:86:6a:
ea:61:07:e6:88:cc:8e:97:90:e8:70:fd:d6:55:a3:ee:fe:ca:
41:2e:7d:0f:0a:ab:f1:20:af:0f:2e:74:0b:d9:ca:03:1b:c5:
d4:ea:3a:a5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYH368InbCh80viPgjsi5k6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NDRjOGNlYjI3M2UyOWM5ZDVmM2Y1NTA2NDM0N2E3YWVh
ZTkzMmIwHhcNMjIwNzEzMTQxNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjVhODJkYWVkYmMwYzA5NTBiZjZjOTQ0ODQ1NmJkMTAyZGYwNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nGKSnVBdJK8Sp452N44nT7oBmyI
dvH/lBgnVbDgF6Zba9lH0EuSWBqgKreuo3yHn7q4/8QD4K5HuaCjUAVJKQMPwK1f
Q6J09bbpnM3kqk+RgTKnpo+15IZwE6yfWa2calHuekqWAQ2bHZ0+4Zrg6VgI9pi2
0xoCeCtNyu15HjGnFyp5eeDWUvxgMJACxjGGmtoeFnk2z1UF03+JNe5AwUi9BJB0
sh295ShgogrPbLzwcmh5yuHqKOfaW5Qk2Hwq9maaS73bBHvmaUX3By2xy0mrk7+P
0gNCgHjvY/yoXc3mDNK9HgndeJvGACU1IpRxB09EDxq9XbRxeRavpXRc2QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMJagtrtvAwJUL9slEhFa9EC3waqMB8GA1UdIwQY
MBaAFHhEyM6yc+KcnV8/VQZDR6eurpMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUVUSXpySno0cHlkWHo5VkJrTkhwNjZ1a3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kNDg5ZjUtYjRkOS00NWZmLWE5YTUt
NDk3YjBiYjY1MTdlLzEvd2xxQzJ1MjhEQWxRdjJ5VVNFVnIwUUxmQnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kNDg5ZjUtYjRkOS00NWZmLWE5YTUtNDk3YjBiYjY1MTdl
LzEvZUVUSXpySno0cHlkWHo5VkJrTkhwNjZ1a3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa5k0AD
BAC5k0IwDQYJKoZIhvcNAQELBQADggEBAJmMZYeC2Igi2ftRNAFXj7SYYb9Jkw+X
m1R6+9GaBCmSwzAVC+nCAHFK9sYynrgH0aUoLM8ZVLajc3ORUfWF4mvVpEU9Dt/H
Ru/WFWvqx6BpiA26UJDIye5mUTyZawc/pyV8JA6TH5xC+JfX/VzjZeq64qXafy5c
+EA61xkKoNE7bjUuqsfnAoEOoshBmxoa0eJk1KrTPNqnTwxmfMsPfNNjlhBStjaU
yc6wuxU9sA8sIHR5MyzdsTtyGM/p5bm0T9JNNcMericElW7+En2zVmysvKzbdYCG
auphB+aIzI6XkOhw/dZVo+7+ykEufQ8Kq/Egrw8udAvZygMbxdTqOqU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:30 2024 by rpki-client on console-ams.rpki-client.org