Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/8uW8x1UkMY2pKzsLGTIukbAFPoc.roa
File: 8uW8x1UkMY2pKzsLGTIukbAFPoc.roa (raw, json)
Hash identifier: VN7ugbvuyFZpyhJi65Un6/kTU8e57R4GExtzSmwGS/E=
Subject key identifier: F2:E5:BC:C7:55:24:31:8D:A9:2B:3B:0B:19:32:2E:91:B0:05:3E:87
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: DE76CD
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/8uW8x1UkMY2pKzsLGTIukbAFPoc.roa
Signing time: Thu 24 Mar 2022 15:30:17 +0000
ROA not before: Thu 24 Mar 2022 15:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.203.192.0/21 maxlen: 21
37.203.198.0/23 maxlen: 24
37.19.96.0/21 maxlen: 21
37.19.96.0/24 maxlen: 24
37.19.101.0/24 maxlen: 24
37.19.102.0/23 maxlen: 24
185.4.192.0/24 maxlen: 24
185.4.192.0/22 maxlen: 22
185.4.195.0/24 maxlen: 24
185.4.194.0/24 maxlen: 24
185.4.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14579405 (0xde76cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Mar 24 15:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2e5bcc75524318da92b3b0b19322e91b0053e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:09:93:4b:fe:d0:98:bb:54:f9:7b:6a:3c:
15:6b:7c:d1:f0:b7:97:a0:1b:ba:40:1a:4d:e6:12:
6d:cc:14:33:07:6b:a8:46:d0:97:3c:f3:59:69:16:
cd:54:0f:ff:3b:86:23:55:89:d2:23:9f:25:fd:1c:
00:b7:7b:f0:90:19:5e:7c:24:be:c9:a0:1a:2a:c4:
ec:da:08:a2:b8:58:0e:cf:8b:bf:36:d2:9f:cc:66:
46:ff:aa:cf:74:e5:da:62:9a:80:d8:83:d0:33:d6:
bc:c2:f4:69:73:7f:45:0a:41:0b:db:68:75:f7:7d:
b6:d0:38:5f:8e:ba:b4:80:af:64:5b:ff:15:e6:31:
fc:06:1e:35:b1:ef:75:2d:d9:57:ba:e3:ed:d4:5c:
99:6d:3b:7a:4a:bd:57:d4:41:8c:67:81:f0:49:30:
bb:14:44:93:3a:28:d9:04:d3:7a:5d:71:27:5c:4b:
a5:83:37:d6:37:1f:22:e9:ac:5e:42:29:6d:40:5e:
eb:70:31:11:ca:f4:91:2a:ee:63:1d:98:ab:64:93:
c7:4e:81:83:34:b7:e2:1f:aa:e4:da:7c:15:c5:ce:
37:d3:34:cd:9b:f3:8b:5b:a3:ae:78:ee:77:7d:7c:
43:5c:ac:82:db:85:a6:2f:f7:52:49:d0:b8:3c:d7:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:BC:C7:55:24:31:8D:A9:2B:3B:0B:19:32:2E:91:B0:05:3E:87
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/8uW8x1UkMY2pKzsLGTIukbAFPoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
185.4.192.0/22
Signature Algorithm: sha256WithRSAEncryption
70:52:db:19:c7:06:f0:7b:ec:d9:69:14:71:b6:bd:69:bc:d0:
4e:17:93:7d:62:e2:b0:8f:9d:71:15:39:f3:75:75:28:51:d5:
56:a3:a3:6b:21:b3:92:dd:16:e1:65:a7:4c:78:00:50:56:8f:
33:f8:b3:67:8a:26:11:0c:cc:20:5d:9b:0b:b2:44:00:18:3d:
44:bb:b2:12:f4:99:e4:28:b9:61:f4:52:91:e8:02:ae:0d:f2:
46:1d:38:e7:5d:e3:99:91:f1:c0:dd:bd:c6:ba:51:d2:5e:df:
ef:b4:52:77:08:7d:54:6b:fd:4f:a7:19:74:41:92:99:79:d2:
bc:db:cc:86:98:22:74:24:72:10:1a:72:23:97:7b:a0:e2:b6:
c5:52:ed:d2:15:fe:f1:d5:4a:b0:56:9b:d6:28:1d:8e:bf:44:
1c:d3:d1:62:5a:64:db:32:a4:9a:3c:ee:4a:a5:05:f0:4c:6e:
f4:7f:c0:dc:7f:46:3e:a2:42:d7:6d:0c:c7:72:37:0a:64:b0:
00:fb:c0:a0:9a:1f:45:d9:ab:90:2e:f1:31:02:7f:46:33:8e:
b0:fe:ba:4a:8c:2f:82:b7:7b:04:86:d5:38:1a:1c:a2:ed:04:
34:13:29:4b:2e:d1:47:48:1f:81:94:d2:a2:8a:12:3e:cc:16:
4a:20:1b:36
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAN52zTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmY4MWMzN2U5ZWQyNGQwYjIwZTk0YzE4NjkwZTg4YWU0YjMxMWNhMB4XDTIyMDMy
NDE1MzAxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjJlNWJjYzc1NTI0
MzE4ZGE5MmIzYjBiMTkzMjJlOTFiMDA1M2U4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALW3CZNL/tCYu1T5e2o8FWt80fC3l6AbukAaTeYSbcwUMwdr
qEbQlzzzWWkWzVQP/zuGI1WJ0iOfJf0cALd78JAZXnwkvsmgGirE7NoIorhYDs+L
vzbSn8xmRv+qz3Tl2mKagNiD0DPWvML0aXN/RQpBC9todfd9ttA4X466tICvZFv/
FeYx/AYeNbHvdS3ZV7rj7dRcmW07ekq9V9RBjGeB8EkwuxREkzoo2QTTel1xJ1xL
pYM31jcfIumsXkIpbUBe63AxEcr0kSruYx2Yq2STx06BgzS34h+q5Np8FcXON9M0
zZvzi1ujrnjud318Q1ysgtuFpi/3UknQuDzXm30CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTy5bzHVSQxjakrOwsZMi6RsAU+hzAfBgNVHSMEGDAWgBQC+Bw36e0k0LIO
lMGGkOiK5LMRyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F2Z2NOLW50Sk5DeURwVEJocERvaXVTekVjby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDFmYTE4LWFiNmEtNDg5OS1iNDc1LTkyYTM2NjFlYzI2ZC8x
Lzh1Vzh4MVVrTVkycEt6c0xHVEl1a2JBRlBvYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDFmYTE4LWFiNmEtNDg5OS1iNDc1LTkyYTM2NjFlYzI2ZC8xL0F2Z2NOLW50Sk5D
eURwVEJocERvaXVTekVjby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAyUTYAMEAyXLwAMEArkEwDANBgkq
hkiG9w0BAQsFAAOCAQEAcFLbGccG8Hvs2WkUcba9abzQTheTfWLisI+dcRU583V1
KFHVVqOjayGzkt0W4WWnTHgAUFaPM/izZ4omEQzMIF2bC7JEABg9RLuyEvSZ5Ci5
YfRSkegCrg3yRh04513jmZHxwN29xrpR0l7f77RSdwh9VGv9T6cZdEGSmXnSvNvM
hpgidCRyEBpyI5d7oOK2xVLt0hX+8dVKsFab1igdjr9EHNPRYlpk2zKkmjzuSqUF
8Exu9H/A3H9GPqJC120Mx3I3CmSwAPvAoJofRdmrkC7xMQJ/RjOOsP66Sowvgrd7
BIbVOBocou0ENBMpSy7RR0gfgZTSoooSPswWSiAbNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org