Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/sWcb1mxTIxHnYdYJRABvCKMmPSU.roa
File: sWcb1mxTIxHnYdYJRABvCKMmPSU.roa (raw, json)
Hash identifier: wp9iK9O8RVO6erc6Ly9X4gIQySIPMHClGFNvDGxnysI=
Subject key identifier: B1:67:1B:D6:6C:53:23:11:E7:61:D6:09:44:00:6F:08:A3:26:3D:25
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: FBB0DE
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/sWcb1mxTIxHnYdYJRABvCKMmPSU.roa
Signing time: Tue 05 Apr 2022 09:02:19 +0000
ROA not before: Tue 05 Apr 2022 09:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.203.198.0/23 maxlen: 24
37.19.96.0/24 maxlen: 24
37.19.101.0/24 maxlen: 24
37.19.102.0/23 maxlen: 24
185.4.192.0/24 maxlen: 24
185.4.192.0/22 maxlen: 22
185.4.195.0/24 maxlen: 24
185.4.194.0/24 maxlen: 24
185.4.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16494814 (0xfbb0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Apr 5 09:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1671bd66c532311e761d60944006f08a3263d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:64:e5:8f:e7:3f:d1:66:dd:78:6a:ab:47:
b5:60:4e:97:4e:d7:2b:4e:b7:0b:c0:60:79:47:fb:
c3:30:05:ba:00:bb:e5:94:06:16:bc:82:ac:81:18:
ed:79:32:13:a0:2f:11:2e:1f:e7:1c:30:23:cd:0c:
b8:62:51:2a:6d:b2:ab:88:08:04:14:2b:7c:60:d3:
b9:8a:89:6b:66:39:f5:6c:3a:a1:46:b7:8a:77:a7:
2b:21:56:79:d1:c0:1d:22:da:e6:2e:0a:6b:a4:e4:
c5:27:01:e9:ca:50:0c:3d:5a:82:97:07:ed:67:e2:
21:0c:5a:35:09:f7:1d:07:ae:1e:0d:bd:38:a3:61:
39:39:fb:d4:8d:c1:23:97:77:a3:62:7a:ea:4a:9b:
64:0d:72:2a:76:38:c5:3a:9a:82:5b:0a:e6:e8:d4:
59:ca:45:5c:25:37:f9:3f:ba:3a:68:88:55:80:11:
b8:cd:84:57:1f:e3:13:6e:81:a5:04:64:7b:40:46:
84:63:80:5c:98:6e:e6:53:33:9f:20:91:b2:24:a7:
b5:8c:de:0f:92:ab:89:f3:24:17:4a:46:3a:3d:e8:
7c:dd:f4:7e:ad:40:d0:dd:c1:6a:a9:74:85:16:c4:
7c:84:9a:69:b5:e8:b3:ec:f9:c8:17:a0:33:2b:94:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:1B:D6:6C:53:23:11:E7:61:D6:09:44:00:6F:08:A3:26:3D:25
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/sWcb1mxTIxHnYdYJRABvCKMmPSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/24
37.19.101.0-37.19.103.255
37.203.198.0/23
185.4.192.0/22
Signature Algorithm: sha256WithRSAEncryption
89:e0:3e:fa:d8:b2:2c:d3:52:9c:d1:c9:db:a9:b8:f4:fc:ae:
32:b6:07:12:52:f3:f5:a9:c1:b6:eb:84:60:04:80:f3:be:e0:
4b:c9:b6:f7:ed:6e:76:ce:1a:89:86:72:27:57:38:59:a1:7d:
68:37:9c:c7:16:67:c9:65:cd:de:fe:26:56:14:8c:ad:06:ec:
b0:19:94:4a:a4:7a:e3:bb:06:1e:0b:be:2f:54:6e:10:6f:2a:
51:9c:e7:be:b9:06:39:17:be:ec:47:08:a5:c5:32:b9:2e:f9:
6b:90:55:7e:e9:59:66:8d:4a:b7:c5:b9:a2:ff:5e:c3:3e:c2:
6e:6a:38:29:b5:97:ce:26:fe:fb:2a:16:56:6d:a4:8b:c4:4c:
d6:07:e8:fe:f4:3b:d3:31:e9:21:76:b4:d7:b2:91:d9:7a:66:
67:e5:52:aa:3e:c7:1c:3f:60:83:41:ce:de:d2:19:3a:47:e0:
dc:56:7a:20:8d:89:ee:f4:a8:8e:e3:c1:99:6b:cf:d6:b8:e3:
a7:b1:c5:1a:2e:a4:5a:fe:0d:5d:cf:9a:31:67:3a:41:00:92:
90:16:06:60:9a:92:21:3c:ec:85:40:70:cd:3b:dc:90:0e:a3:
b4:39:02:e3:5d:16:73:d4:2a:de:55:9c:fd:b4:c2:d9:2f:6e:
f9:5f:34:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEAPuw3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmY4MWMzN2U5ZWQyNGQwYjIwZTk0YzE4NjkwZTg4YWU0YjMxMWNhMB4XDTIyMDQw
NTA5MDIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE2NzFiZDY2YzUz
MjMxMWU3NjFkNjA5NDQwMDZmMDhhMzI2M2QyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5SZOWP5z/RZt14aqtHtWBOl07XK063C8BgeUf7wzAFugC7
5ZQGFryCrIEY7XkyE6AvES4f5xwwI80MuGJRKm2yq4gIBBQrfGDTuYqJa2Y59Ww6
oUa3inenKyFWedHAHSLa5i4Ka6TkxScB6cpQDD1agpcH7WfiIQxaNQn3HQeuHg29
OKNhOTn71I3BI5d3o2J66kqbZA1yKnY4xTqaglsK5ujUWcpFXCU3+T+6OmiIVYAR
uM2EVx/jE26BpQRke0BGhGOAXJhu5lMznyCRsiSntYzeD5KrifMkF0pGOj3ofN30
fq1A0N3Baql0hRbEfISaabXos+z5yBegMyuULMECAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBSxZxvWbFMjEedh1glEAG8IoyY9JTAfBgNVHSMEGDAWgBQC+Bw36e0k0LIO
lMGGkOiK5LMRyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F2Z2NOLW50Sk5DeURwVEJocERvaXVTekVjby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDFmYTE4LWFiNmEtNDg5OS1iNDc1LTkyYTM2NjFlYzI2ZC8x
L3NXY2IxbXhUSXhIbllkWUpSQUJ2Q0tNbVBTVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDFmYTE4LWFiNmEtNDg5OS1iNDc1LTkyYTM2NjFlYzI2ZC8xL0F2Z2NOLW50Sk5D
eURwVEJocERvaXVTekVjby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEACUTYDAMAwQAJRNlAwQDJRNgAwQB
JcvGAwQCuQTAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4D762LIs01Kc0cnbqbj0/K4y
tgcSUvP1qcG264RgBIDzvuBLybb37W52zhqJhnInVzhZoX1oN5zHFmfJZc3e/iZW
FIytBuywGZRKpHrjuwYeC74vVG4QbypRnOe+uQY5F77sRwilxTK5LvlrkFV+6Vlm
jUq3xbmi/17DPsJuajgptZfOJv77KhZWbaSLxEzWB+j+9DvTMekhdrTXspHZemZn
5VKqPsccP2CDQc7e0hk6R+DcVnogjYnu9KiO48GZa8/WuOOnscUaLqRa/g1dz5ox
ZzpBAJKQFgZgmpIhPOyFQHDNO9yQDqO0OQLjXRZz1CreVZz9tMLZL275XzTc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org