Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9f4duvZ9pS69VYDQyIeyxTcrujc.roa
File: 9f4duvZ9pS69VYDQyIeyxTcrujc.roa (raw, json)
Hash identifier: ZLq3ZjK3NfmjYddWY4PwlFAp2RvOjdNA58ZOZhxftTo=
Subject key identifier: F5:FE:1D:BA:F6:7D:A5:2E:BD:55:80:D0:C8:87:B2:C5:37:2B:BA:37
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 050A6FEF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9f4duvZ9pS69VYDQyIeyxTcrujc.roa
Signing time: Thu 30 Jun 2022 14:20:01 +0000
ROA not before: Thu 30 Jun 2022 14:20:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.105.21.0/24 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84570095 (0x50a6fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jun 30 14:20:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5fe1dbaf67da52ebd5580d0c887b2c5372bba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:f1:1f:dd:0e:ac:ab:c9:ae:5e:04:25:67:
2d:b2:10:2d:d8:5c:71:ca:9a:11:ad:a8:fc:ca:ad:
43:db:dd:b5:92:d1:3b:1e:f1:e4:23:96:b1:ec:26:
5f:ea:04:1d:15:f3:98:77:b6:11:7f:74:1e:87:27:
ad:a1:24:8a:f8:dc:79:9f:ec:99:6e:98:7b:86:56:
5b:58:91:8e:8a:f9:54:ec:69:fe:80:20:20:47:40:
e0:db:ac:05:b5:e3:e3:c1:15:21:38:26:c1:55:a4:
4d:ca:ba:93:4f:e0:c7:84:11:c1:0b:89:12:60:c9:
6d:c7:84:16:73:a4:88:b2:bd:40:99:d2:de:6b:d2:
64:7d:2b:b2:dd:b3:e9:2d:df:2a:f4:2f:a4:c1:cb:
1a:47:cd:f1:66:cb:c8:02:64:bb:34:2f:08:7e:2c:
28:16:4d:f9:5c:e0:7f:d1:81:fb:34:c2:2b:da:c9:
46:65:e3:23:3d:4a:5c:1c:d0:1b:0c:e3:35:4b:f5:
50:1d:c0:1b:9d:bd:b4:ef:6e:3a:8a:3c:fa:e2:4c:
de:09:6a:b9:e3:55:80:39:bd:d9:a7:bd:5e:7d:4f:
95:70:2d:4f:1d:0c:53:e7:61:e2:07:32:a1:60:01:
c6:0e:15:b3:33:96:bd:19:b1:8d:ed:7c:24:6e:d1:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:1D:BA:F6:7D:A5:2E:BD:55:80:D0:C8:87:B2:C5:37:2B:BA:37
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9f4duvZ9pS69VYDQyIeyxTcrujc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
147.78.120.0/22
193.111.116.0/23
193.142.22.0/24
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ee:3d:9d:59:b0:d3:24:e0:5b:3d:76:3e:05:ea:b1:4f:8a:
3e:f6:1d:a5:8c:77:e3:08:42:4d:ac:07:a5:f9:da:d8:bd:90:
e6:f9:1b:a5:16:e3:79:8d:d2:d2:e1:d8:b1:f4:ae:c3:d0:79:
a0:b2:a1:ca:43:f8:d2:46:0a:b3:0e:f5:76:29:f7:b4:9d:43:
ad:54:1d:8b:ca:84:9c:ad:6a:a0:c6:bf:55:9a:cd:9a:af:f1:
f6:3a:1c:67:93:07:15:d2:d0:40:9c:71:c8:f3:66:b4:34:dd:
e7:bf:e7:9d:cf:78:38:b8:0c:a6:70:94:ff:6a:71:53:09:a2:
54:70:0c:49:a0:15:0c:0e:e1:83:00:00:c4:b5:90:29:15:8c:
bd:3f:82:c4:09:6c:77:07:1a:8b:03:fe:d6:ce:48:c3:ae:9a:
26:1c:8f:f3:a9:e0:30:11:a9:a3:07:07:f9:4f:a3:eb:11:a2:
2d:1c:bb:5d:65:67:dd:ec:97:ae:73:a5:e4:55:d2:4f:56:53:
6c:6d:48:58:7c:6c:10:49:16:df:fd:a8:bc:fc:dd:77:72:14:
c3:fd:3e:5b:2b:a6:08:9c:ef:9e:4f:64:a1:5d:7d:9d:af:4d:
a6:77:35:77:2e:25:70:5a:b5:9e:23:5b:5d:05:74:68:8d:4b:
99:97:74:01
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBQpv7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDYz
MDE0MjAwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjVmZTFkYmFmNjdk
YTUyZWJkNTU4MGQwYzg4N2IyYzUzNzJiYmEzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSy8R/dDqyrya5eBCVnLbIQLdhcccqaEa2o/MqtQ9vdtZLR
Ox7x5COWsewmX+oEHRXzmHe2EX90HocnraEkivjceZ/smW6Ye4ZWW1iRjor5VOxp
/oAgIEdA4NusBbXj48EVITgmwVWkTcq6k0/gx4QRwQuJEmDJbceEFnOkiLK9QJnS
3mvSZH0rst2z6S3fKvQvpMHLGkfN8WbLyAJkuzQvCH4sKBZN+Vzgf9GB+zTCK9rJ
RmXjIz1KXBzQGwzjNUv1UB3AG529tO9uOoo8+uJM3glqueNVgDm92ae9Xn1PlXAt
Tx0MU+dh4gcyoWABxg4VszOWvRmxje18JG7RjfkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBT1/h269n2lLr1VgNDIh7LFNyu6NzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
LzlmNGR1dlo5cFM2OVZZRFF5SWV5eFRjcnVqYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFvHqAMEApNOeAMEAcFvdAMEAMGO
FgMEAMJpFTANBgkqhkiG9w0BAQsFAAOCAQEAku49nVmw0yTgWz12PgXqsU+KPvYd
pYx34whCTawHpfna2L2Q5vkbpRbjeY3S0uHYsfSuw9B5oLKhykP40kYKsw71din3
tJ1DrVQdi8qEnK1qoMa/VZrNmq/x9jocZ5MHFdLQQJxxyPNmtDTd57/nnc94OLgM
pnCU/2pxUwmiVHAMSaAVDA7hgwAAxLWQKRWMvT+CxAlsdwcaiwP+1s5Iw66aJhyP
86ngMBGpowcH+U+j6xGiLRy7XWVn3eyXrnOl5FXST1ZTbG1IWHxsEEkW3/2ovPzd
d3IUw/0+WyumCJzvnk9koV19na9Npnc1dy4lcFq1niNbXQV0aI1LmZd0AQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org