Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Dsi5MqH4wsBog9MTGboPbBR9MPs.roa
File: Dsi5MqH4wsBog9MTGboPbBR9MPs.roa (raw, json)
Hash identifier: 0Mmwqn+htbKS0izMG+RqBFbAtsnLj4YXWvgyRI7KVrU=
Subject key identifier: 0E:C8:B9:32:A1:F8:C2:C0:68:83:D3:13:19:BA:0F:6C:14:7D:30:FB
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182F23A9968A3DD9716E5B7CD974E913CD5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Dsi5MqH4wsBog9MTGboPbBR9MPs.roa
Signing time: Wed 31 Aug 2022 04:48:22 +0000
ROA not before: Wed 31 Aug 2022 04:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.111.116.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:3a:99:68:a3:dd:97:16:e5:b7:cd:97:4e:91:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 31 04:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ec8b932a1f8c2c06883d31319ba0f6c147d30fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:6b:1f:eb:14:36:94:86:b0:ae:bf:0b:1d:
9e:c8:a7:f9:7a:2e:0a:67:2b:8f:87:08:5c:8e:9d:
25:fd:a3:93:a2:a5:d0:b8:e8:ff:72:6b:02:75:aa:
14:ff:64:79:c9:17:1f:9d:db:d0:23:a2:bf:27:5a:
b4:98:66:08:fc:c0:9e:f1:1d:0b:9a:e8:fc:a6:b0:
d8:69:1c:50:d2:85:0b:a0:67:02:be:1b:5b:76:65:
f3:58:62:c6:bc:1a:b8:2e:99:e8:4c:53:73:4e:84:
dc:1e:4e:2f:63:95:7b:ed:3c:83:96:16:8b:57:21:
dd:6a:98:4e:b5:6c:b4:8b:f5:cf:d2:89:02:c6:78:
33:7e:69:c2:1d:5a:b2:9c:e1:3e:b9:f5:c9:d3:a8:
d0:4e:e9:e1:6b:07:5a:0c:2b:5f:8e:43:ca:b8:a8:
f5:76:d0:68:3b:7c:20:ff:28:35:4c:47:a6:6d:6e:
e6:7b:5c:8e:ae:bb:9e:7f:3b:9e:db:ce:e6:00:94:
86:ad:fb:20:6b:f1:12:c8:26:97:aa:df:62:4a:47:
f5:a3:19:55:3b:58:f2:3e:a6:e7:2c:54:7a:e7:98:
99:5b:dd:f6:e8:ee:42:98:d1:56:a0:06:25:ef:6e:
59:17:e7:06:0b:c6:36:9d:d8:e0:e0:b5:b2:53:df:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:B9:32:A1:F8:C2:C0:68:83:D3:13:19:BA:0F:6C:14:7D:30:FB
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Dsi5MqH4wsBog9MTGboPbBR9MPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.157.0/24
193.111.116.0/24
195.20.99.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3e:a6:d4:51:8b:f3:55:bb:5d:1e:ce:11:b2:51:90:8c:d5:
45:91:db:d2:f8:e6:70:8e:dc:89:74:96:42:60:cb:61:ee:85:
78:d0:e4:09:69:01:08:9c:f6:32:10:ac:fb:b8:c1:23:dd:6b:
d9:f8:d8:85:39:8f:51:a3:1a:c9:0f:81:5f:3e:7f:f1:c3:38:
13:34:10:f2:43:0b:9f:a5:54:ae:87:b4:a7:5e:22:78:d5:96:
18:ec:ea:cb:c3:3b:bf:2a:02:e6:7d:6a:0a:cd:d8:9f:30:fb:
f5:a2:78:5c:b2:94:2a:be:ff:eb:77:35:ea:7c:ec:57:d4:66:
06:13:df:69:d6:07:d8:ab:52:5f:8e:a8:ae:8e:15:09:76:ca:
c3:3b:3f:cd:28:1e:38:4e:fa:bc:85:5c:4c:fa:80:8c:d0:fb:
3c:92:da:25:57:d1:00:70:c2:5b:65:0b:38:f4:ce:3d:d6:ab:
53:8a:2e:b1:de:5d:b2:c9:79:37:2a:3a:29:9c:c1:b0:a0:88:
c3:3c:ec:c1:1f:09:b8:09:0a:0a:1f:00:ed:dc:12:a4:00:60:
17:cf:a3:79:4e:a2:52:13:cd:7f:7b:a9:4b:07:d5:c2:da:b3:
a3:0b:2c:19:85:0a:11:b2:b2:88:64:8e:35:72:5a:84:dc:ad:
23:0f:4d:3a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYLyOploo92XFuW3zZdOkTzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwODMxMDQ0ODIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM4YjkzMmExZjhjMmMwNjg4M2QzMTMxOWJhMGY2YzE0N2QzMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1rH+sUNpSGsK6/Cx2eyKf5ei4K
ZyuPhwhcjp0l/aOToqXQuOj/cmsCdaoU/2R5yRcfndvQI6K/J1q0mGYI/MCe8R0L
muj8prDYaRxQ0oULoGcCvhtbdmXzWGLGvBq4LpnoTFNzToTcHk4vY5V77TyDlhaL
VyHdaphOtWy0i/XP0okCxngzfmnCHVqynOE+ufXJ06jQTunhawdaDCtfjkPKuKj1
dtBoO3wg/yg1TEembW7me1yOrruefzue287mAJSGrfsga/ESyCaXqt9iSkf1oxlV
O1jyPqbnLFR655iZW9326O5CmNFWoAYl725ZF+cGC8Y2ndjg4LWyU9+NiwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFA7IuTKh+MLAaIPTExm6D2wUfTD7MB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvRHNpNU1xSDR3c0JvZzlNVEdib1BiQlI5TVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjWKdAwQA
wW90AwQAwxRjAwQAwxRpAwQAw87rMA0GCSqGSIb3DQEBCwUAA4IBAQBnPqbUUYvz
VbtdHs4RslGQjNVFkdvS+OZwjtyJdJZCYMth7oV40OQJaQEInPYyEKz7uMEj3WvZ
+NiFOY9RoxrJD4FfPn/xwzgTNBDyQwufpVSuh7SnXiJ41ZYY7OrLwzu/KgLmfWoK
zdifMPv1onhcspQqvv/rdzXqfOxX1GYGE99p1gfYq1JfjqiujhUJdsrDOz/NKB44
Tvq8hVxM+oCM0Ps8ktolV9EAcMJbZQs49M491qtTii6x3l2yyXk3KjopnMGwoIjD
POzBHwm4CQoKHwDt3BKkAGAXz6N5TqJSE81/e6lLB9XC2rOjCywZhQoRsrKIZI41
clqE3K0jD006
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org