Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GZyFLwIOzShKxOMMDg7trx5OXyk.roa
File: GZyFLwIOzShKxOMMDg7trx5OXyk.roa (raw, json)
Hash identifier: lIwWJO8w0j32qyhtkgk3cFKK/bX+7Srjt6N9mrcd9l0=
Subject key identifier: 19:9C:85:2F:02:0E:CD:28:4A:C4:E3:0C:0E:0E:ED:AF:1E:4E:5F:29
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01852F677F63C8F2D5803E75E4054B0EFEDF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GZyFLwIOzShKxOMMDg7trx5OXyk.roa
Signing time: Tue 20 Dec 2022 11:59:50 +0000
ROA not before: Tue 20 Dec 2022 11:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.154.107.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:67:7f:63:c8:f2:d5:80:3e:75:e4:05:4b:0e:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 20 11:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199c852f020ecd284ac4e30c0e0eedaf1e4e5f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:21:33:19:ff:2a:ee:38:ef:e5:fa:5c:be:
cb:11:62:95:21:39:3a:1c:e9:67:63:93:88:ca:e2:
72:f1:cd:f3:53:f8:aa:22:65:dd:03:ab:6a:d5:b0:
ce:72:dd:4b:4b:51:f2:25:81:6f:78:3c:b6:1c:13:
83:69:8e:30:64:40:fb:77:0b:d4:0c:54:e0:c3:83:
b1:9e:e8:53:ce:e2:86:8c:58:0c:2e:41:63:38:20:
51:c6:9b:1b:f5:c8:86:c4:35:5c:f1:c0:94:1b:8b:
e0:e9:f3:b6:cb:ae:c2:6a:4f:49:df:9e:46:8d:30:
29:e6:14:2c:16:54:3d:00:3b:97:f1:3f:c7:55:e7:
8c:5c:52:dc:e0:de:a7:dd:ef:1c:0a:65:9b:dd:6e:
76:e1:54:18:09:60:65:53:87:3d:22:27:f9:d9:f7:
59:66:f5:83:01:ce:bc:89:db:78:44:63:66:9e:6a:
02:c1:c7:6f:3f:c9:b4:ef:12:53:db:2c:29:fc:8e:
89:bf:59:7b:bf:44:e7:53:da:c9:c3:f0:dd:91:3d:
b1:37:f4:d2:6d:c1:13:b1:74:bf:74:34:7d:04:f8:
d3:57:9a:e7:11:72:e0:84:da:2b:18:d7:6e:54:c8:
02:c0:f5:ad:9a:f6:78:0f:a5:74:b8:b7:a0:9e:c3:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:85:2F:02:0E:CD:28:4A:C4:E3:0C:0E:0E:ED:AF:1E:4E:5F:29
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GZyFLwIOzShKxOMMDg7trx5OXyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
141.98.157.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
45:dc:b9:17:38:d8:07:e7:74:2a:68:3b:cb:af:cd:38:f9:f5:
f0:4e:2f:d4:e0:e1:fd:1c:98:3d:4f:9f:e9:bd:23:ae:c1:3b:
87:0a:aa:43:ca:76:80:d8:1d:9d:5e:5d:14:56:a6:61:c1:b3:
8f:42:30:95:01:40:b9:31:48:e8:57:4f:78:86:c9:9b:4f:19:
40:42:49:c7:ce:9a:41:19:e1:76:de:c8:79:4f:51:9f:21:8a:
32:55:c8:29:4b:49:d3:f1:28:2b:93:3c:47:06:de:47:84:f3:
8e:02:0f:ce:07:9a:5c:c8:87:e1:cf:76:da:e5:e4:e9:f3:41:
37:19:57:a1:3d:7f:80:8d:d2:cf:da:bf:0d:18:08:ff:8d:b6:
52:56:9c:0a:95:e9:bf:ec:68:bf:27:5c:65:2c:83:34:22:0b:
51:4e:02:74:26:c6:05:b7:df:10:e8:9d:2b:84:ad:d6:54:4a:
d0:73:01:b3:88:05:c7:e3:dd:f7:89:77:ae:ca:7b:85:54:b5:
be:80:ad:12:71:38:25:ff:50:80:7c:66:8c:1d:8f:19:e0:db:
a0:f4:c8:42:64:b6:43:3e:1f:a1:be:bf:da:24:3a:93:7a:3e:
ce:f5:69:c1:38:ae:b8:53:79:d9:db:c4:db:0a:24:5f:b4:85:
1e:0c:ff:eb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYUvZ39jyPLVgD515AVLDv7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMjIwMTE1OTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTljODUyZjAyMGVjZDI4NGFjNGUzMGMwZTBlZWRhZjFlNGU1ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq0hMxn/Ku447+X6XL7LEWKVITk6
HOlnY5OIyuJy8c3zU/iqImXdA6tq1bDOct1LS1HyJYFveDy2HBODaY4wZED7dwvU
DFTgw4OxnuhTzuKGjFgMLkFjOCBRxpsb9ciGxDVc8cCUG4vg6fO2y67Cak9J355G
jTAp5hQsFlQ9ADuX8T/HVeeMXFLc4N6n3e8cCmWb3W524VQYCWBlU4c9Iif52fdZ
ZvWDAc68idt4RGNmnmoCwcdvP8m07xJT2ywp/I6Jv1l7v0TnU9rJw/DdkT2xN/TS
bcETsXS/dDR9BPjTV5rnEXLghNorGNduVMgCwPWtmvZ4D6V0uLegnsMB1wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBmchS8CDs0oSsTjDA4O7a8eTl8pMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvR1p5Rkx3SU96U2hLeE9NTURnN3RyeDVPWHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZprAwQA
jWKdAwQAwxRpAwQAw87rMA0GCSqGSIb3DQEBCwUAA4IBAQBF3LkXONgH53QqaDvL
r804+fXwTi/U4OH9HJg9T5/pvSOuwTuHCqpDynaA2B2dXl0UVqZhwbOPQjCVAUC5
MUjoV094hsmbTxlAQknHzppBGeF23sh5T1GfIYoyVcgpS0nT8SgrkzxHBt5HhPOO
Ag/OB5pcyIfhz3ba5eTp80E3GVehPX+AjdLP2r8NGAj/jbZSVpwKlem/7Gi/J1xl
LIM0IgtRTgJ0JsYFt98Q6J0rhK3WVErQcwGziAXH4933iXeuynuFVLW+gK0ScTgl
/1CAfGaMHY8Z4Nug9MhCZLZDPh+hvr/aJDqTej7O9WnBOK64U3nZ28TbCiRftIUe
DP/r
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org