Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/W7lvSFlbWlgyJkPmiXimGgYwDh8.roa
File: W7lvSFlbWlgyJkPmiXimGgYwDh8.roa (raw, json)
Hash identifier: 9rAw/sPmWCBLp2HU/6c3g+JCeVD0xVOtAo+WboAw5v4=
Subject key identifier: 5B:B9:6F:48:59:5B:5A:58:32:26:43:E6:89:78:A6:1A:06:30:0E:1F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03D5CBFE
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/W7lvSFlbWlgyJkPmiXimGgYwDh8.roa
Signing time: Tue 08 Mar 2022 19:45:45 +0000
ROA not before: Tue 08 Mar 2022 19:45:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64343038 (0x3d5cbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 8 19:45:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bb96f48595b5a58322643e68978a61a06300e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:d8:28:cf:0c:d4:c7:41:8b:ab:b4:6f:9d:
aa:56:82:87:c8:8b:58:60:ca:f4:21:68:88:4f:75:
73:93:55:af:c5:68:15:c1:54:95:1d:d1:24:95:f7:
3e:e9:92:e5:34:b8:3f:e3:4f:83:ca:2f:e2:4d:e7:
c7:4d:b2:81:10:ff:55:36:01:28:3a:a9:33:f5:95:
a9:20:c1:6e:25:09:c2:2b:7b:7e:fb:51:2d:57:b1:
6c:d6:2d:0a:e9:8c:09:13:ba:75:6a:e5:aa:f8:d2:
04:4b:38:b5:b7:9b:bd:b3:d3:f2:de:bf:7c:ae:23:
dd:20:cf:76:71:75:0f:08:3c:4a:e5:01:2f:a0:4d:
b4:8e:62:14:5e:ce:07:62:97:47:2a:7b:60:26:1c:
45:85:e2:30:f6:1d:10:87:eb:3a:c5:2f:03:bc:87:
b7:86:cf:6a:c3:95:d8:e0:1b:17:3a:53:e4:28:12:
13:00:09:93:df:40:34:af:9f:45:4e:c9:ca:86:80:
7b:2b:63:e4:70:d2:75:d2:44:08:b6:e9:62:88:c3:
d7:89:d3:18:65:c9:94:82:c9:77:52:aa:75:96:eb:
02:fa:e4:ed:20:f8:cf:8b:2b:ef:dd:d9:02:1c:09:
07:6a:b6:3b:01:87:13:2e:54:3b:60:38:63:92:06:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:6F:48:59:5B:5A:58:32:26:43:E6:89:78:A6:1A:06:30:0E:1F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/W7lvSFlbWlgyJkPmiXimGgYwDh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:88:07:d9:10:27:04:68:aa:85:61:1e:de:25:37:c6:d3:3d:
1f:97:91:d4:e9:74:50:1c:75:97:60:94:15:40:13:7f:93:f5:
29:d7:e0:a4:64:e1:f4:a3:1a:e7:3d:7c:ea:d7:03:68:d5:4e:
aa:23:16:53:bb:a9:9a:9b:dc:ea:3b:52:4e:db:95:39:f3:03:
45:6a:c4:8b:52:d3:74:09:84:87:90:35:8d:e2:90:47:2b:01:
f1:1e:3e:0a:4b:91:24:86:aa:2b:00:36:a0:2e:91:cd:48:cb:
ae:5a:62:72:e7:d3:00:fe:11:5c:8c:d3:52:16:cb:3a:eb:88:
5b:08:3d:00:5c:d9:c4:19:52:02:b5:7e:f4:5e:44:85:d0:56:
38:0a:9b:08:49:ae:81:5d:9d:cb:67:29:9f:6f:3e:0d:66:13:
fb:2d:62:5f:ef:61:28:2f:11:e4:4d:d4:5f:06:7c:5d:61:e9:
f1:20:be:d6:b1:e7:be:c5:20:79:d5:5a:3d:f1:c4:4a:f0:c4:
a3:ba:d5:03:2b:de:2e:aa:1a:f9:68:99:52:5f:28:56:f6:11:
a5:b9:a9:dd:b9:14:17:60:26:b1:39:bb:a4:aa:ce:b5:32:72:
86:87:41:06:01:c8:f5:cf:a8:83:66:c5:e8:51:fa:c0:59:1d:
42:41:70:c5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEA9XL/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDMw
ODE5NDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWJiOTZmNDg1OTVi
NWE1ODMyMjY0M2U2ODk3OGE2MWEwNjMwMGUxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzi2CjPDNTHQYurtG+dqlaCh8iLWGDK9CFoiE91c5NVr8Vo
FcFUlR3RJJX3PumS5TS4P+NPg8ov4k3nx02ygRD/VTYBKDqpM/WVqSDBbiUJwit7
fvtRLVexbNYtCumMCRO6dWrlqvjSBEs4tbebvbPT8t6/fK4j3SDPdnF1Dwg8SuUB
L6BNtI5iFF7OB2KXRyp7YCYcRYXiMPYdEIfrOsUvA7yHt4bPasOV2OAbFzpT5CgS
EwAJk99ANK+fRU7JyoaAeytj5HDSddJECLbpYojD14nTGGXJlILJd1KqdZbrAvrk
7SD4z4sr793ZAhwJB2q2OwGHEy5UO2A4Y5IGQE8CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRbuW9IWVtaWDImQ+aJeKYaBjAOHzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L1c3bHZTRmxiV2xneUprUG1pWGltR2dZd0RoOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAS2Y8AMEAFvGQgMEAMFvfQMEAMGO
BAMEAMJx3jANBgkqhkiG9w0BAQsFAAOCAQEAm4gH2RAnBGiqhWEe3iU3xtM9H5eR
1Ol0UBx1l2CUFUATf5P1KdfgpGTh9KMa5z186tcDaNVOqiMWU7upmpvc6jtSTtuV
OfMDRWrEi1LTdAmEh5A1jeKQRysB8R4+CkuRJIaqKwA2oC6RzUjLrlpicufTAP4R
XIzTUhbLOuuIWwg9AFzZxBlSArV+9F5EhdBWOAqbCEmugV2dy2cpn28+DWYT+y1i
X+9hKC8R5E3UXwZ8XWHp8SC+1rHnvsUgedVaPfHESvDEo7rVAyveLqoa+WiZUl8o
VvYRpbmp3bkUF2AmsTm7pKrOtTJyhodBBgHI9c+og2bF6FH6wFkdQkFwxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org