Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZUwRev0U6PFQEDt4S1w6FVSGWeg.roa
File: ZUwRev0U6PFQEDt4S1w6FVSGWeg.roa (raw, json)
Hash identifier: +nijD/iKqdPKMZxRK2cXpJOZEb2cZu7Ih7mQ8rQa79s=
Subject key identifier: 65:4C:11:7A:FD:14:E8:F1:50:10:3B:78:4B:5C:3A:15:54:86:59:E8
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04CE411D
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZUwRev0U6PFQEDt4S1w6FVSGWeg.roa
Signing time: Tue 07 Jun 2022 12:06:02 +0000
ROA not before: Tue 07 Jun 2022 12:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.105.21.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80625949 (0x4ce411d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jun 7 12:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=654c117afd14e8f150103b784b5c3a15548659e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:00:f9:12:46:0d:60:7c:78:8f:38:2f:d4:
5c:b7:36:f7:0f:9d:df:5e:34:96:86:6e:91:13:4c:
6b:84:60:f2:71:7c:d2:82:5c:ce:65:90:5c:ef:39:
9c:93:3f:2b:1e:77:08:b2:79:1f:21:3d:90:ce:70:
c6:b9:13:8c:a5:61:c5:20:d7:41:7d:bd:d2:0b:4b:
a9:55:fe:24:1c:f2:f2:4b:4e:25:56:6e:e6:8c:61:
f5:57:0e:69:d7:a8:77:b5:fd:49:f2:6c:7a:f0:27:
29:fd:c5:c6:66:70:eb:e5:6e:e8:b2:4e:2d:7e:a8:
75:13:e6:73:16:02:34:6b:19:7f:de:a0:39:f3:ca:
98:eb:c3:0d:29:63:38:fb:23:da:31:b3:9c:3a:b6:
fc:34:d9:ac:3c:a9:10:56:6e:69:e1:de:52:f3:fd:
9f:73:97:3f:07:8d:07:3a:30:cc:3d:fd:99:4f:07:
98:e6:0c:83:15:b1:2c:9c:3f:d3:9c:d4:b5:63:ac:
c8:5c:d5:1a:27:ac:64:9b:a8:ec:02:db:84:c7:a9:
2c:ca:5e:6b:63:e0:7e:eb:d2:68:12:fb:fa:c9:85:
32:c3:4e:8b:58:80:2d:27:3d:78:1b:7b:dd:be:8b:
44:69:62:a7:09:04:e6:be:64:e0:23:f1:8b:d4:f4:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:11:7A:FD:14:E8:F1:50:10:3B:78:4B:5C:3A:15:54:86:59:E8
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZUwRev0U6PFQEDt4S1w6FVSGWeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
147.78.120.0/22
193.142.22.0/24
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:17:db:84:1c:b0:c2:53:a5:2b:05:11:d2:75:c7:14:98:51:
fc:ff:22:7e:26:35:f7:f3:b7:6b:f6:f0:c8:1f:ba:ec:15:b7:
5d:4b:e6:6d:bc:0e:4e:48:2a:eb:05:e9:9c:74:08:04:f6:79:
f5:34:f9:f5:f5:c0:b0:78:40:ac:c0:74:05:84:2e:74:55:dc:
44:19:69:4d:9e:9e:f6:b1:23:99:39:9d:b1:9e:90:c9:21:3b:
4d:48:2f:d8:80:8f:35:99:1d:04:ad:dc:42:da:94:37:7b:9a:
08:01:4b:f0:5e:d0:1f:2f:b2:23:58:a5:ca:41:27:06:0a:a9:
62:28:a7:30:75:a6:9a:05:4d:ab:5b:18:ac:1d:6a:fe:5f:ce:
ed:4e:16:8c:7d:83:c8:07:58:0c:42:a2:7b:51:93:45:20:8c:
e2:48:05:0a:d7:50:3b:ec:10:a4:ee:be:8b:f7:43:4d:d1:da:
44:77:b8:3a:86:76:9b:ec:61:ca:ff:63:04:a3:b6:88:d6:fe:
47:41:13:c2:10:57:6e:01:13:54:36:6f:bb:96:fd:ef:76:b2:
fe:b8:3f:98:07:47:d4:5a:fa:57:2f:f3:0e:f0:eb:8f:cc:b8:
86:15:67:ba:ee:42:c0:3e:55:d6:c7:aa:fd:fe:59:b6:ae:3a:
1f:57:86:0f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBM5BHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDYw
NzEyMDYwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU0YzExN2FmZDE0
ZThmMTUwMTAzYjc4NGI1YzNhMTU1NDg2NTllODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9xAPkSRg1gfHiPOC/UXLc29w+d3140loZukRNMa4Rg8nF8
0oJczmWQXO85nJM/Kx53CLJ5HyE9kM5wxrkTjKVhxSDXQX290gtLqVX+JBzy8ktO
JVZu5oxh9VcOadeod7X9SfJsevAnKf3FxmZw6+Vu6LJOLX6odRPmcxYCNGsZf96g
OfPKmOvDDSljOPsj2jGznDq2/DTZrDypEFZuaeHeUvP9n3OXPweNBzowzD39mU8H
mOYMgxWxLJw/05zUtWOsyFzVGiesZJuo7ALbhMepLMpea2PgfuvSaBL7+smFMsNO
i1iALSc9eBt73b6LRGlipwkE5r5k4CPxi9T03JcCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRlTBF6/RTo8VAQO3hLXDoVVIZZ6DAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L1pVd1JldjBVNlBGUUVEdDRTMXc2RlZTR1dlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFvHqAMEApNOeAMEAMGOFgMEAMJp
FTANBgkqhkiG9w0BAQsFAAOCAQEA0BfbhBywwlOlKwUR0nXHFJhR/P8ifiY19/O3
a/bwyB+67BW3XUvmbbwOTkgq6wXpnHQIBPZ59TT59fXAsHhArMB0BYQudFXcRBlp
TZ6e9rEjmTmdsZ6QySE7TUgv2ICPNZkdBK3cQtqUN3uaCAFL8F7QHy+yI1ilykEn
BgqpYiinMHWmmgVNq1sYrB1q/l/O7U4WjH2DyAdYDEKie1GTRSCM4kgFCtdQO+wQ
pO6+i/dDTdHaRHe4OoZ2m+xhyv9jBKO2iNb+R0ETwhBXbgETVDZvu5b973ay/rg/
mAdH1Fr6Vy/zDvDrj8y4hhVnuu5CwD5V1seq/f5Ztq46H1eGDw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org