Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/_AFtXzQIcalkFS2UkUp1rI9lWfI.roa
File: _AFtXzQIcalkFS2UkUp1rI9lWfI.roa (raw, json)
Hash identifier: 6BviCaqvzrkjIeKEjaSgXMTNe6RfFojYduFUSUEsf1A=
Subject key identifier: FC:01:6D:5F:34:08:71:A9:64:15:2D:94:91:4A:75:AC:8F:65:59:F2
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184ECA3AF1B1001E103A530F660E234F003
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/_AFtXzQIcalkFS2UkUp1rI9lWfI.roa
Signing time: Wed 07 Dec 2022 12:51:00 +0000
ROA not before: Wed 07 Dec 2022 12:51:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.154.107.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:a3:af:1b:10:01:e1:03:a5:30:f6:60:e2:34:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 7 12:51:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc016d5f340871a964152d94914a75ac8f6559f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:e0:56:97:b4:22:63:2e:7e:50:b4:16:41:
b3:71:21:77:46:d3:92:9f:cc:93:ca:4d:08:fb:4b:
52:38:c0:f2:70:57:0f:52:f8:a9:a9:6b:a4:62:d8:
91:da:4f:d1:8b:2a:e6:fc:55:29:04:3f:bd:56:7b:
fe:31:61:86:00:1a:57:e6:e8:85:9b:bc:ac:57:58:
0b:2a:e1:ff:d1:87:b4:3d:df:e5:49:1d:58:9b:5d:
fa:e1:4e:d2:15:78:eb:b0:1e:9b:21:89:65:9f:35:
15:42:34:15:d3:50:42:80:6d:fd:09:fe:32:01:15:
aa:52:7e:d2:ca:54:dc:83:50:39:bc:0d:70:da:63:
3a:b5:00:1e:48:79:ef:95:53:05:44:ee:88:1c:25:
13:be:f3:05:c5:de:75:82:5c:c6:08:17:f7:8f:1d:
c7:58:a5:93:0f:43:c2:be:a9:4a:2b:51:26:7c:bf:
bb:f3:97:03:bb:dc:0d:c2:31:70:df:c5:f1:22:cc:
c1:bf:22:dd:cc:3a:f9:30:04:89:41:b6:47:46:2c:
8b:b5:c0:51:bd:8b:6b:6e:ba:65:f2:0e:d9:b8:98:
56:41:e0:53:17:a6:8c:4a:39:89:02:0a:b2:43:73:
e3:78:16:2a:08:ed:80:b2:71:b4:6d:ea:3c:a0:f3:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:6D:5F:34:08:71:A9:64:15:2D:94:91:4A:75:AC:8F:65:59:F2
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/_AFtXzQIcalkFS2UkUp1rI9lWfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
141.98.157.0/24
195.20.99.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3e:05:ab:81:89:2b:d7:fc:bb:64:f7:0c:a4:ad:b9:01:b8:
e0:08:a6:ea:43:ef:ae:4b:06:8b:2d:9c:de:22:c3:dd:73:47:
dd:9d:59:af:64:de:99:20:b3:49:24:7c:ab:98:26:96:2c:6f:
77:f6:65:1b:e6:a0:35:d7:3f:ea:b9:23:44:b3:37:84:a2:03:
87:7b:c4:2a:2e:81:e0:a3:cd:82:04:3d:38:fe:d3:a9:07:9f:
aa:bc:b5:cf:80:05:a5:38:bd:32:3a:dd:7d:46:68:a7:b5:6f:
54:d9:a3:bb:cf:3e:bc:46:e3:bd:8a:17:4a:01:74:3e:85:d5:
8d:1c:8a:5e:bb:f6:e8:9d:d2:b9:49:05:56:12:7c:97:e4:ae:
ab:75:d2:8c:32:1c:fb:b7:5c:f7:44:d5:5f:0a:33:1b:28:87:
94:32:37:c1:4b:2c:de:8b:4c:50:a7:ad:6c:e5:c8:f3:da:d7:
0f:f1:2b:45:a3:b8:b5:72:0e:79:dd:6a:7a:79:9b:4d:b0:30:
13:52:30:fe:33:a8:b3:fc:23:3b:72:a2:53:ff:ef:c7:b9:55:
ba:89:6e:0e:f9:f4:f4:cb:e0:bb:a3:86:86:4b:e9:71:82:8f:
bf:2c:32:8d:46:97:d5:ec:30:ac:36:a1:ff:80:af:f7:91:91:
53:1f:58:d1
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYTso68bEAHhA6Uw9mDiNPADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMjA3MTI1MTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzAxNmQ1ZjM0MDg3MWE5NjQxNTJkOTQ5MTRhNzVhYzhmNjU1OWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspPgVpe0ImMuflC0FkGzcSF3RtOS
n8yTyk0I+0tSOMDycFcPUvipqWukYtiR2k/Riyrm/FUpBD+9Vnv+MWGGABpX5uiF
m7ysV1gLKuH/0Ye0Pd/lSR1Ym1364U7SFXjrsB6bIYllnzUVQjQV01BCgG39Cf4y
ARWqUn7SylTcg1A5vA1w2mM6tQAeSHnvlVMFRO6IHCUTvvMFxd51glzGCBf3jx3H
WKWTD0PCvqlKK1EmfL+785cDu9wNwjFw38XxIszBvyLdzDr5MASJQbZHRiyLtcBR
vYtrbrpl8g7ZuJhWQeBTF6aMSjmJAgqyQ3PjeBYqCO2AsnG0beo8oPOcDwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPwBbV80CHGpZBUtlJFKdayPZVnyMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvX0FGdFh6UUljYWxrRlMyVWtVcDFySTlsV2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZprAwQA
jWKdAwQAwxRjAwQAwxRpAwQAw87rMA0GCSqGSIb3DQEBCwUAA4IBAQBwPgWrgYkr
1/y7ZPcMpK25AbjgCKbqQ++uSwaLLZzeIsPdc0fdnVmvZN6ZILNJJHyrmCaWLG93
9mUb5qA11z/quSNEszeEogOHe8QqLoHgo82CBD04/tOpB5+qvLXPgAWlOL0yOt19
RmintW9U2aO7zz68RuO9ihdKAXQ+hdWNHIpeu/bondK5SQVWEnyX5K6rddKMMhz7
t1z3RNVfCjMbKIeUMjfBSyzei0xQp61s5cjz2tcP8StFo7i1cg553Wp6eZtNsDAT
UjD+M6iz/CM7cqJT/+/HuVW6iW4O+fT0y+C7o4aGS+lxgo+/LDKNRpfV7DCsNqH/
gK/3kZFTH1jR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org