Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gB_8-GWYB-pEO87NfINEWUuiSg0.roa
File: gB_8-GWYB-pEO87NfINEWUuiSg0.roa (raw, json)
Hash identifier: Kxxksw4T0zbGFDrY/34qmbqzv1frN3EfhVlcZU7dFIw=
Subject key identifier: 80:1F:FC:F8:65:98:07:EA:44:3B:CE:CD:7C:83:44:59:4B:A2:4A:0D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0346F3E0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gB_8-GWYB-pEO87NfINEWUuiSg0.roa
Signing time: Wed 19 Jan 2022 09:15:37 +0000
ROA not before: Wed 19 Jan 2022 09:15:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.199.163.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
194.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54981600 (0x346f3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 19 09:15:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801ffcf8659807ea443bcecd7c8344594ba24a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:70:0b:b2:be:93:81:c9:e2:b9:30:6d:89:
19:7f:4e:18:e0:74:76:20:4d:07:47:66:c7:72:e1:
db:49:3b:9a:ac:63:ae:ab:2a:f9:51:4c:07:03:c3:
ee:09:a0:83:e9:34:a5:05:f3:18:9b:38:e1:48:7a:
91:aa:fc:72:65:9a:c8:2d:f6:c8:90:f6:a1:33:6b:
db:94:da:4c:f3:9f:4a:27:81:53:2c:01:9c:4b:1d:
9b:b3:dc:e4:78:35:9e:74:7b:7c:f6:6e:80:ed:e2:
bf:b2:de:73:03:0a:53:80:80:ce:36:d6:c3:9d:3a:
2c:30:4f:a1:fe:ca:56:eb:6f:f2:89:5b:de:3b:54:
1d:3d:3f:d3:c0:4e:12:26:84:da:4e:50:9b:40:bb:
81:31:2c:c4:98:d9:33:17:fc:af:bb:54:7f:c7:c7:
26:ae:2e:42:f8:26:a3:80:dc:c7:46:8e:36:74:19:
5a:49:5b:95:37:54:46:72:35:23:42:ac:df:65:51:
82:98:0c:3b:1a:bb:d0:34:90:76:bf:63:25:a1:8c:
22:40:72:76:e5:f4:a5:e6:78:6f:b3:f4:b6:d7:b7:
98:88:30:93:0a:ba:64:98:11:4d:d5:90:5e:6a:07:
6d:0d:19:3e:7e:73:66:f5:ce:d7:83:f3:04:86:00:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:FC:F8:65:98:07:EA:44:3B:CE:CD:7C:83:44:59:4B:A2:4A:0D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gB_8-GWYB-pEO87NfINEWUuiSg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
91.199.168.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d0:fb:8a:e0:f8:f2:46:52:72:5c:ca:43:12:23:b9:93:12:
0a:81:39:d7:3a:72:77:48:56:33:5f:c5:3c:96:93:53:52:5e:
27:15:50:45:64:aa:50:16:52:97:ce:36:99:07:79:93:95:0f:
8c:f0:c1:fb:83:5a:5f:cc:87:f9:5e:22:79:80:4b:f6:6a:57:
99:a6:ef:fa:8b:ab:69:25:b3:e2:4f:c8:b6:8d:d1:95:82:3d:
8f:35:a1:56:7c:28:f8:4e:d1:18:00:ec:70:3e:af:63:cb:f2:
3a:e4:db:50:e4:c0:e4:ca:37:85:d2:85:11:cb:87:9b:0b:c2:
c7:54:98:55:60:4d:ec:c0:ec:c8:cb:0d:a7:03:09:37:93:95:
c7:82:e0:28:1e:4b:d4:f7:f8:f1:a7:d8:98:6b:fe:a1:fd:a3:
7d:76:74:b8:30:19:18:c5:f6:b9:90:e3:42:36:bf:30:9d:4b:
5b:d3:4d:1e:f3:49:ce:61:ce:0b:77:75:ef:27:6b:5b:52:79:
db:18:fc:5d:03:58:ea:fe:6a:ca:55:1f:13:a6:10:bb:9c:a8:
30:66:35:85:25:39:0c:e5:63:fe:93:e9:e1:89:30:f6:2b:c6:
f5:52:6b:9f:98:b7:b1:30:8f:62:82:c0:bb:d5:43:9b:8e:39:
7b:0a:04:78
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEA0bz4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDEx
OTA5MTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAxZmZjZjg2NTk4
MDdlYTQ0M2JjZWNkN2M4MzQ0NTk0YmEyNGEwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgmcAuyvpOByeK5MG2JGX9OGOB0diBNB0dmx3Lh20k7mqxj
rqsq+VFMBwPD7gmgg+k0pQXzGJs44Uh6kar8cmWayC32yJD2oTNr25TaTPOfSieB
UywBnEsdm7Pc5Hg1nnR7fPZugO3iv7LecwMKU4CAzjbWw506LDBPof7KVutv8olb
3jtUHT0/08BOEiaE2k5Qm0C7gTEsxJjZMxf8r7tUf8fHJq4uQvgmo4Dcx0aONnQZ
WklblTdURnI1I0Ks32VRgpgMOxq70DSQdr9jJaGMIkByduX0peZ4b7P0tte3mIgw
kwq6ZJgRTdWQXmoHbQ0ZPn5zZvXO14PzBIYAEjcCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSAH/z4ZZgH6kQ7zs18g0RZS6JKDTAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L2dCXzgtR1dZQi1wRU84N05mSU5FV1V1aVNnMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFvHowMEAFvHqAMEAMFvfQMEAMGO
BAMEAcJx3jANBgkqhkiG9w0BAQsFAAOCAQEADND7iuD48kZSclzKQxIjuZMSCoE5
1zpyd0hWM1/FPJaTU1JeJxVQRWSqUBZSl842mQd5k5UPjPDB+4NaX8yH+V4ieYBL
9mpXmabv+ouraSWz4k/Ito3RlYI9jzWhVnwo+E7RGADscD6vY8vyOuTbUOTA5Mo3
hdKFEcuHmwvCx1SYVWBN7MDsyMsNpwMJN5OVx4LgKB5L1Pf48afYmGv+of2jfXZ0
uDAZGMX2uZDjQja/MJ1LW9NNHvNJzmHOC3d17ydrW1J52xj8XQNY6v5qylUfE6YQ
u5yoMGY1hSU5DOVj/pPp4Ykw9ivG9VJrn5i3sTCPYoLAu9VDm445ewoEeA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org