Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tWMzjjd5vfMMDr-IgtBPzVZtja4.roa
File: tWMzjjd5vfMMDr-IgtBPzVZtja4.roa (raw, json)
Hash identifier: 8lz9fDG+DZQyKWRVojQWHow6SJy3rlCsyx2Qs1AiH7I=
Subject key identifier: B5:63:33:8E:37:79:BD:F3:0C:0E:BF:88:82:D0:4F:CD:56:6D:8D:AE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 046AB746
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tWMzjjd5vfMMDr-IgtBPzVZtja4.roa
Signing time: Tue 03 May 2022 10:19:47 +0000
ROA not before: Tue 03 May 2022 10:19:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74102598 (0x46ab746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 3 10:19:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b563338e3779bdf30c0ebf8882d04fcd566d8dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:c3:ec:5a:c7:b0:ed:63:de:37:6b:0b:c5:
6f:bd:01:59:9c:cc:95:75:55:b5:d9:b2:99:83:52:
b9:f7:04:ab:f7:fe:34:c7:cf:2d:d9:e7:da:43:ad:
df:80:fd:23:ee:b7:0d:68:23:16:93:38:5d:7d:06:
c0:cf:d0:ec:9b:13:0e:0d:ef:18:a2:85:22:4d:c6:
af:3d:60:e6:97:86:12:e9:be:3f:2c:29:3e:6e:98:
2d:ea:ae:34:bd:88:f5:97:43:31:16:b3:a5:28:94:
c2:7e:dd:ba:f5:f5:1e:84:f1:4c:4f:11:e8:e7:78:
ad:67:67:01:3f:15:e5:cd:af:0c:c0:c4:7e:1f:40:
70:cb:ea:0c:13:76:e7:3a:02:a3:88:f8:3a:cf:ce:
d6:ae:7c:c1:58:6b:86:74:2a:cb:f9:9b:0d:5d:36:
28:e3:cb:57:4b:0a:7a:6a:a8:27:e3:3d:5f:d1:3e:
ea:0b:90:22:eb:3b:8f:0a:42:e4:be:cf:0f:6a:a5:
f4:04:5c:ae:94:ae:43:b6:87:89:f6:44:f8:d7:ff:
45:cb:6b:21:78:c9:00:c9:22:e1:e9:f4:d9:44:37:
34:87:aa:4c:23:25:aa:d9:d3:3c:33:a7:d4:05:9c:
bb:c2:e9:eb:47:8f:79:30:e7:f7:8a:bb:bb:d2:49:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:33:8E:37:79:BD:F3:0C:0E:BF:88:82:D0:4F:CD:56:6D:8D:AE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/tWMzjjd5vfMMDr-IgtBPzVZtja4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b4:81:fb:5a:7a:c4:eb:ed:2c:42:84:9d:43:66:0e:bd:8f:
f4:a5:4a:57:5e:70:c2:d8:6f:ec:c1:17:3a:76:c5:63:ce:9e:
02:f3:55:72:75:0a:83:a1:a9:c5:40:00:4d:77:e7:ad:6e:8e:
19:76:bb:eb:be:ce:7f:fa:47:51:a8:2f:07:77:af:0d:96:24:
78:5f:ac:02:b0:4d:9b:75:32:ca:0d:f9:2f:ce:02:28:c3:ae:
44:84:8c:64:43:2d:19:f2:0f:7e:37:a0:73:84:37:56:9e:76:
13:65:bf:ad:b5:e6:a7:dd:2b:fe:1c:aa:c7:27:f2:1f:7f:93:
13:b4:39:ca:ee:89:ab:d4:db:a6:e2:6f:d3:eb:53:ca:46:79:
88:eb:30:9b:a3:ae:30:e6:85:d8:76:e3:e5:c3:50:21:00:e0:
0b:19:46:53:8f:f4:6b:13:62:92:68:48:b7:7d:1c:2f:c8:57:
6e:45:b0:9a:e9:17:43:a4:64:1b:ca:27:3c:b3:44:6e:c3:e4:
7f:05:39:c8:42:ea:58:2d:a5:16:73:41:dc:72:80:5c:fd:3a:
4c:58:9f:7f:c7:73:d0:12:eb:1c:92:c9:86:0c:ca:d8:73:72:
6b:28:ef:3a:e7:9e:f0:1b:a7:c5:7a:a9:c2:d3:96:1f:66:bc:
e8:e7:88:91
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEBGq3RjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDUw
MzEwMTk0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU2MzMzOGUzNzc5
YmRmMzBjMGViZjg4ODJkMDRmY2Q1NjZkOGRhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQ8w+xax7DtY943awvFb70BWZzMlXVVtdmymYNSufcEq/f+
NMfPLdnn2kOt34D9I+63DWgjFpM4XX0GwM/Q7JsTDg3vGKKFIk3Grz1g5peGEum+
PywpPm6YLequNL2I9ZdDMRazpSiUwn7duvX1HoTxTE8R6Od4rWdnAT8V5c2vDMDE
fh9AcMvqDBN25zoCo4j4Os/O1q58wVhrhnQqy/mbDV02KOPLV0sKemqoJ+M9X9E+
6guQIus7jwpC5L7PD2ql9ARcrpSuQ7aHifZE+Nf/RctrIXjJAMki4en02UQ3NIeq
TCMlqtnTPDOn1AWcu8Lp60ePeTDn94q7u9JJAzsCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBS1YzOON3m98wwOv4iC0E/NVm2NrjAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L3RXTXpqamQ1dmZNTURyLUlndEJQelZadGphNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAS2Y8AMEAFvGQgMEAMFvfQMEAMGO
BAMEAMGwgAMEAMJx4jANBgkqhkiG9w0BAQsFAAOCAQEAf7SB+1p6xOvtLEKEnUNm
Dr2P9KVKV15wwthv7MEXOnbFY86eAvNVcnUKg6GpxUAATXfnrW6OGXa7677Of/pH
UagvB3evDZYkeF+sArBNm3Uyyg35L84CKMOuRISMZEMtGfIPfjegc4Q3Vp52E2W/
rbXmp90r/hyqxyfyH3+TE7Q5yu6Jq9TbpuJv0+tTykZ5iOswm6OuMOaF2Hbj5cNQ
IQDgCxlGU4/0axNikmhIt30cL8hXbkWwmukXQ6RkG8onPLNEbsPkfwU5yELqWC2l
FnNB3HKAXP06TFiff8dz0BLrHJLJhgzK2HNyayjvOuee8BunxXqpwtOWH2a86OeI
kQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org