Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/346cfe-38ef-4ce8-8d88-82b99022d490/1/fl72c9m3EUl0We6yc_gTXuzpxeY.roa
File: fl72c9m3EUl0We6yc_gTXuzpxeY.roa (raw, json)
Hash identifier: o3RshLVV4PCoa0VGxIwQ9qYQnYPBJL9VyPP0xEUrClU=
Subject key identifier: 7E:5E:F6:73:D9:B7:11:49:74:59:EE:B2:73:F8:13:5E:EC:E9:C5:E6
Certificate issuer: /CN=8b2a51b9275e28bec02389d231d1ef8eb6617e16
Certificate serial: 0D54A185
Authority key identifier: 8B:2A:51:B9:27:5E:28:BE:C0:23:89:D2:31:D1:EF:8E:B6:61:7E:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iypRuSdeKL7AI4nSMdHvjrZhfhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/346cfe-38ef-4ce8-8d88-82b99022d490/1/fl72c9m3EUl0We6yc_gTXuzpxeY.roa
Signing time: Sat 01 Jan 2022 08:53:52 +0000
ROA not before: Sat 01 Jan 2022 08:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34993
IP address blocks: 89.248.208.0/24 maxlen: 24
89.248.210.0/23 maxlen: 23
185.151.188.0/22 maxlen: 24
2a0a:1580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223650181 (0xd54a185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2a51b9275e28bec02389d231d1ef8eb6617e16
Validity
Not Before: Jan 1 08:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e5ef673d9b711497459eeb273f8135eece9c5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:92:6a:28:80:16:7a:19:27:3a:7f:23:51:
47:51:70:02:8a:55:87:ee:76:42:d0:b1:04:68:52:
f3:22:11:0c:40:9f:1c:b5:10:33:ce:0f:d9:c9:6b:
55:dd:f7:2e:a3:cf:00:25:96:e9:13:e2:e7:ad:7e:
57:31:4e:28:1a:d0:82:71:b6:54:d8:87:c0:83:de:
6e:08:93:36:69:ba:ca:80:10:59:59:22:43:03:c7:
29:cf:69:72:5a:28:a2:4d:f8:dd:83:10:de:c3:4f:
08:c1:2f:d4:f4:36:cb:bd:6b:9e:75:e7:e0:34:2d:
31:47:30:09:a7:98:59:4b:cb:a3:b4:3a:ab:84:65:
49:27:1b:94:e8:b3:68:11:fa:c4:b1:53:59:5f:b4:
20:02:01:d4:3c:bf:7a:46:9f:9a:6c:b7:fc:ef:81:
d5:25:c7:a7:08:c2:f4:77:6e:9c:0f:f6:30:1f:ee:
66:f1:9a:b9:92:8c:b7:57:3d:e9:fc:ae:c7:11:b4:
d3:51:9c:99:fd:8b:12:74:a5:d5:41:e9:71:85:8e:
dc:95:50:6a:a7:30:c9:57:6e:60:32:55:e5:b4:57:
7c:5e:92:ca:27:65:3f:16:fe:e9:7e:9b:95:44:30:
c7:b9:51:0a:2d:31:ab:f0:b8:90:90:4d:ce:99:3b:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:F6:73:D9:B7:11:49:74:59:EE:B2:73:F8:13:5E:EC:E9:C5:E6
X509v3 Authority Key Identifier:
keyid:8B:2A:51:B9:27:5E:28:BE:C0:23:89:D2:31:D1:EF:8E:B6:61:7E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iypRuSdeKL7AI4nSMdHvjrZhfhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/346cfe-38ef-4ce8-8d88-82b99022d490/1/fl72c9m3EUl0We6yc_gTXuzpxeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/346cfe-38ef-4ce8-8d88-82b99022d490/1/iypRuSdeKL7AI4nSMdHvjrZhfhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.208.0/24
89.248.210.0/23
185.151.188.0/22
IPv6:
2a0a:1580::/29
Signature Algorithm: sha256WithRSAEncryption
b0:71:7d:ea:9b:d8:48:20:87:d0:dc:2f:12:df:48:46:68:fd:
7f:b9:a5:04:f3:42:01:bd:05:3b:23:fa:e6:d3:19:9c:ab:a1:
7b:fe:86:bb:57:b0:6a:47:c0:fb:95:fb:26:bb:0d:db:16:d4:
79:d9:d4:eb:e9:bd:d9:b6:ad:57:eb:86:19:8b:bd:e2:07:47:
eb:32:c0:c9:50:25:e7:d1:ad:ed:5d:03:b9:fe:bb:40:18:00:
42:3d:fa:f5:93:74:e8:57:da:69:f6:68:13:71:a3:0c:3a:46:
02:16:f2:42:d1:52:ef:19:75:84:af:76:de:02:15:59:22:62:
0a:a8:62:89:e8:a7:0d:39:04:39:3b:f2:49:27:5c:e4:32:e6:
07:d0:35:67:3a:cb:09:cc:8c:35:87:0d:21:eb:2a:e2:30:70:
28:67:f4:51:e8:1d:e4:73:b2:01:67:7f:ae:62:8a:04:aa:77:
d8:c0:06:28:c1:1e:91:8f:a6:4c:f2:27:70:97:26:8f:a0:fb:
d8:53:9c:bf:07:1d:26:cc:40:08:a0:c7:6c:5c:20:27:6f:dd:
61:6a:93:57:a0:40:ba:10:a8:6e:60:86:ce:65:2e:8e:f8:83:
a0:cd:79:21:23:97:0b:ec:d2:a4:63:a6:06:2e:a7:16:62:5b:
8f:36:6e:6f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEDVShhTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YjJhNTFiOTI3NWUyOGJlYzAyMzg5ZDIzMWQxZWY4ZWI2NjE3ZTE2MB4XDTIyMDEw
MTA4NTM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2U1ZWY2NzNkOWI3
MTE0OTc0NTllZWIyNzNmODEzNWVlY2U5YzVlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFLkmoogBZ6GSc6fyNRR1FwAopVh+52QtCxBGhS8yIRDECf
HLUQM84P2clrVd33LqPPACWW6RPi561+VzFOKBrQgnG2VNiHwIPebgiTNmm6yoAQ
WVkiQwPHKc9pcloook343YMQ3sNPCMEv1PQ2y71rnnXn4DQtMUcwCaeYWUvLo7Q6
q4RlSScblOizaBH6xLFTWV+0IAIB1Dy/ekafmmy3/O+B1SXHpwjC9HdunA/2MB/u
ZvGauZKMt1c96fyuxxG001Gcmf2LEnSl1UHpcYWO3JVQaqcwyVduYDJV5bRXfF6S
yidlPxb+6X6blUQwx7lRCi0xq/C4kJBNzpk7YwcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBR+XvZz2bcRSXRZ7rJz+BNe7OnF5jAfBgNVHSMEGDAWgBSLKlG5J14ovsAj
idIx0e+OtmF+FjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2l5cFJ1U2RlS0w3QUk0blNNZEh2anJaaGZoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMzQ2Y2ZlLTM4ZWYtNGNlOC04ZDg4LTgyYjk5MDIyZDQ5MC8x
L2ZsNzJjOW0zRVVsMFdlNnljX2dUWHV6cHhlWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MzQ2Y2ZlLTM4ZWYtNGNlOC04ZDg4LTgyYjk5MDIyZDQ5MC8xL2l5cFJ1U2RlS0w3
QUk0blNNZEh2anJaaGZoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAFn40AMEAVn40gMEArmXvDANBAIA
AjAHAwUDKgoVgDANBgkqhkiG9w0BAQsFAAOCAQEAsHF96pvYSCCH0NwvEt9IRmj9
f7mlBPNCAb0FOyP65tMZnKuhe/6Gu1ewakfA+5X7JrsN2xbUednU6+m92batV+uG
GYu94gdH6zLAyVAl59Gt7V0Duf67QBgAQj369ZN06FfaafZoE3GjDDpGAhbyQtFS
7xl1hK923gIVWSJiCqhiieinDTkEOTvySSdc5DLmB9A1ZzrLCcyMNYcNIesq4jBw
KGf0Uegd5HOyAWd/rmKKBKp32MAGKMEekY+mTPIncJcmj6D72FOcvwcdJsxACKDH
bFwgJ2/dYWqTV6BAuhCobmCGzmUujviDoM15ISOXC+zSpGOmBi6nFmJbjzZubw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:24 2024 by rpki-client on console-ams.rpki-client.org