Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/FIXREUWFd6Htn0P1HfMn_pwKZjs.roa
File: FIXREUWFd6Htn0P1HfMn_pwKZjs.roa (raw, json)
Hash identifier: T+vNbPfQ1vfMOzuGXZPgxF8HDO3gfp+oNbIzSoN/iA4=
Subject key identifier: 14:85:D1:11:45:85:77:A1:ED:9F:43:F5:1D:F3:27:FE:9C:0A:66:3B
Certificate issuer: /CN=e90e72627fb3fc176f39cb7b2658f2d25d33adef
Certificate serial: 169810A5
Authority key identifier: E9:0E:72:62:7F:B3:FC:17:6F:39:CB:7B:26:58:F2:D2:5D:33:AD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Q5yYn-z_BdvOct7Jljy0l0zre8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/FIXREUWFd6Htn0P1HfMn_pwKZjs.roa
Signing time: Sat 01 Jan 2022 10:04:42 +0000
ROA not before: Sat 01 Jan 2022 10:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 185.75.197.0/24 maxlen: 24
185.75.196.0/23 maxlen: 23
185.75.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379064485 (0x169810a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90e72627fb3fc176f39cb7b2658f2d25d33adef
Validity
Not Before: Jan 1 10:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1485d111458577a1ed9f43f51df327fe9c0a663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:63:c6:9f:ed:b9:2e:ec:18:3a:8e:b2:45:
b5:8c:d4:eb:81:09:c9:a5:27:61:9f:dc:ea:89:10:
52:8e:d5:ff:4c:f7:89:cf:f3:43:8f:4c:8e:b6:ad:
bc:f4:20:c7:59:f8:72:50:f7:5d:30:99:50:f4:7c:
e0:f4:d3:49:3e:0a:55:3e:29:ba:5b:58:9f:1a:33:
a0:f2:b6:3c:05:56:b2:6a:b2:eb:a2:f3:2e:f1:9b:
51:aa:62:a8:05:a9:64:9e:af:61:ab:9c:82:b9:c6:
c3:46:43:b1:b5:8d:94:d2:21:5d:0c:22:82:ae:a0:
f6:11:a6:c9:16:fc:82:97:81:cf:72:0c:35:58:62:
26:c0:16:dc:30:69:d3:86:cc:10:03:85:0a:bb:d3:
1e:cf:7f:06:61:69:75:88:72:f3:dd:bd:7c:a5:f5:
63:02:98:5e:32:a8:6d:06:b8:3c:e7:f7:ff:46:71:
65:a5:ea:20:f4:f4:4a:72:89:00:88:28:6f:b2:0b:
fe:c4:a3:f2:a2:f3:91:df:0c:5e:1d:2a:fd:57:23:
d0:78:39:64:0c:1e:73:0e:ab:47:6b:9b:0c:eb:02:
79:61:ef:7b:c1:22:40:34:e2:84:2c:00:6b:d0:08:
50:50:c3:ae:58:7b:d7:e7:7f:59:61:9c:b8:d6:fc:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:D1:11:45:85:77:A1:ED:9F:43:F5:1D:F3:27:FE:9C:0A:66:3B
X509v3 Authority Key Identifier:
keyid:E9:0E:72:62:7F:B3:FC:17:6F:39:CB:7B:26:58:F2:D2:5D:33:AD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Q5yYn-z_BdvOct7Jljy0l0zre8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/FIXREUWFd6Htn0P1HfMn_pwKZjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/6Q5yYn-z_BdvOct7Jljy0l0zre8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:89:40:08:e8:44:88:75:08:84:6a:34:5d:20:35:6f:5c:83:
78:d0:4e:12:7a:9a:ca:3a:8b:6d:14:cd:ca:0c:ed:7e:a5:29:
fd:35:aa:dc:c5:74:67:b0:79:7b:34:c7:3f:b8:c5:a3:f5:a0:
08:69:c4:37:13:fe:fb:7b:15:8c:8b:65:29:aa:10:e5:f6:ba:
d8:18:00:e2:51:a8:8f:85:91:64:9d:d6:d5:80:00:a5:c9:ae:
78:b9:bc:1f:a1:e6:25:73:b4:65:1c:58:bb:a9:ba:b0:ea:b9:
6f:08:82:b8:95:0a:a3:a2:a8:d2:b2:26:08:67:de:8e:36:ee:
83:61:9b:c0:b4:fb:99:99:f8:7b:bb:3e:49:b1:25:0b:c8:3e:
7b:3e:32:6b:73:7f:fa:4f:0b:e3:9a:38:8b:c6:a4:ae:96:ba:
a0:2e:93:15:65:6b:60:ff:d2:dc:69:a3:b8:db:55:7d:ba:31:
df:8d:7c:19:02:e3:66:6e:32:63:2d:22:be:c7:7a:6a:ba:39:
0d:f1:37:a8:c1:1e:db:ac:a7:a9:e6:40:9e:0c:7c:03:be:3a:
d7:f8:bb:fe:95:26:44:69:c1:b9:73:fc:64:0a:1b:44:3f:6d:
22:30:75:40:cb:5b:93:b4:50:6a:55:83:e1:d4:35:b2:fa:73:
c4:ae:d1:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFpgQpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTBlNzI2MjdmYjNmYzE3NmYzOWNiN2IyNjU4ZjJkMjVkMzNhZGVmMB4XDTIyMDEw
MTEwMDQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQ4NWQxMTE0NTg1
NzdhMWVkOWY0M2Y1MWRmMzI3ZmU5YzBhNjYzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDlY8af7bku7Bg6jrJFtYzU64EJyaUnYZ/c6okQUo7V/0z3
ic/zQ49MjratvPQgx1n4clD3XTCZUPR84PTTST4KVT4pultYnxozoPK2PAVWsmqy
66LzLvGbUapiqAWpZJ6vYaucgrnGw0ZDsbWNlNIhXQwigq6g9hGmyRb8gpeBz3IM
NVhiJsAW3DBp04bMEAOFCrvTHs9/BmFpdYhy8929fKX1YwKYXjKobQa4POf3/0Zx
ZaXqIPT0SnKJAIgob7IL/sSj8qLzkd8MXh0q/Vcj0Hg5ZAwecw6rR2ubDOsCeWHv
e8EiQDTihCwAa9AIUFDDrlh71+d/WWGcuNb8GBcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUhdERRYV3oe2fQ/Ud8yf+nApmOzAfBgNVHSMEGDAWgBTpDnJif7P8F285
y3smWPLSXTOt7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZRNXlZbi16X0Jkdk9jdDdKbGp5MGwwenJlOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMzllOGE0LWE5NzktNDA4MS04NzNmLTgxMzg3NzlhZjY4ZS8x
L0ZJWFJFVVdGZDZIdG4wUDFIZk1uX3B3S1pqcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MzllOGE0LWE5NzktNDA4MS04NzNmLTgxMzg3NzlhZjY4ZS8xLzZRNXlZbi16X0Jk
dk9jdDdKbGp5MGwwenJlOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAblLxDANBgkqhkiG9w0BAQsFAAOC
AQEAWolACOhEiHUIhGo0XSA1b1yDeNBOEnqayjqLbRTNygztfqUp/TWq3MV0Z7B5
ezTHP7jFo/WgCGnENxP++3sVjItlKaoQ5fa62BgA4lGoj4WRZJ3W1YAApcmueLm8
H6HmJXO0ZRxYu6m6sOq5bwiCuJUKo6Ko0rImCGfejjbug2GbwLT7mZn4e7s+SbEl
C8g+ez4ya3N/+k8L45o4i8akrpa6oC6TFWVrYP/S3GmjuNtVfbox3418GQLjZm4y
Yy0ivsd6aro5DfE3qMEe26ynqeZAngx8A7461/i7/pUmRGnBuXP8ZAobRD9tIjB1
QMtbk7RQalWD4dQ1svpzxK7Rdg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org