Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/f-5fk2TW7t9v0F1g2_OTgjt_cAQ.roa
File: f-5fk2TW7t9v0F1g2_OTgjt_cAQ.roa (raw, json)
Hash identifier: RlygCnn4bQX66cAD33X/dTJR8c7cWxFdiiagdIjZueQ=
Subject key identifier: 7F:EE:5F:93:64:D6:EE:DF:6F:D0:5D:60:DB:F3:93:82:3B:7F:70:04
Certificate issuer: /CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Certificate serial: 0182CF9B454E6AA3AE7E786DCE2283B0E845
Authority key identifier: 6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/f-5fk2TW7t9v0F1g2_OTgjt_cAQ.roa
Signing time: Wed 24 Aug 2022 11:27:15 +0000
ROA not before: Wed 24 Aug 2022 11:27:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 94.251.168.0/24 maxlen: 24
194.116.132.0/23 maxlen: 23
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
62.61.32.0/19 maxlen: 19
193.43.240.0/22 maxlen: 22
37.131.128.0/19 maxlen: 19
94.251.128.0/17 maxlen: 17
94.78.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:9b:45:4e:6a:a3:ae:7e:78:6d:ce:22:83:b0:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Validity
Not Before: Aug 24 11:27:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fee5f9364d6eedf6fd05d60dbf393823b7f7004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:07:f4:ff:48:9a:aa:73:b0:9f:de:3e:e2:
dd:39:50:3e:53:d3:26:ff:ce:09:24:df:36:2d:0a:
e7:68:84:50:49:08:f6:af:34:11:0a:b8:ac:2c:5f:
6a:37:01:69:3f:49:89:00:c7:f7:ce:31:ef:0f:9a:
90:5b:e6:f4:18:89:51:61:5d:00:13:f1:c2:80:44:
f1:31:5a:39:20:bd:a1:3b:d6:84:cb:30:e1:d4:19:
94:2d:81:be:da:e2:85:5b:14:f9:fe:47:b9:ba:95:
5c:55:90:48:f8:51:29:65:a3:e5:c6:1b:f1:56:81:
f6:02:41:86:c1:82:91:9d:6f:e6:64:26:01:e9:9c:
52:48:7d:ba:9a:98:0c:ad:8e:22:38:55:a7:49:8d:
98:2f:a6:da:8b:2f:ad:cb:62:ed:bc:0b:de:3e:7c:
b2:74:db:52:13:31:89:7b:f6:0f:bd:70:29:55:81:
5e:56:61:16:8c:cf:86:17:4e:98:c0:94:c8:e1:8a:
91:7e:6d:bb:29:ed:f8:54:7b:cd:42:08:4c:22:8d:
0f:cd:f8:4d:36:3d:e6:e5:40:96:62:80:fd:a0:dc:
fe:5c:35:e0:79:a6:26:8f:8c:c8:5b:06:b3:31:a0:
75:c6:41:b2:c0:5c:93:e7:4c:fc:29:52:43:9b:e9:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:5F:93:64:D6:EE:DF:6F:D0:5D:60:DB:F3:93:82:3B:7F:70:04
X509v3 Authority Key Identifier:
keyid:6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/f-5fk2TW7t9v0F1g2_OTgjt_cAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.128.0/19
62.61.32.0/19
94.78.128.0/18
94.251.128.0/17
193.43.240.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
Signature Algorithm: sha256WithRSAEncryption
af:ef:cc:8a:a9:25:ba:5e:4e:9e:f1:4c:09:8f:55:d2:76:a6:
74:0c:4b:d1:ed:d2:e2:2f:62:e6:d2:21:f9:2d:45:45:46:db:
3d:08:75:2f:80:c0:8d:1a:98:02:d0:0d:bf:fb:a9:90:02:a1:
d4:01:c6:ef:6b:2a:74:ba:93:ae:92:c8:3b:6a:ad:62:c6:fc:
31:0c:12:e4:ba:00:ab:a4:ac:ef:31:54:eb:ee:8d:2a:fa:7f:
4b:d8:95:84:12:a7:0d:3f:5b:5d:00:c4:12:47:a2:bf:5c:f9:
80:5c:a5:d4:a5:b5:1f:09:c5:6d:1c:3a:a9:92:34:78:94:00:
ef:2f:c8:43:82:3e:ff:83:68:32:ea:63:0c:a0:17:ee:c2:6e:
1d:45:00:77:f1:27:26:2c:14:fd:07:66:82:a2:68:9e:e2:6f:
47:0a:f6:8d:30:4a:49:de:0e:73:2b:98:94:53:3a:72:80:d7:
ce:1d:4b:3c:8a:6f:3e:81:87:d0:6d:a8:f5:78:cc:c7:87:2a:
83:ba:d3:8f:8a:24:ef:56:9f:45:cb:5d:0e:eb:69:3b:ed:37:
4d:dd:78:71:a4:e6:6f:82:44:e7:dc:8d:fd:04:24:88:13:5b:
68:27:29:20:ee:c8:d8:5f:c1:e2:ae:41:2b:a8:8f:a9:bc:b9:
88:ed:cf:70
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYLPm0VOaqOufnhtziKDsOhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkY2Y2MjFhMTI3ZGRhMDhkODlhMTI0MjY3NDkzNGE5ZWQy
M2MxZWUwHhcNMjIwODI0MTEyNzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmVlNWY5MzY0ZDZlZWRmNmZkMDVkNjBkYmYzOTM4MjNiN2Y3MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguAH9P9ImqpzsJ/ePuLdOVA+U9Mm
/84JJN82LQrnaIRQSQj2rzQRCrisLF9qNwFpP0mJAMf3zjHvD5qQW+b0GIlRYV0A
E/HCgETxMVo5IL2hO9aEyzDh1BmULYG+2uKFWxT5/ke5upVcVZBI+FEpZaPlxhvx
VoH2AkGGwYKRnW/mZCYB6ZxSSH26mpgMrY4iOFWnSY2YL6baiy+ty2LtvAvePnyy
dNtSEzGJe/YPvXApVYFeVmEWjM+GF06YwJTI4YqRfm27Ke34VHvNQghMIo0PzfhN
Nj3m5UCWYoD9oNz+XDXgeaYmj4zIWwazMaB1xkGywFyT50z8KVJDm+mlYwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFH/uX5Nk1u7fb9BdYNvzk4I7f3AEMB8GA1UdIwQY
MBaAFG3PYhoSfdoI2JoSQmdJNKntI8HuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmM5aUdoSjkyZ2pZbWhKQ1owazBxZTBqd2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YjU4ZDQtMzhlYy00ZDU5LTllMjEt
YTkxNjQzMjJjOTFjLzEvZi01ZmsyVFc3dDl2MEYxZzJfT1RnanRfY0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YjU4ZDQtMzhlYy00ZDU5LTllMjEtYTkxNjQzMjJjOTFj
LzEvYmM5aUdoSjkyZ2pZbWhKQ1owazBxZTBqd2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQFJYOAAwQF
Pj0gAwQGXk6AAwQHXvuAAwQCwSvwAwQBwch2AwQBwnSEAwQAwpXwAwQBw12GMA0G
CSqGSIb3DQEBCwUAA4IBAQCv78yKqSW6Xk6e8UwJj1XSdqZ0DEvR7dLiL2Lm0iH5
LUVFRts9CHUvgMCNGpgC0A2/+6mQAqHUAcbvayp0upOuksg7aq1ixvwxDBLkugCr
pKzvMVTr7o0q+n9L2JWEEqcNP1tdAMQSR6K/XPmAXKXUpbUfCcVtHDqpkjR4lADv
L8hDgj7/g2gy6mMMoBfuwm4dRQB38ScmLBT9B2aComie4m9HCvaNMEpJ3g5zK5iU
UzpygNfOHUs8im8+gYfQbaj1eMzHhyqDutOPiiTvVp9Fy10O62k77TdN3XhxpOZv
gkTn3I39BCSIE1toJykg7sjYX8HirkErqI+pvLmI7c9w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org