Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/5MWBc-c4VojMJuuVCKjsZ63g3uk.roa
File: 5MWBc-c4VojMJuuVCKjsZ63g3uk.roa (raw, json)
Hash identifier: pN5xzTJ4j/2DFGiYuE8B+gcNZQGKsY5oT5lDp18FwvY=
Subject key identifier: E4:C5:81:73:E7:38:56:88:CC:26:EB:95:08:A8:EC:67:AD:E0:DE:E9
Certificate issuer: /CN=469ff2033362b8bd4a4c1d1084657e90a2501a13
Certificate serial: 08685354
Authority key identifier: 46:9F:F2:03:33:62:B8:BD:4A:4C:1D:10:84:65:7E:90:A2:50:1A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/5MWBc-c4VojMJuuVCKjsZ63g3uk.roa
Signing time: Sat 01 Jan 2022 07:56:45 +0000
ROA not before: Sat 01 Jan 2022 07:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61414
IP address blocks: 185.243.43.0/24 maxlen: 24
185.243.40.0/24 maxlen: 24
185.243.40.0/22 maxlen: 22
185.243.42.0/24 maxlen: 24
185.243.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141054804 (0x8685354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469ff2033362b8bd4a4c1d1084657e90a2501a13
Validity
Not Before: Jan 1 07:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4c58173e7385688cc26eb9508a8ec67ade0dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:45:36:05:3b:82:dc:66:e1:f8:e3:69:8b:
88:8e:0d:ce:8c:95:20:1b:c3:7b:75:55:fc:ec:d1:
30:d5:73:02:e7:cb:66:d7:11:91:c9:0d:cd:58:71:
c9:0a:d3:94:c2:aa:34:77:18:bc:eb:f9:9e:e5:da:
5b:72:39:0a:28:af:64:ed:96:85:61:ab:0f:e6:55:
3f:38:21:ca:71:0e:ff:fb:1e:5b:51:ca:41:03:4e:
15:47:ed:a9:d8:2f:8c:95:0a:5c:71:f2:28:77:bd:
4e:22:07:b8:8e:3c:c7:52:29:1c:a2:4a:7b:7f:cf:
d8:0b:b3:87:9c:47:e3:3c:bb:a9:b4:49:0e:16:21:
27:a1:d9:c7:bc:fb:2b:2a:ab:db:61:6a:75:51:eb:
04:90:df:2d:69:f5:79:d9:66:93:8d:e4:56:c4:38:
9b:4f:ca:96:39:06:8f:8f:d5:a4:e8:32:bc:1d:6b:
6f:d1:1a:be:7e:72:98:e9:a4:b3:b8:59:30:7a:1d:
9e:ed:ff:dd:58:7a:8d:a2:1c:6b:5c:c3:c0:ad:60:
69:7a:43:b6:90:d2:01:1a:67:a3:ed:59:0c:b6:2f:
a9:1a:8a:fd:6d:f8:43:6e:cc:d0:70:b5:65:0c:e0:
93:40:16:50:1c:33:61:ce:0d:2a:d9:ad:42:46:f4:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:81:73:E7:38:56:88:CC:26:EB:95:08:A8:EC:67:AD:E0:DE:E9
X509v3 Authority Key Identifier:
keyid:46:9F:F2:03:33:62:B8:BD:4A:4C:1D:10:84:65:7E:90:A2:50:1A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/5MWBc-c4VojMJuuVCKjsZ63g3uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fdcb72-eb02-4939-b040-f7f5d52a15a5/1/Rp_yAzNiuL1KTB0QhGV-kKJQGhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:9f:f0:a0:85:e5:bc:50:9e:fc:c5:d7:3e:f5:e1:05:dc:62:
37:d5:cc:03:58:d5:6c:7a:e4:53:ef:2f:74:8a:7b:08:90:0c:
bc:c5:41:d2:65:51:8a:88:3e:3b:bb:af:a4:e8:81:37:71:fd:
4a:44:de:e6:77:68:d5:c1:00:ed:37:12:47:a1:8b:fe:e5:2e:
62:fc:31:da:94:e2:ca:98:57:95:b6:db:09:57:1f:11:de:93:
f5:66:4e:0f:38:9c:2e:92:b9:25:f5:f8:08:e5:e6:e1:43:3d:
26:2b:c9:fc:d3:ad:cb:6a:6d:ac:8a:cd:3b:97:43:17:c2:21:
66:a2:92:7d:c5:9d:3a:14:41:23:9b:8d:e0:df:9c:0d:9d:f4:
c7:17:d0:a1:25:2d:d9:81:ef:c1:47:7d:a8:af:79:77:c8:6c:
8e:73:76:fb:53:13:c7:b5:4b:ef:5f:ce:e2:1b:c6:e6:19:d6:
dc:bc:5e:64:7e:90:19:63:8a:06:19:f4:30:b9:7d:55:2f:71:
0c:c0:70:cf:f1:a1:86:d1:88:59:22:26:7a:93:6c:41:ec:9e:
11:50:c9:52:09:ee:c7:64:88:ef:31:9e:37:40:9f:60:c7:eb:
7f:b2:d6:42:92:ae:0c:e5:79:f6:88:af:c7:98:b7:69:74:3d:
71:1f:1c:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECGhTVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NjlmZjIwMzMzNjJiOGJkNGE0YzFkMTA4NDY1N2U5MGEyNTAxYTEzMB4XDTIyMDEw
MTA3NTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRjNTgxNzNlNzM4
NTY4OGNjMjZlYjk1MDhhOGVjNjdhZGUwZGVlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAIRTYFO4LcZuH442mLiI4NzoyVIBvDe3VV/OzRMNVzAufL
ZtcRkckNzVhxyQrTlMKqNHcYvOv5nuXaW3I5CiivZO2WhWGrD+ZVPzghynEO//se
W1HKQQNOFUftqdgvjJUKXHHyKHe9TiIHuI48x1IpHKJKe3/P2Auzh5xH4zy7qbRJ
DhYhJ6HZx7z7Kyqr22FqdVHrBJDfLWn1edlmk43kVsQ4m0/KljkGj4/VpOgyvB1r
b9Eavn5ymOmks7hZMHodnu3/3Vh6jaIca1zDwK1gaXpDtpDSARpno+1ZDLYvqRqK
/W34Q27M0HC1ZQzgk0AWUBwzYc4NKtmtQkb0R38CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTkxYFz5zhWiMwm65UIqOxnreDe6TAfBgNVHSMEGDAWgBRGn/IDM2K4vUpM
HRCEZX6QolAaEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JwX3lBek5pdUwxS1RCMFFoR1Yta0tKUUdoTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvZmRjYjcyLWViMDItNDkzOS1iMDQwLWY3ZjVkNTJhMTVhNS8x
LzVNV0JjLWM0Vm9qTUp1dVZDS2pzWjYzZzN1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
ZmRjYjcyLWViMDItNDkzOS1iMDQwLWY3ZjVkNTJhMTVhNS8xL1JwX3lBek5pdUwx
S1RCMFFoR1Yta0tKUUdoTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnzKDANBgkqhkiG9w0BAQsFAAOC
AQEAGp/woIXlvFCe/MXXPvXhBdxiN9XMA1jVbHrkU+8vdIp7CJAMvMVB0mVRiog+
O7uvpOiBN3H9SkTe5ndo1cEA7TcSR6GL/uUuYvwx2pTiyphXlbbbCVcfEd6T9WZO
DzicLpK5JfX4COXm4UM9JivJ/NOty2ptrIrNO5dDF8IhZqKSfcWdOhRBI5uN4N+c
DZ30xxfQoSUt2YHvwUd9qK95d8hsjnN2+1MTx7VL71/O4hvG5hnW3LxeZH6QGWOK
Bhn0MLl9VS9xDMBwz/GhhtGIWSImepNsQeyeEVDJUgnux2SI7zGeN0CfYMfrf7LW
QpKuDOV59oivx5i3aXQ9cR8c4g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:55 2023 by rpki-client on console-ams.rpki-client.org