Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/ZdvDe6Tx4yu5oUh_88dQPcRtFIY.roa
File: ZdvDe6Tx4yu5oUh_88dQPcRtFIY.roa (raw, json)
Hash identifier: rOa3WVmBza2dzt/vUUjS5JWCwH82uuY2MNSEFwXkW6Q=
Subject key identifier: 65:DB:C3:7B:A4:F1:E3:2B:B9:A1:48:7F:F3:C7:50:3D:C4:6D:14:86
Certificate issuer: /CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Certificate serial: 0189DFB68AD78AEA9F6831CB84A85DBADD94
Authority key identifier: 42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/ZdvDe6Tx4yu5oUh_88dQPcRtFIY.roa
Signing time: Thu 10 Aug 2023 13:50:29 +0000
ROA not before: Thu 10 Aug 2023 13:50:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62388
IP address blocks: 188.212.36.0/24 maxlen: 24
89.37.232.0/23 maxlen: 23
89.35.112.0/24 maxlen: 24
2a06:7900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:b6:8a:d7:8a:ea:9f:68:31:cb:84:a8:5d:ba:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Validity
Not Before: Aug 10 13:50:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65dbc37ba4f1e32bb9a1487ff3c7503dc46d1486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:ed:d3:3f:8b:73:c5:df:57:01:1f:a6:fe:
44:75:62:18:30:2c:e7:d1:7f:ca:e0:92:6d:3e:1b:
5d:73:11:88:65:78:5e:86:e4:b9:d0:2e:8e:69:63:
fc:d0:70:21:f5:06:5f:f4:8f:1a:a3:dc:b7:e3:2e:
b0:a9:7e:7e:a4:64:37:b8:21:0e:6d:88:51:7e:c7:
06:04:e9:9e:8a:ab:63:40:29:61:ff:47:71:cc:60:
90:4a:da:c9:f6:b5:4d:87:4f:48:e4:0f:c5:dc:f3:
3a:c6:27:38:7a:a9:c7:e1:cf:8b:44:87:fb:0e:04:
45:f0:bf:b4:9d:2a:5c:df:e8:d2:ef:68:2d:68:78:
70:ac:09:7d:d3:ed:d6:64:18:cc:64:70:22:13:80:
ff:05:c5:35:95:47:b9:5f:16:a4:e9:af:ba:89:84:
cc:57:a5:8c:97:09:05:ba:d6:c2:ea:6b:8c:71:8f:
45:d8:03:25:4a:c8:42:cc:95:47:1f:98:04:82:6a:
d1:38:18:6e:2d:50:b9:9f:7c:c0:3f:1f:29:da:1d:
2b:7e:53:3c:3a:83:4c:8a:45:a8:4f:89:20:46:c1:
29:7b:2f:f1:c8:60:6b:10:db:73:50:09:32:5d:82:
b5:a7:ff:07:3b:a2:d3:3f:05:69:fd:05:cc:b1:6f:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:C3:7B:A4:F1:E3:2B:B9:A1:48:7F:F3:C7:50:3D:C4:6D:14:86
X509v3 Authority Key Identifier:
keyid:42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/ZdvDe6Tx4yu5oUh_88dQPcRtFIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.112.0/24
89.37.232.0/23
188.212.36.0/24
IPv6:
2a06:7900::/29
Signature Algorithm: sha256WithRSAEncryption
ab:02:c6:ec:57:cb:88:28:d5:70:cd:72:59:3d:3b:b2:b0:82:
3f:49:db:5f:fc:f2:aa:0c:cd:1b:c7:3c:05:3c:dd:c1:67:d9:
ac:74:8e:93:9e:c1:24:12:56:8e:a0:71:7c:12:60:b0:7a:47:
60:86:18:22:bb:d8:58:e1:68:21:34:e1:c1:b9:c8:44:70:c3:
6e:57:80:b8:80:03:15:f8:a1:b8:19:fd:75:a5:3b:9c:63:92:
5d:c0:86:9f:a0:68:14:f6:fb:b7:b3:4b:7d:58:95:c3:5a:c9:
3c:40:be:1f:dd:4f:6a:a3:4e:e5:65:12:34:c9:80:4b:65:fc:
45:ce:60:c4:b4:35:42:3d:14:ea:01:a9:db:5e:20:c0:ff:89:
d6:6a:c3:ac:70:50:45:a9:e3:5c:cd:7d:59:12:ef:f1:b3:0c:
95:60:06:22:3e:37:fc:79:ea:34:d7:02:1e:21:93:77:22:68:
ed:bd:f8:81:88:92:01:bc:eb:27:c6:69:02:40:51:53:1e:5a:
a7:11:58:a0:84:43:0c:1d:d0:41:49:b4:7f:e7:f6:9a:43:ee:
2f:72:77:f3:32:b5:3e:8e:17:3d:56:a6:7b:36:38:81:71:c8:
aa:3a:f8:f0:c3:2d:74:a6:a9:78:0f:04:7d:2e:02:76:af:9a:
6b:80:6c:64
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYnftorXiuqfaDHLhKhdut2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzVkNjlkOGQ4OTZmYWVjNmU3YzIxNzFkMzBkZDA5YjUw
MWEwM2YwHhcNMjMwODEwMTM1MDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRiYzM3YmE0ZjFlMzJiYjlhMTQ4N2ZmM2M3NTAzZGM0NmQxNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Tt0z+Lc8XfVwEfpv5EdWIYMCzn
0X/K4JJtPhtdcxGIZXhehuS50C6OaWP80HAh9QZf9I8ao9y34y6wqX5+pGQ3uCEO
bYhRfscGBOmeiqtjQClh/0dxzGCQStrJ9rVNh09I5A/F3PM6xic4eqnH4c+LRIf7
DgRF8L+0nSpc3+jS72gtaHhwrAl90+3WZBjMZHAiE4D/BcU1lUe5Xxak6a+6iYTM
V6WMlwkFutbC6muMcY9F2AMlSshCzJVHH5gEgmrROBhuLVC5n3zAPx8p2h0rflM8
OoNMikWoT4kgRsEpey/xyGBrENtzUAkyXYK1p/8HO6LTPwVp/QXMsW/2VQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGXbw3uk8eMruaFIf/PHUD3EbRSGMB8GA1UdIwQY
MBaAFEI11p2NiW+uxufCFx0w3Qm1AaA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpYV25ZMkpiNjdHNThJWEhURGRDYlVCb0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGEzZGUtZjQwYy00OWJkLWFmNTIt
YTlhZTI1MWUyZmM1LzEvWmR2RGU2VHg0eXU1b1VoXzg4ZFFQY1J0RklZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGEzZGUtZjQwYy00OWJkLWFmNTItYTlhZTI1MWUyZmM1
LzEvUWpYV25ZMkpiNjdHNThJWEhURGRDYlVCb0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWSNwAwQB
WSXoAwQAvNQkMA0EAgACMAcDBQMqBnkAMA0GCSqGSIb3DQEBCwUAA4IBAQCrAsbs
V8uIKNVwzXJZPTuysII/Sdtf/PKqDM0bxzwFPN3BZ9msdI6TnsEkElaOoHF8EmCw
ekdghhgiu9hY4WghNOHBuchEcMNuV4C4gAMV+KG4Gf11pTucY5JdwIafoGgU9vu3
s0t9WJXDWsk8QL4f3U9qo07lZRI0yYBLZfxFzmDEtDVCPRTqAanbXiDA/4nWasOs
cFBFqeNczX1ZEu/xswyVYAYiPjf8eeo01wIeIZN3ImjtvfiBiJIBvOsnxmkCQFFT
HlqnEVighEMMHdBBSbR/5/aaQ+4vcnfzMrU+jhc9VqZ7NjiBcciqOvjwwy10pql4
DwR9LgJ2r5prgGxk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org