Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/1-UZr7iSbP9JxdBJTWw776W6t9sE.roa
File: 1-UZr7iSbP9JxdBJTWw776W6t9sE.roa (raw, json)
Hash identifier: i68C/RIVx+YkpA68++eWY/dO9mdfcjpR85Or+PqBfZc=
Subject key identifier: F9:46:6B:EE:24:9B:3F:D2:71:74:12:53:5B:0E:FB:E9:6E:AD:F6:C1
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF5EF449E77E412707A329B957E84C0
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/1-UZr7iSbP9JxdBJTWw776W6t9sE.roa
Signing time: Fri 08 Dec 2023 19:44:40 +0000
ROA not before: Fri 08 Dec 2023 19:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60485
IP address blocks: 37.203.209.0/24 maxlen: 24
5.157.38.0/24 maxlen: 24
91.108.183.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:ef:44:9e:77:e4:12:70:7a:32:9b:95:7e:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9466bee249b3fd2717412535b0efbe96eadf6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:34:cd:72:f6:35:a2:bd:29:89:33:10:af:
d7:7c:5f:bc:da:54:ce:32:69:cf:5d:02:67:f7:2d:
c1:30:df:41:54:88:10:82:e2:32:eb:49:6d:e6:63:
51:08:4e:06:f3:8c:d5:11:50:80:a3:49:5f:42:d0:
ba:31:a9:e5:89:00:53:c5:87:84:b2:e3:de:55:a7:
0a:12:98:e3:79:d3:76:9a:15:88:77:95:82:a7:58:
f2:3e:d0:ba:fb:5c:aa:05:6a:93:cc:84:d9:68:42:
82:6e:37:8b:c5:6b:bf:cc:17:9b:dd:43:d0:55:a4:
8c:44:9b:ec:3c:07:8b:fc:47:35:49:79:50:00:2c:
f1:31:88:f9:8a:8a:59:63:ef:8b:79:b3:82:f8:6e:
4e:60:b8:ff:a3:49:02:7c:45:8b:da:9c:11:2d:75:
09:4c:63:bc:b8:b1:ba:77:88:9a:f5:0b:4a:da:45:
0e:2d:51:35:52:93:8c:2d:b1:a8:2a:72:ed:c7:fe:
a9:51:e8:05:4b:8a:57:ad:9e:09:b5:ef:f9:5c:34:
94:5e:ae:46:01:11:2a:f3:92:c5:72:c6:41:9f:e2:
ae:18:d5:7f:ee:28:7a:54:88:2d:66:63:9e:5d:7c:
2c:20:0f:c8:09:94:f3:d7:2e:ba:5b:5a:f1:1c:78:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:6B:EE:24:9B:3F:D2:71:74:12:53:5B:0E:FB:E9:6E:AD:F6:C1
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/1-UZr7iSbP9JxdBJTWw776W6t9sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.38.0/24
5.157.57.0/24
37.203.209.0/24
91.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2b:ec:a3:29:73:c0:e5:07:cb:d6:0a:c1:3a:7c:4b:23:d4:
79:88:2e:66:ae:51:e6:c1:e8:6f:91:07:ff:c0:5c:c3:88:17:
f3:c9:c2:e4:00:c7:62:db:fd:98:c2:2e:0e:2b:fb:e5:3a:c1:
f2:85:cc:35:6b:ec:45:8e:b7:79:f2:2a:f4:f9:85:66:95:a8:
ca:67:9c:ad:b4:dc:a4:37:60:b0:8e:8e:76:ce:b5:a6:bc:bc:
9e:5b:f3:77:46:58:24:8e:d4:12:b0:54:d3:ce:55:27:cf:ec:
33:e6:f4:14:be:14:a3:40:88:cf:36:79:da:3c:42:70:c8:c9:
2c:55:6e:40:77:9b:3b:47:df:b8:af:18:7b:8f:9b:b0:b8:01:
74:49:e4:f6:19:58:4b:6f:4a:28:13:f1:e2:91:1a:a7:8f:d0:
c5:ab:a4:95:4d:28:91:54:b3:d4:85:88:8d:09:b8:92:5e:5c:
97:2c:da:f1:b8:b6:25:e7:33:ba:c9:b1:fe:2c:c1:e6:ee:ff:
45:78:b8:3d:4e:40:61:50:e9:64:4a:1c:d6:f5:13:99:ff:49:
ff:de:f2:15:cf:b2:b3:4a:17:40:4e:d7:2a:2c:1c:da:d8:ab:
3a:de:5e:3f:73:7b:ab:bd:c0:f0:6c:e2:25:c1:67:c0:cf:4a:
8c:d2:90:63
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYxK9e9EnnfkEnB6MpuVfoTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMjc2MDc1NjM0OTMzMzc2ODdhZDY5Y2UxMDY0ZTYzNjI2
NWJlM2YwHhcNMjMxMjA4MTk0NDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTQ2NmJlZTI0OWIzZmQyNzE3NDEyNTM1YjBlZmJlOTZlYWRmNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF80zXL2NaK9KYkzEK/XfF+82lTO
MmnPXQJn9y3BMN9BVIgQguIy60lt5mNRCE4G84zVEVCAo0lfQtC6ManliQBTxYeE
suPeVacKEpjjedN2mhWId5WCp1jyPtC6+1yqBWqTzITZaEKCbjeLxWu/zBeb3UPQ
VaSMRJvsPAeL/Ec1SXlQACzxMYj5iopZY++LebOC+G5OYLj/o0kCfEWL2pwRLXUJ
TGO8uLG6d4ia9QtK2kUOLVE1UpOMLbGoKnLtx/6pUegFS4pXrZ4Jte/5XDSUXq5G
AREq85LFcsZBn+KuGNV/7ih6VIgtZmOeXXwsIA/ICZTz1y66W1rxHHhOKwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPlGa+4kmz/ScXQSU1sO++lurfbBMB8GA1UdIwQY
MBaAFGMnYHVjSTM3aHrWnOEGTmNiZb4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXlkZ2RXTkpNemRvZXRhYzRRWk9ZMkpsdmo4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83MmE2N2ItMWQxYy00MjM1LWE0ODct
ZmM5MDkzZmVkYjFiLzEvMS1VWnI3aVNiUDlKeGRCSlRXdzc3Nlc2dDlzRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2QvNzJhNjdiLTFkMWMtNDIzNS1hNDg3LWZjOTA5M2ZlZGIx
Yi8xL1l5ZGdkV05KTXpkb2V0YWM0UVpPWTJKbHZqOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAAWdJgME
AAWdOQMEACXL0QMEAFtstzANBgkqhkiG9w0BAQsFAAOCAQEAAivsoylzwOUHy9YK
wTp8SyPUeYguZq5R5sHob5EH/8Bcw4gX88nC5ADHYtv9mMIuDiv75TrB8oXMNWvs
RY63efIq9PmFZpWoymecrbTcpDdgsI6Ods61pry8nlvzd0ZYJI7UErBU085VJ8/s
M+b0FL4Uo0CIzzZ52jxCcMjJLFVuQHebO0ffuK8Ye4+bsLgBdEnk9hlYS29KKBPx
4pEap4/QxauklU0okVSz1IWIjQm4kl5clyza8bi2Jeczusmx/izB5u7/RXi4PU5A
YVDpZEoc1vUTmf9J/97yFc+ys0oXQE7XKiwc2tirOt5eP3N7q73A8GziJcFnwM9K
jNKQYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org