Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/CeEtAV9XVWxfqNmskupeg2SGAbs.roa
File: CeEtAV9XVWxfqNmskupeg2SGAbs.roa (raw, json)
Hash identifier: nNdOYxMxAch5Go7cZNudnHgagraAsOqLdA2XuZZx2nE=
Subject key identifier: 09:E1:2D:01:5F:57:55:6C:5F:A8:D9:AC:92:EA:5E:83:64:86:01:BB
Certificate issuer: /CN=ed613a33ba72e21789a14931d116242e01e0f536
Certificate serial: 0182F97220CEF29A80595B0860DABB4C6FA2
Authority key identifier: ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/CeEtAV9XVWxfqNmskupeg2SGAbs.roa
Signing time: Thu 01 Sep 2022 14:26:22 +0000
ROA not before: Thu 01 Sep 2022 14:26:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 176.121.64.0/24 maxlen: 24
176.121.64.0/21 maxlen: 21
176.121.71.0/24 maxlen: 24
176.121.68.0/24 maxlen: 24
176.121.70.0/24 maxlen: 24
176.121.67.0/24 maxlen: 24
176.121.69.0/24 maxlen: 24
176.121.66.0/24 maxlen: 24
176.121.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:72:20:ce:f2:9a:80:59:5b:08:60:da:bb:4c:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed613a33ba72e21789a14931d116242e01e0f536
Validity
Not Before: Sep 1 14:26:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09e12d015f57556c5fa8d9ac92ea5e83648601bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:09:e4:1f:0f:3e:d4:f6:3d:5c:ab:42:f9:
b5:d6:b6:d1:a6:c1:86:15:0b:8d:8d:e5:fe:0f:8b:
aa:f8:26:9e:88:c2:da:b2:92:1f:20:da:4a:38:70:
92:72:4b:32:a9:a4:2f:c9:18:c5:5d:73:0f:c4:a1:
09:63:dc:2a:9a:e8:2b:84:6c:10:b7:a6:01:9a:0e:
d8:26:b7:d2:31:e0:b2:43:36:f9:02:a0:df:cc:77:
78:4f:2c:8c:5d:48:b6:5e:82:7e:4f:68:8b:22:42:
b1:8a:4a:b7:ec:53:68:cb:72:8c:ce:e4:9b:fb:22:
12:79:51:51:ff:37:f5:e3:d1:d1:2b:ca:6a:ea:48:
70:4d:46:e7:85:72:13:69:ff:38:c9:30:0a:88:2a:
18:19:be:12:f8:ce:54:3b:5f:e6:b8:a2:8a:63:b9:
ed:4c:ff:51:b9:ae:ed:1b:c4:24:8d:b1:a0:df:c2:
10:56:26:37:3d:1d:d3:44:5e:c9:f0:d0:9a:22:b4:
76:ef:60:e9:3c:be:5f:b1:9b:9c:35:89:b7:75:9a:
6b:58:e3:4f:f3:40:ef:26:54:5c:e3:04:d0:18:ec:
6d:c1:f0:b9:ef:27:7e:b4:ac:01:61:0e:42:8c:84:
c5:6b:2c:24:14:73:e5:25:fe:d6:d5:03:97:be:d6:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:2D:01:5F:57:55:6C:5F:A8:D9:AC:92:EA:5E:83:64:86:01:BB
X509v3 Authority Key Identifier:
keyid:ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/CeEtAV9XVWxfqNmskupeg2SGAbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/7WE6M7py4heJoUkx0RYkLgHg9TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.64.0/21
Signature Algorithm: sha256WithRSAEncryption
83:01:08:ee:7a:f9:e6:b5:29:ca:ff:58:b0:9b:a3:f9:58:eb:
57:8d:a5:23:c7:45:4b:f9:86:13:4c:e5:1d:d4:e0:81:3d:ff:
9e:bd:c2:35:e3:c5:a8:ea:fe:d0:09:65:81:99:aa:5c:a7:c0:
b2:18:77:51:a4:4e:14:a5:59:7c:ac:19:d2:fa:ce:16:75:f5:
8d:7c:b1:f1:d3:25:aa:73:f8:92:b2:da:53:4d:bd:49:9f:3a:
39:91:1b:ae:07:e3:b1:91:20:bb:9e:93:a2:ca:52:82:a3:61:
11:72:ee:7e:7f:f1:6c:77:c2:f4:cb:e7:5d:93:6b:95:ea:60:
25:5b:91:1c:65:04:d5:a1:32:65:9c:0d:07:7f:03:53:84:8c:
81:0b:84:df:0b:71:fb:3b:78:9a:66:f2:6a:e9:15:e7:17:70:
96:fb:c1:75:2f:52:92:50:25:30:9e:44:c3:8c:4c:b7:e5:c3:
c4:9b:ed:11:c1:ea:29:e1:7f:07:0c:df:94:4a:b6:cf:a7:b5:
5c:a8:4a:54:61:88:50:4e:1d:a8:26:f2:82:ca:4a:31:26:f6:
f9:20:14:4d:67:d6:5b:d2:57:2a:7c:d4:fc:d0:b7:6c:4a:27:
25:22:54:ae:ed:14:45:23:cc:d3:3a:8a:b1:14:2e:b2:75:17:
29:b4:37:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL5ciDO8pqAWVsIYNq7TG+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjEzYTMzYmE3MmUyMTc4OWExNDkzMWQxMTYyNDJlMDFl
MGY1MzYwHhcNMjIwOTAxMTQyNjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWUxMmQwMTVmNTc1NTZjNWZhOGQ5YWM5MmVhNWU4MzY0ODYwMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQcJ5B8PPtT2PVyrQvm11rbRpsGG
FQuNjeX+D4uq+CaeiMLaspIfINpKOHCScksyqaQvyRjFXXMPxKEJY9wqmugrhGwQ
t6YBmg7YJrfSMeCyQzb5AqDfzHd4TyyMXUi2XoJ+T2iLIkKxikq37FNoy3KMzuSb
+yISeVFR/zf149HRK8pq6khwTUbnhXITaf84yTAKiCoYGb4S+M5UO1/muKKKY7nt
TP9Rua7tG8QkjbGg38IQViY3PR3TRF7J8NCaIrR272DpPL5fsZucNYm3dZprWONP
80DvJlRc4wTQGOxtwfC57yd+tKwBYQ5CjITFaywkFHPlJf7W1QOXvtZT0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnhLQFfV1VsX6jZrJLqXoNkhgG7MB8GA1UdIwQY
MBaAFO1hOjO6cuIXiaFJMdEWJC4B4PU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dFNk03cHk0aGVKb1VreDBSWWtMZ0hnOVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNDU2MDgtMGZmMi00OTVhLThhMGQt
ZTEwMGNmMjVmZmFjLzEvQ2VFdEFWOVhWV3hmcU5tc2t1cGVnMlNHQWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNDU2MDgtMGZmMi00OTVhLThhMGQtZTEwMGNmMjVmZmFj
LzEvN1dFNk03cHk0aGVKb1VreDBSWWtMZ0hnOVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHlAMA0G
CSqGSIb3DQEBCwUAA4IBAQCDAQjuevnmtSnK/1iwm6P5WOtXjaUjx0VL+YYTTOUd
1OCBPf+evcI148Wo6v7QCWWBmapcp8CyGHdRpE4UpVl8rBnS+s4WdfWNfLHx0yWq
c/iSstpTTb1Jnzo5kRuuB+OxkSC7npOiylKCo2ERcu5+f/Fsd8L0y+ddk2uV6mAl
W5EcZQTVoTJlnA0HfwNThIyBC4TfC3H7O3iaZvJq6RXnF3CW+8F1L1KSUCUwnkTD
jEy35cPEm+0Rweop4X8HDN+USrbPp7VcqEpUYYhQTh2oJvKCykoxJvb5IBRNZ9Zb
0lcqfNT80LdsSiclIlSu7RRFI8zTOoqxFC6ydRcptDem
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org