Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FtnATK2jVh-BWlVRsOFNIPPuip4.roa
File: FtnATK2jVh-BWlVRsOFNIPPuip4.roa (raw, json)
Hash identifier: j3w1AP9CenV3UqZGDQJmL0IxKl+couZXCWcP6VWGY7w=
Subject key identifier: 16:D9:C0:4C:AD:A3:56:1F:81:5A:55:51:B0:E1:4D:20:F3:EE:8A:9E
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 026219E3
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FtnATK2jVh-BWlVRsOFNIPPuip4.roa
Signing time: Sat 01 Jan 2022 06:06:25 +0000
ROA not before: Sat 01 Jan 2022 06:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 193.142.36.0/22 maxlen: 22
212.87.218.0/24 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
91.132.124.0/23 maxlen: 23
93.177.95.0/24 maxlen: 24
93.177.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39983587 (0x26219e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 06:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16d9c04cada3561f815a5551b0e14d20f3ee8a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:84:e1:81:3d:07:33:b7:d0:55:8b:90:ba:
a2:09:c4:f1:83:62:a0:61:99:1b:4d:3a:70:ef:5a:
bb:65:19:d9:ce:c9:59:b4:2b:2e:c9:5a:24:42:ad:
4d:30:66:76:6d:da:dd:36:44:0e:6a:15:0e:5d:27:
c8:76:3d:e3:0b:ae:42:67:eb:ea:b7:a5:22:6b:d3:
ee:80:19:3e:66:be:10:44:da:5c:71:84:05:b0:50:
b8:fb:76:e4:cc:29:40:73:22:79:6f:80:e5:ae:f1:
a8:19:38:be:62:a5:8d:52:99:df:77:93:99:8b:05:
44:02:65:1b:52:3b:9a:7f:ae:4f:00:f6:0e:f8:b3:
af:ad:ed:f1:f8:4b:de:37:f4:35:d4:85:10:51:94:
05:86:cb:6e:3b:67:9e:82:9a:09:30:34:89:07:03:
78:70:00:6d:8b:89:24:c4:71:94:31:55:15:47:63:
be:54:dc:6a:80:6f:ad:a8:60:1f:8a:20:f1:29:21:
6e:0d:33:c0:84:75:56:05:4b:2a:f2:f3:f5:ec:87:
4f:7f:cb:84:d7:41:92:b6:f9:e3:3b:f7:bd:ea:08:
8b:2e:5b:ae:f8:be:10:d8:cc:b4:26:92:01:03:a7:
a1:ca:3f:b6:3d:78:84:50:da:bc:3e:85:61:9e:86:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:C0:4C:AD:A3:56:1F:81:5A:55:51:B0:E1:4D:20:F3:EE:8A:9E
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FtnATK2jVh-BWlVRsOFNIPPuip4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:90:30:40:83:61:b0:3c:3e:30:7c:e9:33:28:57:ea:69:16:
d2:85:0f:e2:c2:26:0d:f1:a9:a5:a3:44:fa:7e:2e:38:f1:af:
2e:78:0a:cc:cd:c4:a9:de:95:8a:fb:f9:0d:22:a3:f3:40:61:
3e:bf:fb:ce:80:71:ed:93:4a:00:3c:3e:04:1a:d5:cd:c9:2f:
f0:05:b0:dc:49:b3:3b:35:3b:4b:bf:55:a5:bb:dd:8b:3e:8b:
9a:be:b8:9d:85:c2:cd:e5:70:2b:89:64:3b:6c:dd:21:47:74:
75:28:11:d3:25:5c:f7:21:c8:1a:7b:c8:5e:39:54:42:9d:d4:
14:c0:51:fd:be:b8:16:34:df:fe:b0:75:1a:67:41:b3:14:5c:
62:76:e3:3b:62:fa:e7:95:10:6a:59:a8:11:b1:a7:25:ce:82:
c7:06:69:8b:90:ab:07:6c:c0:37:6f:ff:58:47:a4:88:15:74:
e7:36:31:e1:f6:31:29:c4:ba:ed:91:62:69:20:8e:32:28:a1:
b8:ed:63:38:50:04:52:1e:22:01:53:fc:3c:13:7c:20:17:d3:
91:4d:e8:a9:26:16:61:ee:e0:11:59:b6:6a:4f:de:aa:14:69:
dc:b1:24:e9:99:09:ff:3f:dc:f6:c3:5d:a2:02:24:bd:2b:cb:
f3:e9:49:4a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAmIZ4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDEw
MTA2MDYyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZkOWMwNGNhZGEz
NTYxZjgxNWE1NTUxYjBlMTRkMjBmM2VlOGE5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUPhOGBPQczt9BVi5C6ognE8YNioGGZG006cO9au2UZ2c7J
WbQrLslaJEKtTTBmdm3a3TZEDmoVDl0nyHY94wuuQmfr6relImvT7oAZPma+EETa
XHGEBbBQuPt25MwpQHMieW+A5a7xqBk4vmKljVKZ33eTmYsFRAJlG1I7mn+uTwD2
Dvizr63t8fhL3jf0NdSFEFGUBYbLbjtnnoKaCTA0iQcDeHAAbYuJJMRxlDFVFUdj
vlTcaoBvrahgH4og8Skhbg0zwIR1VgVLKvLz9eyHT3/LhNdBkrb54zv3veoIiy5b
rvi+ENjMtCaSAQOnoco/tj14hFDavD6FYZ6GnOsCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQW2cBMraNWH4FaVVGw4U0g8+6KnjAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L0Z0bkFUSzJqVmgtQldsVlJzT0ZOSVBQdWlwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAVuEfAMEAV2xXgMEAsGOJAMEANRX
2AMEAdRX2jANBgkqhkiG9w0BAQsFAAOCAQEA4ZAwQINhsDw+MHzpMyhX6mkW0oUP
4sImDfGppaNE+n4uOPGvLngKzM3Eqd6Vivv5DSKj80BhPr/7zoBx7ZNKADw+BBrV
zckv8AWw3EmzOzU7S79Vpbvdiz6Lmr64nYXCzeVwK4lkO2zdIUd0dSgR0yVc9yHI
GnvIXjlUQp3UFMBR/b64FjTf/rB1GmdBsxRcYnbjO2L655UQalmoEbGnJc6CxwZp
i5CrB2zAN2//WEekiBV05zYx4fYxKcS67ZFiaSCOMiihuO1jOFAEUh4iAVP8PBN8
IBfTkU3oqSYWYe7gEVm2ak/eqhRp3LEk6ZkJ/z/c9sNdogIkvSvL8+lJSg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:13 2023 by rpki-client on console-ams.rpki-client.org