Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/fDWafFg6r4Jr1V07RVORYx8f1dw.roa
File: fDWafFg6r4Jr1V07RVORYx8f1dw.roa (raw, json)
Hash identifier: fqLY01t6GdRFsZ4iu6mDPOfz84tElCQbcb8C66302uo=
Subject key identifier: 7C:35:9A:7C:58:3A:AF:82:6B:D5:5D:3B:45:53:91:63:1F:1F:D5:DC
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181D54BE1CFF573125FD29C08D552EED7C4
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/fDWafFg6r4Jr1V07RVORYx8f1dw.roa
Signing time: Wed 06 Jul 2022 20:55:28 +0000
ROA not before: Wed 06 Jul 2022 20:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:4b:e1:cf:f5:73:12:5f:d2:9c:08:d5:52:ee:d7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 6 20:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c359a7c583aaf826bd55d3b455391631f1fd5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:95:6c:6a:d1:91:91:b7:01:2c:a6:81:fd:
19:07:14:3d:5b:27:30:6a:af:16:62:28:de:3c:45:
c9:65:a3:51:a8:73:e0:fb:66:43:31:19:81:d9:99:
fe:8d:b1:9b:f9:99:1c:cc:2d:38:7f:4d:ed:17:fb:
c5:96:a7:fa:b3:8d:9d:7c:82:09:d0:3c:92:96:d9:
a3:40:c2:c3:8f:d4:96:20:be:df:04:17:fd:94:cf:
b9:b8:05:c1:32:ec:ba:9e:8a:b3:57:3d:66:13:22:
a2:17:d3:8a:bc:f9:e7:d0:1c:05:b2:eb:64:fd:e7:
8b:0a:e8:a0:ec:26:76:e9:54:47:86:90:6d:67:df:
55:96:4b:7c:ec:c6:77:1e:48:04:2b:46:97:83:ef:
a5:3f:8f:0a:54:df:a9:cb:e2:43:de:a4:40:2c:99:
1b:67:e1:58:fe:9f:5b:3b:f7:65:ae:0c:08:38:a9:
5c:3c:36:0f:a3:07:75:97:e5:f2:fc:c2:a9:5b:39:
b9:eb:cf:e3:2d:c3:b2:ea:4f:73:58:44:2c:0a:45:
30:c5:47:5c:7e:ed:cc:e5:b1:4d:25:25:02:9f:50:
42:cb:7a:ce:ac:7b:39:eb:5b:02:ad:83:f2:33:10:
64:c9:2b:78:ec:4a:24:44:fd:2d:8f:41:c7:4c:a2:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:9A:7C:58:3A:AF:82:6B:D5:5D:3B:45:53:91:63:1F:1F:D5:DC
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/fDWafFg6r4Jr1V07RVORYx8f1dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.64.0/22
176.118.188.0/23
185.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2c:ff:84:a0:e5:ec:0e:dc:5e:4c:df:e8:2b:b6:1e:ad:8f:
34:02:ec:77:31:24:43:cc:6f:2b:f9:af:b8:5a:fe:99:42:50:
d6:98:4c:92:cd:5c:3e:89:9d:29:b3:ae:24:0f:41:d4:0d:90:
20:d0:3a:5b:51:81:67:cd:fd:18:f0:1e:c9:d2:d4:86:1a:5c:
ed:a4:81:8c:c4:97:94:91:ea:e8:2c:5b:52:a8:f3:2c:b0:f1:
c4:0d:72:8c:53:45:b6:d9:8e:db:f6:12:08:56:bb:c8:80:2e:
82:0f:a2:f6:fe:5a:fe:86:ec:8b:eb:d2:12:3d:e1:9f:58:4d:
c0:e0:45:c0:19:28:a1:6b:37:48:06:3a:51:39:70:3f:5a:61:
f8:15:6c:1c:53:50:39:f6:d7:eb:4f:fc:ce:d1:4b:66:04:23:
79:7a:8e:a8:b3:68:11:68:8f:24:98:45:ed:96:22:46:54:ae:
ea:98:e6:d2:91:18:f9:bb:be:5f:65:39:25:94:a9:20:c8:77:
a3:18:5b:7b:2b:43:a0:d3:b4:f9:2f:59:36:04:ad:36:d5:60:
55:41:b0:08:66:29:f4:74:3d:28:92:99:dd:4f:c1:d2:4c:cf:
dd:43:e3:d0:78:42:bd:9e:1d:3d:f7:44:6c:eb:96:fb:47:34:
c6:e5:93:cc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYHVS+HP9XMSX9KcCNVS7tfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzQ3NDgxZjJjOThmYmI3MGRjYThkNjVjMjNkZTRmY2Ez
NzU4M2QwHhcNMjIwNzA2MjA1NTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzM1OWE3YzU4M2FhZjgyNmJkNTVkM2I0NTUzOTE2MzFmMWZkNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6WVbGrRkZG3ASymgf0ZBxQ9Wycw
aq8WYijePEXJZaNRqHPg+2ZDMRmB2Zn+jbGb+ZkczC04f03tF/vFlqf6s42dfIIJ
0DySltmjQMLDj9SWIL7fBBf9lM+5uAXBMuy6noqzVz1mEyKiF9OKvPnn0BwFsutk
/eeLCuig7CZ26VRHhpBtZ99Vlkt87MZ3HkgEK0aXg++lP48KVN+py+JD3qRALJkb
Z+FY/p9bO/dlrgwIOKlcPDYPowd1l+Xy/MKpWzm568/jLcOy6k9zWEQsCkUwxUdc
fu3M5bFNJSUCn1BCy3rOrHs561sCrYPyMxBkySt47EokRP0tj0HHTKIOvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHw1mnxYOq+Ca9VdO0VTkWMfH9XcMB8GA1UdIwQY
MBaAFI50dIHyyY+7cNyo1lwj3k/KN1g9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgt
NjUyMWQzOTVmMTMyLzEvZkRXYWZGZzZyNEpyMVYwN1JWT1JZeDhmMWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgtNjUyMWQzOTVmMTMy
LzEvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVPxAAwQB
sHa8AwQBubFMMA0GCSqGSIb3DQEBCwUAA4IBAQA7LP+EoOXsDtxeTN/oK7YerY80
Aux3MSRDzG8r+a+4Wv6ZQlDWmEySzVw+iZ0ps64kD0HUDZAg0DpbUYFnzf0Y8B7J
0tSGGlztpIGMxJeUkeroLFtSqPMssPHEDXKMU0W22Y7b9hIIVrvIgC6CD6L2/lr+
huyL69ISPeGfWE3A4EXAGSihazdIBjpROXA/WmH4FWwcU1A59tfrT/zO0UtmBCN5
eo6os2gRaI8kmEXtliJGVK7qmObSkRj5u75fZTkllKkgyHejGFt7K0Og07T5L1k2
BK021WBVQbAIZin0dD0okpndT8HSTM/dQ+PQeEK9nh0990Rs65b7RzTG5ZPM
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:23 2025 by rpki-client