Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N1I8UdpvmP6pu_6OwpXU_GLa3jQ.roa
File: N1I8UdpvmP6pu_6OwpXU_GLa3jQ.roa (raw, json)
Hash identifier: n9c6CE4eubOhBjaUDxrx3bLanyduwLpjX1trb0oF4lM=
Subject key identifier: 37:52:3C:51:DA:6F:98:FE:A9:BB:FE:8E:C2:95:D4:FC:62:DA:DE:34
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15B69D29
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N1I8UdpvmP6pu_6OwpXU_GLa3jQ.roa
Signing time: Sat 01 Jan 2022 05:59:02 +0000
ROA not before: Sat 01 Jan 2022 05:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133448
IP address blocks: 185.121.162.0/24 maxlen: 24
185.121.169.0/24 maxlen: 24
185.90.62.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364289321 (0x15b69d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37523c51da6f98fea9bbfe8ec295d4fc62dade34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:c3:9a:4a:6c:a3:ee:07:11:08:4b:ad:a6:
dc:d1:6e:50:d2:6d:e9:6d:37:c3:6b:ec:f3:e9:49:
02:44:7d:09:ce:bf:d2:c6:0e:79:79:27:96:10:96:
8e:a3:42:ff:0e:dc:08:05:ca:8f:02:fa:d3:6d:23:
ec:c1:df:40:84:ab:97:e7:37:b9:db:6c:c0:4e:32:
b7:a3:45:a7:be:51:e4:a5:b5:87:ef:4c:d8:62:d4:
dd:a8:23:94:41:ae:61:6b:27:06:5d:a7:89:32:97:
5b:cd:5a:89:6c:0c:83:90:17:f6:7f:65:5f:85:bb:
ae:62:5e:31:bd:af:24:9f:c6:1d:45:dd:ed:e8:98:
5e:49:4f:30:fb:a0:76:86:e5:82:5b:b1:ed:0c:b6:
3b:e4:d7:86:8c:dc:4d:c2:f7:6c:a9:48:69:14:46:
4b:6e:9c:9b:bf:c8:0c:03:a7:d8:20:d7:ce:31:4a:
70:85:0e:01:fc:32:09:56:12:75:9f:72:b9:63:4d:
46:12:c5:c6:15:d8:8e:e3:9e:c2:70:22:08:3d:03:
76:9e:0c:66:c1:5f:00:e9:73:66:d3:6c:ad:f9:fe:
3d:69:67:c0:f8:db:ff:bb:6d:48:1f:c7:01:d2:8a:
48:75:d6:b8:bf:8f:0e:9d:94:6d:ec:c5:4c:33:a2:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:3C:51:DA:6F:98:FE:A9:BB:FE:8E:C2:95:D4:FC:62:DA:DE:34
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N1I8UdpvmP6pu_6OwpXU_GLa3jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.62.0/24
185.99.134.0/24
185.121.162.0/24
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
08:10:b4:7a:f5:99:b8:5f:22:32:8d:25:63:30:b7:b3:66:59:
90:d1:c0:b7:d0:09:39:ce:5f:67:16:64:d0:a6:d9:ea:b0:3f:
7a:40:31:51:c9:60:ad:ed:b2:73:82:e5:ed:5a:b0:a7:b0:a6:
13:02:98:54:0c:05:9c:14:63:5f:83:0a:e5:27:6e:53:62:3d:
08:e3:d5:1c:ea:60:f4:b8:f1:51:fa:76:86:5e:8f:72:4b:05:
93:0e:c4:53:ae:4a:68:84:33:9f:7a:20:bc:04:74:ef:17:80:
f5:7a:79:a9:97:b0:b2:4f:80:69:f2:a5:8b:b0:20:eb:d6:6b:
e3:25:af:85:81:0d:a4:96:35:4f:86:a9:be:10:9d:fc:d2:6b:
dc:df:5f:58:6d:6b:5d:83:6b:0e:4b:e1:60:6b:9e:7f:dc:80:
3a:25:0e:64:cd:8f:03:09:1e:3f:55:b8:db:36:f1:5e:fa:74:
30:9d:49:01:74:12:51:87:05:99:e9:f6:0b:b9:27:22:cc:45:
3f:b9:0e:87:23:2e:dc:c2:53:ae:dc:1c:40:c0:07:11:34:c6:
68:2f:94:07:fa:87:c1:95:78:c1:4b:8c:11:22:d9:4f:4d:4d:
7e:6b:5c:0f:4a:13:b1:7d:90:47:6b:97:13:8a:8d:c4:47:42:
6a:29:43:55
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEFbadKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc1MjNjNTFkYTZm
OThmZWE5YmJmZThlYzI5NWQ0ZmM2MmRhZGUzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwyw5pKbKPuBxEIS62m3NFuUNJt6W03w2vs8+lJAkR9Cc6/
0sYOeXknlhCWjqNC/w7cCAXKjwL6020j7MHfQISrl+c3udtswE4yt6NFp75R5KW1
h+9M2GLU3agjlEGuYWsnBl2niTKXW81aiWwMg5AX9n9lX4W7rmJeMb2vJJ/GHUXd
7eiYXklPMPugdoblglux7Qy2O+TXhozcTcL3bKlIaRRGS26cm7/IDAOn2CDXzjFK
cIUOAfwyCVYSdZ9yuWNNRhLFxhXYjuOewnAiCD0Ddp4MZsFfAOlzZtNsrfn+PWln
wPjb/7ttSB/HAdKKSHXWuL+PDp2UbezFTDOiSHsCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQ3UjxR2m+Y/qm7/o7CldT8YtreNDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L04xSThVZHB2bVA2cHVfNk93cFhVX0dMYTNqUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALlaPgMEALljhgMEALl5ogMEALl5
qTANBgkqhkiG9w0BAQsFAAOCAQEACBC0evWZuF8iMo0lYzC3s2ZZkNHAt9AJOc5f
ZxZk0KbZ6rA/ekAxUclgre2yc4Ll7Vqwp7CmEwKYVAwFnBRjX4MK5SduU2I9COPV
HOpg9LjxUfp2hl6PcksFkw7EU65KaIQzn3ogvAR07xeA9Xp5qZewsk+AafKli7Ag
69Zr4yWvhYENpJY1T4apvhCd/NJr3N9fWG1rXYNrDkvhYGuef9yAOiUOZM2PAwke
P1W42zbxXvp0MJ1JAXQSUYcFmen2C7knIsxFP7kOhyMu3MJTrtwcQMAHETTGaC+U
B/qHwZV4wUuMESLZT01NfmtcD0oTsX2QR2uXE4qNxEdCailDVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org