Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eQGX-cC9bE2RrLPkKRcacWTspX0.roa
File: eQGX-cC9bE2RrLPkKRcacWTspX0.roa (raw, json)
Hash identifier: QTCMxeZ1Wwx6/7Z53LCBporQQCU29B4A1JTdxE4D46w=
Subject key identifier: 79:01:97:F9:C0:BD:6C:4D:91:AC:B3:E4:29:17:1A:71:64:EC:A5:7D
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0182A5EEEEA4B3426EC799047D3AF876D7F5
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eQGX-cC9bE2RrLPkKRcacWTspX0.roa
Signing time: Tue 16 Aug 2022 09:14:35 +0000
ROA not before: Tue 16 Aug 2022 09:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.104.0/23 maxlen: 24
194.150.204.0/23 maxlen: 24
77.83.106.0/23 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:ee:ee:a4:b3:42:6e:c7:99:04:7d:3a:f8:76:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Aug 16 09:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=790197f9c0bd6c4d91acb3e429171a7164eca57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:13:37:c1:81:91:25:b8:80:6e:2a:ac:2c:
6b:2a:5c:0f:87:3b:70:a7:a0:b6:df:6e:2b:21:e8:
b8:57:8d:f8:12:94:80:d8:a0:01:fe:c7:11:0a:69:
ee:cb:2b:e9:20:28:d0:9a:4c:70:33:a9:a1:c0:7c:
a2:0b:3d:54:c1:f1:ac:77:4b:6d:c8:5c:65:5e:75:
38:a2:d7:95:55:4c:3a:f7:56:b6:ce:26:7e:6f:fc:
a0:8d:02:d8:5a:d3:a4:6c:82:3f:69:be:ed:5a:29:
da:3d:a0:76:56:75:d7:69:56:ba:61:dd:37:27:cd:
13:2f:cd:72:e8:5d:53:e3:2a:54:32:60:09:82:b9:
63:f3:7d:ac:d7:0f:3d:85:7d:f9:32:88:52:ae:25:
aa:d3:89:36:1c:53:37:22:99:00:69:49:26:fc:c7:
17:9f:3f:7b:20:41:33:0f:34:de:cb:01:d8:65:63:
ba:94:55:25:9d:f5:de:4d:f2:d9:83:c9:11:31:af:
38:8d:1a:d4:10:a9:2c:7f:6e:0e:89:3a:f3:97:88:
27:46:d5:9a:7b:8c:83:54:b1:05:21:02:9d:42:40:
d9:84:76:5c:d5:c9:69:52:fe:3b:9b:3a:5e:54:2c:
ce:3b:30:b3:80:05:37:51:2e:ed:de:d0:03:6d:db:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:97:F9:C0:BD:6C:4D:91:AC:B3:E4:29:17:1A:71:64:EC:A5:7D
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eQGX-cC9bE2RrLPkKRcacWTspX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
77.83.104.0/22
194.150.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:d4:ed:b8:52:41:c0:13:db:52:b9:65:e2:29:a5:9b:50:fe:
0b:91:77:b6:ec:73:52:5a:ba:ed:31:85:1d:16:c3:85:99:c9:
15:5e:97:f5:01:a7:34:d5:c8:ae:33:5b:8d:ae:ff:0b:1c:af:
ad:ed:2e:38:ed:8d:fb:35:e2:c8:f0:98:e3:c2:49:51:aa:f7:
cd:89:0f:97:80:e5:21:10:f0:81:85:be:81:eb:44:3f:06:d9:
cb:8b:1c:3f:03:fd:dd:42:fa:eb:a0:5b:83:d6:22:be:13:25:
27:63:93:30:99:25:36:37:de:4b:db:4f:87:f6:40:e8:35:f3:
56:7a:8a:87:33:86:57:d7:5e:b0:2b:5c:c5:3b:ff:86:c7:d0:
7c:0c:b5:9d:af:6a:58:6d:ec:fc:38:75:76:91:55:56:a2:1d:
09:e3:3c:ac:25:6d:a6:ec:70:77:4d:1a:e1:e1:d5:5e:d0:b4:
6d:4b:59:7b:22:20:9b:e7:1b:a2:cc:20:69:3c:11:9a:77:00:
13:f9:f9:f6:c0:d5:3e:10:ed:c2:e1:ce:c9:9f:a7:7d:b3:81:
37:2f:27:a3:65:90:d9:7f:28:02:10:1e:63:c1:cf:9e:4d:0c:
00:1b:04:bf:74:f8:b8:73:89:5b:02:9a:30:35:02:3f:d3:d3:
c4:02:bb:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKl7u6ks0Jux5kEfTr4dtf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIwODE2MDkxNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTAxOTdmOWMwYmQ2YzRkOTFhY2IzZTQyOTE3MWE3MTY0ZWNhNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYwTN8GBkSW4gG4qrCxrKlwPhztw
p6C2324rIei4V434EpSA2KAB/scRCmnuyyvpICjQmkxwM6mhwHyiCz1UwfGsd0tt
yFxlXnU4oteVVUw691a2ziZ+b/ygjQLYWtOkbII/ab7tWinaPaB2VnXXaVa6Yd03
J80TL81y6F1T4ypUMmAJgrlj832s1w89hX35MohSriWq04k2HFM3IpkAaUkm/McX
nz97IEEzDzTeywHYZWO6lFUlnfXeTfLZg8kRMa84jRrUEKksf24OiTrzl4gnRtWa
e4yDVLEFIQKdQkDZhHZc1clpUv47mzpeVCzOOzCzgAU3US7t3tADbdtZEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHkBl/nAvWxNkayz5CkXGnFk7KV9MB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvZVFHWC1jQzliRTJSckxQa0tSY2FjV1RzcFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLUF0AwQC
TVNoAwQBwpbMMA0GCSqGSIb3DQEBCwUAA4IBAQCi1O24UkHAE9tSuWXiKaWbUP4L
kXe27HNSWrrtMYUdFsOFmckVXpf1Aac01ciuM1uNrv8LHK+t7S447Y37NeLI8Jjj
wklRqvfNiQ+XgOUhEPCBhb6B60Q/BtnLixw/A/3dQvrroFuD1iK+EyUnY5MwmSU2
N95L20+H9kDoNfNWeoqHM4ZX116wK1zFO/+Gx9B8DLWdr2pYbez8OHV2kVVWoh0J
4zysJW2m7HB3TRrh4dVe0LRtS1l7IiCb5xuizCBpPBGadwAT+fn2wNU+EO3C4c7J
n6d9s4E3LyejZZDZfygCEB5jwc+eTQwAGwS/dPi4c4lbApowNQI/09PEArvs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org