Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/nHQPBwS8uO9M2JlGBPRRc_rX4sM.roa
File: nHQPBwS8uO9M2JlGBPRRc_rX4sM.roa (raw, json)
Hash identifier: L/vJqvToZR2p+BZkLnJFsazLAsjXP/3zH5YQiOrMIEY=
Subject key identifier: 9C:74:0F:07:04:BC:B8:EF:4C:D8:99:46:04:F4:51:73:FA:D7:E2:C3
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01C1F4B0
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/nHQPBwS8uO9M2JlGBPRRc_rX4sM.roa
Signing time: Sat 01 Jan 2022 12:57:03 +0000
ROA not before: Sat 01 Jan 2022 12:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.6.31.0/24 maxlen: 24
31.6.37.0/24 maxlen: 24
31.6.36.0/24 maxlen: 24
31.6.32.0/24 maxlen: 24
31.6.38.0/24 maxlen: 24
31.6.34.0/24 maxlen: 24
31.6.33.0/24 maxlen: 24
31.6.35.0/24 maxlen: 24
31.6.39.0/24 maxlen: 24
31.6.40.0/24 maxlen: 24
178.208.186.0/24 maxlen: 24
178.208.189.0/24 maxlen: 24
178.208.191.0/24 maxlen: 24
178.208.190.0/24 maxlen: 24
178.208.188.0/24 maxlen: 24
178.208.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29488304 (0x1c1f4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 12:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c740f0704bcb8ef4cd8994604f45173fad7e2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:00:33:f8:e0:a2:80:37:d8:02:8c:fb:71:
b4:56:3a:24:92:72:fb:15:e1:2b:8c:27:b2:22:67:
b5:15:b2:e6:4f:56:c2:14:1f:00:9f:ca:55:61:eb:
66:d4:e4:75:6a:b1:a2:26:f5:06:9a:b4:d8:53:c1:
a5:ee:c3:03:37:df:9f:18:b5:c4:22:70:f9:05:a6:
d1:0b:02:93:95:58:e5:70:48:99:34:7b:52:92:29:
25:f9:95:ff:cf:2c:9a:3e:14:61:89:74:1b:dd:38:
55:cb:57:32:d8:bf:8b:7a:13:6c:ee:74:8e:e9:18:
74:8a:70:a7:2b:c7:12:24:93:6f:d3:9e:1d:26:06:
a9:54:bd:25:af:50:e3:e4:34:14:6e:ee:53:42:e1:
32:46:53:45:45:21:5e:ce:32:50:4c:58:cd:d2:81:
4c:33:76:68:e6:03:2d:c0:52:8c:f2:41:db:5f:17:
93:ee:77:c3:db:8d:0a:1a:57:c3:a4:44:15:30:32:
56:f0:e8:20:6f:01:01:13:9c:fa:b3:79:03:8c:0b:
85:7d:77:bd:73:d4:85:ab:ac:1c:82:6b:a1:0a:2a:
3c:de:63:54:18:40:9e:1e:65:90:e5:ac:78:3c:0a:
8e:88:88:2f:c0:cd:63:25:4d:be:0b:f5:14:7b:36:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:74:0F:07:04:BC:B8:EF:4C:D8:99:46:04:F4:51:73:FA:D7:E2:C3
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/nHQPBwS8uO9M2JlGBPRRc_rX4sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.31.0-31.6.40.255
178.208.186.0-178.208.191.255
Signature Algorithm: sha256WithRSAEncryption
5d:a1:ef:4d:de:6e:44:ef:48:60:78:df:ef:20:11:3e:fc:a3:
02:18:eb:e2:81:99:a4:7a:90:5e:92:27:47:75:95:8b:94:f3:
04:61:5f:0a:c8:be:92:98:88:0d:e0:68:21:fa:e9:a4:1f:3d:
34:a7:46:14:3c:6f:b4:cc:63:bc:ae:b6:95:41:ff:41:24:7e:
1e:92:8e:7b:bd:b9:61:16:b0:66:1c:31:4b:19:ad:73:c3:dc:
b2:41:9c:7d:87:19:ea:3d:7c:f5:09:e0:16:3a:29:f3:48:07:
60:31:a9:b3:bc:9d:2d:c0:1e:39:95:9a:53:3b:22:3b:41:0e:
1a:5d:23:94:db:c7:ab:ae:4a:06:56:b3:ec:b0:c4:09:62:b1:
d6:03:8b:ad:9f:36:15:98:89:98:c5:16:33:0c:55:91:93:03:
d4:c1:20:bd:27:13:cd:6b:ae:18:18:ae:3f:03:c0:0c:45:89:
78:8b:6b:f0:37:89:32:7e:d2:44:15:9e:52:f0:42:aa:1d:53:
19:ae:13:ee:d8:8a:3c:1b:c5:d4:96:9b:99:a5:d2:43:9c:b7:
34:a4:99:ef:cd:f7:f6:5e:e2:17:e2:cb:60:f6:ba:ac:af:ae:
b5:c5:f3:31:0f:76:a8:fc:81:72:99:b4:e6:eb:04:a3:fa:9a:
d0:af:ec:0d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEAcH0sDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTNlY2U3MWVmNmViZjU1YmI3Yjg3ZTUwNjY1YmExMWZkYzc3ZjA4MB4XDTIyMDEw
MTEyNTcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM3NDBmMDcwNGJj
YjhlZjRjZDg5OTQ2MDRmNDUxNzNmYWQ3ZTJjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdpADP44KKAN9gCjPtxtFY6JJJy+xXhK4wnsiJntRWy5k9W
whQfAJ/KVWHrZtTkdWqxoib1Bpq02FPBpe7DAzffnxi1xCJw+QWm0QsCk5VY5XBI
mTR7UpIpJfmV/88smj4UYYl0G904VctXMti/i3oTbO50jukYdIpwpyvHEiSTb9Oe
HSYGqVS9Ja9Q4+Q0FG7uU0LhMkZTRUUhXs4yUExYzdKBTDN2aOYDLcBSjPJB218X
k+53w9uNChpXw6REFTAyVvDoIG8BAROc+rN5A4wLhX13vXPUhausHIJroQoqPN5j
VBhAnh5lkOWseDwKjoiIL8DNYyVNvgv1FHs2OxkCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBScdA8HBLy470zYmUYE9FFz+tfiwzAfBgNVHSMEGDAWgBTVPs5x726/Vbt7
h+UGZboR/cd/CDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFUN09jZTl1djFXN2U0ZmxCbVc2RWYzSGZ3Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzgxNjY5LTI1MTktNGRhNS1iZDVkLTFjMjYyNjU5MGQyOC8x
L25IUVBCd1M4dU85TTJKbEdCUFJSY19yWDRzTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzgxNjY5LTI1MTktNGRhNS1iZDVkLTFjMjYyNjU5MGQyOC8xLzFUN09jZTl1djFX
N2U0ZmxCbVc2RWYzSGZ3Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwIgQCAAEwHDAMAwQAHwYfAwQAHwYoMAwDBAGy0LoD
BAay0IAwDQYJKoZIhvcNAQELBQADggEBAF2h703ebkTvSGB43+8gET78owIY6+KB
maR6kF6SJ0d1lYuU8wRhXwrIvpKYiA3gaCH66aQfPTSnRhQ8b7TMY7yutpVB/0Ek
fh6Sjnu9uWEWsGYcMUsZrXPD3LJBnH2HGeo9fPUJ4BY6KfNIB2AxqbO8nS3AHjmV
mlM7IjtBDhpdI5Tbx6uuSgZWs+ywxAlisdYDi62fNhWYiZjFFjMMVZGTA9TBIL0n
E81rrhgYrj8DwAxFiXiLa/A3iTJ+0kQVnlLwQqodUxmuE+7YijwbxdSWm5ml0kOc
tzSkme/N9/Ze4hfiy2D2uqyvrrXF8zEPdqj8gXKZtObrBKP6mtCv7A0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org