Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/74795d-43b0-4a5d-8c5f-58712cc0d6a6/1/3DlTIwOdALy6RStua18XbKiT6HI.roa
File: 3DlTIwOdALy6RStua18XbKiT6HI.roa (raw, json)
Hash identifier: l40uzkU2y6PEDryhcar/fwZfrVtEKHjFLJBlRTq3VME=
Subject key identifier: DC:39:53:23:03:9D:00:BC:BA:45:2B:6E:6B:5F:17:6C:A8:93:E8:72
Certificate issuer: /CN=efb840e4f919f8a092e87927505e253f2fdba199
Certificate serial: 0240F109
Authority key identifier: EF:B8:40:E4:F9:19:F8:A0:92:E8:79:27:50:5E:25:3F:2F:DB:A1:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77hA5PkZ-KCS6HknUF4lPy_boZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/74795d-43b0-4a5d-8c5f-58712cc0d6a6/1/3DlTIwOdALy6RStua18XbKiT6HI.roa
Signing time: Sat 01 Jan 2022 16:02:19 +0000
ROA not before: Sat 01 Jan 2022 16:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197883
IP address blocks: 195.138.220.0/24 maxlen: 24
195.137.186.0/24 maxlen: 24
195.137.188.0/24 maxlen: 24
195.144.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37810441 (0x240f109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb840e4f919f8a092e87927505e253f2fdba199
Validity
Not Before: Jan 1 16:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc395323039d00bcba452b6e6b5f176ca893e872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:a3:04:bd:54:1d:3a:ed:89:08:0e:5f:95:
37:05:da:99:fb:00:d3:8d:c3:5d:ea:00:df:f8:4c:
9b:48:e6:08:ad:95:b2:7b:4d:92:ed:15:62:d2:64:
3c:7f:2d:e2:2b:97:3a:f6:84:e4:b6:24:63:07:a9:
af:87:3c:2b:7b:31:2c:b6:a0:9d:b6:b0:b6:cf:e0:
bd:ea:33:62:ef:54:04:05:4d:ec:19:b8:fc:f3:e5:
b1:3f:87:23:43:8f:cc:f0:7a:25:fa:5d:30:bd:9b:
90:c1:5c:d5:2a:fa:a9:7d:ed:b1:0f:0a:31:93:08:
9a:be:e0:f8:8c:a9:6d:bb:bb:88:23:bf:ec:e9:0a:
cc:16:1c:26:e3:ee:85:ff:d5:a2:9d:45:2d:b5:74:
19:b5:b0:96:19:dc:29:29:fb:e7:99:63:5a:65:4b:
86:33:5d:cd:1b:9a:a9:9b:91:0f:85:34:fd:86:78:
d3:e0:31:6b:7e:40:78:f2:d0:b2:07:d2:d5:a0:36:
8f:31:af:0c:ba:fe:fe:40:1b:c3:78:2f:80:11:dc:
a6:09:b6:6e:fb:3b:f8:a0:81:2d:19:35:cf:a4:ba:
5a:e6:39:d7:17:75:7f:a8:3d:46:2d:d8:b0:c2:64:
21:04:b0:71:b9:49:9c:a3:3f:fd:54:d2:74:84:86:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:53:23:03:9D:00:BC:BA:45:2B:6E:6B:5F:17:6C:A8:93:E8:72
X509v3 Authority Key Identifier:
keyid:EF:B8:40:E4:F9:19:F8:A0:92:E8:79:27:50:5E:25:3F:2F:DB:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77hA5PkZ-KCS6HknUF4lPy_boZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/74795d-43b0-4a5d-8c5f-58712cc0d6a6/1/3DlTIwOdALy6RStua18XbKiT6HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/74795d-43b0-4a5d-8c5f-58712cc0d6a6/1/77hA5PkZ-KCS6HknUF4lPy_boZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.186.0/24
195.137.188.0/24
195.138.220.0/24
195.144.23.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ce:15:fb:24:ab:b9:d0:73:27:b9:87:da:74:1d:3a:32:6d:
67:c7:ed:74:e4:a8:5e:11:b6:fc:6b:04:7a:12:5f:9f:e5:3d:
27:8a:c8:94:b3:42:97:86:ec:cb:ad:92:d3:ce:36:37:d5:3a:
4d:82:65:6a:a4:17:83:c2:29:bd:e5:76:97:d3:7b:93:ab:38:
f3:6e:58:31:e0:df:2e:2d:56:c1:ad:4a:72:bd:d5:f2:e4:3e:
0e:b9:9b:85:1d:d8:1e:6f:3f:3c:72:57:3c:37:15:ff:78:1d:
10:0c:5b:97:90:2b:22:5a:2b:0b:d2:5e:97:05:1b:3a:f7:94:
83:4e:43:fb:29:db:8b:d2:8f:15:94:73:cf:da:c4:89:6e:46:
e0:0e:08:ee:8b:a0:fb:22:0f:43:3d:a1:0a:00:0b:25:b0:86:
0c:02:ce:9b:ce:6f:98:70:88:f5:99:3e:fd:9c:0d:40:1e:48:
3e:20:68:86:9e:55:5a:31:ef:a7:c0:0d:91:8d:f9:5d:03:a7:
a3:e8:22:9b:cf:88:c9:dd:b3:f7:6d:8b:8d:a6:0f:d0:d3:72:
a7:74:cc:32:77:19:aa:1c:7c:b3:ea:c2:06:33:90:80:cc:53:
5f:c1:93:61:4b:4d:b1:78:4d:b0:46:8f:d9:c4:23:9a:56:cb:
68:6b:0a:b4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAkDxCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZmI4NDBlNGY5MTlmOGEwOTJlODc5Mjc1MDVlMjUzZjJmZGJhMTk5MB4XDTIyMDEw
MTE2MDIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGMzOTUzMjMwMzlk
MDBiY2JhNDUyYjZlNmI1ZjE3NmNhODkzZTg3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJo/owS9VB067YkIDl+VNwXamfsA043DXeoA3/hMm0jmCK2V
sntNku0VYtJkPH8t4iuXOvaE5LYkYwepr4c8K3sxLLagnbawts/gveozYu9UBAVN
7Bm4/PPlsT+HI0OPzPB6JfpdML2bkMFc1Sr6qX3tsQ8KMZMImr7g+Iypbbu7iCO/
7OkKzBYcJuPuhf/Vop1FLbV0GbWwlhncKSn755ljWmVLhjNdzRuaqZuRD4U0/YZ4
0+Axa35AePLQsgfS1aA2jzGvDLr+/kAbw3gvgBHcpgm2bvs7+KCBLRk1z6S6WuY5
1xd1f6g9Ri3YsMJkIQSwcblJnKM//VTSdISGFEUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTcOVMjA50AvLpFK25rXxdsqJPocjAfBgNVHSMEGDAWgBTvuEDk+Rn4oJLo
eSdQXiU/L9uhmTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzc3aEE1UGtaLUtDUzZIa25VRjRsUHlfYm9aay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNzQ3OTVkLTQzYjAtNGE1ZC04YzVmLTU4NzEyY2MwZDZhNi8x
LzNEbFRJd09kQUx5NlJTdHVhMThYYktpVDZISS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NzQ3OTVkLTQzYjAtNGE1ZC04YzVmLTU4NzEyY2MwZDZhNi8xLzc3aEE1UGtaLUtD
UzZIa25VRjRsUHlfYm9aay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMOJugMEAMOJvAMEAMOK3AMEAMOQ
FzANBgkqhkiG9w0BAQsFAAOCAQEAhc4V+ySrudBzJ7mH2nQdOjJtZ8ftdOSoXhG2
/GsEehJfn+U9J4rIlLNCl4bsy62S0842N9U6TYJlaqQXg8IpveV2l9N7k6s4825Y
MeDfLi1Wwa1Kcr3V8uQ+DrmbhR3YHm8/PHJXPDcV/3gdEAxbl5ArIlorC9JelwUb
OveUg05D+ynbi9KPFZRzz9rEiW5G4A4I7oug+yIPQz2hCgALJbCGDALOm85vmHCI
9Zk+/ZwNQB5IPiBohp5VWjHvp8ANkY35XQOno+gim8+Iyd2z922LjaYP0NNyp3TM
MncZqhx8s+rCBjOQgMxTX8GTYUtNsXhNsEaP2cQjmlbLaGsKtA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org