Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/kPlWsTsrRf0TAKHLfv42tOfAIns.roa
File: kPlWsTsrRf0TAKHLfv42tOfAIns.roa (raw, json)
Hash identifier: 7gq8CkJlQRdmoxmz8zqeklXYhm09g0ZYHdQAiH0RlPE=
Subject key identifier: 90:F9:56:B1:3B:2B:45:FD:13:00:A1:CB:7E:FE:36:B4:E7:C0:22:7B
Certificate issuer: /CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Certificate serial: 1866419F
Authority key identifier: 18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/kPlWsTsrRf0TAKHLfv42tOfAIns.roa
Signing time: Sat 01 Jan 2022 14:54:53 +0000
ROA not before: Sat 01 Jan 2022 14:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206037
IP address blocks: 185.14.178.0/24 maxlen: 24
185.14.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409354655 (0x1866419f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Validity
Not Before: Jan 1 14:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90f956b13b2b45fd1300a1cb7efe36b4e7c0227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:3c:61:17:1a:4a:21:ed:e7:17:a3:3d:8f:
26:0c:49:eb:54:65:cb:55:1d:f5:8e:c6:2d:d9:64:
be:97:f8:0f:60:bc:8a:87:98:37:43:77:a9:c2:6e:
01:5c:9e:96:f2:1e:ac:87:dc:dd:71:40:4c:0c:0d:
eb:f3:5f:23:5c:2e:14:d8:12:17:7d:43:dc:71:c9:
6f:22:7c:f7:c6:89:e4:5f:9a:45:48:c4:73:48:8b:
9a:ed:a8:79:1c:b0:cf:05:ee:d9:0d:8f:33:d6:ca:
18:9f:91:f3:b4:fa:50:12:6b:6d:3b:28:01:19:82:
75:c8:aa:70:85:63:2b:94:9e:77:67:36:49:cd:c5:
b1:f7:40:bb:3c:06:af:ca:ea:35:39:e0:8e:89:8d:
30:13:df:7d:25:bd:3d:7e:50:d1:91:92:86:31:cb:
4b:c9:25:f4:02:f6:7c:a3:38:c3:22:25:da:36:17:
ed:82:f2:a4:5e:94:0b:cc:dc:ba:23:20:65:3a:ca:
af:c6:c3:7d:5a:97:9d:3e:a0:cd:ba:a7:6b:88:b2:
bd:d7:68:63:0e:8b:87:0b:f6:cd:7b:1e:c9:7c:01:
5d:06:0a:55:e1:87:4d:f6:ac:ef:8e:4f:7b:13:40:
4b:f8:4d:2b:c7:57:af:92:cd:cd:cc:95:02:41:b8:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:56:B1:3B:2B:45:FD:13:00:A1:CB:7E:FE:36:B4:E7:C0:22:7B
X509v3 Authority Key Identifier:
keyid:18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/kPlWsTsrRf0TAKHLfv42tOfAIns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/GPLw3nfyep2YuERVBDG2iAzXNow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.176.0/24
185.14.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:98:fa:1c:90:a9:2f:c5:99:04:bd:fa:83:06:63:69:ca:04:
59:ac:b9:d5:d3:5b:79:74:64:cc:07:cd:03:68:97:c1:b0:0e:
c5:8b:2f:88:cf:19:de:f6:f0:6a:d5:bb:b7:b9:bf:f3:7b:9d:
d4:87:79:3f:6c:3c:af:7d:ea:8c:05:c5:84:89:ec:d0:5c:b7:
80:3d:20:26:3a:46:9d:51:f2:3e:29:9f:d8:fd:51:5e:af:dd:
19:8a:aa:f7:a7:89:d0:6b:98:7c:55:e2:b4:c7:c7:2f:a7:9c:
3a:ab:8d:37:b9:29:c7:ce:38:2b:db:69:f1:c8:dd:4a:5f:bf:
a4:23:37:c9:9f:d9:48:dc:07:ad:74:12:b1:9f:30:ce:57:76:
d4:d8:72:fa:95:d2:41:b3:af:c9:88:a4:db:5b:ba:db:63:b9:
11:e2:c1:f3:c1:d8:fb:05:b4:e6:36:d0:c7:c7:8a:d3:a3:c4:
49:97:59:16:03:5f:15:8e:59:d2:4b:8a:ee:16:41:6a:8c:6b:
15:47:be:93:73:6b:c2:d2:93:c8:dc:63:5e:17:11:3b:f3:d9:
cc:67:c3:f5:fb:aa:d3:54:35:12:d5:90:4a:ac:ec:12:b4:27:
08:27:64:16:bb:ce:8a:f2:cc:62:68:e5:03:a1:3c:3a:50:51:
cf:b0:3f:26
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGGZBnzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGYyZjBkZTc3ZjI3YTlkOThiODQ0NTUwNDMxYjY4ODBjZDczNjhjMB4XDTIyMDEw
MTE0NTQ1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTBmOTU2YjEzYjJi
NDVmZDEzMDBhMWNiN2VmZTM2YjRlN2MwMjI3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHWPGEXGkoh7ecXoz2PJgxJ61Rly1Ud9Y7GLdlkvpf4D2C8
ioeYN0N3qcJuAVyelvIerIfc3XFATAwN6/NfI1wuFNgSF31D3HHJbyJ898aJ5F+a
RUjEc0iLmu2oeRywzwXu2Q2PM9bKGJ+R87T6UBJrbTsoARmCdciqcIVjK5Sed2c2
Sc3FsfdAuzwGr8rqNTngjomNMBPffSW9PX5Q0ZGShjHLS8kl9AL2fKM4wyIl2jYX
7YLypF6UC8zcuiMgZTrKr8bDfVqXnT6gzbqna4iyvddoYw6Lhwv2zXseyXwBXQYK
VeGHTfas745PexNAS/hNK8dXr5LNzcyVAkG4FIUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSQ+VaxOytF/RMAoct+/ja058AiezAfBgNVHSMEGDAWgBQY8vDed/J6nZi4
RFUEMbaIDNc2jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dQTHczbmZ5ZXAyWXVFUlZCREcyaUF6WE5vdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNDYxYjkwLTJlMTgtNDJmOC05NGI4LTY2ZDI1ZTEzOTM2NC8x
L2tQbFdzVHNyUmYwVEFLSExmdjQydE9mQUlucy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NDYxYjkwLTJlMTgtNDJmOC05NGI4LTY2ZDI1ZTEzOTM2NC8xL0dQTHczbmZ5ZXAy
WXVFUlZCREcyaUF6WE5vdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALkOsAMEALkOsjANBgkqhkiG9w0B
AQsFAAOCAQEAjJj6HJCpL8WZBL36gwZjacoEWay51dNbeXRkzAfNA2iXwbAOxYsv
iM8Z3vbwatW7t7m/83ud1Id5P2w8r33qjAXFhIns0Fy3gD0gJjpGnVHyPimf2P1R
Xq/dGYqq96eJ0GuYfFXitMfHL6ecOquNN7kpx844K9tp8cjdSl+/pCM3yZ/ZSNwH
rXQSsZ8wzld21Nhy+pXSQbOvyYik21u622O5EeLB88HY+wW05jbQx8eK06PESZdZ
FgNfFY5Z0kuK7hZBaoxrFUe+k3NrwtKTyNxjXhcRO/PZzGfD9fuq01Q1EtWQSqzs
ErQnCCdkFrvOivLMYmjlA6E8OlBRz7A/Jg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org