Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MA7KLeF4qZNHCpc022fnhl0WVqA.roa
File: MA7KLeF4qZNHCpc022fnhl0WVqA.roa (raw, json)
Hash identifier: NDv/QRAlQj6eCoqNva24kvWS+6X22LEPhjyTpcxZRFU=
Subject key identifier: 30:0E:CA:2D:E1:78:A9:93:47:0A:97:34:DB:67:E7:86:5D:16:56:A0
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0518FB5A
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MA7KLeF4qZNHCpc022fnhl0WVqA.roa
Signing time: Thu 17 Mar 2022 09:41:11 +0000
ROA not before: Thu 17 Mar 2022 09:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 193.109.195.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85523290 (0x518fb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Mar 17 09:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300eca2de178a993470a9734db67e7865d1656a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:2c:cc:f8:25:90:be:7f:ce:16:f7:50:cc:
77:b2:50:67:8d:39:ac:34:96:73:f4:3c:20:ab:dd:
23:e2:dc:08:b8:e0:21:cb:5a:c2:c8:11:78:0c:4b:
ad:7c:c9:b9:d7:54:12:ac:f9:50:31:d5:fa:e0:38:
08:8e:7e:60:9e:12:dd:e7:60:95:47:8f:cc:c8:bf:
96:35:b9:36:40:07:df:bb:e2:6c:4d:f5:85:1f:44:
b0:99:0d:42:f8:cf:0e:16:bd:17:ff:a7:6a:5a:ad:
86:6b:25:cf:ff:bc:35:a7:0a:21:37:f4:39:6c:8d:
68:7a:92:aa:2f:3b:54:67:79:91:a7:f9:7b:48:5c:
28:b2:43:19:54:d7:f2:39:c1:84:cc:de:e2:c4:c5:
6b:4e:7c:87:82:79:04:9f:96:0e:00:43:8a:9b:60:
46:9e:f2:e3:9b:cb:f2:01:7f:06:1c:a7:b6:f0:5a:
88:71:40:08:c9:58:5e:c8:05:f3:dc:4d:77:18:09:
5e:7b:69:c6:12:73:da:12:04:2b:67:c6:b0:7c:a9:
7a:0d:c1:58:e0:27:39:ad:44:c9:94:ca:44:e5:6d:
99:8e:6d:32:c7:a6:33:b1:e0:21:f4:34:95:11:a6:
5a:a8:27:1b:eb:e5:ee:da:08:cc:9d:10:94:ca:99:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:CA:2D:E1:78:A9:93:47:0A:97:34:DB:67:E7:86:5D:16:56:A0
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MA7KLeF4qZNHCpc022fnhl0WVqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.35.0/24
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:cf:d1:ba:ed:71:20:47:a5:5d:33:28:76:4e:1b:eb:ef:92:
bc:e3:25:3c:16:13:60:2a:ef:ba:01:a9:34:27:49:3b:aa:9a:
c1:4b:03:c6:86:92:4f:19:9b:6d:2f:9c:b8:24:a6:e9:2f:89:
c7:10:47:d2:40:f8:61:e3:7c:04:7c:1d:5e:24:df:fb:f3:d5:
6c:6d:7b:51:cc:85:a2:74:86:7b:ac:99:63:d1:c4:7a:fa:92:
14:6c:ab:fc:89:10:05:7f:ce:2e:90:52:bd:1b:34:04:8c:11:
6e:51:2d:4f:4a:81:32:a8:d6:63:72:ff:fc:33:a2:d8:51:25:
7c:ee:7a:f2:26:66:1a:48:0d:a8:a3:bf:a9:f3:ef:80:36:46:
a6:73:8a:bd:1b:90:79:a4:b5:b4:fb:0f:b4:12:9c:bb:da:db:
1c:80:00:32:81:75:fb:d3:83:83:0f:b3:83:e3:18:de:f1:8f:
e3:41:cc:c8:75:3b:4b:9a:6d:2a:f0:88:bf:fb:eb:42:21:56:
a4:7f:af:bc:f3:88:ff:f7:09:f0:91:77:1b:39:05:8c:d0:da:
bc:25:9a:7c:f6:40:50:f5:1c:58:38:b4:ab:59:d7:7d:a2:ae:
d3:f2:c2:0a:48:3a:b7:e7:a0:a8:2c:4e:a5:57:78:67:0f:f6:
32:79:0f:e8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBRj7WjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDMx
NzA5NDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzAwZWNhMmRlMTc4
YTk5MzQ3MGE5NzM0ZGI2N2U3ODY1ZDE2NTZhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANGALMz4JZC+f84W91DMd7JQZ405rDSWc/Q8IKvdI+LcCLjg
IctawsgReAxLrXzJuddUEqz5UDHV+uA4CI5+YJ4S3edglUePzMi/ljW5NkAH37vi
bE31hR9EsJkNQvjPDha9F/+nalqthmslz/+8NacKITf0OWyNaHqSqi87VGd5kaf5
e0hcKLJDGVTX8jnBhMze4sTFa058h4J5BJ+WDgBDiptgRp7y45vL8gF/BhyntvBa
iHFACMlYXsgF89xNdxgJXntpxhJz2hIEK2fGsHypeg3BWOAnOa1EyZTKROVtmY5t
MsemM7HgIfQ0lRGmWqgnG+vl7toIzJ0QlMqZApMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQwDsot4Xipk0cKlzTbZ+eGXRZWoDAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L01BN0tMZUY0cVpOSENwYzAyMmZuaGwwV1ZxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALldIwMEAMFtwzANBgkqhkiG9w0B
AQsFAAOCAQEAts/Ruu1xIEelXTModk4b6++SvOMlPBYTYCrvugGpNCdJO6qawUsD
xoaSTxmbbS+cuCSm6S+JxxBH0kD4YeN8BHwdXiTf+/PVbG17UcyFonSGe6yZY9HE
evqSFGyr/IkQBX/OLpBSvRs0BIwRblEtT0qBMqjWY3L//DOi2FElfO568iZmGkgN
qKO/qfPvgDZGpnOKvRuQeaS1tPsPtBKcu9rbHIAAMoF1+9ODgw+zg+MY3vGP40HM
yHU7S5ptKvCIv/vrQiFWpH+vvPOI//cJ8JF3GzkFjNDavCWafPZAUPUcWDi0q1nX
faKu0/LCCkg6t+egqCxOpVd4Zw/2MnkP6A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org