Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/B_BA7yXJJapGkldQHFjWDfMXSGM.roa
File: B_BA7yXJJapGkldQHFjWDfMXSGM.roa (raw, json)
Hash identifier: YpG0qfFa3zwG02vStJNEZzxtenphNi8B0DKQ9OTFAHw=
Subject key identifier: 07:F0:40:EF:25:C9:25:AA:46:92:57:50:1C:58:D6:0D:F3:17:48:63
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184CE0FA19E0519EDAEE8C889BEBBFE5ACD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/B_BA7yXJJapGkldQHFjWDfMXSGM.roa
Signing time: Thu 01 Dec 2022 14:20:41 +0000
ROA not before: Thu 01 Dec 2022 14:20:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.176.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.91.139.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:0f:a1:9e:05:19:ed:ae:e8:c8:89:be:bb:fe:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 1 14:20:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07f040ef25c925aa469257501c58d60df3174863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:e6:86:9b:33:29:d0:9d:75:89:ff:39:6e:
42:ce:7f:2e:66:ac:e6:25:da:36:04:10:92:ce:53:
0d:58:92:c7:e8:e2:b5:fa:0a:52:4a:8c:b4:fe:90:
62:9b:57:5a:24:27:d4:18:f5:ef:55:e5:87:54:53:
41:c7:b1:f5:28:e1:79:7f:c6:47:2a:35:9b:a8:62:
8c:f9:0e:9a:35:2e:81:39:94:39:fc:72:3e:9b:d6:
e2:f5:65:da:ce:08:02:d3:f9:e1:c0:eb:03:1d:58:
3f:d3:5e:46:11:d7:3e:c9:54:51:f1:f5:54:b3:4f:
fa:6d:d1:0d:e4:96:e0:cb:3a:a8:06:c2:b2:60:1c:
fb:b5:37:3b:4f:4a:63:79:f1:ba:50:ce:14:13:7e:
8c:27:0d:b1:7c:9d:7d:d0:0b:06:8a:97:84:e7:01:
a0:ef:8b:af:83:a8:d3:25:28:5c:7c:fa:7a:89:4f:
bf:57:1a:b3:df:0f:2f:7b:ef:12:9f:d7:f2:8d:03:
d8:66:09:75:64:07:a7:ae:76:9b:7d:40:28:fd:17:
69:00:f5:d9:16:fe:92:ad:84:5c:57:8c:04:82:fe:
b7:90:5f:0f:fc:81:26:f7:58:43:51:2b:37:e9:dd:
ac:8f:5f:07:0e:86:dd:fe:ab:56:0d:f8:e5:39:38:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:40:EF:25:C9:25:AA:46:92:57:50:1C:58:D6:0D:F3:17:48:63
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/B_BA7yXJJapGkldQHFjWDfMXSGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
45.91.139.0/24
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
06:33:1f:6e:62:e6:8b:2d:4a:24:60:de:83:e9:ea:d7:f7:13:
3d:c4:e9:5f:89:24:cc:b7:2a:8d:39:4b:ac:a5:a0:e5:f6:ae:
bb:26:6a:72:c3:07:43:bf:d0:0d:31:03:03:61:b9:91:67:e0:
9d:13:97:2f:d1:58:91:ea:89:39:3f:2a:93:f4:1a:44:a5:1a:
e2:84:e6:0c:96:54:ed:ca:ca:ac:c5:9a:a9:95:36:a2:2b:35:
d2:75:61:cb:9a:64:45:62:33:e1:4c:a7:3e:40:99:86:3b:a8:
7e:c2:24:37:e5:c8:fe:f5:11:ef:db:4d:e2:21:cb:1e:69:1c:
34:ac:78:bb:10:6b:be:21:d3:2f:f8:3b:ea:b5:51:fd:08:17:
42:b7:33:bb:ff:58:e8:83:53:73:6e:66:78:e8:df:ea:7f:3f:
b2:b5:84:35:ee:15:52:23:1b:36:d0:c4:69:72:ed:32:df:d6:
2b:33:71:5a:b1:78:97:ba:65:9d:b9:5f:8a:79:6d:c3:9b:df:
26:48:fc:39:25:27:93:ac:43:6c:4f:03:6a:ba:63:c2:61:f5:
b0:5a:99:88:99:e7:2c:43:14:4d:32:b1:f5:a2:66:77:d5:3c:
7b:ca:98:05:1b:72:0b:b0:db:d3:3f:da:bc:46:08:e2:0c:35:
e4:5f:e5:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTOD6GeBRntrujIib67/lrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjAxMTQyMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2YwNDBlZjI1YzkyNWFhNDY5MjU3NTAxYzU4ZDYwZGYzMTc0ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrjmhpszKdCddYn/OW5Czn8uZqzm
Jdo2BBCSzlMNWJLH6OK1+gpSSoy0/pBim1daJCfUGPXvVeWHVFNBx7H1KOF5f8ZH
KjWbqGKM+Q6aNS6BOZQ5/HI+m9bi9WXazggC0/nhwOsDHVg/015GEdc+yVRR8fVU
s0/6bdEN5JbgyzqoBsKyYBz7tTc7T0pjefG6UM4UE36MJw2xfJ190AsGipeE5wGg
74uvg6jTJShcfPp6iU+/Vxqz3w8ve+8Sn9fyjQPYZgl1ZAenrnabfUAo/RdpAPXZ
Fv6SrYRcV4wEgv63kF8P/IEm91hDUSs36d2sj18HDobd/qtWDfjlOTgcjQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAfwQO8lySWqRpJXUBxY1g3zF0hjMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvQl9CQTd5WEpKYXBHa2xkUUhGaldEZk1YU0dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbWwAwQA
LVuLAwQALYlhAwQAVdHcMA0GCSqGSIb3DQEBCwUAA4IBAQAGMx9uYuaLLUokYN6D
6erX9xM9xOlfiSTMtyqNOUuspaDl9q67JmpywwdDv9ANMQMDYbmRZ+CdE5cv0ViR
6ok5PyqT9BpEpRrihOYMllTtysqsxZqplTaiKzXSdWHLmmRFYjPhTKc+QJmGO6h+
wiQ35cj+9RHv203iIcseaRw0rHi7EGu+IdMv+DvqtVH9CBdCtzO7/1jog1NzbmZ4
6N/qfz+ytYQ17hVSIxs20MRpcu0y39YrM3FasXiXumWduV+KeW3Dm98mSPw5JSeT
rENsTwNqumPCYfWwWpmImecsQxRNMrH1omZ31Tx7ypgFG3ILsNvTP9q8RgjiDDXk
X+UV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org