Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F3lJf2Gc43ze_U-pXCq9-cRlvQg.roa
File: F3lJf2Gc43ze_U-pXCq9-cRlvQg.roa (raw, json)
Hash identifier: LxABVlCgFr6WkGfNhsg2Lia74bkSqAkPor5RsmZ2nwM=
Subject key identifier: 17:79:49:7F:61:9C:E3:7C:DE:FD:4F:A9:5C:2A:BD:F9:C4:65:BD:08
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09BB4B62
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F3lJf2Gc43ze_U-pXCq9-cRlvQg.roa
Signing time: Thu 10 Feb 2022 14:13:23 +0000
ROA not before: Thu 10 Feb 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163269474 (0x9bb4b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 10 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1779497f619ce37cdefd4fa95c2abdf9c465bd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:eb:71:6f:66:ed:f8:d6:ca:28:94:12:d6:63:
93:44:6a:1d:71:f3:62:9e:1f:79:a7:bb:85:27:1d:
97:4d:29:68:ce:ec:8c:92:c3:ca:b2:3d:06:1c:22:
4b:ca:75:9d:73:1b:9f:95:52:81:30:87:6f:a5:49:
c8:cb:5a:7e:92:ff:88:82:aa:99:9c:d3:e5:2d:51:
76:f6:a1:f2:f2:c7:ad:3b:05:9d:40:ae:d1:3d:3e:
79:60:10:9b:8e:d3:0b:7b:30:00:2a:75:30:0c:18:
d3:6f:05:50:58:0c:a5:65:92:bb:75:ca:b8:fc:2b:
50:f9:47:00:96:a0:30:b4:b2:f7:a4:28:1e:a6:83:
e7:35:06:6b:e7:a6:c4:af:f3:53:49:cf:90:49:b9:
3b:c4:3e:c8:83:47:8c:7e:64:06:29:e3:96:e9:2d:
b0:60:f5:2f:ed:c0:27:9b:71:85:e5:e9:0f:ef:86:
7a:99:de:58:48:bc:03:92:44:87:7d:13:0b:27:bd:
57:37:0c:59:c9:b0:20:04:b8:7a:cf:df:fc:58:a3:
c1:38:cb:55:db:23:b0:93:da:3d:b6:13:54:b1:6c:
58:8f:89:47:c1:d9:4f:41:f2:f8:45:bf:61:ec:36:
37:6f:e9:ae:1b:65:dc:17:5b:3a:b5:01:4a:ef:91:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:49:7F:61:9C:E3:7C:DE:FD:4F:A9:5C:2A:BD:F9:C4:65:BD:08
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F3lJf2Gc43ze_U-pXCq9-cRlvQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.96.0/24
45.158.56.0/22
85.209.220.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
d4:55:9e:a2:91:b5:f5:76:e1:63:3d:28:cb:c1:66:99:f5:92:
f8:cb:c1:27:48:0a:5a:0b:4e:e7:c2:39:72:68:74:0b:ec:c0:
4e:73:c5:42:57:a1:96:54:cc:fa:ef:9a:a4:2e:0d:2c:a9:6e:
44:e2:62:64:3e:c9:02:c7:68:f7:6a:97:bb:8e:7f:39:58:70:
79:f6:02:25:6f:f0:e5:17:7f:5c:bf:74:6c:a0:66:13:fd:7e:
e3:77:a7:da:c8:5c:24:47:f6:a4:5a:5c:58:fe:2c:c3:23:08:
3b:42:6b:96:4a:45:06:73:1f:78:28:5c:a6:6e:9b:08:92:3b:
ae:3e:7f:be:26:83:30:0e:d3:af:27:01:7d:16:77:ab:c7:a3:
29:11:6c:ce:ad:0b:32:c8:3d:73:05:29:e0:38:7a:e4:bd:02:
4e:04:f0:aa:ab:7a:a1:62:d7:00:d2:fe:bd:67:12:51:01:7c:
67:9c:d0:b2:3d:aa:4a:00:51:c3:6e:b5:d9:7a:54:56:3d:e7:
e9:2d:6a:f1:ac:c9:03:56:43:cd:0f:a9:3e:6f:92:02:be:b7:
f9:29:66:48:07:c8:e6:aa:0a:27:04:09:0a:52:4b:44:f3:13:
44:c2:23:5d:c9:ce:c3:bb:2f:a3:49:13:5f:8a:24:66:b0:5b:
4f:bf:6f:31
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIECbtLYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDIx
MDE0MTMyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc3OTQ5N2Y2MTlj
ZTM3Y2RlZmQ0ZmE5NWMyYWJkZjljNDY1YmQwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPrrcW9m7fjWyiiUEtZjk0RqHXHzYp4feae7hScdl00paM7s
jJLDyrI9BhwiS8p1nXMbn5VSgTCHb6VJyMtafpL/iIKqmZzT5S1Rdvah8vLHrTsF
nUCu0T0+eWAQm47TC3swACp1MAwY028FUFgMpWWSu3XKuPwrUPlHAJagMLSy96Qo
HqaD5zUGa+emxK/zU0nPkEm5O8Q+yINHjH5kBinjluktsGD1L+3AJ5txheXpD++G
epneWEi8A5JEh30TCye9VzcMWcmwIAS4es/f/FijwTjLVdsjsJPaPbYTVLFsWI+J
R8HZT0Hy+EW/Yew2N2/prhtl3BdbOrUBSu+R/GECAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBQXeUl/YZzjfN79T6lcKr35xGW9CDAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L0YzbEpmMkdjNDN6ZV9VLXBYQ3E5LWNSbHZRZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAC2JYAMEAi2eOAMEAlXR3AMEAMEl
7wMEAMEmNTAMAwQAwScJAwQAwScKMA0GCSqGSIb3DQEBCwUAA4IBAQDUVZ6ikbX1
duFjPSjLwWaZ9ZL4y8EnSApaC07nwjlyaHQL7MBOc8VCV6GWVMz675qkLg0sqW5E
4mJkPskCx2j3ape7jn85WHB59gIlb/DlF39cv3RsoGYT/X7jd6fayFwkR/akWlxY
/izDIwg7QmuWSkUGcx94KFymbpsIkjuuPn++JoMwDtOvJwF9Fnerx6MpEWzOrQsy
yD1zBSngOHrkvQJOBPCqq3qhYtcA0v69ZxJRAXxnnNCyPapKAFHDbrXZelRWPefp
LWrxrMkDVkPND6k+b5ICvrf5KWZIB8jmqgonBAkKUktE8xNEwiNdyc7Duy+jSRNf
iiRmsFtPv28x
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org