Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XOqFSdT07qB-pJIerk3kus97qls.roa
File: XOqFSdT07qB-pJIerk3kus97qls.roa (raw, json)
Hash identifier: UqTZMd3BVnkO1V5T6/YgvL+tiZ/KgYRqf7jcPouhoaw=
Subject key identifier: 5C:EA:85:49:D4:F4:EE:A0:7E:A4:92:1E:AE:4D:E4:BA:CF:7B:AA:5B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A101632
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XOqFSdT07qB-pJIerk3kus97qls.roa
Signing time: Fri 11 Mar 2022 18:04:09 +0000
ROA not before: Fri 11 Mar 2022 18:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
85.209.223.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168826418 (0xa101632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 11 18:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cea8549d4f4eea07ea4921eae4de4bacf7baa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:d6:7a:6f:58:0b:79:62:c2:7e:cf:2c:fd:
ab:f6:41:8c:22:04:e7:7e:2a:b2:5e:93:2a:b0:50:
f8:cc:45:e6:50:90:55:5d:1c:70:a4:27:0b:93:0f:
06:b3:a7:12:15:e5:af:71:5d:76:f6:54:3b:e0:c4:
43:fd:fc:a1:79:e1:02:96:ed:7d:12:2b:e3:99:04:
2f:85:26:4b:75:31:9f:9e:f1:49:0b:1f:31:12:e8:
08:65:82:4a:1c:c4:d7:09:ac:bc:c0:98:4e:c8:f0:
37:b2:cd:40:d4:b7:fc:5d:87:5c:f0:ca:21:99:04:
9b:27:54:10:3f:28:0a:21:34:99:56:21:d2:bf:38:
a8:bb:0c:b3:c3:78:cf:b6:53:6c:d8:11:4d:90:be:
c7:70:8b:95:7e:9d:56:6e:29:64:ba:be:85:bd:bc:
5a:8d:25:3f:57:1e:70:bb:21:c8:0d:a0:94:b8:e2:
bf:55:ba:9e:cc:d3:28:71:f8:92:7f:ed:d0:c9:2a:
57:c7:6b:06:da:5f:07:2f:b3:f7:e2:45:e4:fd:b6:
0a:26:89:e3:47:fa:f6:2a:c4:7f:9d:4d:ab:f4:c4:
ea:49:4b:60:f6:b7:13:c3:a8:d4:6d:22:4f:3a:0d:
0b:d5:67:14:cb:fe:96:03:9c:87:be:c1:64:2d:7f:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:85:49:D4:F4:EE:A0:7E:A4:92:1E:AE:4D:E4:BA:CF:7B:AA:5B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XOqFSdT07qB-pJIerk3kus97qls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
85.209.223.0/24
193.37.239.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:80:a4:ff:71:7e:bb:6f:b2:27:4a:f6:e4:d0:01:c9:c5:1f:
c7:ed:d5:fc:c1:1a:58:dc:9d:c5:e1:7c:ca:f5:65:ad:75:e8:
d7:13:9e:57:09:39:52:ea:60:b3:8a:6c:dd:5d:ea:1d:4b:41:
dc:7f:b9:11:73:5a:d2:46:09:58:6e:74:95:61:42:50:ea:ed:
d8:02:54:93:c7:b8:11:72:0f:7f:ce:b0:3c:2e:1d:d9:e0:75:
ea:53:8e:41:7d:8b:f7:b3:b0:f7:60:fe:34:52:da:36:93:3a:
1b:7d:cb:61:30:e7:fd:6c:1e:af:df:24:2a:0c:24:b0:c1:a4:
3e:6e:f2:2d:3a:99:85:1d:2c:47:ab:77:7c:ac:32:8b:58:e6:
d6:6a:9c:de:88:4e:13:ae:0f:59:4d:f7:c2:3c:4d:75:50:7c:
90:71:bd:21:e9:e1:8d:77:30:65:f2:7e:a8:6c:4c:fe:4d:ed:
8b:e8:22:dc:68:c9:f7:35:7d:98:09:f5:f1:0a:36:81:e8:ac:
f8:f7:3d:5e:56:9c:fa:93:ea:f1:e1:dd:47:d3:17:be:91:e3:
2a:ce:eb:d5:94:d4:75:70:24:cd:59:78:bb:07:9c:ff:b7:7e:
9b:82:c3:e1:b4:a8:23:cf:52:af:7e:3c:16:3f:76:d6:be:f9:
93:f2:f9:84
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEChAWMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMx
MTE4MDQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWNlYTg1NDlkNGY0
ZWVhMDdlYTQ5MjFlYWU0ZGU0YmFjZjdiYWE1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO1f1npvWAt5YsJ+zyz9q/ZBjCIE534qsl6TKrBQ+MxF5lCQ
VV0ccKQnC5MPBrOnEhXlr3FddvZUO+DEQ/38oXnhApbtfRIr45kEL4UmS3Uxn57x
SQsfMRLoCGWCShzE1wmsvMCYTsjwN7LNQNS3/F2HXPDKIZkEmydUED8oCiE0mVYh
0r84qLsMs8N4z7ZTbNgRTZC+x3CLlX6dVm4pZLq+hb28Wo0lP1cecLshyA2glLji
v1W6nszTKHH4kn/t0MkqV8drBtpfBy+z9+JF5P22CiaJ40f69irEf51Nq/TE6klL
YPa3E8Oo1G0iTzoNC9VnFMv+lgOch77BZC1/INUCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRc6oVJ1PTuoH6kkh6uTeS6z3uqWzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L1hPcUZTZFQwN3FCLXBKSWVyazNrdXM5N3Fscy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAi0MUAMEAC2JYQMEAFXR3AMEAFXR
3wMEAMEl7wMEAMEmNQMEAMEnCjANBgkqhkiG9w0BAQsFAAOCAQEAioCk/3F+u2+y
J0r25NABycUfx+3V/MEaWNydxeF8yvVlrXXo1xOeVwk5Uupgs4ps3V3qHUtB3H+5
EXNa0kYJWG50lWFCUOrt2AJUk8e4EXIPf86wPC4d2eB16lOOQX2L97Ow92D+NFLa
NpM6G33LYTDn/Wwer98kKgwksMGkPm7yLTqZhR0sR6t3fKwyi1jm1mqc3ohOE64P
WU33wjxNdVB8kHG9IenhjXcwZfJ+qGxM/k3ti+gi3GjJ9zV9mAn18Qo2geis+Pc9
Xlac+pPq8eHdR9MXvpHjKs7r1ZTUdXAkzVl4uwec/7d+m4LD4bSoI89Sr348Fj92
1r75k/L5hA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org