Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pGrQTWstQkisSEOy4OSLSSEdkNI.roa
File: pGrQTWstQkisSEOy4OSLSSEdkNI.roa (raw, json)
Hash identifier: m2kGRCHxjEVjnf6p2h1w+bNX+AUWETI0Ce6Y2fzwpLs=
Subject key identifier: A4:6A:D0:4D:6B:2D:42:48:AC:48:43:B2:E0:E4:8B:49:21:1D:90:D2
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A48688C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pGrQTWstQkisSEOy4OSLSSEdkNI.roa
Signing time: Tue 29 Mar 2022 20:27:21 +0000
ROA not before: Tue 29 Mar 2022 20:27:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
85.209.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172517516 (0xa48688c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 29 20:27:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a46ad04d6b2d4248ac4843b2e0e48b49211d90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:83:8b:f5:7f:5e:8b:24:10:45:4a:cb:d0:
e4:88:44:62:78:32:74:bb:12:fa:26:75:fd:07:3f:
d6:fa:cd:7d:fd:b8:cf:1d:3a:7b:3c:0c:18:e9:f9:
fa:c6:e4:d9:9a:11:14:a1:bb:21:6a:6d:1a:89:10:
74:c6:68:b7:81:2d:5f:b4:cb:c9:7a:3c:13:4c:26:
f5:2f:cc:98:a9:0e:0d:94:a6:68:d2:37:62:23:dd:
09:cf:ed:77:58:89:37:a5:42:05:d9:5f:6b:1e:97:
a1:74:7b:39:7e:95:ad:24:4a:49:38:d3:08:57:8f:
08:49:95:32:3a:4e:bb:07:77:99:aa:2a:f2:5e:c4:
f2:02:23:fd:a6:1c:a9:20:51:00:b0:08:90:60:f5:
d5:6b:3c:77:02:b0:83:e4:a2:40:5c:fe:d6:1f:7e:
f2:92:38:77:6a:17:b7:36:87:cb:f3:6f:6c:ea:6e:
6a:59:e1:0f:1d:eb:d5:02:7e:cb:e0:16:1b:71:6d:
a9:6d:fd:40:af:b9:7e:31:b4:dc:d6:20:69:e3:04:
f2:2f:75:bf:99:2e:59:6b:d3:59:c4:c1:3e:91:0b:
37:d5:3d:8e:dc:9f:68:0b:26:ed:9b:7a:c9:ee:b7:
8f:58:67:73:31:70:7a:b4:59:11:16:15:08:7c:2b:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:D0:4D:6B:2D:42:48:AC:48:43:B2:E0:E4:8B:49:21:1D:90:D2
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pGrQTWstQkisSEOy4OSLSSEdkNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.222.0/24
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
df:a8:9e:8d:f1:63:bc:8e:91:66:07:47:73:52:5e:19:ad:62:
9d:60:15:c6:1e:d8:49:a7:97:8d:2c:a1:66:2c:79:1c:e1:b6:
f2:a4:bf:c2:e8:dc:a5:c2:c0:c1:bc:ea:5c:18:09:2a:46:94:
28:e5:b6:f5:99:01:c4:5b:85:8b:8d:ac:38:f0:cd:7d:c1:77:
a8:95:4f:59:2e:1c:d4:44:dd:de:31:c0:a2:d7:a4:f6:fc:75:
12:1c:64:0c:de:f9:cd:70:71:36:0c:cb:8b:9d:5b:f6:c0:e0:
a0:a9:33:c5:36:21:e2:7e:0d:38:71:13:d7:d3:43:31:37:32:
63:9b:6a:6e:12:f4:c8:3d:11:c9:b8:aa:c5:bc:e8:13:15:30:
fc:08:8b:ca:d1:fd:22:ac:35:88:e3:d4:b8:37:bc:68:b6:b7:
96:b6:fb:f5:05:c9:d6:e7:31:d5:d0:fb:b5:59:16:30:a9:57:
8c:af:58:93:b4:8f:ae:88:68:ba:cb:cb:3f:a4:d5:f2:f4:dd:
69:ae:70:af:09:6e:56:95:9a:07:20:26:d1:49:66:7d:28:b3:
a6:35:50:43:09:ca:c6:c0:85:47:85:57:e9:aa:76:63:e6:35:
6d:02:68:dc:8b:5b:98:13:5e:7a:a5:90:6e:8f:a7:00:05:09:
32:16:d5:5a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIECkhojDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMy
OTIwMjcyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ2YWQwNGQ2YjJk
NDI0OGFjNDg0M2IyZTBlNDhiNDkyMTFkOTBkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsDg4v1f16LJBBFSsvQ5IhEYngydLsS+iZ1/Qc/1vrNff24
zx06ezwMGOn5+sbk2ZoRFKG7IWptGokQdMZot4EtX7TLyXo8E0wm9S/MmKkODZSm
aNI3YiPdCc/td1iJN6VCBdlfax6XoXR7OX6VrSRKSTjTCFePCEmVMjpOuwd3maoq
8l7E8gIj/aYcqSBRALAIkGD11Ws8dwKwg+SiQFz+1h9+8pI4d2oXtzaHy/NvbOpu
alnhDx3r1QJ+y+AWG3FtqW39QK+5fjG03NYgaeME8i91v5kuWWvTWcTBPpELN9U9
jtyfaAsm7Zt6ye63j1hnczFwerRZERYVCHwrSq0CAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBSkatBNay1CSKxIQ7Lg5ItJIR2Q0jAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L3BHclFUV3N0UWtpc1NFT3k0T1NMU1NFZGtOSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAgI4+AMEAi0MUAMEAi1XrAMEAC2J
YAMEAi2eOAMEAFXR3gMEAMEl7wMEAMEmNTAMAwQAwScJAwQAwScKMA0GCSqGSIb3
DQEBCwUAA4IBAQDfqJ6N8WO8jpFmB0dzUl4ZrWKdYBXGHthJp5eNLKFmLHkc4bby
pL/C6NylwsDBvOpcGAkqRpQo5bb1mQHEW4WLjaw48M19wXeolU9ZLhzURN3eMcCi
16T2/HUSHGQM3vnNcHE2DMuLnVv2wOCgqTPFNiHifg04cRPX00MxNzJjm2puEvTI
PRHJuKrFvOgTFTD8CIvK0f0irDWI49S4N7xotreWtvv1BcnW5zHV0Pu1WRYwqVeM
r1iTtI+uiGi6y8s/pNXy9N1prnCvCW5WlZoHICbRSWZ9KLOmNVBDCcrGwIVHhVfp
qnZj5jVtAmjci1uYE156pZBuj6cABQkyFtVa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org