Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/soSqwHIjr7-vGPda5015VxnoG3Y.roa
File: soSqwHIjr7-vGPda5015VxnoG3Y.roa (raw, json)
Hash identifier: /o7+pMXyTF2TAXjXkRZxPNs3+fhj5rk9dQ9xShhmDQA=
Subject key identifier: B2:84:AA:C0:72:23:AF:BF:AF:18:F7:5A:E7:4D:79:57:19:E8:1B:76
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09A44541
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/soSqwHIjr7-vGPda5015VxnoG3Y.roa
Signing time: Thu 03 Feb 2022 15:55:32 +0000
ROA not before: Thu 03 Feb 2022 15:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161760577 (0x9a44541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 3 15:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b284aac07223afbfaf18f75ae74d795719e81b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:23:b1:d3:0d:17:d9:4b:0e:e5:1c:dc:66:
28:3b:3e:22:15:55:c5:25:c6:91:40:da:d9:74:d0:
44:ae:95:35:00:87:59:7f:de:56:8e:4b:d3:00:5a:
7a:a7:20:d8:ce:95:1c:06:59:d6:bd:71:47:65:08:
51:a1:e8:ae:f2:0f:92:fe:ab:25:cc:d3:47:7f:28:
ab:24:8b:6b:62:f3:68:e2:de:ff:75:b3:77:9f:65:
a4:42:82:6b:91:3d:82:22:09:84:09:ad:0f:47:e0:
b6:bd:85:40:cb:27:39:59:76:a1:f1:29:78:f2:a6:
99:12:b6:0c:98:bf:06:ce:50:62:79:3d:a7:e1:d9:
d0:07:9b:cb:e8:9a:89:00:77:b8:02:7f:3f:c4:40:
91:de:04:89:72:dd:de:eb:91:c9:e1:6f:b0:7c:d6:
43:d3:52:9a:13:6f:f3:0b:88:cf:36:f6:39:de:ff:
3a:e8:a7:9a:93:67:47:8c:4f:41:94:e7:a0:0b:ca:
12:da:f7:5c:a2:bd:ed:8c:c1:63:97:5d:86:1d:3c:
fb:6d:c3:b2:09:25:40:3c:09:88:3a:92:cc:1b:cc:
9f:8c:0b:7c:88:76:a2:57:a0:1a:ba:8a:48:b4:44:
3a:e6:61:8c:21:d7:5d:d4:51:41:54:5a:6f:5b:30:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:AA:C0:72:23:AF:BF:AF:18:F7:5A:E7:4D:79:57:19:E8:1B:76
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/soSqwHIjr7-vGPda5015VxnoG3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
45.158.58.0/24
85.209.220.0/24
193.37.239.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d1:f2:9e:8b:2c:97:63:77:22:bc:08:0b:f3:b4:23:0b:63:
ca:0e:bb:85:08:6c:67:91:ca:c4:79:65:16:de:4a:be:74:e1:
ec:12:2f:4d:52:23:e0:53:b8:a4:3c:57:83:c5:55:03:be:ba:
4e:59:5e:75:c9:9a:24:08:b3:9d:34:20:cf:e4:b6:06:15:4a:
11:15:85:4b:a4:21:3f:85:da:0e:f3:5f:a2:8e:00:90:d9:55:
c0:8d:8a:c3:ae:14:b7:a1:bb:3c:94:4d:b2:03:d4:b3:48:cb:
96:d9:85:01:a0:f3:34:dd:e9:81:e5:aa:92:2b:7a:89:1f:9a:
8c:6d:15:d2:5f:7f:21:b2:07:38:21:92:36:28:72:9f:ab:8e:
ec:de:0f:47:e4:a7:95:bf:2a:9d:d7:74:b0:ff:18:2c:15:da:
36:bc:07:3d:64:bc:df:93:89:d2:5f:3a:44:85:31:91:a9:04:
b2:b3:49:81:0f:26:95:9c:bd:75:b0:d5:17:8b:e2:1c:fb:fc:
99:6b:b1:bb:75:f8:9b:fa:e2:ae:f0:3c:87:d9:2f:10:19:50:
bb:f7:22:21:7e:3a:ff:f5:b2:fb:a5:e6:03:03:1d:1a:f1:65:
ff:00:65:79:c3:01:8e:b1:c0:99:c4:c5:2b:58:ea:95:05:c8:
95:01:64:ab
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECaRFQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDIw
MzE1NTUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI4NGFhYzA3MjIz
YWZiZmFmMThmNzVhZTc0ZDc5NTcxOWU4MWI3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsiI7HTDRfZSw7lHNxmKDs+IhVVxSXGkUDa2XTQRK6VNQCH
WX/eVo5L0wBaeqcg2M6VHAZZ1r1xR2UIUaHorvIPkv6rJczTR38oqySLa2LzaOLe
/3Wzd59lpEKCa5E9giIJhAmtD0fgtr2FQMsnOVl2ofEpePKmmRK2DJi/Bs5QYnk9
p+HZ0Aeby+iaiQB3uAJ/P8RAkd4EiXLd3uuRyeFvsHzWQ9NSmhNv8wuIzzb2Od7/
OuinmpNnR4xPQZTnoAvKEtr3XKK97YzBY5ddhh08+23DsgklQDwJiDqSzBvMn4wL
fIh2olegGrqKSLREOuZhjCHXXdRRQVRab1swbgECAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBSyhKrAciOvv68Y91rnTXlXGegbdjAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L3NvU3F3SElqcjctdkdQZGE1MDE1Vnhub0czWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAi0MUAMEAC2JYQMEAC2eOgMEAFXR
3AMEAMEl7wMEAMEmNQMEAMEnCjANBgkqhkiG9w0BAQsFAAOCAQEAStHynossl2N3
IrwIC/O0Iwtjyg67hQhsZ5HKxHllFt5KvnTh7BIvTVIj4FO4pDxXg8VVA766Tlle
dcmaJAiznTQgz+S2BhVKERWFS6QhP4XaDvNfoo4AkNlVwI2Kw64Ut6G7PJRNsgPU
s0jLltmFAaDzNN3pgeWqkit6iR+ajG0V0l9/IbIHOCGSNihyn6uO7N4PR+Snlb8q
ndd0sP8YLBXaNrwHPWS835OJ0l86RIUxkakEsrNJgQ8mlZy9dbDVF4viHPv8mWux
u3X4m/rirvA8h9kvEBlQu/ciIX46//Wy+6XmAwMdGvFl/wBlecMBjrHAmcTFK1jq
lQXIlQFkqw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org