Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wZaJ65-cjenH5dKUxHyIREEO1q4.roa
File: wZaJ65-cjenH5dKUxHyIREEO1q4.roa (raw, json)
Hash identifier: MMiF2/ZpimfqSbxqBSELma2X0iu/Y5QKBBpkWu5c4fI=
Subject key identifier: C1:96:89:EB:9F:9C:8D:E9:C7:E5:D2:94:C4:7C:88:44:41:0E:D6:AE
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A020EA7
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wZaJ65-cjenH5dKUxHyIREEO1q4.roa
Signing time: Tue 08 Mar 2022 02:03:58 +0000
ROA not before: Tue 08 Mar 2022 02:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167906983 (0xa020ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 8 02:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c19689eb9f9c8de9c7e5d294c47c8844410ed6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:66:a4:1a:8c:2c:40:be:8e:d5:f6:7c:35:
f2:6f:23:5a:f7:d1:83:a2:5c:06:e5:78:d4:c9:b0:
64:73:21:8a:d8:73:09:74:8f:15:ed:e3:3f:2e:64:
e5:74:a4:50:7d:4a:a4:a6:fd:ad:64:ff:0f:f2:af:
68:9d:f0:65:49:e2:07:e3:5c:f2:45:a3:0a:30:9f:
7f:45:bf:71:38:00:eb:10:44:38:58:f3:17:2b:02:
f9:d5:cd:66:3f:ec:0e:9a:b3:90:32:1d:36:f3:af:
fa:18:24:a5:90:d7:ff:59:1c:ab:53:85:42:4c:bd:
e2:6f:e3:30:9b:30:1d:42:e2:8e:92:d9:f7:3b:cd:
a4:e2:a4:a8:80:61:0c:5a:c3:f4:db:04:e5:90:6d:
10:7f:14:08:ee:be:25:1a:9f:d9:24:ce:bb:ff:ba:
aa:b9:00:51:11:9d:5f:fd:7e:13:d5:a2:78:3c:d3:
83:ba:d5:25:29:e6:33:95:fa:f6:20:09:5d:3a:b2:
d8:d5:af:1b:30:b6:a1:0d:36:0c:01:55:98:6a:70:
74:7f:63:81:c1:05:f5:a8:df:74:b8:d6:e0:e5:66:
a9:12:16:88:30:b2:92:fa:74:21:ea:5b:e9:00:d8:
08:e2:cb:5f:c1:bd:64:08:12:53:68:e6:3d:53:00:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:89:EB:9F:9C:8D:E9:C7:E5:D2:94:C4:7C:88:44:41:0E:D6:AE
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wZaJ65-cjenH5dKUxHyIREEO1q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.96.0/24
45.158.56.0/22
85.209.220.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
bc:3f:09:5a:a5:a4:9c:34:8c:2d:4f:8f:30:a1:16:5b:a5:73:
05:63:ca:2d:cc:7c:e3:17:93:ef:eb:b6:56:3e:08:4c:a3:2b:
32:22:9f:51:57:87:f9:f8:f8:2d:da:3f:93:68:c0:6a:f1:83:
7d:b3:cb:e6:1b:7a:7c:bc:46:a5:5f:b9:1a:9c:a4:04:b5:8a:
51:ff:69:e1:80:d6:ae:4e:d8:4f:61:80:d0:25:3e:d6:1e:8a:
bf:ba:ff:7c:0c:35:52:9a:a6:f2:cc:f1:6d:6c:50:7c:5b:a1:
43:b1:29:c3:fc:e6:b7:b6:ec:d5:0b:27:9f:40:f6:26:4e:aa:
5b:ce:70:b9:13:b5:32:a7:d2:a0:6c:d3:99:04:d9:fc:6f:e2:
39:f7:1f:01:37:e3:dc:e6:4b:c4:84:94:6e:54:06:85:f3:8e:
a9:50:96:87:31:3a:8c:76:4a:9f:f5:f5:bd:cb:23:02:f1:30:
ef:43:8e:74:9e:ab:ed:77:ad:c7:23:65:e6:ba:4c:3d:72:aa:
e0:b8:b1:8b:e0:a3:d6:3b:cf:1c:ac:e2:94:d5:7f:86:e2:00:
8c:75:2b:b3:92:02:9c:c3:2a:71:94:47:fc:e7:e9:9c:9e:f2:
90:2b:1d:e4:98:6c:47:2b:af:ad:d8:35:22:0a:09:da:b8:40:
9e:27:f0:aa
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIECgIOpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMw
ODAyMDM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE5Njg5ZWI5Zjlj
OGRlOWM3ZTVkMjk0YzQ3Yzg4NDQ0MTBlZDZhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJCxZqQajCxAvo7V9nw18m8jWvfRg6JcBuV41MmwZHMhithz
CXSPFe3jPy5k5XSkUH1KpKb9rWT/D/KvaJ3wZUniB+Nc8kWjCjCff0W/cTgA6xBE
OFjzFysC+dXNZj/sDpqzkDIdNvOv+hgkpZDX/1kcq1OFQky94m/jMJswHULijpLZ
9zvNpOKkqIBhDFrD9NsE5ZBtEH8UCO6+JRqf2STOu/+6qrkAURGdX/1+E9WieDzT
g7rVJSnmM5X69iAJXTqy2NWvGzC2oQ02DAFVmGpwdH9jgcEF9ajfdLjW4OVmqRIW
iDCykvp0Iepb6QDYCOLLX8G9ZAgSU2jmPVMALl0CAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBTBlonrn5yN6cfl0pTEfIhEQQ7WrjAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L3daYUo2NS1jamVuSDVkS1V4SHlJUkVFTzFxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEAi0MUAMEAC2JYAMEAi2eOAMEAlXR
3AMEAMEl7wMEAMEmNTAMAwQAwScJAwQAwScKMA0GCSqGSIb3DQEBCwUAA4IBAQC8
PwlapaScNIwtT48woRZbpXMFY8otzHzjF5Pv67ZWPghMoysyIp9RV4f5+Pgt2j+T
aMBq8YN9s8vmG3p8vEalX7kanKQEtYpR/2nhgNauTthPYYDQJT7WHoq/uv98DDVS
mqbyzPFtbFB8W6FDsSnD/Oa3tuzVCyefQPYmTqpbznC5E7Uyp9KgbNOZBNn8b+I5
9x8BN+Pc5kvEhJRuVAaF846pUJaHMTqMdkqf9fW9yyMC8TDvQ450nqvtd63HI2Xm
ukw9cqrguLGL4KPWO88crOKU1X+G4gCMdSuzkgKcwypxlEf85+mcnvKQKx3kmGxH
K6+t2DUiCgnauECeJ/Cq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org