Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/3_j54VpvdcgimdeGWgZJjdAuc7s.roa
File: 3_j54VpvdcgimdeGWgZJjdAuc7s.roa (raw, json)
Hash identifier: rzzxoiw5GpGtZ5JsuSBRAGknelZDqOrhc1PR5d1KY8M=
Subject key identifier: DF:F8:F9:E1:5A:6F:75:C8:22:99:D7:86:5A:06:49:8D:D0:2E:73:BB
Certificate issuer: /CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Certificate serial: 01856E141E86D0793D79903063A5CB50EA73
Authority key identifier: 44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/3_j54VpvdcgimdeGWgZJjdAuc7s.roa
Signing time: Sun 01 Jan 2023 16:04:50 +0000
ROA not before: Sun 01 Jan 2023 16:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 62.100.0.0/18 maxlen: 18
84.41.128.0/17 maxlen: 17
217.17.128.0/20 maxlen: 20
212.67.160.0/19 maxlen: 19
217.112.112.0/20 maxlen: 20
80.248.32.0/20 maxlen: 20
88.211.128.0/18 maxlen: 18
2a02:938::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:1e:86:d0:79:3d:79:90:30:63:a5:cb:50:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Validity
Not Before: Jan 1 16:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dff8f9e15a6f75c82299d7865a06498dd02e73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:ea:52:e3:d2:bc:4a:95:65:00:b2:78:d3:
b3:4e:aa:a0:36:54:b0:e8:28:e8:8c:4c:93:28:cd:
c6:c6:61:71:21:20:09:5f:86:9e:cf:a7:4b:95:86:
28:27:a1:3c:34:e5:cf:6c:72:84:11:02:a0:0c:8f:
03:56:40:5c:7c:13:d5:fc:b3:89:8c:ab:20:6a:22:
19:41:6d:e4:0a:bf:df:a8:65:f9:bb:72:40:fd:12:
1e:a5:cd:63:db:e9:16:ee:e6:c6:81:be:ce:75:bb:
a0:ed:6a:54:a6:9d:2b:15:cd:74:2b:aa:80:fd:b6:
58:a9:b4:38:30:f1:01:05:5a:83:5f:1a:55:d6:9f:
94:96:c5:bf:5b:41:13:b0:ea:bb:aa:6a:d9:41:67:
f6:23:d5:03:82:69:61:bb:b0:4e:6c:58:68:8d:3b:
b8:97:58:66:f9:32:b1:52:07:47:da:bd:be:00:ce:
d7:e5:da:88:e9:5e:12:e0:67:a1:6b:0b:c1:8e:6f:
dd:ca:a1:15:80:8e:75:c0:18:bd:5a:ae:8d:9f:c7:
64:47:27:8a:06:08:13:c2:de:f9:5a:bf:15:33:80:
89:a7:f0:e5:8b:d4:3c:42:ba:3a:44:41:89:6c:5a:
1b:71:d4:88:ee:2a:12:81:c0:84:b7:0a:41:b5:55:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F8:F9:E1:5A:6F:75:C8:22:99:D7:86:5A:06:49:8D:D0:2E:73:BB
X509v3 Authority Key Identifier:
keyid:44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/3_j54VpvdcgimdeGWgZJjdAuc7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/RAWiImnnwnRCPNyD4eoUHWyym_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.0.0/18
80.248.32.0/20
84.41.128.0/17
88.211.128.0/18
212.67.160.0/19
217.17.128.0/20
217.112.112.0/20
IPv6:
2a02:938::/29
Signature Algorithm: sha256WithRSAEncryption
90:98:36:46:eb:35:01:08:7a:74:96:36:21:26:d1:78:5a:b2:
bd:05:dd:4f:57:32:14:55:5c:cc:0d:ed:a9:95:b9:f0:aa:62:
92:27:f1:96:e5:49:b3:39:4d:3c:e2:d9:00:a6:3a:62:70:46:
6e:32:ea:93:fc:87:82:ca:c7:b0:35:0e:e2:30:34:74:a8:b2:
3c:ac:35:a8:24:ab:24:38:a6:50:07:ca:7e:cd:6c:21:6f:d4:
b0:f3:04:08:e2:8b:5e:b6:c9:cc:9e:f1:7e:30:1c:99:86:d3:
50:ac:a6:46:c3:88:71:93:2d:f5:21:26:42:bb:49:9a:c1:d4:
b6:b6:2d:75:70:9d:2b:48:61:67:1e:20:cc:21:82:0f:fd:4b:
7a:f6:81:20:ff:bf:fb:c4:3f:19:75:29:60:7a:f2:43:32:fb:
a8:b1:76:01:50:47:6c:5f:5d:4a:71:ea:6b:7c:5e:21:7a:d9:
b8:d4:eb:41:de:5d:3a:b2:ec:b1:2e:7d:57:ad:fc:d3:6c:7c:
97:0a:79:26:3d:26:b3:e1:cc:eb:3c:f2:62:ad:63:95:09:35:
d2:bd:cf:7e:97:df:3e:b1:50:ca:67:8a:0c:fb:c6:47:eb:40:
92:ed:4e:b4:18:76:1a:bd:c0:d7:78:f6:dd:c1:49:59:95:4d:
9d:4f:a4:f6
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYVuFB6G0Hk9eZAwY6XLUOpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDVhMjIyNjllN2MyNzQ0MjNjZGM4M2UxZWExNDFkNmNi
MjliZjcwHhcNMjMwMTAxMTYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmY4ZjllMTVhNmY3NWM4MjI5OWQ3ODY1YTA2NDk4ZGQwMmU3M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRfqUuPSvEqVZQCyeNOzTqqgNlSw
6CjojEyTKM3GxmFxISAJX4aez6dLlYYoJ6E8NOXPbHKEEQKgDI8DVkBcfBPV/LOJ
jKsgaiIZQW3kCr/fqGX5u3JA/RIepc1j2+kW7ubGgb7Odbug7WpUpp0rFc10K6qA
/bZYqbQ4MPEBBVqDXxpV1p+UlsW/W0ETsOq7qmrZQWf2I9UDgmlhu7BObFhojTu4
l1hm+TKxUgdH2r2+AM7X5dqI6V4S4GehawvBjm/dyqEVgI51wBi9Wq6Nn8dkRyeK
BggTwt75Wr8VM4CJp/Dli9Q8Qro6REGJbFobcdSI7ioSgcCEtwpBtVXImwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFN/4+eFab3XIIpnXhloGSY3QLnO7MB8GA1UdIwQY
MBaAFEQFoiJp58J0Qjzcg+HqFB1sspv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFXaUltbm53blJDUE55RDRlb1VIV3l5bV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NGFkZmItMTIxOS00ZjM3LWIwNWIt
NmZhMGVkM2Y1ZTVjLzEvM19qNTRWcHZkY2dpbWRlR1dnWkpqZEF1YzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NGFkZmItMTIxOS00ZjM3LWIwNWItNmZhMGVkM2Y1ZTVj
LzEvUkFXaUltbm53blJDUE55RDRlb1VIV3l5bV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQGPmQAAwQE
UPggAwQHVCmAAwQGWNOAAwQF1EOgAwQE2RGAAwQE2XBwMA0EAgACMAcDBQMqAgk4
MA0GCSqGSIb3DQEBCwUAA4IBAQCQmDZG6zUBCHp0ljYhJtF4WrK9Bd1PVzIUVVzM
De2plbnwqmKSJ/GW5UmzOU084tkApjpicEZuMuqT/IeCysewNQ7iMDR0qLI8rDWo
JKskOKZQB8p+zWwhb9Sw8wQI4otetsnMnvF+MByZhtNQrKZGw4hxky31ISZCu0ma
wdS2ti11cJ0rSGFnHiDMIYIP/Ut69oEg/7/7xD8ZdSlgevJDMvuosXYBUEdsX11K
ceprfF4hetm41OtB3l06suyxLn1XrfzTbHyXCnkmPSaz4czrPPJirWOVCTXSvc9+
l98+sVDKZ4oM+8ZH60CS7U60GHYavcDXePbdwUlZlU2dT6T2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:43 2024 by rpki-client on console-ams.rpki-client.org