Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/lsXcKZr_S9zCXuOSNFIwdB-ef8I.roa
File: lsXcKZr_S9zCXuOSNFIwdB-ef8I.roa (raw, json)
Hash identifier: apBsBp8YfDgDP+vXbyfYDsHrDLTOMFx5Fs0xaWGLLfU=
Subject key identifier: 96:C5:DC:29:9A:FF:4B:DC:C2:5E:E3:92:34:52:30:74:1F:9E:7F:C2
Certificate issuer: /CN=a9c23e90819c9fc74d9446d30cd1a24c15992260
Certificate serial: 0186176EE69BB8BFC31A87BAE4B941542FBC
Authority key identifier: A9:C2:3E:90:81:9C:9F:C7:4D:94:46:D3:0C:D1:A2:4C:15:99:22:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcI-kIGcn8dNlEbTDNGiTBWZImA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/lsXcKZr_S9zCXuOSNFIwdB-ef8I.roa
Signing time: Fri 03 Feb 2023 13:19:49 +0000
ROA not before: Fri 03 Feb 2023 13:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42812
IP address blocks: 185.82.140.0/22 maxlen: 22
2a05:90c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:6e:e6:9b:b8:bf:c3:1a:87:ba:e4:b9:41:54:2f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c23e90819c9fc74d9446d30cd1a24c15992260
Validity
Not Before: Feb 3 13:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c5dc299aff4bdcc25ee392345230741f9e7fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:83:b0:5e:1e:cf:fd:b6:ed:4f:f9:d7:d6:
b3:2e:c1:58:e5:36:a9:05:68:1c:f7:12:bd:5b:3e:
2d:69:58:11:fc:e3:1b:b0:2f:52:cb:4a:43:7e:0f:
83:a8:dc:2a:49:a5:37:82:dc:c5:4d:7c:8e:81:49:
a4:c0:f4:dd:1d:b9:01:8f:cb:d4:38:95:93:a5:d6:
53:27:95:88:8d:de:fa:45:a7:9d:08:35:97:91:e8:
87:cd:00:7f:b7:ea:e8:73:9e:d0:2f:26:b8:67:5f:
8d:b6:bc:93:82:9c:51:1f:a4:12:90:40:b0:22:8d:
a4:f0:12:fc:40:18:bd:a5:c4:01:20:ce:5e:e4:b6:
35:9c:59:70:9f:24:c4:60:5d:c3:9c:08:35:91:32:
21:5a:fb:cf:0c:98:31:60:b1:6b:1f:f8:d4:29:14:
d5:37:17:5b:e1:01:9e:09:77:f4:b0:db:ae:cd:88:
7b:13:76:19:1f:b2:59:74:d4:19:e0:9b:5d:8a:8d:
66:1d:8d:01:c5:57:c9:18:5a:13:60:19:69:03:3e:
c8:dd:a2:77:56:fc:8a:3d:34:c3:6b:ca:b1:2c:ca:
73:34:3a:9f:28:85:e8:77:f0:32:1e:0a:04:00:d7:
73:8e:33:a0:df:14:7f:99:57:8c:72:11:d2:ea:fd:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:DC:29:9A:FF:4B:DC:C2:5E:E3:92:34:52:30:74:1F:9E:7F:C2
X509v3 Authority Key Identifier:
keyid:A9:C2:3E:90:81:9C:9F:C7:4D:94:46:D3:0C:D1:A2:4C:15:99:22:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcI-kIGcn8dNlEbTDNGiTBWZImA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/lsXcKZr_S9zCXuOSNFIwdB-ef8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/qcI-kIGcn8dNlEbTDNGiTBWZImA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.140.0/22
IPv6:
2a05:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
d2:17:6b:f2:a0:f0:47:dc:d0:ad:cd:17:cf:b3:ac:f6:c1:1a:
03:3f:67:ab:57:77:3e:5e:bd:49:d2:72:83:ec:30:b2:90:02:
60:db:11:14:b2:01:48:03:c2:43:80:46:c2:c3:a6:97:58:4b:
3d:b9:8d:ea:7d:8e:e6:ff:d7:69:fb:ea:b1:10:85:b3:d5:e1:
6d:70:40:d2:48:cc:fc:56:4c:00:38:23:c7:c6:4c:65:9a:0f:
e4:e8:21:29:71:d8:c8:f1:a0:9f:95:fc:83:37:6a:64:11:ee:
5b:08:ac:55:98:0e:47:67:77:91:fa:85:32:df:e7:ee:1b:20:
5d:8a:80:22:57:08:24:c5:fc:87:9a:ee:40:1a:92:e8:16:7d:
20:7e:34:2a:a0:2a:4a:32:f5:4e:2f:cd:98:37:3e:6f:b3:b7:
8d:a0:dc:e6:34:1d:4e:ca:cf:d0:52:28:3b:df:8a:d0:06:e7:
db:01:ed:fb:43:77:c6:83:a8:96:5a:c0:6e:6a:ce:78:20:cd:
f3:09:2e:e5:16:fb:b7:ea:f4:10:7f:fa:d3:17:2c:0c:26:4a:
45:de:84:b2:03:66:d9:66:e6:0b:5c:38:53:3b:2d:03:60:20:
31:b8:a1:2e:d8:7c:bf:c1:5c:44:2a:6d:65:05:75:b2:46:1c:
54:4e:b5:5f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYXbuabuL/DGoe65LlBVC+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YzIzZTkwODE5YzlmYzc0ZDk0NDZkMzBjZDFhMjRjMTU5
OTIyNjAwHhcNMjMwMjAzMTMxOTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmM1ZGMyOTlhZmY0YmRjYzI1ZWUzOTIzNDUyMzA3NDFmOWU3ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP2DsF4ez/227U/519azLsFY5Tap
BWgc9xK9Wz4taVgR/OMbsC9Sy0pDfg+DqNwqSaU3gtzFTXyOgUmkwPTdHbkBj8vU
OJWTpdZTJ5WIjd76RaedCDWXkeiHzQB/t+roc57QLya4Z1+NtryTgpxRH6QSkECw
Io2k8BL8QBi9pcQBIM5e5LY1nFlwnyTEYF3DnAg1kTIhWvvPDJgxYLFrH/jUKRTV
Nxdb4QGeCXf0sNuuzYh7E3YZH7JZdNQZ4Jtdio1mHY0BxVfJGFoTYBlpAz7I3aJ3
VvyKPTTDa8qxLMpzNDqfKIXod/AyHgoEANdzjjOg3xR/mVeMchHS6v2SfwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJbF3Cma/0vcwl7jkjRSMHQfnn/CMB8GA1UdIwQY
MBaAFKnCPpCBnJ/HTZRG0wzRokwVmSJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNJLWtJR2NuOGRObEViVEROR2lUQldaSW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZWNhMDMtYzA2YS00OTY1LWIxODgt
NTk5MWIxMzdhNGI0LzEvbHNYY0tacl9TOXpDWHVPU05GSXdkQi1lZjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZWNhMDMtYzA2YS00OTY1LWIxODgtNTk5MWIxMzdhNGI0
LzEvcWNJLWtJR2NuOGRObEViVEROR2lUQldaSW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVKMMA0E
AgACMAcDBQMqBZDAMA0GCSqGSIb3DQEBCwUAA4IBAQDSF2vyoPBH3NCtzRfPs6z2
wRoDP2erV3c+Xr1J0nKD7DCykAJg2xEUsgFIA8JDgEbCw6aXWEs9uY3qfY7m/9dp
++qxEIWz1eFtcEDSSMz8VkwAOCPHxkxlmg/k6CEpcdjI8aCflfyDN2pkEe5bCKxV
mA5HZ3eR+oUy3+fuGyBdioAiVwgkxfyHmu5AGpLoFn0gfjQqoCpKMvVOL82YNz5v
s7eNoNzmNB1Oys/QUig734rQBufbAe37Q3fGg6iWWsBuas54IM3zCS7lFvu36vQQ
f/rTFywMJkpF3oSyA2bZZuYLXDhTOy0DYCAxuKEu2Hy/wVxEKm1lBXWyRhxUTrVf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:59 2024 by rpki-client on console-ams.rpki-client.org