Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/JlXrPFM8PudnHpWlyWpLlX5qfYQ.roa
File: JlXrPFM8PudnHpWlyWpLlX5qfYQ.roa (raw, json)
Hash identifier: sUa35XX1w+esuhOCcyyJk9SlV6G0niR2Z4qKYziwglk=
Subject key identifier: 26:55:EB:3C:53:3C:3E:E7:67:1E:95:A5:C9:6A:4B:95:7E:6A:7D:84
Certificate issuer: /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial: 0579CE09
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/JlXrPFM8PudnHpWlyWpLlX5qfYQ.roa
Signing time: Sat 01 Jan 2022 09:57:40 +0000
ROA not before: Sat 01 Jan 2022 09:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61108
IP address blocks: 185.163.50.0/24 maxlen: 24
185.226.40.0/22 maxlen: 22
178.238.0.0/22 maxlen: 22
88.218.52.0/22 maxlen: 22
2a10:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91868681 (0x579ce09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Validity
Not Before: Jan 1 09:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2655eb3c533c3ee7671e95a5c96a4b957e6a7d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:f8:ea:c8:9a:97:14:33:bf:b4:90:78:fa:
ce:a5:80:8e:e5:f3:ea:8c:26:a7:ef:80:f7:15:fd:
1f:2c:85:92:3d:e0:4c:a2:09:df:a3:2b:78:e2:2c:
95:a7:c5:68:81:42:ff:08:a1:d6:6c:8c:bc:01:61:
79:4a:1d:84:1d:8a:7a:16:0b:7f:aa:b7:70:55:4e:
9b:c8:c8:8b:2e:78:78:91:91:82:b3:a3:11:d7:e5:
19:c1:b3:22:42:4f:0e:76:bd:2e:34:f8:56:f8:a9:
0b:b9:0c:64:14:5d:e4:4d:e9:d0:d5:45:b6:bd:ed:
97:6a:7a:b1:5b:9b:4c:f5:8a:65:f5:b2:ce:18:c1:
d6:3d:97:bc:11:3b:1e:61:03:56:73:2e:42:78:d0:
00:1f:0d:a3:ff:18:84:55:b9:1b:55:5f:b7:be:76:
63:59:04:d8:b2:eb:c8:d6:c9:bb:9b:00:0f:1e:e3:
58:5d:11:e0:9a:af:d5:66:24:d2:94:90:60:ec:e9:
89:8d:67:00:39:74:fa:d4:a0:00:85:71:2b:ba:3c:
8a:7c:1b:4e:bf:b1:2c:b4:4a:3e:db:d0:8c:37:6e:
0a:03:ea:ba:29:c4:ac:65:f2:5c:f7:ed:b0:7f:4f:
93:33:f9:60:27:da:d7:f0:2b:bc:03:4c:43:d8:c7:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:55:EB:3C:53:3C:3E:E7:67:1E:95:A5:C9:6A:4B:95:7E:6A:7D:84
X509v3 Authority Key Identifier:
keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/JlXrPFM8PudnHpWlyWpLlX5qfYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.52.0/22
178.238.0.0/22
185.163.50.0/24
185.226.40.0/22
IPv6:
2a10:5300::/29
Signature Algorithm: sha256WithRSAEncryption
2e:29:2f:9f:37:5c:98:1d:de:b6:db:23:5b:1f:31:75:2e:1e:
43:ba:83:e8:4f:c7:13:a5:6e:a9:a3:8c:49:d4:0b:45:98:f6:
1f:d4:e2:a2:af:e5:02:e4:bb:64:57:e2:5a:64:da:5c:b7:32:
14:44:dc:68:dc:b5:f9:11:d5:ac:59:4f:cd:0a:e2:b3:5e:f9:
9e:07:44:1b:9f:a7:6d:e2:39:11:89:94:a1:83:d7:29:88:e5:
7c:29:b3:fe:a9:29:2c:40:74:66:14:17:a8:9d:d7:10:73:4a:
2a:6a:ce:94:a2:3b:56:0e:36:16:23:4a:6e:b2:cb:fc:ad:43:
04:9e:5e:66:b3:01:0a:10:80:08:5a:1e:74:bf:a0:14:12:43:
0f:95:62:aa:86:57:ed:92:84:00:d4:85:1b:7f:10:db:44:86:
38:18:6c:13:14:1a:3c:03:7f:9a:39:9e:7c:72:29:96:f6:82:
38:b4:aa:e7:55:06:dc:47:b4:c8:a5:7e:af:97:37:90:95:ba:
fd:12:ee:00:82:84:b3:85:c8:f8:34:87:a8:30:09:40:db:9d:
a2:5e:f7:1c:f5:43:b3:29:68:0f:ef:2c:7a:ef:b7:ff:03:4a:
b9:5a:e8:83:0c:c8:57:93:96:fd:ea:d6:e4:ef:01:5e:31:4c:
a3:30:84:c9
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBXnOCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTAzNDA4YjMyN2Q4MGU2YjFiNmM5NzE3ZWQ2NzY5ZTliNzc1MGUyMB4XDTIyMDEw
MTA5NTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY1NWViM2M1MzNj
M2VlNzY3MWU5NWE1Yzk2YTRiOTU3ZTZhN2Q4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgM+OrImpcUM7+0kHj6zqWAjuXz6owmp++A9xX9HyyFkj3g
TKIJ36MreOIslafFaIFC/wih1myMvAFheUodhB2KehYLf6q3cFVOm8jIiy54eJGR
grOjEdflGcGzIkJPDna9LjT4VvipC7kMZBRd5E3p0NVFtr3tl2p6sVubTPWKZfWy
zhjB1j2XvBE7HmEDVnMuQnjQAB8No/8YhFW5G1Vft752Y1kE2LLryNbJu5sADx7j
WF0R4Jqv1WYk0pSQYOzpiY1nADl0+tSgAIVxK7o8inwbTr+xLLRKPtvQjDduCgPq
uinErGXyXPftsH9PkzP5YCfa1/ArvANMQ9jHfacCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQmVes8Uzw+52celaXJakuVfmp9hDAfBgNVHSMEGDAWgBTVA0CLMn2A5rG2
yXF+1naem3dQ4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFRTkFpeko5Z09heHRzbHhmdFoybnB0M1VPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvZjMyNzc2LTA3ZjktNGE2My04MzIwLTI4YjdlYzk2Zjg4Yi8x
L0psWHJQRk04UHVkbkhwV2x5V3BMbFg1cWZZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
ZjMyNzc2LTA3ZjktNGE2My04MzIwLTI4YjdlYzk2Zjg4Yi8xLzFRTkFpeko5Z09h
eHRzbHhmdFoybnB0M1VPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAljaNAMEArLuAAMEALmjMgMEArni
KDANBAIAAjAHAwUDKhBTADANBgkqhkiG9w0BAQsFAAOCAQEALikvnzdcmB3ettsj
Wx8xdS4eQ7qD6E/HE6VuqaOMSdQLRZj2H9Tioq/lAuS7ZFfiWmTaXLcyFETcaNy1
+RHVrFlPzQris175ngdEG5+nbeI5EYmUoYPXKYjlfCmz/qkpLEB0ZhQXqJ3XEHNK
KmrOlKI7Vg42FiNKbrLL/K1DBJ5eZrMBChCACFoedL+gFBJDD5ViqoZX7ZKEANSF
G38Q20SGOBhsExQaPAN/mjmefHIplvaCOLSq51UG3Ee0yKV+r5c3kJW6/RLuAIKE
s4XI+DSHqDAJQNudol73HPVDsyloD+8seu+3/wNKuVrogwzIV5OW/erW5O8BXjFM
ozCEyQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org