Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/oYo2tSaRqg37kG-SGUj9tKK2mSk.roa
File: oYo2tSaRqg37kG-SGUj9tKK2mSk.roa (raw, json)
Hash identifier: sZp6m+6/cyEAHPfL5Kz7gmW3Fc45cy4/JBD21Cwi91E=
Subject key identifier: A1:8A:36:B5:26:91:AA:0D:FB:90:6F:92:19:48:FD:B4:A2:B6:99:29
Certificate issuer: /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial: 018558C8EF1C5CB84143756C9F40E6FA3196
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/oYo2tSaRqg37kG-SGUj9tKK2mSk.roa
Signing time: Wed 28 Dec 2022 12:50:41 +0000
ROA not before: Wed 28 Dec 2022 12:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61108
IP address blocks: 185.163.50.0/24 maxlen: 24
178.238.0.0/22 maxlen: 22
88.218.52.0/22 maxlen: 22
2a10:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:c8:ef:1c:5c:b8:41:43:75:6c:9f:40:e6:fa:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Validity
Not Before: Dec 28 12:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a18a36b52691aa0dfb906f921948fdb4a2b69929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:29:92:58:b6:47:df:d3:c7:a3:e0:b7:ec:
87:a7:f5:e1:86:68:d0:be:37:7a:a3:00:6c:e0:63:
dd:fd:68:8a:cd:a3:29:c9:65:b6:4a:e5:63:09:f6:
3d:a1:46:84:95:13:17:63:09:9d:c4:2a:7f:f8:6d:
40:42:4d:2f:9c:12:75:94:d4:b8:ad:6d:1f:a4:1e:
3e:0b:51:46:cd:34:6b:01:8a:96:63:48:ba:d7:a5:
84:63:cc:fa:76:0d:a0:33:3c:e0:b7:84:8b:52:c5:
a7:f9:e3:35:11:f3:58:ba:ad:26:e7:6c:3e:ab:71:
e3:5d:0d:bd:d0:8b:12:23:53:5d:7e:99:8e:ae:2c:
77:64:0d:a2:de:7c:a8:b6:59:04:39:39:e4:38:ef:
79:1d:db:c4:87:09:22:74:7f:71:67:a6:28:0d:a2:
32:47:0f:69:b1:6b:9b:ca:50:a6:64:24:d0:73:7c:
78:9e:28:11:2f:ad:06:d1:63:8d:c5:0f:22:8a:a0:
26:b2:2d:23:ac:a2:db:4e:5d:0e:43:a0:d9:df:81:
9b:f3:5f:dd:7f:30:ca:27:69:c2:13:58:9d:b4:01:
24:e0:5c:e3:fb:fc:8c:24:95:b1:87:ab:57:6d:71:
92:05:e8:82:a7:23:e4:b5:9f:76:f6:16:84:bf:aa:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:36:B5:26:91:AA:0D:FB:90:6F:92:19:48:FD:B4:A2:B6:99:29
X509v3 Authority Key Identifier:
keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/oYo2tSaRqg37kG-SGUj9tKK2mSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.52.0/22
178.238.0.0/22
185.163.50.0/24
IPv6:
2a10:5300::/29
Signature Algorithm: sha256WithRSAEncryption
3f:a6:4c:8b:f0:97:96:54:25:88:97:7f:08:f2:4e:64:ad:d6:
14:99:b7:33:1d:78:9d:a7:77:65:80:6e:4d:7b:9c:53:52:9d:
2f:96:aa:69:02:7e:39:81:52:48:22:9f:54:56:ad:c6:f8:e3:
91:f9:f2:bd:7a:2d:25:a5:ba:da:ca:74:90:e0:e0:62:39:bb:
4d:da:c7:c0:7e:4c:92:82:80:c6:b9:ee:4a:1b:52:10:f6:67:
04:8b:81:1f:6c:fc:71:b5:bf:2a:ff:64:91:8a:9f:7c:3a:21:
cf:57:0e:43:56:29:64:b5:a5:18:44:a7:76:34:4e:5d:8a:0b:
df:2f:d5:3a:04:85:c2:61:aa:b6:cc:00:41:5e:f2:a4:93:c1:
bb:44:f2:89:eb:d3:38:99:ae:4e:f0:63:69:e9:59:cb:5e:90:
2a:b4:05:e9:1b:22:92:0c:50:50:f8:12:a4:b5:de:e3:b5:51:
12:98:53:8e:67:25:70:49:c5:22:5e:3c:b7:16:97:0c:19:eb:
0b:a2:b9:93:85:0e:ae:9f:01:c7:33:ec:59:a2:ef:a6:15:a7:
be:c6:37:74:6a:99:d6:e8:69:68:8c:7f:7f:54:09:f6:0e:04:
30:66:41:50:df:4d:43:23:14:1e:f1:d0:47:85:17:1e:72:81:
12:12:88:35
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVYyO8cXLhBQ3Vsn0Dm+jGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDM0MDhiMzI3ZDgwZTZiMWI2Yzk3MTdlZDY3NjllOWI3
NzUwZTIwHhcNMjIxMjI4MTI1MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMThhMzZiNTI2OTFhYTBkZmI5MDZmOTIxOTQ4ZmRiNGEyYjY5OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcYpkli2R9/Tx6Pgt+yHp/XhhmjQ
vjd6owBs4GPd/WiKzaMpyWW2SuVjCfY9oUaElRMXYwmdxCp/+G1AQk0vnBJ1lNS4
rW0fpB4+C1FGzTRrAYqWY0i616WEY8z6dg2gMzzgt4SLUsWn+eM1EfNYuq0m52w+
q3HjXQ290IsSI1NdfpmOrix3ZA2i3nyotlkEOTnkOO95HdvEhwkidH9xZ6YoDaIy
Rw9psWubylCmZCTQc3x4nigRL60G0WONxQ8iiqAmsi0jrKLbTl0OQ6DZ34Gb81/d
fzDKJ2nCE1idtAEk4Fzj+/yMJJWxh6tXbXGSBeiCpyPktZ929haEv6q5TQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKGKNrUmkaoN+5BvkhlI/bSitpkpMB8GA1UdIwQY
MBaAFNUDQIsyfYDmsbbJcX7Wdp6bd1DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFOQWl6SjlnT2F4dHNseGZ0WjJucHQzVU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mMzI3NzYtMDdmOS00YTYzLTgzMjAt
MjhiN2VjOTZmODhiLzEvb1lvMnRTYVJxZzM3a0ctU0dVajl0S0sybVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mMzI3NzYtMDdmOS00YTYzLTgzMjAtMjhiN2VjOTZmODhi
LzEvMVFOQWl6SjlnT2F4dHNseGZ0WjJucHQzVU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCWNo0AwQC
su4AAwQAuaMyMA0EAgACMAcDBQMqEFMAMA0GCSqGSIb3DQEBCwUAA4IBAQA/pkyL
8JeWVCWIl38I8k5krdYUmbczHXidp3dlgG5Ne5xTUp0vlqppAn45gVJIIp9UVq3G
+OOR+fK9ei0lpbraynSQ4OBiObtN2sfAfkySgoDGue5KG1IQ9mcEi4EfbPxxtb8q
/2SRip98OiHPVw5DVilktaUYRKd2NE5digvfL9U6BIXCYaq2zABBXvKkk8G7RPKJ
69M4ma5O8GNp6VnLXpAqtAXpGyKSDFBQ+BKktd7jtVESmFOOZyVwScUiXjy3FpcM
GesLormThQ6unwHHM+xZou+mFae+xjd0apnW6GlojH9/VAn2DgQwZkFQ301DIxQe
8dBHhRcecoESEog1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:32 2024 by rpki-client on console-ams.rpki-client.org