Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/q60eWGAOjIKRGpM6cfHHJ0hHDg4.roa
File: q60eWGAOjIKRGpM6cfHHJ0hHDg4.roa (raw, json)
Hash identifier: Ewgb9g+jlCQ1TFLv4rDpudBm+XHalEi+dcbaDQXRp3c=
Subject key identifier: AB:AD:1E:58:60:0E:8C:82:91:1A:93:3A:71:F1:C7:27:48:47:0E:0E
Certificate issuer: /CN=e58fa2b496a50eb810f0a4f4af0e13fedd5d1a3f
Certificate serial: 05C822FD
Authority key identifier: E5:8F:A2:B4:96:A5:0E:B8:10:F0:A4:F4:AF:0E:13:FE:DD:5D:1A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y-itJalDrgQ8KT0rw4T_t1dGj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/q60eWGAOjIKRGpM6cfHHJ0hHDg4.roa
Signing time: Sat 01 Jan 2022 00:56:22 +0000
ROA not before: Sat 01 Jan 2022 00:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3348
IP address blocks: 193.0.165.0/24 maxlen: 24
193.0.164.0/24 maxlen: 24
185.81.132.0/22 maxlen: 24
93.187.132.0/22 maxlen: 24
193.0.147.0/24 maxlen: 24
193.0.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97002237 (0x5c822fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58fa2b496a50eb810f0a4f4af0e13fedd5d1a3f
Validity
Not Before: Jan 1 00:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abad1e58600e8c82911a933a71f1c72748470e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:5c:92:35:1a:6e:f8:6f:88:6d:e6:8f:19:
29:51:40:bc:bc:48:2b:f8:51:ae:78:80:d3:19:8a:
5b:ef:6c:72:9f:9d:56:de:f6:23:84:bc:ab:ca:b7:
67:9e:cb:9f:a5:f4:35:c1:1a:44:76:88:2e:31:47:
d2:42:19:c0:7a:b3:b4:6b:6a:b1:94:5b:e9:c5:a1:
b7:38:40:3f:8d:02:74:4d:a7:40:87:02:91:f4:96:
1f:1f:1c:fb:1b:20:88:80:fb:cc:f1:1b:a5:eb:b6:
77:1e:a2:43:53:30:88:d8:27:be:1f:93:aa:bf:21:
3e:89:06:76:59:ff:d7:f9:78:91:ba:5a:91:d5:13:
46:d4:d1:4d:d1:8d:ac:a8:ef:04:e6:3c:e3:54:5f:
9f:89:1f:f1:b9:43:f9:98:fb:35:96:80:2c:9b:b4:
9b:13:c3:af:29:5b:e7:58:42:75:91:f6:71:e2:e5:
aa:cc:35:a5:74:9e:57:40:80:81:ad:06:68:43:93:
a6:9f:46:de:8a:0d:b7:74:e1:f6:c5:1b:08:2e:54:
9a:21:8e:d5:c8:e3:3d:80:07:23:e7:22:86:c2:08:
1d:61:40:a9:44:84:c7:f1:b5:6f:db:0c:5a:da:7f:
4d:f6:40:43:ee:ea:4e:9d:a5:a7:c1:c1:ac:a4:d3:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AD:1E:58:60:0E:8C:82:91:1A:93:3A:71:F1:C7:27:48:47:0E:0E
X509v3 Authority Key Identifier:
keyid:E5:8F:A2:B4:96:A5:0E:B8:10:F0:A4:F4:AF:0E:13:FE:DD:5D:1A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y-itJalDrgQ8KT0rw4T_t1dGj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/q60eWGAOjIKRGpM6cfHHJ0hHDg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/5Y-itJalDrgQ8KT0rw4T_t1dGj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.132.0/22
185.81.132.0/22
193.0.146.0/23
193.0.164.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6a:fe:dc:60:a8:1a:35:a2:2c:d6:5c:1d:7f:07:fc:72:a7:
18:9d:8e:94:3f:b4:bf:cb:d3:9c:5a:74:b0:66:67:f3:05:f4:
40:43:4d:12:de:8f:2d:37:8a:66:85:47:ce:78:de:5b:8c:c0:
5c:22:63:76:53:55:40:8b:18:79:92:11:be:16:e9:df:e1:da:
8f:ce:4f:1a:ba:93:81:f2:5c:3b:8b:66:c8:25:69:db:bd:30:
30:0c:5e:10:65:3f:27:01:09:1c:8b:41:39:df:62:c9:aa:f9:
e8:7f:62:24:7a:8a:46:04:92:6c:5d:71:f3:8c:20:69:bc:36:
92:3d:66:0c:3c:ba:d5:91:44:5a:0d:65:0d:58:69:62:58:ea:
0c:38:72:19:45:e6:e0:17:88:f6:b7:73:3c:f7:ed:19:c8:71:
3c:bf:ee:ff:25:b9:1e:05:12:67:07:af:e2:e6:2f:07:6d:0b:
5e:73:ac:06:5e:d1:0c:a3:d1:27:d5:90:4c:3b:79:7c:ed:d7:
27:e8:b9:80:d8:54:60:38:6b:a2:ea:31:3a:33:7f:d5:d3:d5:
0c:e5:07:c7:37:dc:ae:6c:94:ea:1b:c9:77:6c:c7:97:f9:78:
0d:1a:d0:1f:2f:b2:20:19:ab:fc:02:7a:8a:b9:cb:ae:eb:c3:
87:3d:c6:be
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBcgi/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NThmYTJiNDk2YTUwZWI4MTBmMGE0ZjRhZjBlMTNmZWRkNWQxYTNmMB4XDTIyMDEw
MTAwNTYyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJhZDFlNTg2MDBl
OGM4MjkxMWE5MzNhNzFmMWM3Mjc0ODQ3MGUwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM9FXJI1Gm74b4ht5o8ZKVFAvLxIK/hRrniA0xmKW+9scp+d
Vt72I4S8q8q3Z57Ln6X0NcEaRHaILjFH0kIZwHqztGtqsZRb6cWhtzhAP40CdE2n
QIcCkfSWHx8c+xsgiID7zPEbpeu2dx6iQ1MwiNgnvh+Tqr8hPokGdln/1/l4kbpa
kdUTRtTRTdGNrKjvBOY841Rfn4kf8blD+Zj7NZaALJu0mxPDrylb51hCdZH2ceLl
qsw1pXSeV0CAga0GaEOTpp9G3ooNt3Th9sUbCC5UmiGO1cjjPYAHI+cihsIIHWFA
qUSEx/G1b9sMWtp/TfZAQ+7qTp2lp8HBrKTTUZUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSrrR5YYA6MgpEakzpx8ccnSEcODjAfBgNVHSMEGDAWgBTlj6K0lqUOuBDw
pPSvDhP+3V0aPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVZLWl0SmFsRHJnUThLVDBydzRUX3QxZEdqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvMmE4MmJmLTU1NDgtNGVmMC04YmUwLTc1NDE2NTAwNzZmYy8x
L3E2MGVXR0FPaklLUkdwTTZjZkhISjBoSERnNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
MmE4MmJmLTU1NDgtNGVmMC04YmUwLTc1NDE2NTAwNzZmYy8xLzVZLWl0SmFsRHJn
UThLVDBydzRUX3QxZEdqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAl27hAMEArlRhAMEAcEAkgMEAcEA
pDANBgkqhkiG9w0BAQsFAAOCAQEAmGr+3GCoGjWiLNZcHX8H/HKnGJ2OlD+0v8vT
nFp0sGZn8wX0QENNEt6PLTeKZoVHznjeW4zAXCJjdlNVQIsYeZIRvhbp3+Haj85P
GrqTgfJcO4tmyCVp270wMAxeEGU/JwEJHItBOd9iyar56H9iJHqKRgSSbF1x84wg
abw2kj1mDDy61ZFEWg1lDVhpYljqDDhyGUXm4BeI9rdzPPftGchxPL/u/yW5HgUS
Zwev4uYvB20LXnOsBl7RDKPRJ9WQTDt5fO3XJ+i5gNhUYDhrouoxOjN/1dPVDOUH
xzfcrmyU6hvJd2zHl/l4DRrQHy+yIBmr/AJ6irnLruvDhz3Gvg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:06 2023 by rpki-client on console-fra.rpki-client.org