Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/YiTgYDioWaeNn7iEHjQqejWkBuM.roa
File: YiTgYDioWaeNn7iEHjQqejWkBuM.roa (raw, json)
Hash identifier: LUiciMh6l9qwAnFjP8DmyvKljogRwJbVyv1MmR1kLLA=
Subject key identifier: 62:24:E0:60:38:A8:59:A7:8D:9F:B8:84:1E:34:2A:7A:35:A4:06:E3
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD4075468ACBA4CA98784E562797724
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/YiTgYDioWaeNn7iEHjQqejWkBuM.roa
Signing time: Sun 01 Jan 2023 14:54:50 +0000
ROA not before: Sun 01 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27257
IP address blocks: 83.98.187.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
85.92.159.0/24 maxlen: 24
213.247.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:07:54:68:ac:ba:4c:a9:87:84:e5:62:79:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6224e06038a859a78d9fb8841e342a7a35a406e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:53:bf:eb:55:e8:8e:5a:9d:d4:5f:96:32:
aa:b3:0d:7b:bc:33:ab:2a:25:17:1d:b8:84:fc:b4:
94:ba:43:15:3e:a0:39:4e:80:d6:80:12:ae:08:84:
40:e0:73:36:f6:e4:c1:3b:91:77:dc:64:8f:e8:d7:
8f:40:04:d8:7e:a1:c3:d0:6c:13:26:c9:74:98:da:
0b:58:3b:1b:68:23:46:08:ef:cd:e4:fa:54:d1:ff:
b0:bb:3e:2c:ca:f7:df:3d:f2:22:91:8e:af:55:ec:
e6:b1:b4:dc:7c:cd:5e:de:1a:54:a9:42:ab:31:e4:
b6:de:5e:4a:a7:58:3b:6c:8c:8a:bb:f0:29:32:54:
80:00:48:52:37:c7:a8:c5:79:7d:e7:1e:4e:56:89:
2a:ac:af:e2:ff:d3:b4:da:5b:dc:85:20:04:f6:ad:
5a:0b:56:15:2d:ef:13:7c:c6:db:51:f5:6a:7e:73:
e3:ac:68:de:38:31:99:e2:30:73:a2:10:f8:3e:5f:
20:9e:8c:74:44:58:77:8e:a2:bb:6e:5c:18:96:ae:
84:b9:aa:de:b3:c8:40:a9:a6:90:05:be:ed:7b:b7:
71:c5:ba:4b:96:37:41:b0:e6:af:02:55:bb:61:59:
99:c2:c7:84:9f:25:2b:90:80:4e:15:ea:bb:84:7a:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:E0:60:38:A8:59:A7:8D:9F:B8:84:1E:34:2A:7A:35:A4:06:E3
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/YiTgYDioWaeNn7iEHjQqejWkBuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.187.0/24
85.92.159.0/24
89.30.141.0/24
213.247.46.0/23
Signature Algorithm: sha256WithRSAEncryption
65:35:39:ca:66:38:c2:de:cb:d6:8f:3d:55:81:ec:05:64:d1:
79:23:7e:aa:04:92:7d:8c:86:89:57:b1:b1:6a:9f:24:05:96:
25:0b:2a:01:69:79:59:14:31:66:f2:b2:bb:29:10:83:ef:fe:
55:7c:d8:35:f4:97:ed:d5:4c:ec:ab:80:1b:ca:62:7c:e6:5b:
43:fd:f9:ba:26:db:02:c3:cc:be:d1:c6:f6:70:59:25:b9:05:
64:f1:eb:28:67:22:09:4d:d0:b2:49:11:96:19:40:41:81:0c:
79:03:9e:d1:39:fd:14:2b:54:23:29:89:9e:d5:66:8a:49:d5:
2a:18:94:a0:0e:f1:50:e6:66:81:8c:c6:4b:6d:20:8d:55:65:
47:c9:d0:6f:69:ec:00:a0:14:e1:cf:e1:68:f7:d1:01:a4:b1:
61:59:cc:88:b5:77:75:c2:35:a6:d1:7a:d3:a1:ac:b9:3a:ec:
47:ba:3f:96:0b:f6:1e:1d:05:4e:e3:3b:eb:21:0e:db:66:76:
3d:92:03:51:84:14:2e:32:50:fb:f4:c6:74:b3:db:03:06:13:
ca:42:ac:86:a0:ff:0c:fb:5f:bd:7b:0c:6a:41:c1:df:27:e5:
f9:02:15:bf:09:93:11:d2:ce:9b:3d:36:a3:ff:62:7d:d3:7b:
99:99:15:59
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVt1AdUaKy6TKmHhOVieXckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjQwYjAyMzExMzc2ZGM5NmVlYmZlY2E3NTVjM2IwMDYx
MTQwZWMwHhcNMjMwMTAxMTQ1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjI0ZTA2MDM4YTg1OWE3OGQ5ZmI4ODQxZTM0MmE3YTM1YTQwNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jBTv+tV6I5andRfljKqsw17vDOr
KiUXHbiE/LSUukMVPqA5ToDWgBKuCIRA4HM29uTBO5F33GSP6NePQATYfqHD0GwT
Jsl0mNoLWDsbaCNGCO/N5PpU0f+wuz4syvffPfIikY6vVezmsbTcfM1e3hpUqUKr
MeS23l5Kp1g7bIyKu/ApMlSAAEhSN8eoxXl95x5OVokqrK/i/9O02lvchSAE9q1a
C1YVLe8TfMbbUfVqfnPjrGjeODGZ4jBzohD4Pl8gnox0RFh3jqK7blwYlq6Euare
s8hAqaaQBb7te7dxxbpLljdBsOavAlW7YVmZwseEnyUrkIBOFeq7hHrXcwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGIk4GA4qFmnjZ+4hB40Kno1pAbjMB8GA1UdIwQY
MBaAFM9kCwIxE3bclu6/7KdVw7AGEUDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJRTEFqRVRkdHlXN3Jfc3AxWERzQVlSUU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMGVjNzgtN2U0NC00OWU0LTg0NDMt
OWRiNWJlNGQwZWZmLzEvWWlUZ1lEaW9XYWVObjdpRUhqUXFlaldrQnVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMGVjNzgtN2U0NC00OWU0LTg0NDMtOWRiNWJlNGQwZWZm
LzEvejJRTEFqRVRkdHlXN3Jfc3AxWERzQVlSUU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAU2K7AwQA
VVyfAwQAWR6NAwQB1fcuMA0GCSqGSIb3DQEBCwUAA4IBAQBlNTnKZjjC3svWjz1V
gewFZNF5I36qBJJ9jIaJV7Gxap8kBZYlCyoBaXlZFDFm8rK7KRCD7/5VfNg19Jft
1Uzsq4AbymJ85ltD/fm6JtsCw8y+0cb2cFkluQVk8esoZyIJTdCySRGWGUBBgQx5
A57ROf0UK1QjKYme1WaKSdUqGJSgDvFQ5maBjMZLbSCNVWVHydBvaewAoBThz+Fo
99EBpLFhWcyItXd1wjWm0XrToay5OuxHuj+WC/YeHQVO4zvrIQ7bZnY9kgNRhBQu
MlD79MZ0s9sDBhPKQqyGoP8M+1+9ewxqQcHfJ+X5AhW/CZMR0s6bPTaj/2J903uZ
mRVZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org