Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/jZ7xF2v2DWihgTeifK5HNoKY9Tw.roa
File: jZ7xF2v2DWihgTeifK5HNoKY9Tw.roa (raw, json)
Hash identifier: ax4ddTC/3aIyOZ9iJykncJFWpptblPm/TjJ3QTMjnTc=
Subject key identifier: 8D:9E:F1:17:6B:F6:0D:68:A1:81:37:A2:7C:AE:47:36:82:98:F5:3C
Certificate issuer: /CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
Certificate serial: 0AF0E8F5
Authority key identifier: 19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/jZ7xF2v2DWihgTeifK5HNoKY9Tw.roa
Signing time: Sat 01 Jan 2022 10:03:00 +0000
ROA not before: Sat 01 Jan 2022 10:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29243
IP address blocks: 185.168.212.0/22 maxlen: 23
109.163.208.0/21 maxlen: 22
80.83.0.0/20 maxlen: 24
2001:1430::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183560437 (0xaf0e8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
Validity
Not Before: Jan 1 10:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d9ef1176bf60d68a18137a27cae47368298f53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:44:bb:43:97:5e:48:37:56:8c:74:60:a1:
40:da:9e:cd:a6:e1:39:34:86:1d:a3:21:23:e9:6e:
d5:25:78:17:50:50:71:29:47:02:c0:91:f9:39:15:
4b:15:04:99:24:0f:ca:04:07:33:40:38:e5:44:da:
6f:1f:0d:38:a5:93:ea:ce:50:d2:d0:15:9e:c3:92:
8e:a4:dd:c9:85:45:04:6d:2b:9f:49:3e:9c:85:d0:
49:2c:14:4a:ff:8a:28:93:e3:2a:6e:a0:3b:ed:2d:
07:6f:0d:73:f3:10:53:d2:11:5d:22:ee:f7:35:0b:
77:c1:92:d3:09:5e:6a:6c:09:a3:94:9f:32:ba:90:
b0:22:20:f6:89:66:3d:18:77:f1:9b:47:a9:6b:f3:
49:36:fb:f5:c0:21:ac:e4:7c:0d:bb:4c:b3:77:43:
1a:26:68:a7:ba:1d:4d:38:d4:c8:14:42:71:3d:5e:
9a:8d:70:1a:78:22:38:2d:d3:e2:9a:0d:33:91:75:
ae:64:c1:87:c8:fa:d4:e8:3a:5f:20:5d:c0:9d:d6:
49:50:51:60:13:2e:13:8a:85:d0:1d:b5:f4:e0:c4:
50:04:a2:07:4a:f7:52:50:e9:30:9e:14:a0:0c:03:
da:5d:f8:7b:2a:2f:a1:16:cd:26:46:6d:d8:5e:06:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:F1:17:6B:F6:0D:68:A1:81:37:A2:7C:AE:47:36:82:98:F5:3C
X509v3 Authority Key Identifier:
keyid:19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/jZ7xF2v2DWihgTeifK5HNoKY9Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.0.0/20
109.163.208.0/21
185.168.212.0/22
IPv6:
2001:1430::/32
Signature Algorithm: sha256WithRSAEncryption
41:d4:e5:89:81:e6:73:a1:49:64:85:d5:3d:c7:4e:e7:69:b4:
60:68:70:0c:cb:b4:b4:5a:08:32:18:85:19:06:ea:d0:6c:9a:
b2:89:30:88:24:6e:c1:53:8d:19:dd:ec:fb:98:0d:35:2d:f5:
26:35:25:f1:09:26:6b:46:38:e9:df:4e:55:64:e2:8e:3b:a6:
2f:18:47:c9:17:b4:15:09:3c:6f:13:4c:5b:17:b7:96:86:14:
6e:c2:ca:14:18:24:31:5a:f2:a0:b3:f9:f2:a1:f0:48:a8:19:
f1:0a:45:33:9a:5f:bd:58:7d:18:74:f8:c2:b9:0a:28:99:c9:
9c:ee:d1:0d:66:d0:c8:d6:59:f9:b4:a4:24:0b:2f:85:cb:e1:
91:e7:28:12:6b:da:2c:71:88:81:f1:17:f8:50:19:e6:0f:8b:
0b:cb:45:39:54:e1:15:70:67:f1:5f:7f:2b:49:2b:bb:5a:3d:
27:eb:b4:ce:91:7b:1d:d8:44:3f:b1:ec:55:f0:03:a0:6f:e7:
c4:64:d8:56:8d:cb:d6:b7:f5:fe:19:5d:86:66:06:44:66:4f:
8d:bd:96:54:5e:09:da:84:59:7a:a8:74:c3:16:09:85:c9:29:
58:9a:01:b5:15:f8:2f:80:75:27:68:bb:5d:af:6e:16:8a:f8:
1a:ee:17:08
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECvDo9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OWE5ZWI5MDA0YzZmNjAzZWYyYTk1MDZjZDUxZWFhNmVlOGJjZTdiMB4XDTIyMDEw
MTEwMDMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQ5ZWYxMTc2YmY2
MGQ2OGExODEzN2EyN2NhZTQ3MzY4Mjk4ZjUzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhjRLtDl15IN1aMdGChQNqezabhOTSGHaMhI+lu1SV4F1BQ
cSlHAsCR+TkVSxUEmSQPygQHM0A45UTabx8NOKWT6s5Q0tAVnsOSjqTdyYVFBG0r
n0k+nIXQSSwUSv+KKJPjKm6gO+0tB28Nc/MQU9IRXSLu9zULd8GS0wleamwJo5Sf
MrqQsCIg9olmPRh38ZtHqWvzSTb79cAhrOR8DbtMs3dDGiZop7odTTjUyBRCcT1e
mo1wGngiOC3T4poNM5F1rmTBh8j61Og6XyBdwJ3WSVBRYBMuE4qF0B219ODEUASi
B0r3UlDpMJ4UoAwD2l34eyovoRbNJkZt2F4GPhkCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSNnvEXa/YNaKGBN6J8rkc2gpj1PDAfBgNVHSMEGDAWgBQZqeuQBMb2A+8q
lQbNUeqm7ovOezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dhbnJrQVRHOWdQdktwVUd6VkhxcHU2THpucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmMvNTJiNzZlLWRhNmYtNDE4My1hMDAzLWMwYTFlYzYwMzMzMy8x
L2paN3hGMnYyRFdpaGdUZWlmSzVITm9LWTlUdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMv
NTJiNzZlLWRhNmYtNDE4My1hMDAzLWMwYTFlYzYwMzMzMy8xL0dhbnJrQVRHOWdQ
dktwVUd6VkhxcHU2THpucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBFBTAAMEA22j0AMEArmo1DANBAIA
AjAHAwUAIAEUMDANBgkqhkiG9w0BAQsFAAOCAQEAQdTliYHmc6FJZIXVPcdO52m0
YGhwDMu0tFoIMhiFGQbq0GyasokwiCRuwVONGd3s+5gNNS31JjUl8Qkma0Y46d9O
VWTijjumLxhHyRe0FQk8bxNMWxe3loYUbsLKFBgkMVryoLP58qHwSKgZ8QpFM5pf
vVh9GHT4wrkKKJnJnO7RDWbQyNZZ+bSkJAsvhcvhkecoEmvaLHGIgfEX+FAZ5g+L
C8tFOVThFXBn8V9/K0kru1o9J+u0zpF7HdhEP7HsVfADoG/nxGTYVo3L1rf1/hld
hmYGRGZPjb2WVF4J2oRZeqh0wxYJhckpWJoBtRX4L4B1J2i7Xa9uFor4Gu4XCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:30 2024 by rpki-client on console-ams.rpki-client.org