Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/orzwCO2RXhCAVRZNZM31Undo2NM.roa
File: orzwCO2RXhCAVRZNZM31Undo2NM.roa (raw, json)
Hash identifier: E8O0wvfCCiTrScApDY/KERVH8VZVo+pRun5Ul4HDa4s=
Subject key identifier: A2:BC:F0:08:ED:91:5E:10:80:55:16:4D:64:CD:F5:52:77:68:D8:D3
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 0187E770A57B0E143FA487C24C4EE421675E
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/orzwCO2RXhCAVRZNZM31Undo2NM.roa
Signing time: Thu 04 May 2023 15:45:31 +0000
ROA not before: Thu 04 May 2023 15:45:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:70:a5:7b:0e:14:3f:a4:87:c2:4c:4e:e4:21:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: May 4 15:45:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2bcf008ed915e108055164d64cdf5527768d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:70:99:70:a9:42:26:40:ca:ec:5e:aa:19:
a5:4a:43:92:2e:85:03:65:f3:82:93:d0:55:ed:84:
ac:bc:0a:ef:ba:22:30:50:4f:a8:6d:6b:8d:12:b6:
35:c9:7a:32:48:6c:c4:8d:76:6d:5a:13:f9:98:3d:
c8:30:4c:2b:49:c7:ab:94:cb:f8:fd:3b:8a:50:d5:
ca:3a:31:87:13:b1:b4:9c:14:ba:3f:23:3e:da:b4:
97:4c:5c:ed:cb:68:f9:bb:ee:9a:9a:58:07:6d:88:
7e:8a:4e:94:37:a3:17:7b:aa:e2:8a:44:8a:25:da:
ec:b0:06:61:a5:77:1a:45:78:32:82:0e:d4:99:e5:
8c:84:f6:51:c1:39:3b:ba:95:8b:7f:02:90:8e:c7:
96:2e:7e:64:58:91:02:b4:b7:51:4f:6d:b1:a9:f8:
d5:81:6a:97:83:7b:79:f2:02:94:d9:ff:af:01:c4:
e5:af:e6:d4:70:3e:ef:34:86:5e:69:60:1d:62:4f:
59:2f:d0:98:af:8d:ab:88:ac:07:6d:ce:aa:3a:88:
29:96:21:3e:8c:62:5e:e9:1b:c2:83:85:d4:39:8e:
b6:33:31:2f:ef:74:50:6c:11:76:6a:1f:7e:b6:26:
b4:d4:7e:8f:34:91:46:2a:ef:cd:47:c1:98:f0:d4:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:F0:08:ED:91:5E:10:80:55:16:4D:64:CD:F5:52:77:68:D8:D3
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/orzwCO2RXhCAVRZNZM31Undo2NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
2c:69:c7:4b:cf:ed:73:30:0d:98:45:fa:70:19:67:55:fa:39:
6d:a0:43:9b:34:ce:a2:3d:01:81:0f:bc:14:6a:f9:cc:26:92:
06:15:82:5d:7f:74:95:0d:4c:2c:36:cb:38:24:c8:7a:b3:db:
60:d4:08:ed:de:01:19:e4:49:85:6d:47:56:b5:4f:82:03:e5:
6e:75:b4:5c:e5:1c:16:93:b1:79:c5:9a:90:57:58:06:bd:43:
e4:02:a5:97:c2:04:35:fd:12:3d:83:3e:9b:bc:00:f5:1c:80:
f7:4c:09:9f:0b:d0:ac:a2:6d:d5:a5:41:8e:3b:2e:8c:a1:1f:
5b:32:44:c8:07:8e:2e:cc:a7:84:ba:74:2c:ac:c1:30:e0:b9:
6f:8d:5f:fa:e7:8e:53:5a:6f:2b:81:40:6c:c7:34:a4:86:95:
25:3f:ca:02:59:ca:d3:c9:ac:64:c6:51:f1:32:ba:b5:c7:af:
15:55:b3:68:14:a0:46:a5:cd:dc:82:d1:8d:9e:bd:eb:6e:30:
b1:92:d5:8c:22:46:51:a6:10:d6:ff:7f:a6:a2:c0:fa:33:7b:
0e:25:f9:bb:d0:52:61:69:f8:9b:b0:1d:52:b5:2f:b7:e8:af:
cf:53:2c:ff:37:0e:dc:fd:0c:fb:b2:78:b9:2b:23:9a:81:31:
b6:b8:89:ac
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYfncKV7DhQ/pIfCTE7kIWdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTJkODE3ZWMzNGI0NzMxZDhkMzZjN2IwOTRkMmIwNDVk
MGJjN2MwHhcNMjMwNTA0MTU0NTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmJjZjAwOGVkOTE1ZTEwODA1NTE2NGQ2NGNkZjU1Mjc3NjhkOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApipwmXCpQiZAyuxeqhmlSkOSLoUD
ZfOCk9BV7YSsvArvuiIwUE+obWuNErY1yXoySGzEjXZtWhP5mD3IMEwrScerlMv4
/TuKUNXKOjGHE7G0nBS6PyM+2rSXTFzty2j5u+6amlgHbYh+ik6UN6MXe6riikSK
JdrssAZhpXcaRXgygg7UmeWMhPZRwTk7upWLfwKQjseWLn5kWJECtLdRT22xqfjV
gWqXg3t58gKU2f+vAcTlr+bUcD7vNIZeaWAdYk9ZL9CYr42riKwHbc6qOogpliE+
jGJe6RvCg4XUOY62MzEv73RQbBF2ah9+tia01H6PNJFGKu/NR8GY8NSijwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFKK88AjtkV4QgFUWTWTN9VJ3aNjTMB8GA1UdIwQY
MBaAFPmS2BfsNLRzHY02x7CU0rBF0Lx8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aTFlGLXcwdEhNZGpUYkhzSlRTc0VYUXZIdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYjNhMTExLTA4YTAtNDc1ZC1iNjkx
LWJkYzkwYTE1ZjdmMy8xL29yendDTzJSWGhDQVZSWk5aTTMxVW5kbzJOTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmUvYjNhMTExLTA4YTAtNDc1ZC1iNjkxLWJkYzkwYTE1Zjdm
My8xLzEtWkxZRi13MHRITWRqVGJIc0pUU3NFWFF2SHcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgbQGCCsGAQUFBwEHAQH/BIGkMIGhMB4EAgABMBgDBANe
fEADBAOy+DADBAK5LdADBAK5u5wwfwQCAAIweQMHACoCKJAAADASAwcAKgIokP//
AwcAKgIokQACAwcAKgIokQAEAwcCKgIokQAQMBIDBwAqAiiRABUDBwAqAiiRABYD
BwAqAiiRACkDBwAqAiiRADIDBwAqAiiRAEADBwAqAiiSADIDBwAqAiiSADYDBwAq
AiiSAEAwDQYJKoZIhvcNAQELBQADggEBACxpx0vP7XMwDZhF+nAZZ1X6OW2gQ5s0
zqI9AYEPvBRq+cwmkgYVgl1/dJUNTCw2yzgkyHqz22DUCO3eARnkSYVtR1a1T4ID
5W51tFzlHBaTsXnFmpBXWAa9Q+QCpZfCBDX9Ej2DPpu8APUcgPdMCZ8L0KyibdWl
QY47LoyhH1syRMgHji7Mp4S6dCyswTDguW+NX/rnjlNabyuBQGzHNKSGlSU/ygJZ
ytPJrGTGUfEyurXHrxVVs2gUoEalzdyC0Y2evetuMLGS1YwiRlGmENb/f6aiwPoz
ew4l+bvQUmFp+JuwHVK1L7for89TLP83Dtz9DPuyeLkrI5qBMba4iaw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org