Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/A-HwLPn8_LwiNnf2YWq9_D47XYg.roa
File: A-HwLPn8_LwiNnf2YWq9_D47XYg.roa (raw, json)
Hash identifier: 4zZk73JbZD56eDiNYgnQoGGrZ2WJZ+yO5gywNFB9isM=
Subject key identifier: 03:E1:F0:2C:F9:FC:FC:BC:22:36:77:F6:61:6A:BD:FC:3E:3B:5D:88
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 01841F071E37AC95610EEDD3A9F8B78C5C46
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/A-HwLPn8_LwiNnf2YWq9_D47XYg.roa
Signing time: Fri 28 Oct 2022 14:37:50 +0000
ROA not before: Fri 28 Oct 2022 14:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 85.255.112.0/21 maxlen: 21
176.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:07:1e:37:ac:95:61:0e:ed:d3:a9:f8:b7:8c:5c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Oct 28 14:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03e1f02cf9fcfcbc223677f6616abdfc3e3b5d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:5f:b5:87:13:ea:70:66:ef:70:7c:0c:5b:
ab:43:c5:06:1c:60:0b:48:6e:2e:f2:58:7b:a3:d8:
83:33:79:5d:e5:69:56:56:13:91:7e:18:d7:57:48:
83:5e:fb:58:24:0b:5e:b3:f5:43:ee:e6:38:dc:ee:
b8:81:db:92:1b:49:e8:3b:e4:51:9b:7d:75:f2:07:
f9:5c:de:33:ca:be:81:27:df:b6:c0:ee:b1:ab:86:
ce:41:d9:6b:38:93:02:9d:53:8a:a4:2d:49:2a:28:
07:d5:56:2e:ae:d5:41:63:27:44:86:d1:d4:0d:2b:
55:58:56:22:27:37:11:33:fa:88:a6:23:83:1b:e4:
41:dc:f4:16:63:15:4d:f6:72:9e:34:88:d3:ee:8b:
d3:50:2e:87:a4:53:50:0b:f5:d1:3f:94:b6:29:1c:
13:c4:11:60:83:4d:8d:3d:fd:61:65:50:75:db:f4:
c5:38:d1:60:26:a5:57:94:9c:c5:03:8c:ab:2a:70:
99:08:65:58:e3:49:a1:70:be:14:02:7e:44:14:0f:
a2:59:1b:97:79:48:47:df:2c:e7:62:62:a1:63:45:
0b:c7:86:c1:21:69:77:e2:50:65:2a:99:9e:49:5f:
9b:f2:64:1a:bb:01:5e:41:36:e2:bc:7f:59:81:d3:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E1:F0:2C:F9:FC:FC:BC:22:36:77:F6:61:6A:BD:FC:3E:3B:5D:88
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/A-HwLPn8_LwiNnf2YWq9_D47XYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/21
176.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:9c:10:9d:ab:f7:2d:94:7b:bf:9b:4f:96:7e:22:8e:25:0c:
ac:aa:15:16:9e:68:d4:f9:33:61:c3:bd:22:6f:80:2c:ca:4a:
1f:3b:8f:74:cb:ed:a1:e0:f2:af:40:ba:13:ea:65:a7:3f:df:
29:fb:83:01:f9:96:6b:cc:42:f5:e3:79:69:3e:7a:8c:76:f1:
1c:56:68:b8:75:c5:3a:89:4b:f5:d6:f5:c6:7c:78:f3:d4:59:
58:20:1e:ff:8d:21:47:9f:df:23:ed:48:a5:f3:b5:68:de:7f:
c3:c6:5f:0d:b8:43:3d:e6:85:9b:3e:46:1e:4c:ad:71:37:5d:
bf:bc:97:0d:49:8c:d5:aa:64:e2:76:0e:c3:44:26:3a:9f:ed:
a0:ca:ae:08:e5:85:05:5e:fc:bf:d8:19:b8:74:86:bd:59:5e:
6b:41:31:f9:dd:d4:6b:b9:4b:aa:25:bc:fd:d1:cd:f8:80:57:
68:c9:f0:54:f3:65:76:9d:c8:f2:d3:50:0d:ab:0f:03:7c:70:
a9:c5:6a:94:11:0d:52:5e:27:a1:88:2d:1b:11:79:f4:b1:99:
d3:3c:3b:79:a8:df:66:ca:9e:2c:1c:65:11:c2:d1:59:3d:55:
00:43:58:5f:b2:f2:e3:7f:00:2c:71:3a:80:97:fa:2e:bf:f5:
e9:26:96:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQfBx43rJVhDu3Tqfi3jFxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjIxMDI4MTQzNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2UxZjAyY2Y5ZmNmY2JjMjIzNjc3ZjY2MTZhYmRmYzNlM2I1ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1pftYcT6nBm73B8DFurQ8UGHGAL
SG4u8lh7o9iDM3ld5WlWVhORfhjXV0iDXvtYJAtes/VD7uY43O64gduSG0noO+RR
m3118gf5XN4zyr6BJ9+2wO6xq4bOQdlrOJMCnVOKpC1JKigH1VYurtVBYydEhtHU
DStVWFYiJzcRM/qIpiODG+RB3PQWYxVN9nKeNIjT7ovTUC6HpFNQC/XRP5S2KRwT
xBFgg02NPf1hZVB12/TFONFgJqVXlJzFA4yrKnCZCGVY40mhcL4UAn5EFA+iWRuX
eUhH3yznYmKhY0ULx4bBIWl34lBlKpmeSV+b8mQauwFeQTbivH9ZgdOOYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAPh8Cz5/Py8IjZ39mFqvfw+O12IMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvQS1Id0xQbjhfTHdpTm5mMllXcTlfRDQ3WFlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVf9wAwQC
sHFkMA0GCSqGSIb3DQEBCwUAA4IBAQBenBCdq/ctlHu/m0+WfiKOJQysqhUWnmjU
+TNhw70ib4AsykofO490y+2h4PKvQLoT6mWnP98p+4MB+ZZrzEL143lpPnqMdvEc
Vmi4dcU6iUv11vXGfHjz1FlYIB7/jSFHn98j7Uil87Vo3n/Dxl8NuEM95oWbPkYe
TK1xN12/vJcNSYzVqmTidg7DRCY6n+2gyq4I5YUFXvy/2Bm4dIa9WV5rQTH53dRr
uUuqJbz90c34gFdoyfBU82V2ncjy01ANqw8DfHCpxWqUEQ1SXiehiC0bEXn0sZnT
PDt5qN9myp4sHGURwtFZPVUAQ1hfsvLjfwAscTqAl/ouv/XpJpaj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org