Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/INi_hVgfHO6QqgHkDdRps0kW8aM.roa
File: INi_hVgfHO6QqgHkDdRps0kW8aM.roa (raw, json)
Hash identifier: bdft6tEKXiDcL+hd1Kk6BS83TTghvdUnS5vEX8zL9ro=
Subject key identifier: 20:D8:BF:85:58:1F:1C:EE:90:AA:01:E4:0D:D4:69:B3:49:16:F1:A3
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 037F41F6
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/INi_hVgfHO6QqgHkDdRps0kW8aM.roa
Signing time: Tue 15 Mar 2022 14:09:23 +0000
ROA not before: Tue 15 Mar 2022 14:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.255.120.0/21 maxlen: 21
176.118.80.0/21 maxlen: 21
176.113.100.0/22 maxlen: 22
178.212.204.0/23 maxlen: 23
178.212.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58671606 (0x37f41f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Mar 15 14:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20d8bf85581f1cee90aa01e40dd469b34916f1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:4d:f1:1a:43:03:0f:54:a2:44:83:36:88:
80:38:6d:b0:bd:a6:56:94:20:b4:2a:74:1d:0a:e3:
d6:6a:3b:3d:7d:97:b0:3d:c5:ab:a5:39:8f:1d:51:
3a:cb:27:08:57:85:c3:40:7e:9c:7d:ea:dc:d9:ff:
63:80:76:fb:8c:49:7a:4e:93:a4:cc:e1:db:ae:b6:
79:5a:0d:8d:98:32:b3:ff:2e:44:50:d4:da:cb:b7:
9e:94:92:f9:ab:17:55:50:d1:40:ae:8b:4a:37:c0:
0f:9e:71:d2:92:a1:c3:fd:7d:83:70:3a:37:2e:ec:
7f:a3:4e:bd:8a:b3:e8:38:32:38:b0:a6:6c:81:53:
84:73:cc:36:e6:d9:dc:cd:86:f9:49:7a:68:a3:7d:
76:bc:19:c9:1d:19:85:a5:7e:c2:a4:0e:ab:6b:a3:
dc:8f:d5:b1:41:0c:16:7e:f9:db:d0:d0:5f:8b:cc:
8d:07:1f:93:ea:b3:7f:f5:7e:ac:01:46:8f:62:eb:
67:cf:06:69:b6:04:48:8f:0b:41:ff:26:60:98:9a:
f7:b6:18:b0:d3:56:4f:c9:ae:58:c8:0d:77:03:5a:
e0:1c:6b:e4:aa:b8:3e:19:c9:41:36:8e:de:46:da:
a8:df:6a:5c:30:59:bb:81:68:75:38:b4:c3:b6:cd:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:BF:85:58:1F:1C:EE:90:AA:01:E4:0D:D4:69:B3:49:16:F1:A3
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/INi_hVgfHO6QqgHkDdRps0kW8aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/21
176.113.100.0/22
176.118.80.0/21
178.212.202.0-178.212.205.255
Signature Algorithm: sha256WithRSAEncryption
98:dc:53:54:37:27:d1:1f:1f:f1:53:d1:75:c2:5c:45:5a:72:
b0:4e:69:62:b9:0f:22:7e:7f:41:94:57:fd:27:3c:79:59:0e:
9b:76:a5:f2:5b:ef:50:e2:85:ee:69:18:89:18:b0:11:86:e0:
83:43:77:e8:08:9f:1b:cc:da:eb:71:15:71:e8:d8:ec:c7:1b:
98:c5:f0:f7:a9:6c:d0:88:f2:7a:0b:79:02:4c:c9:ed:b8:14:
19:a1:d3:f7:f0:b6:44:81:3e:24:d0:56:10:81:c6:b3:bb:63:
94:54:04:b7:34:b8:25:2a:91:ce:8c:5b:4b:29:a4:06:50:ec:
85:83:c9:28:d8:44:b6:55:c3:d2:e0:bf:90:ee:99:a4:80:15:
b6:7f:a6:7f:af:88:fa:f2:20:ff:b1:f5:b4:90:68:de:91:76:
a2:e2:34:f0:dd:d3:ac:bd:bf:4f:65:16:38:22:f8:31:56:57:
98:06:15:b0:73:94:65:93:fc:57:97:a8:d9:dd:f5:8b:48:63:
fd:ba:96:ac:32:20:ad:c3:b4:44:df:97:03:09:71:e7:36:69:
7a:0f:06:ed:b7:eb:4e:4f:47:58:96:54:a9:d1:dc:e4:88:7e:
c1:db:ca:19:f7:e5:e9:e6:9c:f5:c8:88:87:60:6f:52:25:f4:
70:ec:d1:a9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEA39B9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTQ0NjgwYzIwZDFhZjAxZjE2OWIxOGFjOWM3N2Q5ODc3MTMzY2RlMB4XDTIyMDMx
NTE0MDkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBkOGJmODU1ODFm
MWNlZTkwYWEwMWU0MGRkNDY5YjM0OTE2ZjFhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9VTfEaQwMPVKJEgzaIgDhtsL2mVpQgtCp0HQrj1mo7PX2X
sD3Fq6U5jx1ROssnCFeFw0B+nH3q3Nn/Y4B2+4xJek6TpMzh2662eVoNjZgys/8u
RFDU2su3npSS+asXVVDRQK6LSjfAD55x0pKhw/19g3A6Ny7sf6NOvYqz6DgyOLCm
bIFThHPMNubZ3M2G+Ul6aKN9drwZyR0ZhaV+wqQOq2uj3I/VsUEMFn7529DQX4vM
jQcfk+qzf/V+rAFGj2LrZ88GabYESI8LQf8mYJia97YYsNNWT8muWMgNdwNa4Bxr
5Kq4PhnJQTaO3kbaqN9qXDBZu4FodTi0w7bNMxsCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQg2L+FWB8c7pCqAeQN1GmzSRbxozAfBgNVHSMEGDAWgBRJRGgMINGvAfFp
sYrJx32YdxM83jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NVUm9EQ0RScndIeGFiR0t5Y2Q5bUhjVFBONC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvN2RlZTA5LWNkMmUtNDAzMC1hYjkyLWViZGNjMDJmYmFlOS8x
L0lOaV9oVmdmSE82UXFnSGtEZFJwczBrVzhhTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
N2RlZTA5LWNkMmUtNDAzMC1hYjkyLWViZGNjMDJmYmFlOS8xL1NVUm9EQ0RScndI
eGFiR0t5Y2Q5bUhjVFBONC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEA1X/eAMEArBxZAMEA7B2UDAMAwQB
stTKAwQBstTMMA0GCSqGSIb3DQEBCwUAA4IBAQCY3FNUNyfRHx/xU9F1wlxFWnKw
TmliuQ8ifn9BlFf9Jzx5WQ6bdqXyW+9Q4oXuaRiJGLARhuCDQ3foCJ8bzNrrcRVx
6NjsxxuYxfD3qWzQiPJ6C3kCTMntuBQZodP38LZEgT4k0FYQgcazu2OUVAS3NLgl
KpHOjFtLKaQGUOyFg8ko2ES2VcPS4L+Q7pmkgBW2f6Z/r4j68iD/sfW0kGjekXai
4jTw3dOsvb9PZRY4IvgxVleYBhWwc5Rlk/xXl6jZ3fWLSGP9upasMiCtw7RE35cD
CXHnNml6Dwbtt+tOT0dYllSp0dzkiH7B28oZ9+Xp5pz1yIiHYG9SJfRw7NGp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org