Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/RALNKrEJcICTLgZB8YlG5Pp0r6M.roa
File: RALNKrEJcICTLgZB8YlG5Pp0r6M.roa (raw, json)
Hash identifier: v+iWSNejEwtDXlWdeH1UprziQke9rbpwUm9jtHyc2vM=
Subject key identifier: 44:02:CD:2A:B1:09:70:80:93:2E:06:41:F1:89:46:E4:FA:74:AF:A3
Certificate issuer: /CN=65490f90e9c9f6fba4c982b295e7341419540dc9
Certificate serial: 048465E2
Authority key identifier: 65:49:0F:90:E9:C9:F6:FB:A4:C9:82:B2:95:E7:34:14:19:54:0D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUkPkOnJ9vukyYKylec0FBlUDck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/RALNKrEJcICTLgZB8YlG5Pp0r6M.roa
Signing time: Sat 01 Jan 2022 03:56:29 +0000
ROA not before: Sat 01 Jan 2022 03:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16186
IP address blocks: 185.234.92.0/22 maxlen: 22
185.88.10.0/24 maxlen: 24
2a0d:f00::/29 maxlen: 29
2a07:40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75785698 (0x48465e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65490f90e9c9f6fba4c982b295e7341419540dc9
Validity
Not Before: Jan 1 03:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4402cd2ab1097080932e0641f18946e4fa74afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:fc:fa:40:90:c7:55:73:de:03:a6:d5:36:
02:13:95:69:9e:96:1a:14:cf:d8:1a:3e:19:2a:63:
ce:8a:4b:f0:59:f7:19:44:5f:0e:5e:54:0b:52:c1:
f3:72:fe:90:e3:63:c6:09:3f:b9:c6:b9:1e:c9:7b:
8d:79:46:fa:ed:2c:fd:33:3c:92:a6:a9:79:23:d6:
9e:44:8f:02:7a:cc:7b:d5:df:30:c4:c4:fe:1a:6d:
d8:d4:f7:d8:42:9a:45:5a:68:ed:00:c0:c8:42:5c:
7b:f3:b0:85:51:54:f0:f2:10:ce:ba:a6:35:1e:b5:
c6:54:79:74:63:71:43:d9:a0:7e:70:9f:eb:b5:45:
81:4d:0d:6d:48:3a:ba:3f:89:d4:49:c8:98:77:8b:
35:ac:cc:57:5f:cd:14:51:94:a7:16:ac:f1:a1:c6:
1c:69:3e:f0:45:1d:33:44:9f:58:0a:78:6c:63:ba:
27:73:54:ae:ab:c2:7c:ad:57:5b:d1:dc:07:71:d6:
a7:ed:b0:a6:bf:ac:cf:39:85:40:57:80:3a:57:31:
67:7a:72:82:a9:b2:37:75:3f:3c:c8:1a:a0:b5:b5:
7f:37:29:d1:a9:c8:5b:5d:2a:4e:37:4e:75:3e:ec:
ff:4f:b5:d4:33:5b:ee:92:9c:19:ef:10:ac:69:87:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:CD:2A:B1:09:70:80:93:2E:06:41:F1:89:46:E4:FA:74:AF:A3
X509v3 Authority Key Identifier:
keyid:65:49:0F:90:E9:C9:F6:FB:A4:C9:82:B2:95:E7:34:14:19:54:0D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUkPkOnJ9vukyYKylec0FBlUDck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/RALNKrEJcICTLgZB8YlG5Pp0r6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/ZUkPkOnJ9vukyYKylec0FBlUDck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.10.0/24
185.234.92.0/22
IPv6:
2a07:40::/29
2a0d:f00::/29
Signature Algorithm: sha256WithRSAEncryption
50:8e:a9:36:98:27:f0:d9:39:ed:ed:a2:36:a2:5b:2e:40:29:
a4:19:5a:b5:2e:d7:76:35:f7:a7:da:53:86:04:f5:e5:b1:57:
e5:92:68:be:c3:86:94:d4:c5:f1:48:58:c4:41:a7:89:d2:fd:
1f:af:0c:35:58:3c:36:e2:9a:51:08:04:83:d3:42:28:24:84:
b4:9d:2d:af:31:f8:b3:8f:47:1e:82:45:c9:be:e5:4a:c8:14:
7b:05:2d:f2:cb:ac:27:5d:e8:12:cf:e9:af:07:24:a2:c0:02:
d0:e1:9e:33:44:f9:eb:58:85:aa:40:88:74:33:f2:b0:bf:e5:
cb:61:4a:c7:f8:bd:ee:af:e3:ca:49:d5:65:b0:77:fb:1b:c6:
95:e3:c2:81:57:45:da:42:4d:cb:9f:45:ee:0f:db:1d:ee:f7:
44:62:5f:78:ae:06:60:35:97:6d:2c:a4:11:8d:29:5b:0b:40:
5e:8b:c8:9e:43:34:6b:32:39:ae:55:92:91:e4:b4:3c:90:36:
4e:b9:25:22:25:8c:34:f2:aa:f1:73:18:ce:7e:5d:63:69:af:
63:37:d2:50:90:04:67:3f:81:65:3f:7b:f0:67:d9:ae:3a:40:
8d:7e:fa:09:50:5f:0d:62:21:67:76:15:ea:84:26:12:40:9f:
32:f6:bc:53
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEBIRl4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTQ5MGY5MGU5YzlmNmZiYTRjOTgyYjI5NWU3MzQxNDE5NTQwZGM5MB4XDTIyMDEw
MTAzNTYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQwMmNkMmFiMTA5
NzA4MDkzMmUwNjQxZjE4OTQ2ZTRmYTc0YWZhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO+U/PpAkMdVc94DptU2AhOVaZ6WGhTP2Bo+GSpjzopL8Fn3
GURfDl5UC1LB83L+kONjxgk/uca5Hsl7jXlG+u0s/TM8kqapeSPWnkSPAnrMe9Xf
MMTE/hpt2NT32EKaRVpo7QDAyEJce/OwhVFU8PIQzrqmNR61xlR5dGNxQ9mgfnCf
67VFgU0NbUg6uj+J1EnImHeLNazMV1/NFFGUpxas8aHGHGk+8EUdM0SfWAp4bGO6
J3NUrqvCfK1XW9HcB3HWp+2wpr+szzmFQFeAOlcxZ3pygqmyN3U/PMgaoLW1fzcp
0anIW10qTjdOdT7s/0+11DNb7pKcGe8QrGmH/FMCAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBREAs0qsQlwgJMuBkHxiUbk+nSvozAfBgNVHSMEGDAWgBRlSQ+Q6cn2+6TJ
grKV5zQUGVQNyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pVa1BrT25KOXZ1a3lZS3lsZWMwRkJsVURjay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvNTVkZDg0LThiYTctNGI5NS05ZGI4LWJkYjI0Y2JlZmM3Zi8x
L1JBTE5LckVKY0lDVExnWkI4WWxHNVBwMHI2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
NTVkZDg0LThiYTctNGI5NS05ZGI4LWJkYjI0Y2JlZmM3Zi8xL1pVa1BrT25KOXZ1
a3lZS3lsZWMwRkJsVURjay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowEgQCAAEwDAMEALlYCgMEArnqXDAUBAIAAjAOAwUD
KgcAQAMFAyoNDwAwDQYJKoZIhvcNAQELBQADggEBAFCOqTaYJ/DZOe3tojaiWy5A
KaQZWrUu13Y196faU4YE9eWxV+WSaL7DhpTUxfFIWMRBp4nS/R+vDDVYPDbimlEI
BIPTQigkhLSdLa8x+LOPRx6CRcm+5UrIFHsFLfLLrCdd6BLP6a8HJKLAAtDhnjNE
+etYhapAiHQz8rC/5cthSsf4ve6v48pJ1WWwd/sbxpXjwoFXRdpCTcufRe4P2x3u
90RiX3iuBmA1l20spBGNKVsLQF6LyJ5DNGsyOa5VkpHktDyQNk65JSIljDTyqvFz
GM5+XWNpr2M30lCQBGc/gWU/e/Bn2a46QI1++glQXw1iIWd2FeqEJhJAnzL2vFM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org