Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/mkfo4ZLollOrFa_kZl_u5MDC1Vo.roa
File: mkfo4ZLollOrFa_kZl_u5MDC1Vo.roa (raw, json)
Hash identifier: euT94f+bEGe2P9bP12RpckuIW/Vy4PhlhJUAlRJajok=
Subject key identifier: 9A:47:E8:E1:92:E8:96:53:AB:15:AF:E4:66:5F:EE:E4:C0:C2:D5:5A
Certificate issuer: /CN=9c1927417d461755aefac39978a58be1d322d0c0
Certificate serial: 09DE94E3
Authority key identifier: 9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/mkfo4ZLollOrFa_kZl_u5MDC1Vo.roa
Signing time: Fri 07 Jan 2022 12:59:19 +0000
ROA not before: Fri 07 Jan 2022 12:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 185.23.202.0/23 maxlen: 24
185.251.46.0/23 maxlen: 24
185.247.229.0/24 maxlen: 24
185.251.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165582051 (0x9de94e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1927417d461755aefac39978a58be1d322d0c0
Validity
Not Before: Jan 7 12:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a47e8e192e89653ab15afe4665feee4c0c2d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:cb:94:34:b4:28:14:99:2a:b5:9a:ce:9d:
93:63:a1:f4:54:e0:e8:05:59:e9:d0:6d:b6:ca:e8:
c2:e1:2b:42:b8:e3:a2:16:9e:d0:0f:8b:5a:f7:b2:
9b:25:92:cb:b2:80:ce:c1:64:a1:26:ae:8a:b6:95:
2b:32:90:82:cc:a1:93:12:0c:48:d4:88:ba:93:df:
bc:e6:a1:b4:c0:32:43:a5:08:8c:6b:1c:2d:8b:a1:
21:c4:c0:0f:c4:a2:a6:21:bf:1e:a3:88:81:2b:56:
f2:5c:0a:7b:52:1c:15:71:2c:b1:a6:70:05:ac:a5:
4b:ff:46:bd:d0:9e:a7:49:da:50:87:4a:0d:fa:96:
0e:59:e6:41:43:5f:46:12:80:97:99:a1:f2:76:0b:
29:97:23:cb:49:2e:e6:4a:7b:d3:cc:7f:03:d4:2d:
c8:af:2f:5d:09:30:25:c8:82:92:49:cf:95:8c:1b:
e9:f5:fc:66:74:e6:2f:e9:6b:57:4e:e0:ad:0d:70:
b7:ed:a7:a7:c2:fc:df:85:da:80:41:cd:6f:30:06:
1d:55:83:6d:34:7d:50:c8:91:55:bb:14:51:38:03:
48:93:bc:03:c7:9c:cc:3b:a1:66:9b:12:2a:5c:c7:
a8:75:d4:b9:3f:7a:ab:02:23:5b:bd:b9:30:d2:dc:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:E8:E1:92:E8:96:53:AB:15:AF:E4:66:5F:EE:E4:C0:C2:D5:5A
X509v3 Authority Key Identifier:
keyid:9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/mkfo4ZLollOrFa_kZl_u5MDC1Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/nBknQX1GF1Wu-sOZeKWL4dMi0MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.202.0/23
185.247.229.0/24
185.251.46.0/23
185.251.250.0/23
Signature Algorithm: sha256WithRSAEncryption
64:cb:44:77:81:ea:7a:3a:94:c2:4b:86:17:5d:05:53:cc:aa:
4b:e9:3d:1a:70:3e:66:c8:05:a0:0e:5a:99:50:99:e4:45:11:
0f:ef:8c:9a:8e:4a:ba:da:69:91:b5:a4:4a:d1:fc:0e:b8:a8:
ff:e2:e1:c2:c4:ce:ab:f6:b1:67:82:73:f3:30:ca:d2:29:a4:
9e:c4:38:e2:82:03:d7:5a:55:84:ee:f8:8b:94:b9:df:04:cf:
f1:d8:a5:73:f3:bb:de:75:c6:96:58:5a:cd:55:de:48:e6:70:
ea:95:16:ab:8f:ab:e8:08:52:cd:5f:2f:c9:87:4c:3f:3a:bd:
a0:37:50:a8:80:89:78:03:06:cd:26:ae:4d:69:93:01:8c:d3:
e4:18:d0:8d:7a:9c:aa:9d:a5:10:85:56:a9:d5:e3:d6:9b:c4:
a9:94:7b:11:1a:a7:1b:a3:89:89:74:a3:d8:4a:99:a2:22:e5:
5c:44:d9:de:41:bd:fc:32:b2:20:62:02:5f:7b:6e:b8:61:15:
6b:83:4a:ce:e3:1f:52:71:b8:b5:f4:51:04:77:3d:0c:3e:52:
e2:ce:76:85:04:5b:64:ce:44:0a:ab:fc:d6:4e:e4:e9:3b:14:
0d:c5:b8:15:51:a3:77:6c:74:8e:3f:b9:7a:87:e3:df:9a:45:
77:01:19:8e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECd6U4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YzE5Mjc0MTdkNDYxNzU1YWVmYWMzOTk3OGE1OGJlMWQzMjJkMGMwMB4XDTIyMDEw
NzEyNTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE0N2U4ZTE5MmU4
OTY1M2FiMTVhZmU0NjY1ZmVlZTRjMGMyZDU1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLAy5Q0tCgUmSq1ms6dk2Oh9FTg6AVZ6dBttsrowuErQrjj
ohae0A+LWveymyWSy7KAzsFkoSauiraVKzKQgsyhkxIMSNSIupPfvOahtMAyQ6UI
jGscLYuhIcTAD8SipiG/HqOIgStW8lwKe1IcFXEssaZwBaylS/9GvdCep0naUIdK
DfqWDlnmQUNfRhKAl5mh8nYLKZcjy0ku5kp708x/A9QtyK8vXQkwJciCkknPlYwb
6fX8ZnTmL+lrV07grQ1wt+2np8L834XagEHNbzAGHVWDbTR9UMiRVbsUUTgDSJO8
A8eczDuhZpsSKlzHqHXUuT96qwIjW725MNLczG0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSaR+jhkuiWU6sVr+RmX+7kwMLVWjAfBgNVHSMEGDAWgBScGSdBfUYXVa76
w5l4pYvh0yLQwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25Ca25RWDFHRjFXdS1zT1plS1dMNGRNaTBNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvYTY3NjA5LTM4YzktNDRjNy04NDBiLWRkOTBhZmRhZjVjNy8x
L21rZm80WkxvbGxPckZhX2tabF91NU1EQzFWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
YTY3NjA5LTM4YzktNDRjNy04NDBiLWRkOTBhZmRhZjVjNy8xL25Ca25RWDFHRjFX
dS1zT1plS1dMNGRNaTBNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAbkXygMEALn35QMEAbn7LgMEAbn7
+jANBgkqhkiG9w0BAQsFAAOCAQEAZMtEd4HqejqUwkuGF10FU8yqS+k9GnA+ZsgF
oA5amVCZ5EURD++Mmo5KutppkbWkStH8Drio/+LhwsTOq/axZ4Jz8zDK0imknsQ4
4oID11pVhO74i5S53wTP8dilc/O73nXGllhazVXeSOZw6pUWq4+r6AhSzV8vyYdM
Pzq9oDdQqICJeAMGzSauTWmTAYzT5BjQjXqcqp2lEIVWqdXj1pvEqZR7ERqnG6OJ
iXSj2EqZoiLlXETZ3kG9/DKyIGICX3tuuGEVa4NKzuMfUnG4tfRRBHc9DD5S4s52
hQRbZM5ECqv81k7k6TsUDcW4FVGjd2x0jj+5eofj35pFdwEZjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org