Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/_a_W3xXEmm7vczfgUBrtPWNxSRw.roa
File: _a_W3xXEmm7vczfgUBrtPWNxSRw.roa (raw, json)
Hash identifier: ce/ckkstR75gpXmD4ubOmlnsA36wpPtNVtgEkBEEbwA=
Subject key identifier: FD:AF:D6:DF:15:C4:9A:6E:EF:73:37:E0:50:1A:ED:3D:63:71:49:1C
Certificate issuer: /CN=9a3191fa2f823e39584d7d3f53f102d8ce395433
Certificate serial: 03C63564
Authority key identifier: 9A:31:91:FA:2F:82:3E:39:58:4D:7D:3F:53:F1:02:D8:CE:39:54:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjGR-i-CPjlYTX0_U_EC2M45VDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/_a_W3xXEmm7vczfgUBrtPWNxSRw.roa
Signing time: Sat 01 Jan 2022 01:53:34 +0000
ROA not before: Sat 01 Jan 2022 01:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39368
IP address blocks: 185.211.58.0/24 maxlen: 24
185.211.57.0/24 maxlen: 24
185.211.56.0/24 maxlen: 24
185.211.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63321444 (0x3c63564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3191fa2f823e39584d7d3f53f102d8ce395433
Validity
Not Before: Jan 1 01:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdafd6df15c49a6eef7337e0501aed3d6371491c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:0b:7f:5d:51:88:cc:3f:01:22:4c:f8:e2:
07:89:d3:76:30:24:89:65:7e:42:2b:b7:38:eb:b1:
7b:02:80:79:52:e0:1a:5c:ac:8b:bb:86:b3:5d:4b:
16:19:9b:0c:ef:e1:41:93:4a:03:39:a1:06:3f:d4:
10:24:ef:81:b8:c4:59:63:89:1b:ec:e0:01:95:5d:
49:59:0e:8e:b6:47:34:f8:14:47:d1:91:ef:23:f2:
60:03:dc:a9:76:29:84:ea:44:79:51:7c:30:24:b4:
ed:68:ae:25:06:25:b3:8f:37:69:ce:6d:36:c6:9e:
0d:a1:fe:09:2b:15:64:5c:72:f0:9d:34:00:5c:3d:
5b:dd:a6:9e:04:e2:c3:3b:9e:12:b3:67:ca:6d:1a:
14:fa:4d:74:a8:2e:f2:e2:c0:24:70:a4:3c:40:53:
4c:32:e4:f5:40:cd:f4:ad:e5:e4:e4:2a:23:88:7b:
e9:39:3b:18:b5:ac:f4:45:56:fa:39:a8:6b:ea:2d:
4d:33:b1:9c:f1:18:ff:bb:bf:18:0c:60:af:a2:fc:
79:81:9d:d2:44:a9:42:3c:33:0a:07:48:1a:44:71:
f3:a5:9e:b4:7b:be:56:a1:f3:9b:2b:47:a8:50:8a:
7e:06:f3:32:46:e4:be:98:38:96:87:ed:48:59:ac:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:D6:DF:15:C4:9A:6E:EF:73:37:E0:50:1A:ED:3D:63:71:49:1C
X509v3 Authority Key Identifier:
keyid:9A:31:91:FA:2F:82:3E:39:58:4D:7D:3F:53:F1:02:D8:CE:39:54:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjGR-i-CPjlYTX0_U_EC2M45VDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/_a_W3xXEmm7vczfgUBrtPWNxSRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/mjGR-i-CPjlYTX0_U_EC2M45VDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.56.0/22
Signature Algorithm: sha256WithRSAEncryption
23:1c:54:e9:a9:c9:98:88:20:58:67:f3:a8:d6:8a:b1:0f:67:
e6:c3:f1:e3:b8:9a:33:7e:76:a3:12:09:0a:9c:59:47:7c:97:
81:9f:20:21:8a:3c:1a:0d:d3:56:83:45:e8:27:cc:64:8e:82:
50:72:09:14:47:d0:5a:d1:e1:63:57:15:26:cf:24:88:82:7f:
18:f3:49:f4:d4:38:2a:55:bc:33:dd:26:43:b6:2a:06:0b:a2:
fc:4e:e8:de:fb:df:96:bb:9d:d4:43:f5:d6:ec:f2:e0:99:66:
af:e6:43:ba:57:88:f9:ba:8a:29:6a:bc:e8:c1:cd:c2:5a:f3:
e4:2b:95:19:84:34:4e:d5:37:c8:29:7b:f2:92:5a:8c:e6:28:
9f:02:bb:dd:fb:48:f1:7d:8e:84:d7:4e:f8:ef:61:ae:5f:62:
35:19:0d:3d:5e:2b:59:6d:52:97:eb:7c:54:70:84:53:16:88:
9b:0c:a6:4a:1e:92:4c:59:6b:21:15:64:7b:cc:e8:c7:50:9b:
92:b6:72:ec:1e:10:2c:3e:88:5d:d8:5b:69:fa:a9:d0:4a:06:
c0:7d:1f:a9:3d:ed:b1:39:d6:1d:09:cc:76:f8:fb:ca:5c:bc:
84:15:6e:9b:57:f9:27:2d:81:e4:9c:e1:f3:cc:72:33:bc:a2:
b8:0f:6d:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8Y1ZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTMxOTFmYTJmODIzZTM5NTg0ZDdkM2Y1M2YxMDJkOGNlMzk1NDMzMB4XDTIyMDEw
MTAxNTMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRhZmQ2ZGYxNWM0
OWE2ZWVmNzMzN2UwNTAxYWVkM2Q2MzcxNDkxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM2XC39dUYjMPwEiTPjiB4nTdjAkiWV+Qiu3OOuxewKAeVLg
Glysi7uGs11LFhmbDO/hQZNKAzmhBj/UECTvgbjEWWOJG+zgAZVdSVkOjrZHNPgU
R9GR7yPyYAPcqXYphOpEeVF8MCS07WiuJQYls483ac5tNsaeDaH+CSsVZFxy8J00
AFw9W92mngTiwzueErNnym0aFPpNdKgu8uLAJHCkPEBTTDLk9UDN9K3l5OQqI4h7
6Tk7GLWs9EVW+jmoa+otTTOxnPEY/7u/GAxgr6L8eYGd0kSpQjwzCgdIGkRx86We
tHu+VqHzmytHqFCKfgbzMkbkvpg4loftSFms09UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT9r9bfFcSabu9zN+BQGu09Y3FJHDAfBgNVHSMEGDAWgBSaMZH6L4I+OVhN
fT9T8QLYzjlUMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21qR1ItaS1DUGpsWVRYMF9VX0VDMk00NVZETS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvM2ZiMTgwLWUxNjktNDYzZC04ZGY2LTMyNzMxM2EzMmJkYS8x
L19hX1czeFhFbW03dmN6ZmdVQnJ0UFdOeFNSdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
M2ZiMTgwLWUxNjktNDYzZC04ZGY2LTMyNzMxM2EzMmJkYS8xL21qR1ItaS1DUGps
WVRYMF9VX0VDMk00NVZETS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnTODANBgkqhkiG9w0BAQsFAAOC
AQEAIxxU6anJmIggWGfzqNaKsQ9n5sPx47iaM352oxIJCpxZR3yXgZ8gIYo8Gg3T
VoNF6CfMZI6CUHIJFEfQWtHhY1cVJs8kiIJ/GPNJ9NQ4KlW8M90mQ7YqBgui/E7o
3vvflrud1EP11uzy4Jlmr+ZDuleI+bqKKWq86MHNwlrz5CuVGYQ0TtU3yCl78pJa
jOYonwK73ftI8X2OhNdO+O9hrl9iNRkNPV4rWW1Sl+t8VHCEUxaImwymSh6STFlr
IRVke8zox1CbkrZy7B4QLD6IXdhbafqp0EoGwH0fqT3tsTnWHQnMdvj7yly8hBVu
m1f5Jy2B5Jzh88xyM7yiuA9trQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org