Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pIJGS069ke88IS9xeP3RICeU5ws.roa
File: pIJGS069ke88IS9xeP3RICeU5ws.roa (raw, json)
Hash identifier: 6MXAHPIovy59d/pPdIF1VyQejTJhjuc45VVKddqD400=
Subject key identifier: A4:82:46:4B:4E:BD:91:EF:3C:21:2F:71:78:FD:D1:20:27:94:E7:0B
Certificate issuer: /CN=a84233ad498882a916f223956b585e5bb409c2c5
Certificate serial: 018CC26D68FDEEE8D6CF3E92767898332845
Authority key identifier: A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pIJGS069ke88IS9xeP3RICeU5ws.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47638
IP address blocks: 185.161.132.0/22 maxlen: 24
2a0f:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:68:fd:ee:e8:d6:cf:3e:92:76:78:98:33:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84233ad498882a916f223956b585e5bb409c2c5
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a482464b4ebd91ef3c212f7178fdd1202794e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:2d:d9:92:37:5f:66:e6:c2:9b:cf:7c:e1:
fb:81:a3:7f:d5:5b:4e:ab:50:de:12:ef:51:3f:19:
77:49:63:b8:e6:23:63:54:b8:26:7d:ea:37:3f:8d:
3d:63:0d:58:6c:10:bf:f4:1b:98:e6:33:7e:b6:9c:
20:be:37:81:f5:1c:63:6d:15:30:23:61:86:f1:b9:
92:7d:fd:3b:b8:77:66:e7:19:ce:a9:5b:24:b4:2a:
dd:c0:f2:a6:26:15:6b:4f:1f:48:76:65:f6:bc:e4:
35:02:09:3c:dc:69:50:39:48:08:47:bf:89:f1:5f:
0f:e1:2d:a7:17:b1:68:fe:31:33:4d:d1:b5:b1:23:
03:b5:3f:eb:84:bb:55:87:c1:27:36:24:78:de:85:
7e:a1:12:45:a8:b7:af:eb:9e:72:90:57:00:a0:ed:
d5:f3:44:59:9a:c5:92:74:12:e9:04:1f:3a:e6:24:
ac:d3:3c:ed:23:18:06:65:62:0b:27:d6:7f:dc:8f:
15:b5:54:e8:67:7b:30:dd:2b:30:03:ba:d3:1e:21:
7d:3b:b8:6f:0f:30:71:f8:d6:39:9a:3d:bb:0b:7d:
1d:81:25:ba:94:38:12:89:ab:f7:2f:d5:da:9d:c5:
2a:db:fc:80:a9:ed:45:e8:2d:37:e2:79:e9:9c:1a:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:46:4B:4E:BD:91:EF:3C:21:2F:71:78:FD:D1:20:27:94:E7:0B
X509v3 Authority Key Identifier:
keyid:A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/pIJGS069ke88IS9xeP3RICeU5ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/qEIzrUmIgqkW8iOVa1heW7QJwsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.132.0/22
IPv6:
2a0f:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
ce:65:71:31:11:d1:de:3e:55:f9:8d:22:a9:9c:e3:e2:1b:2e:
62:c7:02:0b:e4:ec:e3:9f:44:e8:d8:da:e1:78:ff:be:b5:e0:
39:72:2b:a0:75:0f:6e:f7:f4:4e:8a:6e:9d:d2:4b:5f:1a:62:
40:ee:f7:a8:b7:e3:a9:eb:32:42:7a:bc:28:f1:22:6f:62:97:
eb:15:11:e3:9c:46:8d:0f:4f:b9:64:16:b7:aa:51:a8:33:fa:
cb:e1:c9:c5:61:3b:15:19:15:d4:a4:b7:f5:5c:32:7a:a8:a4:
91:4e:68:7e:51:41:a4:90:78:13:b8:05:f4:d4:a3:52:e9:5a:
6e:6c:7e:42:91:4c:86:12:49:e9:70:1a:6b:9b:ee:52:68:1a:
e1:b3:fe:ce:b6:80:a6:46:e4:47:cf:77:1f:ac:f5:26:1b:f3:
39:d1:86:86:55:ca:39:48:68:9e:7a:e3:ad:5e:dc:df:c0:49:
f1:15:db:70:e7:14:28:b3:18:5f:dc:49:d7:7a:8c:ad:04:52:
7a:98:ae:2f:6c:1c:c4:e2:ba:ad:a4:53:d0:f8:bd:ec:5e:8d:
90:0e:aa:82:64:33:e7:a6:7c:7f:27:f9:5a:e2:e9:e7:4e:79:
dc:27:8d:99:cb:36:d9:13:03:c9:a4:4c:0a:95:c6:d5:fa:60:
65:89:e5:56
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbWj97ujWzz6SdniYMyhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDIzM2FkNDk4ODgyYTkxNmYyMjM5NTZiNTg1ZTViYjQw
OWMyYzUwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDgyNDY0YjRlYmQ5MWVmM2MyMTJmNzE3OGZkZDEyMDI3OTRlNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwQt2ZI3X2bmwpvPfOH7gaN/1VtO
q1DeEu9RPxl3SWO45iNjVLgmfeo3P409Yw1YbBC/9BuY5jN+tpwgvjeB9RxjbRUw
I2GG8bmSff07uHdm5xnOqVsktCrdwPKmJhVrTx9IdmX2vOQ1Agk83GlQOUgIR7+J
8V8P4S2nF7Fo/jEzTdG1sSMDtT/rhLtVh8EnNiR43oV+oRJFqLev655ykFcAoO3V
80RZmsWSdBLpBB865iSs0zztIxgGZWILJ9Z/3I8VtVToZ3sw3SswA7rTHiF9O7hv
DzBx+NY5mj27C30dgSW6lDgSiav3L9XancUq2/yAqe1F6C034nnpnBofMwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKSCRktOvZHvPCEvcXj90SAnlOcLMB8GA1UdIwQY
MBaAFKhCM61JiIKpFvIjlWtYXlu0CcLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVJenJVbUlncWtXOGlPVmExaGVXN1FKd3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jMjkwNTctN2ViMi00ZWMwLWIyMjct
MDJjZGRiZDJlMTkwLzEvcElKR1MwNjlrZTg4SVM5eGVQM1JJQ2VVNXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jMjkwNTctN2ViMi00ZWMwLWIyMjctMDJjZGRiZDJlMTkw
LzEvcUVJenJVbUlncWtXOGlPVmExaGVXN1FKd3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaGEMA0E
AgACMAcDBQMqD81AMA0GCSqGSIb3DQEBCwUAA4IBAQDOZXExEdHePlX5jSKpnOPi
Gy5ixwIL5Ozjn0To2NrheP++teA5ciugdQ9u9/ROim6d0ktfGmJA7veot+Op6zJC
erwo8SJvYpfrFRHjnEaND0+5ZBa3qlGoM/rL4cnFYTsVGRXUpLf1XDJ6qKSRTmh+
UUGkkHgTuAX01KNS6VpubH5CkUyGEknpcBprm+5SaBrhs/7OtoCmRuRHz3cfrPUm
G/M50YaGVco5SGieeuOtXtzfwEnxFdtw5xQosxhf3EnXeoytBFJ6mK4vbBzE4rqt
pFPQ+L3sXo2QDqqCZDPnpnx/J/la4unnTnncJ42ZyzbZEwPJpEwKlcbV+mBlieVW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:13 2024 by rpki-client on console-ams.rpki-client.org