Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/v56e15hRTTv5nJA45KZFA5mLabY.roa
File: v56e15hRTTv5nJA45KZFA5mLabY.roa (raw, json)
Hash identifier: Kme9VtLTy7QjFsJ9UifcsMRxsK9T3pJs1AgI5GNZdms=
Subject key identifier: BF:9E:9E:D7:98:51:4D:3B:F9:9C:90:38:E4:A6:45:03:99:8B:69:B6
Certificate issuer: /CN=177842e619e5e31527ca0e51fceb3145f21ee914
Certificate serial: 018CC3B71299EC380BF9E46F497AB65EB691
Authority key identifier: 17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/v56e15hRTTv5nJA45KZFA5mLabY.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41622
IP address blocks: 185.244.112.0/22 maxlen: 22
77.245.176.0/20 maxlen: 20
217.194.48.0/20 maxlen: 20
2a01:760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:12:99:ec:38:0b:f9:e4:6f:49:7a:b6:5e:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177842e619e5e31527ca0e51fceb3145f21ee914
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf9e9ed798514d3bf99c9038e4a64503998b69b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:fb:1a:a5:a3:a9:01:ae:ea:f3:9b:cc:b9:
03:e2:9d:dd:f5:bb:9f:ff:3a:b1:72:54:4a:17:84:
d0:aa:dd:f1:2a:86:23:5c:a7:11:57:4b:19:fe:65:
fc:ac:df:6f:b5:c1:5b:95:ad:95:e2:96:77:5c:f9:
c6:70:64:10:e7:3e:e5:2b:62:39:d2:3a:6f:df:f3:
6b:b6:26:b8:f8:f6:48:76:f1:1b:d5:bb:b0:88:54:
68:ff:e1:90:a9:63:c1:93:ec:3a:25:57:07:5a:b0:
37:cb:cf:17:83:13:26:87:e1:44:e0:a1:bd:29:11:
6c:07:13:90:58:1b:4e:41:c7:78:db:61:02:d4:6c:
09:38:12:ce:5c:32:4f:3d:ab:f2:48:56:3a:cc:e1:
b3:8a:d0:ea:35:c9:3a:13:9d:98:1d:84:a7:34:62:
2d:2c:bf:1f:fe:50:62:a6:85:c3:9d:dd:dd:46:70:
fc:b6:c6:78:47:4b:fc:cc:40:81:33:53:00:09:0d:
b9:e3:c6:5e:91:64:52:c3:03:d6:5e:b7:d0:04:b2:
da:bd:a4:55:a4:24:d7:22:73:13:c3:26:ae:a0:55:
70:79:ef:fa:5b:b3:bb:5b:a0:d4:20:5f:6c:d3:a2:
b0:6e:f9:d3:ea:81:bd:e4:78:b1:e6:19:89:f6:b2:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:9E:D7:98:51:4D:3B:F9:9C:90:38:E4:A6:45:03:99:8B:69:B6
X509v3 Authority Key Identifier:
keyid:17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/v56e15hRTTv5nJA45KZFA5mLabY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.176.0/20
185.244.112.0/22
217.194.48.0/20
IPv6:
2a01:760::/32
Signature Algorithm: sha256WithRSAEncryption
82:5b:b2:d7:7c:e5:ba:3f:ef:4a:53:ad:c5:33:df:9a:d6:d9:
48:81:3a:d5:19:8a:1b:44:ee:a1:28:cd:27:f8:e5:61:5a:3f:
fb:3a:f6:61:fa:cf:93:9a:92:1d:47:26:ca:dc:a6:00:21:ec:
9c:eb:ee:f4:17:14:97:c4:ac:7b:80:1e:17:57:68:13:8c:9b:
a1:65:26:1c:3d:5a:8d:96:08:ef:18:3f:c0:43:dc:04:81:33:
9b:cd:7b:91:7a:7a:00:19:57:1a:7b:f1:d3:0c:24:01:f6:d0:
00:e2:40:42:40:da:63:2e:c6:5e:6e:64:28:b4:8a:b7:a1:59:
c4:6c:55:19:42:56:15:69:98:d2:18:c3:a4:d6:f4:09:e4:82:
8a:bd:76:b8:00:f1:e6:b6:e4:ad:e7:5c:ed:b3:13:b9:f9:f1:
39:96:99:36:fd:e2:03:eb:a2:cc:99:fe:12:04:21:2d:6b:49:
67:8e:e4:d7:98:f9:0f:1e:ca:d0:86:e3:79:24:43:41:7a:d8:
f9:5d:ca:65:69:91:d3:cf:8b:43:16:86:b3:5c:11:ad:8a:59:
06:56:2d:6b:39:a9:a0:30:6c:a2:05:56:91:96:75:11:9c:16:
c5:01:74:03:c5:24:86:9d:66:05:36:a7:cf:36:b4:3b:8d:70:
8f:76:5c:c1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzDtxKZ7DgL+eRvSXq2XraRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Nzg0MmU2MTllNWUzMTUyN2NhMGU1MWZjZWIzMTQ1ZjIx
ZWU5MTQwHhcNMjQwMTAxMDYzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjllOWVkNzk4NTE0ZDNiZjk5YzkwMzhlNGE2NDUwMzk5OGI2OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6X7GqWjqQGu6vObzLkD4p3d9buf
/zqxclRKF4TQqt3xKoYjXKcRV0sZ/mX8rN9vtcFbla2V4pZ3XPnGcGQQ5z7lK2I5
0jpv3/Nrtia4+PZIdvEb1buwiFRo/+GQqWPBk+w6JVcHWrA3y88XgxMmh+FE4KG9
KRFsBxOQWBtOQcd422EC1GwJOBLOXDJPPavySFY6zOGzitDqNck6E52YHYSnNGIt
LL8f/lBipoXDnd3dRnD8tsZ4R0v8zECBM1MACQ2548ZekWRSwwPWXrfQBLLavaRV
pCTXInMTwyauoFVwee/6W7O7W6DUIF9s06KwbvnT6oG95Hix5hmJ9rJRuwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFL+enteYUU07+ZyQOOSmRQOZi2m2MB8GA1UdIwQY
MBaAFBd4QuYZ5eMVJ8oOUfzrMUXyHukUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNoQzVobmw0eFVueWc1Ul9Pc3hSZkllNlJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83YTkwNmMtNmU0Ny00MjUyLTljMjQt
YjY0ZTNjNzg4NGNhLzEvdjU2ZTE1aFJUVHY1bkpBNDVLWkZBNW1MYWJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83YTkwNmMtNmU0Ny00MjUyLTljMjQtYjY0ZTNjNzg4NGNh
LzEvRjNoQzVobmw0eFVueWc1Ul9Pc3hSZkllNlJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETfWwAwQC
ufRwAwQE2cIwMA0EAgACMAcDBQAqAQdgMA0GCSqGSIb3DQEBCwUAA4IBAQCCW7LX
fOW6P+9KU63FM9+a1tlIgTrVGYobRO6hKM0n+OVhWj/7OvZh+s+TmpIdRybK3KYA
Ieyc6+70FxSXxKx7gB4XV2gTjJuhZSYcPVqNlgjvGD/AQ9wEgTObzXuRenoAGVca
e/HTDCQB9tAA4kBCQNpjLsZebmQotIq3oVnEbFUZQlYVaZjSGMOk1vQJ5IKKvXa4
APHmtuSt51ztsxO5+fE5lpk2/eID66LMmf4SBCEta0lnjuTXmPkPHsrQhuN5JENB
etj5XcplaZHTz4tDFoazXBGtilkGVi1rOamgMGyiBVaRlnURnBbFAXQDxSSGnWYF
NqfPNrQ7jXCPdlzB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org