Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/y1Y7RegrnFAefQ3FYoUGDvB0MEM.roa
File: y1Y7RegrnFAefQ3FYoUGDvB0MEM.roa (raw, json)
Hash identifier: +F7nEMwOu9MUoRyTmArgNLb7m9/LiCPG/6HhVGHMCus=
Subject key identifier: CB:56:3B:45:E8:2B:9C:50:1E:7D:0D:C5:62:85:06:0E:F0:74:30:43
Certificate issuer: /CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Certificate serial: 01C0254C
Authority key identifier: 31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/y1Y7RegrnFAefQ3FYoUGDvB0MEM.roa
Signing time: Sat 01 Jan 2022 08:57:18 +0000
ROA not before: Sat 01 Jan 2022 08:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34704
IP address blocks: 37.208.53.0/24 maxlen: 24
37.208.52.0/24 maxlen: 24
37.208.55.0/24 maxlen: 24
37.208.54.0/24 maxlen: 24
37.208.51.0/24 maxlen: 24
37.208.50.0/24 maxlen: 24
37.208.48.0/24 maxlen: 24
93.174.37.0/24 maxlen: 24
93.174.36.0/24 maxlen: 24
93.174.35.0/24 maxlen: 24
93.174.34.0/24 maxlen: 24
93.174.33.0/24 maxlen: 24
93.174.32.0/24 maxlen: 24
93.174.39.0/24 maxlen: 24
213.232.81.0/24 maxlen: 24
213.232.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29369676 (0x1c0254c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Validity
Not Before: Jan 1 08:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb563b45e82b9c501e7d0dc56285060ef0743043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:55:68:76:da:2e:c7:67:51:d9:c6:fe:49:
7a:8a:bc:7d:a3:e8:7f:f3:7b:96:c4:a6:e5:0e:5b:
32:17:30:f4:77:fc:69:72:46:b2:bc:92:e6:e0:f5:
43:0a:a4:c9:2c:2c:8a:c9:bb:6c:4e:92:50:30:0d:
8a:f7:30:bb:bb:8a:32:b0:8f:29:a5:d6:7d:1a:45:
a5:b2:8b:e5:c2:f4:ef:bb:e1:8d:72:1b:d1:14:9c:
9b:74:55:1e:67:ce:63:e7:88:0d:de:ae:29:8d:e3:
94:e6:c2:e7:61:f1:7c:79:ee:45:64:71:19:36:17:
b9:e3:8c:54:0c:af:14:96:fd:89:1a:95:f9:ec:ba:
cf:84:e2:c5:d1:f8:73:fa:3d:3d:c7:d6:8b:12:95:
e7:76:33:c4:04:a6:74:aa:81:d3:cf:90:35:38:c5:
c1:4e:7b:b0:03:b2:04:56:b2:51:7d:e8:a0:f8:fd:
a8:6b:38:bd:23:4a:f5:79:31:e2:6e:08:2a:34:a1:
cc:9a:4c:96:75:e8:dd:f5:36:b6:95:80:77:43:0a:
40:54:6a:85:88:96:da:7f:da:94:df:c7:e3:5f:9d:
9e:50:e6:43:9d:a0:64:e6:40:2c:75:0b:df:2b:90:
d2:00:eb:6f:38:10:66:4b:1a:36:9c:6f:fc:8b:c3:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:3B:45:E8:2B:9C:50:1E:7D:0D:C5:62:85:06:0E:F0:74:30:43
X509v3 Authority Key Identifier:
keyid:31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/y1Y7RegrnFAefQ3FYoUGDvB0MEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/24
37.208.50.0-37.208.55.255
93.174.32.0-93.174.37.255
93.174.39.0/24
213.232.80.0/23
Signature Algorithm: sha256WithRSAEncryption
41:6f:aa:86:a5:88:e3:3b:69:b8:53:ae:6b:5d:89:02:96:2f:
39:10:9e:a8:ea:8c:66:1b:7d:bc:53:d9:65:31:a4:91:27:33:
1e:dc:3e:68:85:ab:54:8b:89:10:1d:32:81:29:26:87:76:4b:
4e:fe:01:d1:72:5d:6d:c8:06:b2:e7:7b:ca:f5:07:6b:e7:68:
4c:82:af:cf:3f:d4:d5:0e:5f:6f:ba:d6:3c:ed:5c:ae:e4:2a:
ed:f1:0d:20:2d:92:ac:c0:d2:6d:3b:de:e4:12:b1:94:35:b1:
64:28:3c:4d:cd:b5:7d:bb:e1:44:fb:5e:29:ef:1d:b4:05:9c:
29:0d:f3:a8:cb:10:f2:63:5c:42:50:c1:7f:4f:99:1d:80:d5:
60:4e:f3:eb:64:24:69:1a:b1:c0:3b:02:8e:c2:f6:08:7f:f8:
7f:75:c8:94:92:d0:9b:e4:14:76:f9:2b:0d:6c:ef:80:4b:5a:
53:c1:34:89:82:08:87:16:e5:46:c1:a3:78:97:4d:d7:bf:83:
00:e0:4e:17:d8:ab:57:59:27:74:bb:63:2b:eb:94:4e:7c:94:
9c:f7:37:bf:59:46:6a:e3:22:f9:12:33:bb:0d:e7:a6:85:b6:
67:9d:fc:84:d4:2b:d3:74:4c:a5:2e:d0:1a:b4:7f:b4:16:f8:
9b:aa:b2:3d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEAcAlTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTcxYmZhNmIzZDMyZGZlM2EwZWUyZGY3N2NmYmU1ODVjMjdmNWRiMB4XDTIyMDEw
MTA4NTcxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2I1NjNiNDVlODJi
OWM1MDFlN2QwZGM1NjI4NTA2MGVmMDc0MzA0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkvVWh22i7HZ1HZxv5Jeoq8faPof/N7lsSm5Q5bMhcw9Hf8
aXJGsryS5uD1QwqkySwsism7bE6SUDANivcwu7uKMrCPKaXWfRpFpbKL5cL077vh
jXIb0RScm3RVHmfOY+eIDd6uKY3jlObC52HxfHnuRWRxGTYXueOMVAyvFJb9iRqV
+ey6z4TixdH4c/o9PcfWixKV53YzxASmdKqB08+QNTjFwU57sAOyBFayUX3ooPj9
qGs4vSNK9Xkx4m4IKjShzJpMlnXo3fU2tpWAd0MKQFRqhYiW2n/alN/H41+dnlDm
Q52gZOZALHUL3yuQ0gDrbzgQZksaNpxv/IvDkMkCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBTLVjtF6CucUB59DcVihQYO8HQwQzAfBgNVHSMEGDAWgBQxcb+ms9Mt/joO
4t93z75YXCf12zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01YR19wclBUTGY0NkR1TGZkOC0tV0Z3bjlkcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvZjA4NTg1LTY4YjEtNDkwZC1hN2ZhLWE1MTkyNjYwMWY0ZS8x
L3kxWTdSZWdybkZBZWZRM0ZZb1VHRHZCME1FTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
ZjA4NTg1LTY4YjEtNDkwZC1hN2ZhLWE1MTkyNjYwMWY0ZS8xL01YR19wclBUTGY0
NkR1TGZkOC0tV0Z3bjlkcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwNAQCAAEwLgMEACXQMDAMAwQBJdAyAwQDJdAwMAwD
BAVdriADBAFdriQDBABdricDBAHV6FAwDQYJKoZIhvcNAQELBQADggEBAEFvqoal
iOM7abhTrmtdiQKWLzkQnqjqjGYbfbxT2WUxpJEnMx7cPmiFq1SLiRAdMoEpJod2
S07+AdFyXW3IBrLne8r1B2vnaEyCr88/1NUOX2+61jztXK7kKu3xDSAtkqzA0m07
3uQSsZQ1sWQoPE3NtX274UT7XinvHbQFnCkN86jLEPJjXEJQwX9PmR2A1WBO8+tk
JGkascA7Ao7C9gh/+H91yJSS0JvkFHb5Kw1s74BLWlPBNImCCIcW5UbBo3iXTde/
gwDgThfYq1dZJ3S7YyvrlE58lJz3N79ZRmrjIvkSM7sN56aFtmed/ITUK9N0TKUu
0Bq0f7QW+Juqsj0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:07 2024 by rpki-client on console-ams.rpki-client.org