Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/7xshOasUTMle0tb6Cinx7A3KwOc.roa
File: 7xshOasUTMle0tb6Cinx7A3KwOc.roa (raw, json)
Hash identifier: BRIrZ8bf9rLC3WPY2t5ioq/EE9Lsao72w9+WXN5Ot/U=
Subject key identifier: EF:1B:21:39:AB:14:4C:C9:5E:D2:D6:FA:0A:29:F1:EC:0D:CA:C0:E7
Certificate issuer: /CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Certificate serial: 05285A4E
Authority key identifier: 3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/7xshOasUTMle0tb6Cinx7A3KwOc.roa
Signing time: Sat 01 Jan 2022 13:07:09 +0000
ROA not before: Sat 01 Jan 2022 13:07:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43668
IP address blocks: 185.255.236.0/24 maxlen: 24
185.255.237.0/24 maxlen: 24
185.255.238.0/24 maxlen: 24
185.255.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86530638 (0x5285a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Validity
Not Before: Jan 1 13:07:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef1b2139ab144cc95ed2d6fa0a29f1ec0dcac0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:4c:f8:13:ed:f2:87:4b:64:c1:f4:57:02:
db:fe:92:32:cb:f7:72:2b:d1:c5:7e:b9:d7:54:65:
94:7c:c7:5c:63:96:2f:d4:ea:d3:13:00:bc:1a:97:
d3:23:2b:a7:aa:d9:0a:c4:3d:bb:4b:fa:c9:e6:06:
42:b0:6f:d1:dc:da:c1:a2:b1:38:a4:f9:00:a4:ce:
e4:4c:0c:48:38:0c:50:f4:26:66:8b:d1:47:5c:cd:
95:6c:65:8b:e8:e2:64:2e:ef:38:5a:1f:13:e0:1a:
c3:a0:f3:32:63:ba:38:2f:a2:7a:43:88:cb:ce:c4:
52:34:1e:11:95:c3:d4:d9:d4:6a:26:c7:33:4b:d5:
3b:cc:33:2e:ea:ef:a6:49:6f:0b:59:81:b4:c8:96:
a5:a3:09:6f:a5:05:7d:0b:3c:77:a6:3d:10:c6:ac:
bd:f1:ac:bb:96:7b:85:a9:1d:f2:a0:76:98:c5:df:
63:44:aa:74:c4:10:2d:d9:fb:bc:04:47:fe:3f:94:
52:a4:30:fa:05:31:cf:db:2e:ec:9c:a1:28:64:a6:
f4:16:e2:e6:2b:6d:84:69:bf:df:3c:54:9b:66:32:
c0:bd:03:5c:a3:89:a8:be:1a:41:ac:65:1e:24:61:
a7:72:8e:eb:58:4e:e8:ce:10:16:8f:3f:e1:4d:0b:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:21:39:AB:14:4C:C9:5E:D2:D6:FA:0A:29:F1:EC:0D:CA:C0:E7
X509v3 Authority Key Identifier:
keyid:3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/7xshOasUTMle0tb6Cinx7A3KwOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:a6:67:a6:02:83:81:ca:63:42:39:17:cd:3d:61:ba:65:ef:
36:3d:83:bd:b4:1a:44:50:42:fb:a3:ab:4a:2d:4b:60:6a:06:
e5:7d:26:3c:e8:96:1f:47:d1:e7:31:0d:4f:1b:b5:9d:e2:ac:
e2:95:da:95:24:e7:a0:ea:2b:9d:cc:ae:7e:08:78:3b:93:06:
48:f0:f7:65:c9:ca:b9:fa:6e:cc:ad:ff:47:e8:b7:69:0b:8c:
f6:ed:00:e4:95:86:51:a1:c4:5a:97:2c:bd:7a:f7:81:d0:0e:
ce:09:b7:9a:aa:53:9d:2c:b2:7a:ef:12:44:e7:51:bf:b9:3e:
89:cb:c8:3c:c6:eb:8d:63:e3:2f:2a:4f:dd:77:82:88:b3:55:
6d:8b:ea:e7:81:7e:ed:29:89:bd:e8:25:48:96:5a:23:4b:42:
8e:cb:65:18:17:2d:66:b1:c4:f6:aa:a5:8b:20:8d:9f:13:88:
32:67:df:b5:2b:88:05:c4:54:7a:d1:3e:0d:7c:3f:8e:19:65:
ad:9e:86:4c:97:da:56:77:8f:06:43:0a:87:3b:f8:fc:39:b8:
ad:95:d0:d5:04:98:2d:41:16:01:99:af:83:7d:16:63:b5:41:
bc:87:9f:53:c9:2d:03:f6:71:ef:24:e7:16:94:e9:11:08:c1:
51:8d:75:a6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBShaTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDg2ZWEzOGUwMjFmMGE5NjAxNTJjZmI3MDEwYjRiMGUyZTlmOWU3MB4XDTIyMDEw
MTEzMDcwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWYxYjIxMzlhYjE0
NGNjOTVlZDJkNmZhMGEyOWYxZWMwZGNhYzBlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZyTPgT7fKHS2TB9FcC2/6SMsv3civRxX6511RllHzHXGOW
L9Tq0xMAvBqX0yMrp6rZCsQ9u0v6yeYGQrBv0dzawaKxOKT5AKTO5EwMSDgMUPQm
ZovRR1zNlWxli+jiZC7vOFofE+Aaw6DzMmO6OC+iekOIy87EUjQeEZXD1NnUaibH
M0vVO8wzLurvpklvC1mBtMiWpaMJb6UFfQs8d6Y9EMasvfGsu5Z7hakd8qB2mMXf
Y0SqdMQQLdn7vARH/j+UUqQw+gUxz9su7JyhKGSm9Bbi5itthGm/3zxUm2YywL0D
XKOJqL4aQaxlHiRhp3KO61hO6M4QFo8/4U0L4VcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTvGyE5qxRMyV7S1voKKfHsDcrA5zAfBgNVHSMEGDAWgBQ9huo44CHwqWAV
LPtwELSw4un55zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BZYnFPT0FoOEtsZ0ZTejdjQkMwc09McC1lYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvYjZlYzZiLWI5YjUtNDYzZi04MWExLTM4OTY2OTQ4M2NjZS8x
Lzd4c2hPYXNVVE1sZTB0YjZDaW54N0EzS3dPYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
YjZlYzZiLWI5YjUtNDYzZi04MWExLTM4OTY2OTQ4M2NjZS8xL1BZYnFPT0FoOEts
Z0ZTejdjQkMwc09McC1lYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn/7DANBgkqhkiG9w0BAQsFAAOC
AQEAH6ZnpgKDgcpjQjkXzT1humXvNj2DvbQaRFBC+6OrSi1LYGoG5X0mPOiWH0fR
5zENTxu1neKs4pXalSTnoOorncyufgh4O5MGSPD3ZcnKufpuzK3/R+i3aQuM9u0A
5JWGUaHEWpcsvXr3gdAOzgm3mqpTnSyyeu8SROdRv7k+icvIPMbrjWPjLypP3XeC
iLNVbYvq54F+7SmJveglSJZaI0tCjstlGBctZrHE9qqliyCNnxOIMmfftSuIBcRU
etE+DXw/jhllrZ6GTJfaVnePBkMKhzv4/Dm4rZXQ1QSYLUEWAZmvg30WY7VBvIef
U8ktA/Zx7yTnFpTpEQjBUY11pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-fra.rpki-client.org