Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/L3pzEADmSpc76FvUqJNtwuk3SHc.roa
File: L3pzEADmSpc76FvUqJNtwuk3SHc.roa (raw, json)
Hash identifier: 2Jt7OrOwOSSkviDjtX3383/O4jxMhoZcVSmQ7i3IIPM=
Subject key identifier: 2F:7A:73:10:00:E6:4A:97:3B:E8:5B:D4:A8:93:6D:C2:E9:37:48:77
Certificate issuer: /CN=a576094c03e0dbcfbfa11bf7148ab16a00673ef9
Certificate serial: 032C1F0B
Authority key identifier: A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXYJTAPg28-_oRv3FIqxagBnPvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/L3pzEADmSpc76FvUqJNtwuk3SHc.roa
Signing time: Mon 03 Jan 2022 10:47:51 +0000
ROA not before: Mon 03 Jan 2022 10:47:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57567
IP address blocks: 185.86.44.0/24 maxlen: 24
185.86.44.0/23 maxlen: 23
185.86.47.0/24 maxlen: 24
185.86.46.0/24 maxlen: 24
185.86.46.0/23 maxlen: 23
185.86.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53223179 (0x32c1f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576094c03e0dbcfbfa11bf7148ab16a00673ef9
Validity
Not Before: Jan 3 10:47:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f7a731000e64a973be85bd4a8936dc2e9374877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:ef:e9:99:9c:6f:98:66:79:3d:a9:27:ab:
79:5a:46:8e:f5:c5:ee:79:86:08:c5:d2:3e:e2:11:
e9:f2:e9:7b:d9:6d:c8:2a:21:a2:9d:64:24:49:96:
40:54:67:b3:f6:9b:cb:60:29:9e:49:37:e7:4c:00:
75:8a:4c:fd:7f:4b:19:d9:03:bd:2f:51:ee:ce:3d:
c1:5a:bb:1e:f6:18:48:6b:dc:8f:fc:79:b1:cc:a2:
f8:e1:5f:74:f5:33:bc:13:d1:aa:a9:ca:39:a2:4b:
98:af:df:5a:c5:25:b9:63:ec:ec:ce:ca:9d:03:01:
17:d0:93:b4:1f:29:a5:60:0e:6c:8c:49:24:00:33:
1b:37:2f:0d:9c:59:a4:57:bd:ca:22:72:b5:68:60:
6d:08:2a:75:c9:89:91:8f:26:fb:2e:95:a5:2f:3f:
13:ed:96:0b:64:53:22:a6:8c:15:68:a5:67:fc:c6:
89:70:91:d2:7c:68:d0:3e:98:f3:9f:c9:5c:59:b8:
d2:a5:5c:ba:17:10:2e:70:ca:4c:bb:fe:ee:a1:a1:
97:90:2e:43:92:68:01:26:8f:ca:c5:99:bb:23:7d:
8c:73:b7:88:62:ff:cf:04:e1:a7:3b:db:a0:84:f0:
35:4c:35:96:22:b1:7f:67:4e:d6:81:d4:57:29:3a:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:73:10:00:E6:4A:97:3B:E8:5B:D4:A8:93:6D:C2:E9:37:48:77
X509v3 Authority Key Identifier:
keyid:A5:76:09:4C:03:E0:DB:CF:BF:A1:1B:F7:14:8A:B1:6A:00:67:3E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXYJTAPg28-_oRv3FIqxagBnPvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/L3pzEADmSpc76FvUqJNtwuk3SHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f03765-ba17-40d7-8194-47ceef07e19a/1/pXYJTAPg28-_oRv3FIqxagBnPvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9a:d0:9f:2d:3e:76:be:01:38:d6:8a:6b:b7:cc:ba:4c:d1:
b4:4a:57:12:d5:db:b1:cd:b0:0e:01:4b:d9:a9:5d:28:06:f2:
ab:0b:87:03:14:c6:34:a5:74:a7:be:8b:b9:de:ab:c5:3c:7b:
e4:93:a3:88:fc:1d:c5:d6:13:a9:89:7e:7e:2b:c9:3d:90:83:
c2:90:13:c3:50:20:35:00:39:7f:59:38:6b:7a:5e:f9:18:f0:
13:3b:6f:ac:d7:07:36:35:c6:87:d6:ef:61:d8:a8:44:5d:88:
d9:54:b0:0f:a2:f6:3a:db:48:c2:2a:e6:01:35:07:fd:a2:70:
29:d2:f2:6b:02:90:40:bd:53:a5:8d:63:b6:bf:46:c0:10:4a:
31:69:f9:27:c7:c8:4a:93:18:dc:77:72:d4:1d:50:55:e9:e9:
f9:7e:c4:1f:22:4b:c1:f2:b5:26:3a:8e:b8:a2:91:97:79:0e:
bc:b2:0c:63:ba:e4:c4:34:59:19:b7:5e:d3:b7:75:76:aa:dc:
ef:2a:5a:7b:13:fd:99:35:35:a6:2e:4c:19:88:34:94:26:0a:
b9:8d:03:79:6c:c7:e7:1f:76:12:ee:1c:34:12:01:dc:ea:10:
76:37:c5:32:ca:c8:56:dd:89:98:24:dc:73:87:dd:c2:96:c9:
ef:78:bb:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAywfCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2MDk0YzAzZTBkYmNmYmZhMTFiZjcxNDhhYjE2YTAwNjczZWY5MB4XDTIyMDEw
MzEwNDc1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmY3YTczMTAwMGU2
NGE5NzNiZTg1YmQ0YTg5MzZkYzJlOTM3NDg3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZg7+mZnG+YZnk9qSereVpGjvXF7nmGCMXSPuIR6fLpe9lt
yCohop1kJEmWQFRns/aby2Apnkk350wAdYpM/X9LGdkDvS9R7s49wVq7HvYYSGvc
j/x5scyi+OFfdPUzvBPRqqnKOaJLmK/fWsUluWPs7M7KnQMBF9CTtB8ppWAObIxJ
JAAzGzcvDZxZpFe9yiJytWhgbQgqdcmJkY8m+y6VpS8/E+2WC2RTIqaMFWilZ/zG
iXCR0nxo0D6Y85/JXFm40qVcuhcQLnDKTLv+7qGhl5AuQ5JoASaPysWZuyN9jHO3
iGL/zwThpzvboITwNUw1liKxf2dO1oHUVyk6wp8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQvenMQAOZKlzvoW9Sok23C6TdIdzAfBgNVHSMEGDAWgBSldglMA+Dbz7+h
G/cUirFqAGc++TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYWUpUQVBnMjgtX29SdjNGSXF4YWdCblB2ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvZjAzNzY1LWJhMTctNDBkNy04MTk0LTQ3Y2VlZjA3ZTE5YS8x
L0wzcHpFQURtU3BjNzZGdlVxSk50d3VrM1NIYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
ZjAzNzY1LWJhMTctNDBkNy04MTk0LTQ3Y2VlZjA3ZTE5YS8xL3BYWUpUQVBnMjgt
X29SdjNGSXF4YWdCblB2ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlWLDANBgkqhkiG9w0BAQsFAAOC
AQEABZrQny0+dr4BONaKa7fMukzRtEpXEtXbsc2wDgFL2aldKAbyqwuHAxTGNKV0
p76Lud6rxTx75JOjiPwdxdYTqYl+fivJPZCDwpATw1AgNQA5f1k4a3pe+RjwEztv
rNcHNjXGh9bvYdioRF2I2VSwD6L2OttIwirmATUH/aJwKdLyawKQQL1TpY1jtr9G
wBBKMWn5J8fISpMY3Hdy1B1QVenp+X7EHyJLwfK1JjqOuKKRl3kOvLIMY7rkxDRZ
Gbde07d1dqrc7ypaexP9mTU1pi5MGYg0lCYKuY0DeWzH5x92Eu4cNBIB3OoQdjfF
MsrIVt2JmCTcc4fdwpbJ73i7+A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:51 2023 by rpki-client on console-fra.rpki-client.org