Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/0ARCnhAppA1uTml5pyAXxRdV00w.roa
File: 0ARCnhAppA1uTml5pyAXxRdV00w.roa (raw, json)
Hash identifier: V90wRbspbanz4BFpwEMRIa0mAyLHgIwF095Mk+HCQ7Q=
Subject key identifier: D0:04:42:9E:10:29:A4:0D:6E:4E:69:79:A7:20:17:C5:17:55:D3:4C
Certificate issuer: /CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Certificate serial: 01856BB7FD8CD0A62995CE9BBB87D066A728
Authority key identifier: C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/0ARCnhAppA1uTml5pyAXxRdV00w.roa
Signing time: Sun 01 Jan 2023 05:04:58 +0000
ROA not before: Sun 01 Jan 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51335
IP address blocks: 185.4.44.0/22 maxlen: 24
185.4.46.0/24 maxlen: 24
194.213.124.0/23 maxlen: 23
2a02:68c0::/32 maxlen: 32
2001:67c:10f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:fd:8c:d0:a6:29:95:ce:9b:bb:87:d0:66:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03ad5cabfeac4a44d3346d1f4ace6ef481a95a4
Validity
Not Before: Jan 1 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d004429e1029a40d6e4e6979a72017c51755d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:9d:b2:d0:b6:52:ea:3d:28:e3:22:eb:45:
72:14:69:12:43:93:fd:11:b2:be:28:47:c5:b1:58:
d4:fe:06:97:b4:5d:ab:dd:ea:d9:62:7b:7f:33:8b:
c4:6b:78:55:7e:1d:1f:65:f1:7e:06:5a:c0:91:b5:
f9:6c:c7:bb:59:50:60:c2:3c:b9:b8:bb:fe:91:3d:
d7:34:a4:56:31:d4:e8:5e:8f:ba:86:67:89:89:8d:
7b:e4:d5:ad:6f:70:2e:ae:2f:7a:95:76:a8:c6:bf:
fb:0b:2f:0c:57:b6:e6:49:dc:00:79:e8:10:1f:bf:
da:87:41:a8:35:53:08:bb:09:01:1d:48:ae:e9:b3:
33:f7:10:70:40:db:fc:7d:7d:b0:e9:a2:a5:2b:d6:
54:00:6b:26:48:6b:09:52:e7:b2:ac:32:0c:66:4e:
6a:92:f7:56:05:68:66:2e:d2:e5:f2:83:74:65:6a:
4a:cf:40:62:d2:ea:be:36:59:f0:d9:00:96:fc:8e:
84:c5:96:14:7f:2f:a2:ca:72:83:10:17:1f:b6:03:
d1:85:af:0c:13:99:de:ab:9c:99:f9:b0:ce:32:fc:
a9:68:24:c7:11:45:b2:45:65:08:bd:e9:8f:12:e9:
04:14:46:08:0d:43:af:97:93:57:fa:15:98:35:96:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:42:9E:10:29:A4:0D:6E:4E:69:79:A7:20:17:C5:17:55:D3:4C
X509v3 Authority Key Identifier:
keyid:C0:3A:D5:CA:BF:EA:C4:A4:4D:33:46:D1:F4:AC:E6:EF:48:1A:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDrVyr_qxKRNM0bR9Kzm70galaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/0ARCnhAppA1uTml5pyAXxRdV00w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/de17f9-4230-424a-b212-b642e91ff1a2/1/wDrVyr_qxKRNM0bR9Kzm70galaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.44.0/22
194.213.124.0/23
IPv6:
2001:67c:10f0::/48
2a02:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:53:0d:5b:d6:5b:e2:ca:f0:9f:35:65:38:0f:7d:70:41:1c:
8b:5d:52:c9:62:9f:20:43:4f:35:1c:b6:e8:55:90:e8:0d:10:
b9:85:68:dd:29:de:6e:1f:22:3c:1c:aa:5a:8f:e6:83:59:88:
12:dc:91:f7:04:2f:45:f8:13:c7:a0:9c:55:aa:c8:9d:db:ec:
03:09:ea:cb:78:3a:11:62:ef:43:96:38:e5:75:a2:69:fa:10:
6d:fa:cf:d6:e6:8b:b0:b4:3c:88:c2:dc:65:e9:11:4d:fa:26:
d0:4c:69:52:91:fd:69:86:7f:e7:d5:23:43:4d:5f:b0:6e:e5:
13:b5:68:d7:f5:2d:a2:11:9e:e1:82:53:b3:53:57:63:92:db:
2a:e9:c3:53:c0:e4:dd:6b:a5:b7:dd:71:e9:49:07:02:02:84:
6b:3a:75:de:09:7c:6f:04:de:0f:ef:43:c5:55:b6:22:8b:72:
cb:19:eb:32:14:70:5d:7c:46:e8:1e:a3:ed:1d:6d:88:a8:29:
02:f6:3c:e8:f3:9f:89:a2:f6:97:8f:bb:b7:ee:39:5f:42:aa:
7b:c8:cb:2f:18:0b:c0:ff:fd:c5:a7:78:b9:4e:f7:54:88:62:
aa:12:67:5b:01:8f:f9:1d:62:c1:51:22:01:97:f1:35:2f:d9:
52:35:fe:51
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVrt/2M0KYplc6bu4fQZqcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2FkNWNhYmZlYWM0YTQ0ZDMzNDZkMWY0YWNlNmVmNDgx
YTk1YTQwHhcNMjMwMTAxMDUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDA0NDI5ZTEwMjlhNDBkNmU0ZTY5NzlhNzIwMTdjNTE3NTVkMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6dstC2Uuo9KOMi60VyFGkSQ5P9
EbK+KEfFsVjU/gaXtF2r3erZYnt/M4vEa3hVfh0fZfF+BlrAkbX5bMe7WVBgwjy5
uLv+kT3XNKRWMdToXo+6hmeJiY175NWtb3Auri96lXaoxr/7Cy8MV7bmSdwAeegQ
H7/ah0GoNVMIuwkBHUiu6bMz9xBwQNv8fX2w6aKlK9ZUAGsmSGsJUueyrDIMZk5q
kvdWBWhmLtLl8oN0ZWpKz0Bi0uq+Nlnw2QCW/I6ExZYUfy+iynKDEBcftgPRha8M
E5neq5yZ+bDOMvypaCTHEUWyRWUIvemPEukEFEYIDUOvl5NX+hWYNZbW6wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNAEQp4QKaQNbk5peacgF8UXVdNMMB8GA1UdIwQY
MBaAFMA61cq/6sSkTTNG0fSs5u9IGpWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RyVnlyX3F4S1JOTTBiUjlLem03MGdhbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZTE3ZjktNDIzMC00MjRhLWIyMTIt
YjY0MmU5MWZmMWEyLzEvMEFSQ25oQXBwQTF1VG1sNXB5QVh4UmRWMDB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kZTE3ZjktNDIzMC00MjRhLWIyMTItYjY0MmU5MWZmMWEy
LzEvd0RyVnlyX3F4S1JOTTBiUjlLem03MGdhbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuQQsAwQB
wtV8MBYEAgACMBADBwAgAQZ8EPADBQAqAmjAMA0GCSqGSIb3DQEBCwUAA4IBAQB9
Uw1b1lviyvCfNWU4D31wQRyLXVLJYp8gQ081HLboVZDoDRC5hWjdKd5uHyI8HKpa
j+aDWYgS3JH3BC9F+BPHoJxVqsid2+wDCerLeDoRYu9DljjldaJp+hBt+s/W5ouw
tDyIwtxl6RFN+ibQTGlSkf1phn/n1SNDTV+wbuUTtWjX9S2iEZ7hglOzU1djktsq
6cNTwOTda6W33XHpSQcCAoRrOnXeCXxvBN4P70PFVbYii3LLGesyFHBdfEboHqPt
HW2IqCkC9jzo85+JovaXj7u37jlfQqp7yMsvGAvA//3Fp3i5TvdUiGKqEmdbAY/5
HWLBUSIBl/E1L9lSNf5R
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:39 2024 by rpki-client on console-ams.rpki-client.org