Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/DXBfeRYwvmY4J0ei8PXkOLSH--o.roa
File: DXBfeRYwvmY4J0ei8PXkOLSH--o.roa (raw, json)
Hash identifier: yVXKunpVmzuKtEczvw/iNSs1uWWHv3GwJpq+BNneQ6o=
Subject key identifier: 0D:70:5F:79:16:30:BE:66:38:27:47:A2:F0:F5:E4:38:B4:87:FB:EA
Certificate issuer: /CN=e4113268246b0bfe3b8328688004edfe1dd880af
Certificate serial: 01856C4A7A942E85266D2BE7CBE580D89361
Authority key identifier: E4:11:32:68:24:6B:0B:FE:3B:83:28:68:80:04:ED:FE:1D:D8:80:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BEyaCRrC_47gyhogATt_h3YgK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/DXBfeRYwvmY4J0ei8PXkOLSH--o.roa
Signing time: Sun 01 Jan 2023 07:44:58 +0000
ROA not before: Sun 01 Jan 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203534
IP address blocks: 185.246.176.0/22 maxlen: 22
185.246.177.0/24 maxlen: 24
185.246.176.0/23 maxlen: 23
185.246.176.0/24 maxlen: 24
185.246.179.0/24 maxlen: 24
185.246.178.0/24 maxlen: 24
185.246.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:7a:94:2e:85:26:6d:2b:e7:cb:e5:80:d8:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4113268246b0bfe3b8328688004edfe1dd880af
Validity
Not Before: Jan 1 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d705f791630be66382747a2f0f5e438b487fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:99:b4:c4:3a:48:51:57:81:fa:52:82:05:
c0:ab:71:69:6e:b4:17:37:2f:e1:3d:32:f7:8d:21:
f4:80:07:09:ad:ba:4c:56:a3:24:56:43:c6:c4:e3:
ff:cc:40:af:61:a7:e9:29:5d:b2:db:ec:1b:c8:04:
4c:11:c4:68:6a:24:60:9e:8f:c1:73:82:2c:b0:1f:
c3:65:e5:c3:d4:1e:6f:bc:da:ec:45:0c:df:a0:c7:
a8:9d:93:47:cc:fb:10:e5:97:f6:25:15:bf:bf:b6:
1d:25:65:7b:cd:c1:79:99:7a:7c:3d:a0:f0:a6:90:
3f:9a:71:de:12:34:b9:f7:d6:8c:64:3f:7f:97:3b:
da:c2:a3:93:01:64:db:d6:ad:cc:15:e4:31:83:c6:
ed:67:82:6c:70:98:73:6a:95:9f:25:0d:6a:55:e5:
a2:fa:ae:fe:62:89:12:3b:31:8f:0c:0b:6d:a3:5d:
5e:0d:0d:29:be:4e:97:09:6e:d8:9b:47:ac:ea:83:
41:cb:59:b1:f7:7a:03:04:fe:29:6e:ca:83:b0:f4:
72:71:dd:66:d8:d5:2c:60:00:db:6a:8c:ba:c0:77:
82:47:21:05:f3:70:e7:25:fd:92:5b:a2:69:ef:86:
44:6c:b4:90:2d:3f:a0:87:64:eb:c1:42:86:af:61:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:5F:79:16:30:BE:66:38:27:47:A2:F0:F5:E4:38:B4:87:FB:EA
X509v3 Authority Key Identifier:
keyid:E4:11:32:68:24:6B:0B:FE:3B:83:28:68:80:04:ED:FE:1D:D8:80:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BEyaCRrC_47gyhogATt_h3YgK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/DXBfeRYwvmY4J0ei8PXkOLSH--o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/5BEyaCRrC_47gyhogATt_h3YgK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.176.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f5:22:59:e0:0d:20:42:a9:6a:00:01:fd:d8:a8:fe:13:35:
28:03:55:58:1c:c4:f8:34:d4:73:76:86:2f:23:19:7f:7f:d3:
d9:c1:68:d3:8d:22:3a:4e:2e:22:40:63:ec:80:6d:f8:23:d1:
19:30:0b:23:11:d3:b0:7a:56:98:e7:0b:49:ff:e0:36:71:b2:
1c:88:ec:89:70:22:ad:26:ce:20:37:89:d0:fb:b5:ad:93:79:
eb:e7:2e:1f:44:be:29:ec:4b:9d:04:db:8f:92:39:f5:d0:11:
cb:43:32:e5:10:ae:cb:0e:f3:5c:f5:a5:64:83:45:01:21:89:
59:3f:8b:48:5c:d7:eb:a0:f3:0e:18:13:2f:31:18:fb:da:aa:
a9:38:c1:25:1a:86:3c:c3:c2:4f:aa:67:fd:e3:e4:7c:ce:e9:
f8:5b:ad:75:9b:6e:47:7d:1f:9b:3f:14:89:a9:4d:13:a9:de:
ff:02:d1:02:09:6d:1a:8c:28:34:20:46:45:7c:99:79:6f:84:
e0:77:f7:a1:23:ef:c4:66:24:cb:7b:c6:b9:0f:a6:cd:1d:77:
54:35:bb:70:ce:22:56:ef:cc:f0:b1:bb:a2:bb:56:e5:3d:eb:
ba:8a:f5:96:27:e4:e8:fd:f7:17:b1:cd:bd:2b:47:9c:90:28:
79:da:35:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsSnqULoUmbSvny+WA2JNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTEzMjY4MjQ2YjBiZmUzYjgzMjg2ODgwMDRlZGZlMWRk
ODgwYWYwHhcNMjMwMTAxMDc0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDcwNWY3OTE2MzBiZTY2MzgyNzQ3YTJmMGY1ZTQzOGI0ODdmYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMSZtMQ6SFFXgfpSggXAq3FpbrQX
Ny/hPTL3jSH0gAcJrbpMVqMkVkPGxOP/zECvYafpKV2y2+wbyARMEcRoaiRgno/B
c4IssB/DZeXD1B5vvNrsRQzfoMeonZNHzPsQ5Zf2JRW/v7YdJWV7zcF5mXp8PaDw
ppA/mnHeEjS599aMZD9/lzvawqOTAWTb1q3MFeQxg8btZ4JscJhzapWfJQ1qVeWi
+q7+YokSOzGPDAtto11eDQ0pvk6XCW7Ym0es6oNBy1mx93oDBP4pbsqDsPRycd1m
2NUsYADbaoy6wHeCRyEF83DnJf2SW6Jp74ZEbLSQLT+gh2TrwUKGr2HI8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1wX3kWML5mOCdHovD15Di0h/vqMB8GA1UdIwQY
MBaAFOQRMmgkawv+O4MoaIAE7f4d2ICvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJFeWFDUnJDXzQ3Z3lob2dBVHRfaDNZZ0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNDRjZTctODk4OS00YTg2LTk3Mzct
NzVlZmYzYTYzZjAzLzEvRFhCZmVSWXd2bVk0SjBlaThQWGtPTFNILS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNDRjZTctODk4OS00YTg2LTk3MzctNzVlZmYzYTYzZjAz
LzEvNUJFeWFDUnJDXzQ3Z3lob2dBVHRfaDNZZ0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufawMA0G
CSqGSIb3DQEBCwUAA4IBAQBi9SJZ4A0gQqlqAAH92Kj+EzUoA1VYHMT4NNRzdoYv
Ixl/f9PZwWjTjSI6Ti4iQGPsgG34I9EZMAsjEdOwelaY5wtJ/+A2cbIciOyJcCKt
Js4gN4nQ+7Wtk3nr5y4fRL4p7EudBNuPkjn10BHLQzLlEK7LDvNc9aVkg0UBIYlZ
P4tIXNfroPMOGBMvMRj72qqpOMElGoY8w8JPqmf94+R8zun4W611m25HfR+bPxSJ
qU0Tqd7/AtECCW0ajCg0IEZFfJl5b4Tgd/ehI+/EZiTLe8a5D6bNHXdUNbtwziJW
78zwsbuiu1blPeu6ivWWJ+To/fcXsc29K0eckCh52jVM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:09 2023 by rpki-client on console-fra.rpki-client.org