Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/iva8Xnjl2GOdo245bqTtpUdDGb8.roa
File: iva8Xnjl2GOdo245bqTtpUdDGb8.roa (raw, json)
Hash identifier: pFBL5MToLzY6MrwqT5Lb7fw6rgnMIavSv5AUuIruYwo=
Subject key identifier: 8A:F6:BC:5E:78:E5:D8:63:9D:A3:6E:39:6E:A4:ED:A5:47:43:19:BF
Certificate issuer: /CN=3d9f9be20560347813141749a1795333999652eb
Certificate serial: 080EEE51
Authority key identifier: 3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/iva8Xnjl2GOdo245bqTtpUdDGb8.roa
Signing time: Sat 01 Jan 2022 02:59:10 +0000
ROA not before: Sat 01 Jan 2022 02:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6740
IP address blocks: 185.193.128.0/22 maxlen: 22
213.235.64.0/18 maxlen: 18
82.202.0.0/18 maxlen: 18
212.90.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135196241 (0x80eee51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9f9be20560347813141749a1795333999652eb
Validity
Not Before: Jan 1 02:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af6bc5e78e5d8639da36e396ea4eda5474319bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:bb:2c:b5:2f:93:e9:98:fb:d0:61:fb:f1:
81:bf:41:02:79:80:13:4b:be:05:a6:8e:b6:af:df:
09:b3:cb:f1:b0:66:bb:3c:e1:04:bf:52:64:6b:94:
8d:1a:59:d4:ad:8b:26:e1:0d:9e:f3:85:b6:9b:59:
8e:c5:95:26:26:f9:7c:d8:29:db:3e:48:1a:ea:7d:
a7:f6:fb:48:b9:bc:20:67:dd:e4:f8:63:e1:88:dd:
1b:a7:2b:51:07:e8:dd:89:fd:5c:3c:e0:c7:df:a7:
c3:15:9d:9d:74:d4:81:a6:21:0a:0c:58:33:01:25:
ff:72:06:ee:de:57:33:cd:ef:2f:e6:d1:b2:ba:9d:
70:33:a7:f5:4c:15:dd:3d:8d:61:3c:a6:43:b8:56:
3a:26:ec:91:59:fe:1c:6b:bc:bd:05:0e:b7:5f:12:
2f:c4:41:a7:30:f9:89:cf:b6:b3:22:61:fd:eb:39:
01:68:93:c3:13:c8:e2:a4:84:b0:d9:75:9d:93:bf:
d9:47:d4:48:b0:7c:7e:16:5c:95:1b:e4:d6:be:42:
a8:b0:b1:23:b5:28:72:b3:08:dd:9e:d7:fb:25:95:
c3:5e:c1:7b:c7:59:eb:c4:7b:b2:3a:18:8e:22:fb:
67:39:c5:61:11:2e:51:18:07:36:7a:fb:6c:15:3a:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:BC:5E:78:E5:D8:63:9D:A3:6E:39:6E:A4:ED:A5:47:43:19:BF
X509v3 Authority Key Identifier:
keyid:3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/iva8Xnjl2GOdo245bqTtpUdDGb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.0.0/18
185.193.128.0/22
212.90.224.0/19
213.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:4e:18:7e:ca:a1:af:cb:fe:2a:eb:09:fc:a3:ef:92:5d:bc:
f9:85:e7:40:96:64:9e:13:e3:28:2d:d9:8c:60:cf:3e:cd:27:
3d:7d:46:b9:a1:f5:81:b2:a6:b0:07:87:e4:99:26:2a:1b:46:
b8:e2:3a:f6:7b:bd:1b:86:42:20:75:fc:81:a3:88:62:72:d3:
1b:7f:37:8a:bd:1b:19:7d:7e:98:66:91:a5:a5:ad:94:4a:cc:
2b:f0:88:91:15:d8:2d:04:7e:3e:07:bb:85:5f:a3:cf:a1:1e:
7d:26:3e:34:ed:46:dd:29:77:83:65:02:00:74:ef:65:12:51:
8b:f6:ce:a2:bf:d9:55:a5:38:c9:6f:01:8a:64:7e:da:40:20:
04:cc:6b:a3:54:4d:50:1d:79:2a:e9:4f:3a:38:2d:e7:87:e2:
db:15:93:9b:ac:33:14:0c:97:e7:b4:6d:a0:ba:dd:26:80:51:
95:7c:b0:dc:f0:44:ff:d0:98:bc:86:7e:c4:3d:1c:e9:ef:f3:
38:7d:a1:f1:c0:7d:2b:e0:48:4b:1d:25:5b:ad:55:f7:f3:51:
14:ca:cc:7b:15:86:4c:3b:c9:50:14:74:4a:10:4e:b2:be:38:
81:43:2e:9d:70:5e:3c:8c:63:d8:f1:1e:a0:dc:4e:4c:6b:ad:
2c:f5:66:39
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECA7uUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDlmOWJlMjA1NjAzNDc4MTMxNDE3NDlhMTc5NTMzMzk5OTY1MmViMB4XDTIyMDEw
MTAyNTkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFmNmJjNWU3OGU1
ZDg2MzlkYTM2ZTM5NmVhNGVkYTU0NzQzMTliZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM2juyy1L5PpmPvQYfvxgb9BAnmAE0u+BaaOtq/fCbPL8bBm
uzzhBL9SZGuUjRpZ1K2LJuENnvOFtptZjsWVJib5fNgp2z5IGup9p/b7SLm8IGfd
5Phj4YjdG6crUQfo3Yn9XDzgx9+nwxWdnXTUgaYhCgxYMwEl/3IG7t5XM83vL+bR
srqdcDOn9UwV3T2NYTymQ7hWOibskVn+HGu8vQUOt18SL8RBpzD5ic+2syJh/es5
AWiTwxPI4qSEsNl1nZO/2UfUSLB8fhZclRvk1r5CqLCxI7UocrMI3Z7X+yWVw17B
e8dZ68R7sjoYjiL7ZznFYREuURgHNnr7bBU6LkUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSK9rxeeOXYY52jbjlupO2lR0MZvzAfBgNVHSMEGDAWgBQ9n5viBWA0eBMU
F0mheVMzmZZS6zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BaLWI0Z1ZnTkhnVEZCZEpvWGxUTTVtV1V1cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvMDk4MDU5LTQ2OTItNGU1OC1iZGVhLWE3MzFjYjEzZjAxZS8x
L2l2YThYbmpsMkdPZG8yNDVicVR0cFVkREdiOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
MDk4MDU5LTQ2OTItNGU1OC1iZGVhLWE3MzFjYjEzZjAxZS8xL1BaLWI0Z1ZnTkhn
VEZCZEpvWGxUTTVtV1V1cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBlLKAAMEArnBgAMEBdRa4AMEBtXr
QDANBgkqhkiG9w0BAQsFAAOCAQEAWE4Yfsqhr8v+KusJ/KPvkl28+YXnQJZknhPj
KC3ZjGDPPs0nPX1GuaH1gbKmsAeH5JkmKhtGuOI69nu9G4ZCIHX8gaOIYnLTG383
ir0bGX1+mGaRpaWtlErMK/CIkRXYLQR+Pge7hV+jz6EefSY+NO1G3Sl3g2UCAHTv
ZRJRi/bOor/ZVaU4yW8BimR+2kAgBMxro1RNUB15KulPOjgt54fi2xWTm6wzFAyX
57RtoLrdJoBRlXyw3PBE/9CYvIZ+xD0c6e/zOH2h8cB9K+BISx0lW61V9/NRFMrM
exWGTDvJUBR0ShBOsr44gUMunXBePIxj2PEeoNxOTGutLPVmOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client