Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/1JH9q8IR7XlazYfXg9PGxxiW_pY.roa
File: 1JH9q8IR7XlazYfXg9PGxxiW_pY.roa (raw, json)
Hash identifier: yFJ4aGArtc9h9en2lbrdL6qEXAYrGCwA5YOCs4WGPPQ=
Subject key identifier: D4:91:FD:AB:C2:11:ED:79:5A:CD:87:D7:83:D3:C6:C7:18:96:FE:96
Certificate issuer: /CN=226e7710be3582ea6c760b009f6701f2d275782e
Certificate serial: 014AC6
Authority key identifier: 22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Im53EL41gupsdgsAn2cB8tJ1eC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/1JH9q8IR7XlazYfXg9PGxxiW_pY.roa
Signing time: Wed 02 Mar 2022 13:50:48 +0000
ROA not before: Wed 02 Mar 2022 13:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56571
IP address blocks: 176.10.79.0/24 maxlen: 24
185.191.41.0/24 maxlen: 24
185.191.40.0/24 maxlen: 24
185.191.40.0/22 maxlen: 22
185.191.42.0/24 maxlen: 24
185.191.43.0/24 maxlen: 24
176.10.64.0/20 maxlen: 20
176.10.64.0/24 maxlen: 24
176.10.69.0/24 maxlen: 24
176.10.70.0/24 maxlen: 24
176.10.67.0/24 maxlen: 24
176.10.68.0/24 maxlen: 24
176.10.65.0/24 maxlen: 24
176.10.66.0/24 maxlen: 24
176.10.71.0/24 maxlen: 24
176.10.76.0/24 maxlen: 24
176.10.77.0/24 maxlen: 24
176.10.74.0/24 maxlen: 24
176.10.75.0/24 maxlen: 24
176.10.72.0/24 maxlen: 24
176.10.73.0/24 maxlen: 24
176.10.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84678 (0x14ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226e7710be3582ea6c760b009f6701f2d275782e
Validity
Not Before: Mar 2 13:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d491fdabc211ed795acd87d783d3c6c71896fe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:a4:72:cf:a9:62:3b:f7:b6:8a:35:9f:2c:
b8:d0:24:7b:02:e4:65:a8:08:8b:a6:38:7f:db:ba:
1f:be:f2:26:56:22:d7:12:ec:27:b8:c4:d2:22:e3:
72:1d:a1:b7:2b:f1:e6:b8:58:f6:20:7f:8b:5b:f0:
11:14:ec:84:65:b3:30:46:5d:ba:d8:f8:ea:60:01:
5a:3b:c6:b3:d5:5c:a5:59:49:e0:37:0e:fb:88:a3:
e5:88:31:1a:ac:47:a3:b1:40:e7:0e:26:45:5f:41:
7f:d8:33:18:ae:1b:3f:80:6b:47:a8:1d:ec:c2:5d:
d2:08:55:89:df:6f:92:a3:d5:bf:4d:08:2f:3f:ff:
81:d7:88:90:cb:e1:ad:db:a3:f7:99:7c:0d:dd:22:
c5:90:72:94:e7:86:c7:20:5a:e4:d4:18:32:72:9b:
00:23:39:3c:47:73:7c:30:d7:13:9e:04:a7:2f:95:
27:0a:49:f7:fd:05:39:e9:06:b7:e4:4c:87:16:15:
e3:fe:72:44:85:a0:d2:aa:d1:b5:6c:79:79:7f:4c:
43:98:ec:0f:14:5d:4e:69:fe:60:e8:c5:c9:65:2a:
4f:0f:54:9f:da:db:7d:ac:89:68:89:72:40:c0:56:
e0:f4:4b:4a:df:61:f1:b3:12:02:47:f5:72:33:38:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:91:FD:AB:C2:11:ED:79:5A:CD:87:D7:83:D3:C6:C7:18:96:FE:96
X509v3 Authority Key Identifier:
keyid:22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Im53EL41gupsdgsAn2cB8tJ1eC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/1JH9q8IR7XlazYfXg9PGxxiW_pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.64.0/20
185.191.40.0/22
Signature Algorithm: sha256WithRSAEncryption
60:df:41:c1:c6:07:c8:79:4b:e3:e0:fc:59:41:32:e8:1d:8f:
06:45:a8:5c:c2:38:a4:d7:9d:8b:63:35:29:96:33:1e:bc:54:
e8:53:42:0f:d4:66:ae:b8:b6:e0:3e:d8:bb:99:c4:2f:ea:89:
32:a4:b0:86:46:32:99:17:34:7d:40:58:d7:d0:0f:fb:1c:3f:
71:f0:34:39:9b:c2:c2:03:83:e5:ce:58:48:f7:05:5c:c3:16:
55:19:bb:64:2e:72:b9:7e:e3:e7:7d:23:6b:4d:b5:4b:c5:e6:
8e:13:10:2e:cb:03:f8:03:1c:4e:66:26:09:d9:06:41:dd:21:
3c:2c:f4:d9:ef:0f:63:82:6e:33:a8:f3:0f:d3:6d:6b:23:17:
db:d3:11:0c:20:05:60:7d:58:4d:dc:a3:1b:fb:cd:b3:2b:d5:
49:cc:e7:fe:31:13:66:34:62:c5:99:71:8d:89:92:8e:a9:8f:
84:cd:19:f5:07:df:f9:2e:9c:3d:b0:89:91:a8:b0:35:55:6e:
a3:d0:bf:0a:3c:0c:e0:c2:ca:3b:85:2c:1d:95:78:bd:f1:86:
95:56:88:06:a1:bc:17:3f:ba:a9:dc:bc:a8:f5:c6:a1:31:08:
79:83:32:99:28:8f:91:7e:e7:bd:4a:0c:aa:57:c3:03:22:ff:
0c:38:cb:cf
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDAUrGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
NmU3NzEwYmUzNTgyZWE2Yzc2MGIwMDlmNjcwMWYyZDI3NTc4MmUwHhcNMjIwMzAy
MTM1MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNDkxZmRhYmMyMTFl
ZDc5NWFjZDg3ZDc4M2QzYzZjNzE4OTZmZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoJKkcs+pYjv3too1nyy40CR7AuRlqAiLpjh/27ofvvImViLX
EuwnuMTSIuNyHaG3K/HmuFj2IH+LW/ARFOyEZbMwRl262PjqYAFaO8az1VylWUng
Nw77iKPliDEarEejsUDnDiZFX0F/2DMYrhs/gGtHqB3swl3SCFWJ32+So9W/TQgv
P/+B14iQy+Gt26P3mXwN3SLFkHKU54bHIFrk1BgycpsAIzk8R3N8MNcTngSnL5Un
Ckn3/QU56Qa35EyHFhXj/nJEhaDSqtG1bHl5f0xDmOwPFF1Oaf5g6MXJZSpPD1Sf
2tt9rIloiXJAwFbg9EtK32HxsxICR/VyMzgQfwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFNSR/avCEe15Ws2H14PTxscYlv6WMB8GA1UdIwQYMBaAFCJudxC+NYLqbHYL
AJ9nAfLSdXguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SW01M0VMNDFndXBzZGdzQW4yY0I4dEoxZUM0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84ZC85YjkyOGEtOTk5Yi00NTVjLWEwNGMtMjY0NWIwYTgzMWNjLzEv
MUpIOXE4SVI3WGxhellmWGc5UEd4eGlXX3BZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85
YjkyOGEtOTk5Yi00NTVjLWEwNGMtMjY0NWIwYTgzMWNjLzEvSW01M0VMNDFndXBz
ZGdzQW4yY0I4dEoxZUM0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEsApAAwQCub8oMA0GCSqGSIb3DQEB
CwUAA4IBAQBg30HBxgfIeUvj4PxZQTLoHY8GRahcwjik152LYzUpljMevFToU0IP
1GauuLbgPti7mcQv6okypLCGRjKZFzR9QFjX0A/7HD9x8DQ5m8LCA4PlzlhI9wVc
wxZVGbtkLnK5fuPnfSNrTbVLxeaOExAuywP4AxxOZiYJ2QZB3SE8LPTZ7w9jgm4z
qPMP021rIxfb0xEMIAVgfVhN3KMb+82zK9VJzOf+MRNmNGLFmXGNiZKOqY+EzRn1
B9/5Lpw9sImRqLA1VW6j0L8KPAzgwso7hSwdlXi98YaVVogGobwXP7qp3Lyo9cah
MQh5gzKZKI+Rfue9SgyqV8MDIv8MOMvP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:10 2024 by rpki-client on console-ams.rpki-client.org