Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/QoDkFJSGfjaBkfA9EI3wg-l4Uh0.roa
File: QoDkFJSGfjaBkfA9EI3wg-l4Uh0.roa (raw, json)
Hash identifier: +JplDxGr+g/6PRRGpUS6XxvLmRbJHYONWw/jBBC+zKM=
Subject key identifier: 42:80:E4:14:94:86:7E:36:81:91:F0:3D:10:8D:F0:83:E9:78:52:1D
Certificate issuer: /CN=0375635aeb6e577df768165fffc33b63f7104b11
Certificate serial: 091A918A
Authority key identifier: 03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3VjWutuV333aBZf_8M7Y_cQSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/QoDkFJSGfjaBkfA9EI3wg-l4Uh0.roa
Signing time: Mon 31 Jan 2022 20:38:49 +0000
ROA not before: Mon 31 Jan 2022 20:38:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 193.202.80.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
193.203.10.0/23 maxlen: 23
193.203.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152736138 (0x91a918a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0375635aeb6e577df768165fffc33b63f7104b11
Validity
Not Before: Jan 31 20:38:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4280e41494867e368191f03d108df083e978521d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:4a:c9:52:65:ee:d0:1a:4f:cc:57:17:98:
62:ab:51:7b:3a:3a:b0:b0:f4:74:5e:ed:ba:95:ee:
af:5a:f8:a4:87:df:3e:22:fd:9a:19:b9:30:33:81:
35:dc:2c:0e:ec:12:76:f5:e1:0e:fc:e6:6a:3a:3e:
48:71:0f:75:8d:72:ba:ff:d7:7c:f5:df:07:13:7d:
7a:3c:fd:96:25:c5:63:ee:aa:fd:9b:da:55:08:b8:
4b:5a:9d:13:33:84:86:b9:90:21:74:a3:82:30:34:
cc:08:d7:9f:90:68:b8:59:5f:28:ec:3a:8f:c3:7c:
50:2f:ff:0e:1f:7c:0d:29:0e:f3:70:18:c7:89:22:
cd:7d:c4:f8:f6:55:f1:15:d3:46:b3:5a:18:41:bf:
f6:3a:4d:04:80:89:5a:ed:90:ea:4f:dc:11:36:af:
69:f8:80:4e:51:19:ad:48:05:94:78:2e:be:a6:fd:
85:95:9e:65:88:75:be:2e:eb:28:af:b4:04:81:39:
45:1a:79:5f:4b:c4:89:37:09:70:3c:88:e7:fc:c4:
ec:98:f9:c7:09:0e:d2:da:ab:f6:67:79:72:66:ce:
75:f3:ab:2f:3a:96:ff:95:e6:8d:49:2a:5e:bf:17:
01:45:ba:84:98:e2:ec:9f:9e:38:f3:00:e5:fb:06:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:E4:14:94:86:7E:36:81:91:F0:3D:10:8D:F0:83:E9:78:52:1D
X509v3 Authority Key Identifier:
keyid:03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3VjWutuV333aBZf_8M7Y_cQSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/QoDkFJSGfjaBkfA9EI3wg-l4Uh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/A3VjWutuV333aBZf_8M7Y_cQSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.52.0/22
193.202.80.0/22
193.203.8.0/22
212.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
af:6c:51:d9:4f:00:75:be:cb:de:41:28:fa:49:bb:e0:89:20:
ad:f9:b8:82:9f:bf:5b:e6:97:f8:01:17:dc:9c:06:46:58:b6:
3e:eb:37:41:96:71:c6:bd:55:6a:c6:2c:e5:f9:4f:37:b9:dd:
42:b4:7e:8f:4d:7f:dd:fc:db:ed:be:90:8a:48:b4:be:56:fe:
da:9e:e7:64:5e:a8:c6:5c:0b:11:d7:96:10:bb:0c:36:40:0b:
c3:73:37:3b:69:43:8d:46:39:09:e7:e2:50:a7:76:18:bd:9a:
04:12:9a:0c:58:a7:74:ad:96:7c:49:f8:02:f1:39:db:95:00:
a6:83:5d:22:2f:71:db:24:d9:31:c4:63:d2:8e:7b:92:72:d2:
9d:fb:af:ed:f4:98:81:56:11:20:a6:da:bb:af:bc:54:bb:03:
10:73:d7:32:f4:68:65:61:05:9a:6f:4f:56:6d:9c:9f:7c:ff:
d6:4b:0b:c6:27:a5:7e:98:3b:d5:26:b2:cf:71:31:e2:07:aa:
ff:05:7f:c7:02:c5:ff:7a:f9:96:f5:80:06:cd:76:1e:65:e9:
08:51:23:3c:53:66:b7:0e:b5:7d:52:81:61:97:ca:e7:c3:5a:
6f:a1:30:07:8d:14:a4:ba:5c:5a:51:37:8e:58:be:c0:8f:6e:
34:44:84:11
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECRqRijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Mzc1NjM1YWViNmU1NzdkZjc2ODE2NWZmZmMzM2I2M2Y3MTA0YjExMB4XDTIyMDEz
MTIwMzg0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDI4MGU0MTQ5NDg2
N2UzNjgxOTFmMDNkMTA4ZGYwODNlOTc4NTIxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+FSslSZe7QGk/MVxeYYqtRezo6sLD0dF7tupXur1r4pIff
PiL9mhm5MDOBNdwsDuwSdvXhDvzmajo+SHEPdY1yuv/XfPXfBxN9ejz9liXFY+6q
/ZvaVQi4S1qdEzOEhrmQIXSjgjA0zAjXn5BouFlfKOw6j8N8UC//Dh98DSkO83AY
x4kizX3E+PZV8RXTRrNaGEG/9jpNBICJWu2Q6k/cETavafiATlEZrUgFlHguvqb9
hZWeZYh1vi7rKK+0BIE5RRp5X0vEiTcJcDyI5/zE7Jj5xwkO0tqr9md5cmbOdfOr
LzqW/5XmjUkqXr8XAUW6hJji7J+eOPMA5fsGkJkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRCgOQUlIZ+NoGR8D0QjfCD6XhSHTAfBgNVHSMEGDAWgBQDdWNa625Xffdo
Fl//wztj9xBLETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0EzVmpXdXR1VjMzM2FCWmZfOE03WV9jUVN4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvOTVlNjRjLTc5NTgtNGE3Yy1hM2FjLTQ4Y2FhMGIxYmYxMC8x
L1FvRGtGSlNHZmphQmtmQTlFSTN3Zy1sNFVoMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
OTVlNjRjLTc5NTgtNGE3Yy1hM2FjLTQ4Y2FhMGIxYmYxMC8xL0EzVmpXdXR1VjMz
M2FCWmZfOE03WV9jUVN4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAlOONAMEAsHKUAMEAsHLCAMEAtR3
LDANBgkqhkiG9w0BAQsFAAOCAQEAr2xR2U8Adb7L3kEo+km74Ikgrfm4gp+/W+aX
+AEX3JwGRli2Pus3QZZxxr1VasYs5flPN7ndQrR+j01/3fzb7b6Qiki0vlb+2p7n
ZF6oxlwLEdeWELsMNkALw3M3O2lDjUY5CefiUKd2GL2aBBKaDFindK2WfEn4AvE5
25UApoNdIi9x2yTZMcRj0o57knLSnfuv7fSYgVYRIKbau6+8VLsDEHPXMvRoZWEF
mm9PVm2cn3z/1ksLxielfpg71Sayz3Ex4geq/wV/xwLF/3r5lvWABs12HmXpCFEj
PFNmtw61fVKBYZfK58Nab6EwB40UpLpcWlE3jli+wI9uNESEEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org