Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/uuZkrggw_DDnVHwwZMKbeByE240.roa
File: uuZkrggw_DDnVHwwZMKbeByE240.roa (raw, json)
Hash identifier: YDFikMIzntie4kk+lwIZy6AblNmP2iOsVe0YiF71cR0=
Subject key identifier: BA:E6:64:AE:08:30:FC:30:E7:54:7C:30:64:C2:9B:78:1C:84:DB:8D
Certificate issuer: /CN=0375635aeb6e577df768165fffc33b63f7104b11
Certificate serial: 09594C5C
Authority key identifier: 03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3VjWutuV333aBZf_8M7Y_cQSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/uuZkrggw_DDnVHwwZMKbeByE240.roa
Signing time: Tue 01 Mar 2022 08:08:46 +0000
ROA not before: Tue 01 Mar 2022 08:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.202.84.0/23 maxlen: 23
193.202.86.0/23 maxlen: 23
193.202.8.0/23 maxlen: 23
193.202.10.0/23 maxlen: 23
193.202.14.0/23 maxlen: 23
193.202.12.0/23 maxlen: 23
193.187.94.0/23 maxlen: 23
193.187.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156847196 (0x9594c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0375635aeb6e577df768165fffc33b63f7104b11
Validity
Not Before: Mar 1 08:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae664ae0830fc30e7547c3064c29b781c84db8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:d5:61:78:f2:9e:0c:98:24:fe:c7:f2:b3:
ee:d6:e9:91:bc:9c:34:41:ce:29:fa:d3:87:69:4c:
ac:ff:b8:86:86:e9:aa:5d:f1:67:e6:79:e8:d6:8b:
a4:69:4b:a4:e4:72:c7:fc:85:d7:59:07:8f:74:74:
3f:73:3a:04:0d:e0:0e:c3:7c:b1:1c:ce:fb:50:6c:
81:a9:ce:81:b3:c7:84:71:4a:39:ee:e7:51:1d:3b:
46:c0:db:7d:ef:1d:61:85:ef:69:a3:14:75:f4:3c:
c6:3e:ff:8a:c0:60:65:bb:07:e2:40:e1:84:24:0f:
2a:5f:5c:8e:23:16:39:37:2a:07:c3:dc:d7:05:72:
1d:3e:21:02:eb:f7:ee:9e:81:28:b3:65:a0:05:39:
e7:4d:fe:2f:7c:52:40:7a:f6:4a:f9:7d:49:f3:87:
14:bd:1a:5c:f0:87:95:a4:e3:b6:25:73:54:2a:4c:
49:e6:52:65:33:c8:5f:30:7b:ac:0f:eb:e5:62:59:
f0:09:d6:c1:8e:1e:f2:b1:1f:ec:e2:9a:2c:51:63:
79:91:c6:2d:3b:a8:d5:e5:5a:a3:ec:2e:1a:22:bd:
1c:e4:78:bd:16:dc:06:90:8a:84:e3:7c:d2:c1:01:
21:3e:63:5c:31:21:89:db:3d:3e:6f:97:c7:30:b4:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:64:AE:08:30:FC:30:E7:54:7C:30:64:C2:9B:78:1C:84:DB:8D
X509v3 Authority Key Identifier:
keyid:03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3VjWutuV333aBZf_8M7Y_cQSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/uuZkrggw_DDnVHwwZMKbeByE240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/A3VjWutuV333aBZf_8M7Y_cQSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
18:b3:d9:26:ea:99:eb:d7:02:54:f8:e0:aa:95:a9:95:f3:a5:
c0:6a:dd:d2:d9:1e:2b:9c:53:61:8a:7d:f3:e9:f9:83:fa:a9:
45:3f:24:a0:09:19:ec:cf:80:84:d6:b9:39:7f:83:85:f4:bb:
92:21:0d:53:8b:d0:20:5d:0b:a6:e4:56:91:37:a1:de:7d:dd:
a5:e6:f6:05:ed:ae:1e:c2:fb:09:74:fa:2b:a5:8f:0a:de:9e:
0a:77:32:db:b5:df:5b:6a:fe:b4:27:5d:d8:9c:0a:66:a5:bd:
17:6c:9a:8c:8c:13:30:51:d4:1b:14:eb:ad:01:e6:c9:03:12:
0c:b8:33:d7:35:47:5f:2c:be:89:ae:7f:2d:2f:0a:a8:b3:3c:
f9:bb:58:9f:a0:8f:89:6d:81:e6:26:06:dc:a3:ab:2f:c6:a6:
78:ad:95:15:13:a8:72:57:32:4c:a3:92:b5:2c:eb:c4:ff:d1:
92:7d:c5:93:19:99:93:17:50:b8:a3:c0:c6:de:b1:17:ec:b3:
40:aa:b3:45:f2:34:bc:58:79:78:48:5e:4e:d7:04:ee:5e:d7:
88:d2:a2:88:52:2e:48:60:09:ee:a5:0a:5f:5e:dc:be:22:29:
b5:e5:6e:26:37:4a:b9:d0:6e:8a:9e:8a:41:09:98:8d:2a:35:
88:56:87:10
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECVlMXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Mzc1NjM1YWViNmU1NzdkZjc2ODE2NWZmZmMzM2I2M2Y3MTA0YjExMB4XDTIyMDMw
MTA4MDg0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFlNjY0YWUwODMw
ZmMzMGU3NTQ3YzMwNjRjMjliNzgxYzg0ZGI4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHs1WF48p4MmCT+x/Kz7tbpkbycNEHOKfrTh2lMrP+4hobp
ql3xZ+Z56NaLpGlLpORyx/yF11kHj3R0P3M6BA3gDsN8sRzO+1BsganOgbPHhHFK
Oe7nUR07RsDbfe8dYYXvaaMUdfQ8xj7/isBgZbsH4kDhhCQPKl9cjiMWOTcqB8Pc
1wVyHT4hAuv37p6BKLNloAU5503+L3xSQHr2Svl9SfOHFL0aXPCHlaTjtiVzVCpM
SeZSZTPIXzB7rA/r5WJZ8AnWwY4e8rEf7OKaLFFjeZHGLTuo1eVao+wuGiK9HOR4
vRbcBpCKhON80sEBIT5jXDEhids9Pm+XxzC0FgsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBS65mSuCDD8MOdUfDBkwpt4HITbjTAfBgNVHSMEGDAWgBQDdWNa625Xffdo
Fl//wztj9xBLETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0EzVmpXdXR1VjMzM2FCWmZfOE03WV9jUVN4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvOTVlNjRjLTc5NTgtNGE3Yy1hM2FjLTQ4Y2FhMGIxYmYxMC8x
L3V1WmtyZ2d3X0REblZId3daTUtiZUJ5RTI0MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
OTVlNjRjLTc5NTgtNGE3Yy1hM2FjLTQ4Y2FhMGIxYmYxMC8xL0EzVmpXdXR1VjMz
M2FCWmZfOE03WV9jUVN4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAsG7XAMEA8HKCAMEAsHKVDANBgkq
hkiG9w0BAQsFAAOCAQEAGLPZJuqZ69cCVPjgqpWplfOlwGrd0tkeK5xTYYp98+n5
g/qpRT8koAkZ7M+AhNa5OX+DhfS7kiENU4vQIF0LpuRWkTeh3n3dpeb2Be2uHsL7
CXT6K6WPCt6eCncy27XfW2r+tCdd2JwKZqW9F2yajIwTMFHUGxTrrQHmyQMSDLgz
1zVHXyy+ia5/LS8KqLM8+btYn6CPiW2B5iYG3KOrL8ameK2VFROoclcyTKOStSzr
xP/Rkn3FkxmZkxdQuKPAxt6xF+yzQKqzRfI0vFh5eEheTtcE7l7XiNKiiFIuSGAJ
7qUKX17cviIpteVuJjdKudBuip6KQQmYjSo1iFaHEA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:18 2023 by rpki-client on console-fra.rpki-client.org