Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/mlJJPzHJxbs90scC_aSq8ggIGpc.roa
File: mlJJPzHJxbs90scC_aSq8ggIGpc.roa (raw, json)
Hash identifier: y+rZEHCV6Zk3Lco6NkJmRlwlTLAcZVXbwIRdqiDkMH0=
Subject key identifier: 9A:52:49:3F:31:C9:C5:BB:3D:D2:C7:02:FD:A4:AA:F2:08:08:1A:97
Certificate issuer: /CN=3862e6de0e31e8d28a937c012b602885ac935d15
Certificate serial: 01856FE7206CDE97CCB9D0D367DDB29E5C6F
Authority key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/mlJJPzHJxbs90scC_aSq8ggIGpc.roa
Signing time: Mon 02 Jan 2023 00:34:56 +0000
ROA not before: Mon 02 Jan 2023 00:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29608
IP address blocks: 185.170.80.0/22 maxlen: 22
79.143.240.0/20 maxlen: 24
37.60.152.0/21 maxlen: 24
193.30.224.0/22 maxlen: 24
2a01:678::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:20:6c:de:97:cc:b9:d0:d3:67:dd:b2:9e:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Validity
Not Before: Jan 2 00:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a52493f31c9c5bb3dd2c702fda4aaf208081a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:07:4b:fa:51:17:1d:75:76:a1:4b:49:2f:
16:a9:04:5f:e6:3c:70:c1:6a:93:d3:18:6c:bd:eb:
7c:6f:e7:36:b2:0b:98:87:59:a2:63:bd:c0:be:84:
a8:20:14:5a:1a:7b:f7:b8:91:2e:b6:67:8e:7a:c9:
ef:7d:66:0f:23:c5:6f:fc:87:22:32:fe:91:3c:72:
3a:12:82:c2:c3:ba:04:58:8d:af:61:cf:8f:3b:e7:
68:0b:7e:33:6d:ea:c5:7a:7f:c7:29:21:95:63:9e:
69:a4:8b:05:66:2d:d5:a3:90:a2:b6:99:7f:1e:95:
f6:71:d5:00:a1:6a:1c:89:09:7f:dd:8b:57:e0:59:
8a:4f:4e:79:1a:89:3b:ee:7f:50:56:12:65:5a:5b:
d2:ea:5a:44:14:16:f4:da:63:b4:57:69:30:7d:34:
04:d5:13:c2:c0:7d:ed:db:ef:63:53:f0:aa:d2:42:
a4:40:89:d3:45:13:89:db:01:29:eb:85:d2:e1:fb:
72:6f:66:3d:4c:79:3b:8f:a7:d7:67:23:da:a6:e5:
03:ad:08:c4:6c:38:c2:8e:fd:96:21:a9:4d:de:20:
3c:3a:8e:5c:fb:34:6f:3e:0a:83:ee:ec:11:7a:01:
2d:8b:e4:8b:3d:cb:b1:9c:ac:61:ff:79:68:c5:42:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:49:3F:31:C9:C5:BB:3D:D2:C7:02:FD:A4:AA:F2:08:08:1A:97
X509v3 Authority Key Identifier:
keyid:38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/mlJJPzHJxbs90scC_aSq8ggIGpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.152.0/21
79.143.240.0/20
185.170.80.0/22
193.30.224.0/22
IPv6:
2a01:678::/29
Signature Algorithm: sha256WithRSAEncryption
4a:7e:35:9c:45:26:dc:4a:a0:73:62:01:49:a2:da:1a:69:fb:
db:56:d2:04:db:99:7d:af:6b:06:4f:0c:9d:2f:be:73:25:2d:
ec:d6:c3:d9:19:85:1f:1d:65:23:67:ac:b7:f9:77:94:40:69:
dd:8f:39:50:37:35:a2:84:3d:05:0a:58:89:00:63:0b:ef:c4:
4e:7a:ef:0f:f7:41:3f:b7:77:cf:75:ee:84:0e:1b:f3:59:b6:
bc:cc:22:8f:cc:f2:a1:ea:a1:5d:36:ff:a1:e8:e4:22:b0:ce:
07:a0:c4:b7:25:0d:98:70:10:8f:fc:f1:df:69:ce:29:26:37:
f8:06:13:4c:a3:f2:63:00:94:be:08:b5:66:db:8f:d4:27:90:
4b:87:f3:1a:e8:01:a3:e6:eb:0f:b8:33:02:03:0b:9e:e2:1c:
cf:21:ff:87:aa:51:a0:0f:68:1f:cd:9b:c0:98:50:30:63:55:
3e:1c:fc:67:dd:6d:a3:ea:74:b1:d8:79:bb:a2:b4:73:e7:7a:
7e:24:18:0a:8e:a1:0e:24:00:22:a9:d2:16:52:10:a6:e6:be:
90:67:55:02:88:39:c1:d0:90:1f:37:88:d8:30:95:85:27:69:
b3:77:36:e9:e4:22:11:64:c7:e2:57:38:a9:61:28:2b:d3:c1:
ba:e5:be:7e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVv5yBs3pfMudDTZ92ynlxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NjJlNmRlMGUzMWU4ZDI4YTkzN2MwMTJiNjAyODg1YWM5
MzVkMTUwHhcNMjMwMTAyMDAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTUyNDkzZjMxYzljNWJiM2RkMmM3MDJmZGE0YWFmMjA4MDgxYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniYHS/pRFx11dqFLSS8WqQRf5jxw
wWqT0xhsvet8b+c2sguYh1miY73AvoSoIBRaGnv3uJEutmeOesnvfWYPI8Vv/Ici
Mv6RPHI6EoLCw7oEWI2vYc+PO+doC34zberFen/HKSGVY55ppIsFZi3Vo5Citpl/
HpX2cdUAoWociQl/3YtX4FmKT055Gok77n9QVhJlWlvS6lpEFBb02mO0V2kwfTQE
1RPCwH3t2+9jU/Cq0kKkQInTRROJ2wEp64XS4ftyb2Y9THk7j6fXZyPapuUDrQjE
bDjCjv2WIalN3iA8Oo5c+zRvPgqD7uwRegEti+SLPcuxnKxh/3loxUKI6QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJpSST8xycW7PdLHAv2kqvIICBqXMB8GA1UdIwQY
MBaAFDhi5t4OMejSipN8AStgKIWsk10VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dMbTNnNHg2TktLazN3QksyQW9oYXlUWFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83NTU3ZjAtOTkwZS00YmFiLWIxNTIt
Y2VmZjI5OTRjNjY3LzEvbWxKSlB6SEp4YnM5MHNjQ19hU3E4Z2dJR3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83NTU3ZjAtOTkwZS00YmFiLWIxNTItY2VmZjI5OTRjNjY3
LzEvT0dMbTNnNHg2TktLazN3QksyQW9oYXlUWFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDJTyYAwQE
T4/wAwQCuapQAwQCwR7gMA0EAgACMAcDBQMqAQZ4MA0GCSqGSIb3DQEBCwUAA4IB
AQBKfjWcRSbcSqBzYgFJotoaafvbVtIE25l9r2sGTwydL75zJS3s1sPZGYUfHWUj
Z6y3+XeUQGndjzlQNzWihD0FCliJAGML78ROeu8P90E/t3fPde6EDhvzWba8zCKP
zPKh6qFdNv+h6OQisM4HoMS3JQ2YcBCP/PHfac4pJjf4BhNMo/JjAJS+CLVm24/U
J5BLh/Ma6AGj5usPuDMCAwue4hzPIf+HqlGgD2gfzZvAmFAwY1U+HPxn3W2j6nSx
2Hm7orRz53p+JBgKjqEOJAAiqdIWUhCm5r6QZ1UCiDnB0JAfN4jYMJWFJ2mzdzbp
5CIRZMfiVzipYSgr08G65b5+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org