Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jz8Ayh4JfO2j7ROYAlSL4goPrrQ.roa
File: jz8Ayh4JfO2j7ROYAlSL4goPrrQ.roa (raw, json)
Hash identifier: xip4wIwSevG+26Elubv93MnHANKT/52l8ppwNKk7aFo=
Subject key identifier: 8F:3F:00:CA:1E:09:7C:ED:A3:ED:13:98:02:54:8B:E2:0A:0F:AE:B4
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4AD8D654A099A1FF4DDFF809681002
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jz8Ayh4JfO2j7ROYAlSL4goPrrQ.roa
Signing time: Sun 01 Jan 2023 12:24:59 +0000
ROA not before: Sun 01 Jan 2023 12:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201971
IP address blocks: 217.145.236.0/24 maxlen: 24
217.145.238.0/24 maxlen: 24
217.145.239.0/24 maxlen: 24
139.28.204.0/24 maxlen: 24
139.28.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d8:d6:54:a0:99:a1:ff:4d:df:f8:09:68:10:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3f00ca1e097ceda3ed139802548be20a0faeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:fe:6a:9f:f4:44:ba:30:fd:53:86:fc:05:
87:31:fe:f3:fc:55:9f:a8:cf:11:27:56:09:be:eb:
23:be:e7:f8:a3:1e:0c:1d:48:a6:67:f8:f0:a0:f5:
f5:7d:5b:77:11:f2:11:a8:5c:93:82:1f:03:bd:c3:
68:9a:a2:0d:0d:56:26:1d:b2:5f:83:15:1e:cf:ee:
e4:42:bc:eb:97:4c:33:48:a3:f8:53:5e:97:1d:b8:
68:bf:63:3f:8b:01:55:f7:6a:39:47:6e:59:c6:18:
d9:e5:86:c1:23:1c:34:9d:d4:0d:21:20:01:60:6d:
aa:bf:fa:7f:58:8f:44:a4:4a:22:3f:dd:f2:c7:a0:
3d:7c:ef:ad:0f:47:40:21:a3:97:7e:92:4b:66:20:
57:8a:d3:35:57:26:4e:8d:40:8b:d2:1e:75:c2:0c:
e4:83:a6:a2:76:b9:e3:0c:44:aa:a0:5c:b1:7e:87:
bd:79:a8:a4:77:92:81:d4:bd:b7:66:a3:9c:e9:f5:
11:42:de:0e:71:bd:6e:1c:1c:1c:3e:d7:e0:85:25:
54:97:91:4c:0e:77:6d:de:33:fe:1f:30:ce:74:6e:
6f:9d:f6:69:b5:f7:e0:88:89:7b:bd:6d:55:bd:1d:
2e:53:a0:69:f0:d0:e8:50:b5:1d:35:cf:be:fb:96:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:00:CA:1E:09:7C:ED:A3:ED:13:98:02:54:8B:E2:0A:0F:AE:B4
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jz8Ayh4JfO2j7ROYAlSL4goPrrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.204.0/24
139.28.207.0/24
217.145.236.0/24
217.145.238.0/23
Signature Algorithm: sha256WithRSAEncryption
67:7b:71:59:dc:aa:6d:df:ad:d7:ed:70:d3:f8:dd:bc:cd:95:
0c:e4:64:ec:35:21:de:0c:25:97:c6:05:f5:1f:04:2f:c1:cd:
e1:b9:04:cb:f8:96:6f:62:2a:2c:2e:b2:e3:b6:f2:ee:23:20:
65:c4:07:ce:09:2b:77:86:32:3c:2a:b7:8c:b4:1c:a3:33:62:
d9:dc:6f:55:8c:b2:43:40:a9:db:16:85:03:82:1c:ba:15:8d:
a9:10:0a:fb:c6:47:5f:33:ad:86:d1:f2:f3:1d:62:44:c0:90:
d5:a1:75:83:a7:69:3e:65:0e:2c:eb:18:f4:cb:76:97:7f:37:
9d:4e:47:c7:b3:8a:ed:1a:3d:6c:8c:fa:f3:37:82:5d:08:d8:
bd:90:c9:2f:77:01:f2:27:c1:76:81:71:8f:62:95:e0:13:45:
55:e9:f7:80:5a:77:a5:6d:66:51:fa:4f:d3:e1:af:42:44:05:
e9:72:d3:d4:3d:ca:20:29:fc:a3:a2:f6:de:c0:83:e5:21:3b:
09:0e:66:37:f6:ed:c6:c6:33:e1:e7:db:26:51:93:35:3f:0e:
14:1c:7b:e3:b6:56:ee:8d:42:65:8a:79:1c:4b:d8:71:53:e4:
bb:a3:a3:fb:9f:d6:0e:87:61:c3:b6:9e:b4:07:ea:70:a9:f6:
67:cb:2a:37
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtStjWVKCZof9N3/gJaBACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzhkOGJiZjA1Nzk3YTc1YTQ5YzVkNzBmNTk3MWVjZGVj
NmRkOTMwHhcNMjMwMTAxMTIyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjNmMDBjYTFlMDk3Y2VkYTNlZDEzOTgwMjU0OGJlMjBhMGZhZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptb+ap/0RLow/VOG/AWHMf7z/FWf
qM8RJ1YJvusjvuf4ox4MHUimZ/jwoPX1fVt3EfIRqFyTgh8DvcNomqINDVYmHbJf
gxUez+7kQrzrl0wzSKP4U16XHbhov2M/iwFV92o5R25ZxhjZ5YbBIxw0ndQNISAB
YG2qv/p/WI9EpEoiP93yx6A9fO+tD0dAIaOXfpJLZiBXitM1VyZOjUCL0h51wgzk
g6aidrnjDESqoFyxfoe9eaikd5KB1L23ZqOc6fURQt4Ocb1uHBwcPtfghSVUl5FM
Dndt3jP+HzDOdG5vnfZptffgiIl7vW1VvR0uU6Bp8NDoULUdNc+++5bkZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI8/AMoeCXzto+0TmAJUi+IKD660MB8GA1UdIwQY
MBaAFHfI2LvwV5enWknF1w9Zcezext2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhqWXVfQlhsNmRhU2NYWEQxbHg3TjdHM1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80NWFiZGUtNWI0NC00NzFhLTkzZDkt
NTM0NWY3ZTc0MDgzLzEvano4QXloNEpmTzJqN1JPWUFsU0w0Z29QcnJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80NWFiZGUtNWI0NC00NzFhLTkzZDktNTM0NWY3ZTc0MDgz
LzEvZDhqWXVfQlhsNmRhU2NYWEQxbHg3TjdHM1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAixzMAwQA
ixzPAwQA2ZHsAwQB2ZHuMA0GCSqGSIb3DQEBCwUAA4IBAQBne3FZ3Kpt363X7XDT
+N28zZUM5GTsNSHeDCWXxgX1HwQvwc3huQTL+JZvYiosLrLjtvLuIyBlxAfOCSt3
hjI8KreMtByjM2LZ3G9VjLJDQKnbFoUDghy6FY2pEAr7xkdfM62G0fLzHWJEwJDV
oXWDp2k+ZQ4s6xj0y3aXfzedTkfHs4rtGj1sjPrzN4JdCNi9kMkvdwHyJ8F2gXGP
YpXgE0VV6feAWnelbWZR+k/T4a9CRAXpctPUPcogKfyjovbewIPlITsJDmY39u3G
xjPh59smUZM1Pw4UHHvjtlbujUJlinkcS9hxU+S7o6P7n9YOh2HDtp60B+pwqfZn
yyo3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org