Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/1-BhxbOwNc7Cw6RHCLV4YyVUmvMk.roa
File: 1-BhxbOwNc7Cw6RHCLV4YyVUmvMk.roa (raw, json)
Hash identifier: 2SmNazMewu9aW9qQS+J9zJBlysFWWKKT/YcRCx3MzSQ=
Subject key identifier: F8:18:71:6C:EC:0D:73:B0:B0:E9:11:C2:2D:5E:18:C9:55:26:BC:C9
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 0183C11599F207E808E671023FE8F5D2EA83
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/1-BhxbOwNc7Cw6RHCLV4YyVUmvMk.roa
Signing time: Mon 10 Oct 2022 08:49:21 +0000
ROA not before: Mon 10 Oct 2022 08:49:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 91.149.202.0/23 maxlen: 23
91.149.215.0/24 maxlen: 24
91.149.218.0/23 maxlen: 23
91.149.221.0/24 maxlen: 24
91.149.236.0/22 maxlen: 22
91.149.235.0/24 maxlen: 24
91.149.240.0/22 maxlen: 22
91.149.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:15:99:f2:07:e8:08:e6:71:02:3f:e8:f5:d2:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Oct 10 08:49:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f818716cec0d73b0b0e911c22d5e18c95526bcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:a5:ec:3e:06:1f:2f:1a:ad:f5:10:21:56:
18:e9:68:7b:52:96:60:38:3f:ff:72:ae:8d:8d:ef:
dd:0e:75:4f:8a:15:66:1f:81:3a:20:61:28:b0:6f:
49:11:28:f0:a5:65:af:b8:5b:b5:5f:6d:68:20:1c:
0b:33:6c:af:1e:9d:bc:c2:d7:20:e0:5f:7f:30:2b:
82:5b:d2:c8:eb:b3:c3:cb:ab:ce:55:e3:a8:c1:bd:
cb:00:1e:30:36:0b:5a:46:88:f5:d1:30:a6:d6:b1:
8e:12:87:90:3b:5e:79:8e:69:41:65:91:2b:20:eb:
dc:80:bb:aa:ea:84:fc:0f:09:d6:85:4f:3b:f3:c9:
bd:1d:e6:51:9c:d4:da:44:94:b7:5a:e4:16:03:2b:
e4:75:39:e5:5d:48:59:c2:aa:55:33:ab:f0:5d:51:
b5:1a:56:fc:62:ac:0e:7f:c6:2d:ba:ac:b1:67:bb:
df:3f:19:74:b3:71:78:66:27:c2:fb:90:88:c5:ee:
7e:e2:18:dc:91:4f:ac:d7:82:18:f9:ba:75:0a:a8:
fc:01:c9:b6:98:70:51:90:a7:9e:b8:e4:0c:b8:e7:
52:7d:eb:6e:ac:4c:7b:85:d2:f4:18:44:7e:f2:d3:
f2:72:70:61:77:7c:b0:1d:f7:db:2c:f1:bb:c9:81:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:71:6C:EC:0D:73:B0:B0:E9:11:C2:2D:5E:18:C9:55:26:BC:C9
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/1-BhxbOwNc7Cw6RHCLV4YyVUmvMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.202.0/23
91.149.215.0/24
91.149.218.0/23
91.149.221.0/24
91.149.235.0-91.149.243.255
91.149.252.0/22
Signature Algorithm: sha256WithRSAEncryption
77:47:7f:ca:a3:4d:30:94:2f:8f:ed:8e:fa:e8:dd:2c:52:5e:
b4:dc:82:a6:83:73:0a:46:dd:c6:d1:14:7f:03:11:3c:6d:0f:
34:29:d0:90:9c:ed:09:e3:52:89:bc:c6:bc:82:c9:e8:7a:01:
30:4b:49:a2:0e:70:d9:5b:12:70:fe:c4:f4:d5:7e:78:fe:6f:
2f:05:0e:a6:64:65:7b:8e:d1:71:87:ab:8f:53:9c:bd:f1:6f:
80:03:92:cd:94:0c:c6:89:cb:03:53:64:3e:d0:29:40:19:1b:
a3:09:20:03:d3:e4:bd:11:7d:19:e9:00:de:3b:92:63:64:02:
2e:8b:75:4f:df:d1:b7:a5:da:1d:f9:93:d6:71:0d:c7:8f:1c:
25:f8:e4:9c:61:06:05:5e:73:2f:9d:7d:13:32:ea:d6:5a:5e:
9d:23:51:65:5c:e5:3d:ce:96:4e:63:bc:08:3a:9c:27:37:4d:
5a:5b:04:95:76:fc:b1:a0:d6:d9:5c:df:72:81:e4:ab:09:51:
95:89:e3:c8:88:ba:9b:52:c6:e5:98:55:ad:77:c2:b7:7b:93:
90:9f:ac:61:f6:ea:7e:5a:43:e4:f1:86:2e:61:45:f4:9d:32:
b1:ee:37:e8:c4:d5:bd:31:76:b6:3a:ea:66:79:1d:fb:93:d8:
f1:b1:f9:ef
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYPBFZnyB+gI5nECP+j10uqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Nzg1MGU1NzFmM2YyYWNhMmMxZWMxZDdlNTAyZDliZDE4
NGM0NWMwHhcNMjIxMDEwMDg0OTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODE4NzE2Y2VjMGQ3M2IwYjBlOTExYzIyZDVlMThjOTU1MjZiY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHil7D4GHy8arfUQIVYY6Wh7UpZg
OD//cq6Nje/dDnVPihVmH4E6IGEosG9JESjwpWWvuFu1X21oIBwLM2yvHp28wtcg
4F9/MCuCW9LI67PDy6vOVeOowb3LAB4wNgtaRoj10TCm1rGOEoeQO155jmlBZZEr
IOvcgLuq6oT8DwnWhU8788m9HeZRnNTaRJS3WuQWAyvkdTnlXUhZwqpVM6vwXVG1
Glb8YqwOf8YtuqyxZ7vfPxl0s3F4ZifC+5CIxe5+4hjckU+s14IY+bp1Cqj8Acm2
mHBRkKeeuOQMuOdSfeturEx7hdL0GER+8tPycnBhd3ywHffbLPG7yYG/KQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFPgYcWzsDXOwsOkRwi1eGMlVJrzJMB8GA1UdIwQY
MBaAFKZ4UOVx8/KsosHsHX5QLZvRhMRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMzA5YjUtZjkzZi00YzYyLThkY2Ut
YjBjMTUxZTUxNmNmLzEvMS1CaHhiT3dOYzdDdzZSSENMVjRZeVZVbXZNay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvMzMwOWI1LWY5M2YtNGM2Mi04ZGNlLWIwYzE1MWU1MTZj
Zi8xL3BuaFE1WEh6OHF5aXdld2RmbEF0bTlHRXhGdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBFBggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAVuVygME
AFuV1wMEAVuV2gMEAFuV3TAMAwQAW5XrAwQCW5XwAwQCW5X8MA0GCSqGSIb3DQEB
CwUAA4IBAQB3R3/Ko00wlC+P7Y766N0sUl603IKmg3MKRt3G0RR/AxE8bQ80KdCQ
nO0J41KJvMa8gsnoegEwS0miDnDZWxJw/sT01X54/m8vBQ6mZGV7jtFxh6uPU5y9
8W+AA5LNlAzGicsDU2Q+0ClAGRujCSAD0+S9EX0Z6QDeO5JjZAIui3VP39G3pdod
+ZPWcQ3Hjxwl+OScYQYFXnMvnX0TMurWWl6dI1FlXOU9zpZOY7wIOpwnN01aWwSV
dvyxoNbZXN9ygeSrCVGViePIiLqbUsblmFWtd8K3e5OQn6xh9up+WkPk8YYuYUX0
nTKx7jfoxNW9MXa2OupmeR37k9jxsfnv
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org