Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/9L2AA3BaqjSsOKHnoo0o2QxB1Yo.roa
File: 9L2AA3BaqjSsOKHnoo0o2QxB1Yo.roa (raw, json)
Hash identifier: jJgWdjuE5Mcvc4XP9dTkfYj9w9V6WUAp39Pyh3IKoW4=
Subject key identifier: F4:BD:80:03:70:5A:AA:34:AC:38:A1:E7:A2:8D:28:D9:0C:41:D5:8A
Certificate issuer: /CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Certificate serial: 0182BB4EBE58CD64AC0D832DC1E1906D2AD4
Authority key identifier: EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/9L2AA3BaqjSsOKHnoo0o2QxB1Yo.roa
Signing time: Sat 20 Aug 2022 12:51:16 +0000
ROA not before: Sat 20 Aug 2022 12:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 195.85.205.0/24 maxlen: 24
195.85.201.0/24 maxlen: 24
195.85.207.0/24 maxlen: 24
195.85.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:4e:be:58:cd:64:ac:0d:83:2d:c1:e1:90:6d:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Validity
Not Before: Aug 20 12:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4bd8003705aaa34ac38a1e7a28d28d90c41d58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:97:f9:c6:a5:ba:4d:02:c6:b0:76:ce:02:
9f:5c:4e:bd:0c:ff:c8:e3:de:c0:f3:c6:bc:ed:38:
29:f1:93:fc:4e:ba:ff:53:d3:a8:c0:a0:cb:3c:94:
b7:58:02:99:e2:f1:b4:4a:a1:4e:52:59:0d:5f:03:
57:8e:41:0c:40:9e:68:60:7f:60:f0:41:50:71:91:
cf:4c:b5:ea:d0:3b:3b:bd:8b:b3:06:14:16:fe:29:
d0:43:f8:cc:74:44:f1:4a:6b:dc:25:16:f0:87:c6:
7b:6b:90:b3:93:9b:e6:dd:fa:b4:fd:73:4c:7a:d4:
16:8d:3e:66:4c:bf:e7:a3:dd:dd:e7:0b:49:25:72:
c9:9c:3a:18:63:38:b0:bc:ae:a6:32:19:2d:bf:ed:
df:f9:e2:97:a6:83:64:4c:e3:4e:9d:13:87:b3:68:
fe:67:14:5c:4f:1e:9b:47:40:19:74:08:95:41:86:
5e:22:22:cb:86:80:88:50:13:9b:6d:4d:57:d5:29:
19:ae:d2:97:ac:a8:47:f4:1a:c6:a7:15:69:16:b1:
4b:30:84:9a:06:7a:03:03:48:78:15:45:43:03:7c:
fb:d4:0f:af:62:e9:f4:c2:4c:a6:f4:80:0f:b4:6e:
fa:27:fb:23:a1:0c:c5:2e:51:3c:25:37:04:6a:01:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:80:03:70:5A:AA:34:AC:38:A1:E7:A2:8D:28:D9:0C:41:D5:8A
X509v3 Authority Key Identifier:
keyid:EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/9L2AA3BaqjSsOKHnoo0o2QxB1Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
195.85.207.0/24
195.85.216.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d8:90:5b:fc:b7:74:31:24:a0:97:91:72:a5:98:0f:33:d1:
7b:43:7b:26:ac:12:84:a8:d1:44:83:cc:f3:b1:88:9f:af:d6:
7a:a4:c1:e6:b5:b3:4c:1f:53:ac:28:41:64:7c:55:82:e5:f3:
7d:31:ad:f8:f3:ef:e1:d9:4c:2b:4e:54:87:ae:c2:5a:bc:5e:
a2:a3:84:2b:a9:ba:1b:20:70:88:b4:b9:ea:5d:4e:72:3c:b4:
fa:47:1c:bb:24:b2:70:22:b9:10:6b:64:6b:dc:a5:80:5c:9b:
33:6f:47:f7:94:2e:9a:6f:64:2e:99:5b:44:18:2d:54:94:94:
e5:71:17:56:65:c9:12:e5:4d:bf:e2:59:2d:8f:fa:11:7a:c5:
ca:51:60:7d:3d:1e:63:3e:10:c8:7a:bf:c8:4d:c8:24:30:25:
de:0d:e4:6b:48:3e:3a:57:29:79:a0:7a:29:b5:4c:80:ae:e5:
ae:12:fa:c6:80:f1:9c:58:51:7d:09:e9:fc:ef:e6:b9:82:ba:
0b:db:ad:b3:25:bd:20:f1:50:80:ca:90:f1:a3:34:bc:2d:c5:
14:6b:d1:7b:b0:10:c3:ce:57:4e:37:76:72:7e:06:05:6f:f4:
28:f5:ee:55:45:f2:f3:da:5a:87:a9:b3:18:e8:cf:02:cb:aa:
20:c8:76:18
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYK7Tr5YzWSsDYMtweGQbSrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhY2ViYWRkYzAyMTBlYzZmMjQ5MDVkMWY5Y2ViY2IzZTBj
MDEyYzgwHhcNMjIwODIwMTI1MTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGJkODAwMzcwNWFhYTM0YWMzOGExZTdhMjhkMjhkOTBjNDFkNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgaX+caluk0CxrB2zgKfXE69DP/I
497A88a87Tgp8ZP8Trr/U9OowKDLPJS3WAKZ4vG0SqFOUlkNXwNXjkEMQJ5oYH9g
8EFQcZHPTLXq0Ds7vYuzBhQW/inQQ/jMdETxSmvcJRbwh8Z7a5Czk5vm3fq0/XNM
etQWjT5mTL/no93d5wtJJXLJnDoYYziwvK6mMhktv+3f+eKXpoNkTONOnROHs2j+
ZxRcTx6bR0AZdAiVQYZeIiLLhoCIUBObbU1X1SkZrtKXrKhH9BrGpxVpFrFLMISa
BnoDA0h4FUVDA3z71A+vYun0wkym9IAPtG76J/sjoQzFLlE8JTcEagFbtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPS9gANwWqo0rDih56KNKNkMQdWKMB8GA1UdIwQY
MBaAFOrOut3AIQ7G8kkF0fnOvLPgwBLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnM2NjNjQWhEc2J5U1FYUi1jNjhzLURBRXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yZTVmMDktNGVhOS00NjVmLTkzMDAt
YmFmMjZjYjM5NGQ4LzEvOUwyQUEzQmFxalNzT0tIbm9vMG8yUXhCMVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yZTVmMDktNGVhOS00NjVmLTkzMDAtYmFmMjZjYjM5NGQ4
LzEvNnM2NjNjQWhEc2J5U1FYUi1jNjhzLURBRXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAw1XJAwQA
w1XNAwQAw1XPAwQAw1XYMA0GCSqGSIb3DQEBCwUAA4IBAQCA2JBb/Ld0MSSgl5Fy
pZgPM9F7Q3smrBKEqNFEg8zzsYifr9Z6pMHmtbNMH1OsKEFkfFWC5fN9Ma348+/h
2UwrTlSHrsJavF6io4QrqbobIHCItLnqXU5yPLT6Rxy7JLJwIrkQa2Rr3KWAXJsz
b0f3lC6ab2QumVtEGC1UlJTlcRdWZckS5U2/4lktj/oResXKUWB9PR5jPhDIer/I
TcgkMCXeDeRrSD46Vyl5oHoptUyAruWuEvrGgPGcWFF9Cen87+a5groL262zJb0g
8VCAypDxozS8LcUUa9F7sBDDzldON3ZyfgYFb/Qo9e5VRfLz2lqHqbMY6M8Cy6og
yHYY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org