Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/_0R6UMHqlMYlWIjZnKHlJauhClA.roa
File: _0R6UMHqlMYlWIjZnKHlJauhClA.roa (raw, json)
Hash identifier: MyPKAGAGtSgHXIfbUt7hAbesRFM1834y+GsBngcx/6M=
Subject key identifier: FF:44:7A:50:C1:EA:94:C6:25:58:88:D9:9C:A1:E5:25:AB:A1:0A:50
Certificate issuer: /CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Certificate serial: 01917AB4EAB513A72BB5187B04B9E8FAD5E8
Authority key identifier: F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/_0R6UMHqlMYlWIjZnKHlJauhClA.roa
Signing time: Thu 22 Aug 2024 15:29:22 +0000
ROA not before: Thu 22 Aug 2024 15:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 45.89.4.0/22 maxlen: 24
141.195.128.0/18 maxlen: 24
185.147.244.0/23 maxlen: 24
2a0a:5580::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:b4:ea:b5:13:a7:2b:b5:18:7b:04:b9:e8:fa:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Validity
Not Before: Aug 22 15:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff447a50c1ea94c6255888d99ca1e525aba10a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:4f:43:de:09:12:ec:b1:48:de:a2:c3:f4:
ec:d1:09:3c:3c:fc:67:51:18:ac:ab:47:ad:fe:99:
35:4d:4c:c8:4e:34:ea:dc:37:76:0f:56:28:ff:7e:
a3:cb:26:03:7d:ed:b4:d8:6f:e4:af:4f:3a:e3:73:
05:8e:ef:a1:12:e3:fd:77:9b:f0:26:27:ca:c9:69:
d0:85:5a:87:90:7c:c3:59:da:98:b9:ab:81:d1:ff:
91:21:0b:a6:0a:61:4f:05:99:a8:c4:2c:0c:a6:2f:
05:ff:9e:c8:16:87:46:6c:3e:f6:31:04:a1:64:66:
eb:24:a5:3f:ed:95:a3:d3:5d:9e:7c:af:09:64:3a:
ee:51:25:14:f5:aa:ce:d2:14:8d:a7:26:bc:2a:9c:
5c:e5:54:fd:5b:f3:8a:73:80:30:de:7f:6e:84:c5:
84:da:a1:39:c2:72:03:27:29:c9:f7:a0:4b:c1:52:
a2:e6:b7:f1:fd:6a:48:ac:87:d2:53:55:7d:e8:8a:
3c:21:11:df:7c:37:b3:c4:2f:8f:1d:75:bf:22:79:
fb:18:87:38:e5:41:3b:b0:24:0d:87:72:5f:0b:5a:
6a:ae:a9:3e:7b:c2:33:95:33:56:36:df:08:bd:68:
77:2f:a9:eb:08:2a:71:c8:1a:62:3a:33:1d:76:1e:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:7A:50:C1:EA:94:C6:25:58:88:D9:9C:A1:E5:25:AB:A1:0A:50
X509v3 Authority Key Identifier:
keyid:F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/_0R6UMHqlMYlWIjZnKHlJauhClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
185.147.244.0/23
IPv6:
2a0a:5580::/29
Signature Algorithm: sha256WithRSAEncryption
19:96:4b:26:c6:88:c7:1b:5f:4a:fe:20:3f:7e:f3:9f:62:10:
ab:56:27:53:1e:67:27:f8:e3:dc:df:b4:4e:f8:20:d0:e1:5e:
1e:47:f0:49:0a:8d:88:5b:15:a1:e1:ed:57:65:2b:a7:10:93:
c7:bc:81:34:7d:8a:68:c4:f5:b6:9f:f2:99:ce:de:9e:86:ff:
96:0d:b6:00:ce:5c:f2:d1:b6:0e:59:fa:19:7d:49:94:42:dd:
f0:ce:83:ee:91:5c:56:7a:2f:ba:b8:c8:5e:2f:db:ff:8c:83:
ac:38:ce:3c:d0:5b:17:d7:21:12:67:f9:54:60:cb:1f:3b:bd:
0f:39:cf:e6:74:c8:31:89:d9:bb:fb:04:d2:d8:29:f7:2a:01:
1b:23:44:81:75:32:e0:36:3c:25:49:91:65:77:81:8e:6a:20:
11:30:c6:11:fc:6d:67:b3:f1:1f:ae:78:71:61:5a:c3:ad:78:
31:8e:bc:01:d5:7f:e4:b2:28:47:97:56:42:8e:8b:2c:b1:c6:
61:fd:71:7a:36:e8:fe:10:eb:52:37:9f:02:f9:34:d1:60:14:
4e:90:d2:49:51:4a:e4:fc:67:f4:6f:b7:af:ba:89:04:68:af:
0b:e7:ee:e4:6d:db:5d:ce:66:be:12:a1:61:61:1e:f3:74:2a:
2c:63:e5:ca
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZF6tOq1E6crtRh7BLno+tXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjIzOWRjYTlkZTkwYjNmZjliZDhjMjNlZmRmYzEyOWY2
ZGVkMzcwHhcNMjQwODIyMTUyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjQ0N2E1MGMxZWE5NGM2MjU1ODg4ZDk5Y2ExZTUyNWFiYTEwYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQpPQ94JEuyxSN6iw/Ts0Qk8PPxn
URisq0et/pk1TUzITjTq3Dd2D1Yo/36jyyYDfe202G/kr08643MFju+hEuP9d5vw
JifKyWnQhVqHkHzDWdqYuauB0f+RIQumCmFPBZmoxCwMpi8F/57IFodGbD72MQSh
ZGbrJKU/7ZWj012efK8JZDruUSUU9arO0hSNpya8Kpxc5VT9W/OKc4Aw3n9uhMWE
2qE5wnIDJynJ96BLwVKi5rfx/WpIrIfSU1V96Io8IRHffDezxC+PHXW/Inn7GIc4
5UE7sCQNh3JfC1pqrqk+e8IzlTNWNt8IvWh3L6nrCCpxyBpiOjMddh485QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFP9EelDB6pTGJViI2Zyh5SWroQpQMB8GA1UdIwQY
MBaAFPJiOdyp3pCz/5vYwj79/BKfbe03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1JNTNLbmVrTFBfbTlqQ1B2MzhFcDl0N1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81YjBlNGMtMjJiMS00ZGM4LTgwNTQt
ZDc4OGRhMWY5MWRkLzEvXzBSNlVNSHFsTVlsV0lqWm5LSGxKYXVoQ2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81YjBlNGMtMjJiMS00ZGM4LTgwNTQtZDc4OGRhMWY5MWRk
LzEvOG1JNTNLbmVrTFBfbTlqQ1B2MzhFcDl0N1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVkEAwQG
jcOAAwQBuZP0MA0EAgACMAcDBQMqClWAMA0GCSqGSIb3DQEBCwUAA4IBAQAZlksm
xojHG19K/iA/fvOfYhCrVidTHmcn+OPc37RO+CDQ4V4eR/BJCo2IWxWh4e1XZSun
EJPHvIE0fYpoxPW2n/KZzt6ehv+WDbYAzlzy0bYOWfoZfUmUQt3wzoPukVxWei+6
uMheL9v/jIOsOM480FsX1yESZ/lUYMsfO70POc/mdMgxidm7+wTS2Cn3KgEbI0SB
dTLgNjwlSZFld4GOaiARMMYR/G1ns/EfrnhxYVrDrXgxjrwB1X/ksihHl1ZCjoss
scZh/XF6Nuj+EOtSN58C+TTRYBROkNJJUUrk/Gf0b7evuokEaK8L5+7kbdtdzma+
EqFhYR7zdCosY+XK
-----END CERTIFICATE-----
Generated at Thu Aug 29 14:50:21 2024 by rpki-client on console-fra.rpki-client.org