Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/bwdExF54rybUWYtG7DrE4taPEZg.roa
File: bwdExF54rybUWYtG7DrE4taPEZg.roa (raw, json)
Hash identifier: G+ladtBEFOodE7V94GWUN0Nouew3jlwnMKA0OYMYQ5I=
Subject key identifier: 6F:07:44:C4:5E:78:AF:26:D4:59:8B:46:EC:3A:C4:E2:D6:8F:11:98
Certificate issuer: /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial: 3364148C
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/bwdExF54rybUWYtG7DrE4taPEZg.roa
Signing time: Sat 01 Jan 2022 16:06:36 +0000
ROA not before: Sat 01 Jan 2022 16:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.80.0/21 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.204.0/22 maxlen: 22
185.40.206.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
2a02:2b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862196876 (0x3364148c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Validity
Not Before: Jan 1 16:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f0744c45e78af26d4598b46ec3ac4e2d68f1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:a2:b3:d6:4a:e2:83:f9:be:fd:33:35:37:
e0:06:8a:43:c0:d5:53:c0:74:52:70:47:5a:38:cf:
11:3e:a5:8b:45:56:fb:5b:fd:c6:ce:0c:2f:3b:bc:
e2:ad:5e:ce:ba:ce:b8:c2:e3:d1:73:4a:e2:af:88:
5a:9f:51:73:f3:49:30:cb:60:0c:0f:23:0b:f3:95:
04:e3:49:e4:3f:20:3e:25:98:45:1c:26:09:8d:5f:
b1:8c:a0:9a:65:51:a0:df:03:cd:75:fa:54:47:02:
1d:26:f5:38:1c:bc:b7:a8:4a:48:46:2e:6e:ce:6e:
ae:2a:7c:f4:78:e7:9b:67:66:36:1f:c2:c1:51:08:
31:7d:aa:2e:e5:3f:d3:5b:12:dd:b9:ad:a3:95:50:
4d:fc:33:1d:a4:b9:d4:85:82:17:ca:08:88:d3:ae:
2c:52:b8:53:0a:35:a0:ea:08:a8:6c:1e:e2:fb:da:
b0:04:7a:1e:8e:c7:01:24:12:d0:b1:d0:32:3d:25:
07:2f:87:73:a6:c2:08:95:41:56:94:86:9f:e5:da:
76:55:48:63:ad:fe:4d:1b:0a:25:6e:01:cb:53:44:
69:7c:d2:21:72:e2:f5:3a:93:76:ab:ac:92:b0:b3:
ac:c4:2e:27:c2:0e:a6:59:70:c7:94:ab:a3:2e:c1:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:07:44:C4:5E:78:AF:26:D4:59:8B:46:EC:3A:C4:E2:D6:8F:11:98
X509v3 Authority Key Identifier:
keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/bwdExF54rybUWYtG7DrE4taPEZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
185.40.204.0/22
IPv6:
2a02:2b0::/32
Signature Algorithm: sha256WithRSAEncryption
34:21:06:c0:4e:7e:b7:cd:90:1f:a3:82:56:42:83:65:eb:ba:
a8:20:11:46:02:b3:57:86:7b:61:ca:e6:8d:36:0f:37:8e:2f:
24:36:4d:52:55:d9:bf:2a:c2:79:bc:f2:c2:d8:6f:0a:4a:9a:
b8:cc:9e:91:30:d4:18:43:50:a1:71:17:44:4e:d4:94:f6:27:
7f:35:3f:12:40:f3:65:66:97:b2:97:97:1c:a7:4d:12:8e:32:
67:34:c8:01:f3:74:87:e3:44:6e:b2:c0:19:9c:56:cb:9c:d3:
a4:0a:47:a3:61:c0:08:d0:6d:4b:a8:4c:a1:72:84:7d:11:75:
be:de:dc:32:b3:37:1e:41:a9:84:fb:7b:d3:b7:36:5a:9d:45:
1b:82:7a:de:71:a6:80:17:98:4a:44:6b:46:6e:87:e4:20:38:
e2:db:11:db:41:b7:7f:2f:e2:e8:39:e1:9c:bf:38:6c:ef:99:
3a:61:6a:43:85:11:c1:f3:cd:fe:df:36:81:00:ed:53:9c:a4:
b2:fd:20:63:90:4b:1d:89:b8:00:30:64:90:e9:85:9f:86:40:
2a:c3:5a:13:e9:f0:b7:dd:d8:0c:86:95:42:9a:bd:25:cd:f7:
fd:f2:17:7a:a1:52:a9:58:49:88:59:bc:b3:ce:25:26:0d:3d:
8a:f3:9a:af
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEM2QUjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWJlYWZkNTU2NTk1ZTg4NDBjYThlYmQxOWJiZDJhYzU5MWI0Y2E4MB4XDTIyMDEw
MTE2MDYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmYwNzQ0YzQ1ZTc4
YWYyNmQ0NTk4YjQ2ZWMzYWM0ZTJkNjhmMTE5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAILyorPWSuKD+b79MzU34AaKQ8DVU8B0UnBHWjjPET6li0VW
+1v9xs4MLzu84q1ezrrOuMLj0XNK4q+IWp9Rc/NJMMtgDA8jC/OVBONJ5D8gPiWY
RRwmCY1fsYygmmVRoN8DzXX6VEcCHSb1OBy8t6hKSEYubs5urip89Hjnm2dmNh/C
wVEIMX2qLuU/01sS3bmto5VQTfwzHaS51IWCF8oIiNOuLFK4Uwo1oOoIqGwe4vva
sAR6Ho7HASQS0LHQMj0lBy+Hc6bCCJVBVpSGn+XadlVIY63+TRsKJW4By1NEaXzS
IXLi9TqTdquskrCzrMQuJ8IOpllwx5Sroy7BHVUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRvB0TEXnivJtRZi0bsOsTi1o8RmDAfBgNVHSMEGDAWgBQKvq/VVlleiEDK
jr0Zu9KsWRtMqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NyNnYxVlpaWG9oQXlvNjlHYnZTckZrYlRLZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvOTIxNTM2LWVlNDYtNGU4MC1hNTFmLWI2NjdlYzBkNmQwZi8x
L2J3ZEV4RjU0cnliVVdZdEc3RHJFNHRhUEVaZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
OTIxNTM2LWVlNDYtNGU4MC1hNTFmLWI2NjdlYzBkNmQwZi8xL0NyNnYxVlpaWG9o
QXlvNjlHYnZTckZrYlRLZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA11dUAMEArkozDANBAIAAjAHAwUA
KgICsDANBgkqhkiG9w0BAQsFAAOCAQEANCEGwE5+t82QH6OCVkKDZeu6qCARRgKz
V4Z7YcrmjTYPN44vJDZNUlXZvyrCebzywthvCkqauMyekTDUGENQoXEXRE7UlPYn
fzU/EkDzZWaXspeXHKdNEo4yZzTIAfN0h+NEbrLAGZxWy5zTpApHo2HACNBtS6hM
oXKEfRF1vt7cMrM3HkGphPt707c2Wp1FG4J63nGmgBeYSkRrRm6H5CA44tsR20G3
fy/i6DnhnL84bO+ZOmFqQ4URwfPN/t82gQDtU5yksv0gY5BLHYm4ADBkkOmFn4ZA
KsNaE+nwt93YDIaVQpq9Jc33/fIXeqFSqVhJiFm8s84lJg09ivOarw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org