Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/r2Bi8dg37LaICeQ2t8UOUZzYRbE.roa
File: r2Bi8dg37LaICeQ2t8UOUZzYRbE.roa (raw, json)
Hash identifier: szLWLoXkJMb0F/scPifutIk9gzlwTFSgpDATAhaswlQ=
Subject key identifier: AF:60:62:F1:D8:37:EC:B6:88:09:E4:36:B7:C5:0E:51:9C:D8:45:B1
Certificate issuer: /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial: 018746547222C3E537BBB6D2B2F75984ED2E
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/r2Bi8dg37LaICeQ2t8UOUZzYRbE.roa
Signing time: Mon 03 Apr 2023 08:55:51 +0000
ROA not before: Mon 03 Apr 2023 08:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199984
IP address blocks: 185.40.85.0/24 maxlen: 24
185.40.84.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.40.87.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:54:72:22:c3:e5:37:bb:b6:d2:b2:f7:59:84:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Validity
Not Before: Apr 3 08:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6062f1d837ecb68809e436b7c50e519cd845b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:77:19:24:9e:9e:45:7a:6e:e2:19:9a:d3:
6c:37:30:23:58:79:0d:f5:9c:dc:6b:ea:ec:20:47:
4f:e3:4d:fe:fd:e6:02:7b:77:82:3d:f5:6f:bd:73:
fd:8e:10:66:da:ba:89:e0:0d:cc:94:e6:15:bb:5b:
95:98:f0:bf:d5:cd:50:89:c3:c0:b6:e0:87:f7:85:
4a:3a:d7:54:19:a0:ca:f9:3e:f8:8c:ba:d6:28:fb:
40:15:03:41:fa:16:d5:b8:10:e2:a3:5b:bf:dc:bc:
b4:c9:b6:4d:41:05:00:9b:19:5e:ce:2a:7c:c9:73:
86:54:01:7c:a6:17:f4:8e:87:b3:fe:39:57:41:a8:
9a:be:8d:ef:e6:67:f9:83:9b:58:cf:4f:d2:67:03:
6f:85:60:13:eb:cd:fb:97:aa:3e:08:90:13:40:c8:
8d:7c:2e:6f:64:14:64:cc:4c:6a:bb:6f:a6:a1:5e:
d6:13:b0:74:e2:8e:03:0a:59:6c:64:37:49:01:1d:
61:99:7d:61:75:a2:6c:bd:f2:af:b4:92:ad:96:e7:
74:f4:ef:df:40:fc:9c:13:d7:eb:17:26:05:90:cf:
d9:d2:79:2c:6e:ef:5c:95:da:06:f5:4e:92:9d:5d:
85:a2:97:82:30:4d:08:a1:ea:0d:61:68:0a:b6:39:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:62:F1:D8:37:EC:B6:88:09:E4:36:B7:C5:0E:51:9C:D8:45:B1
X509v3 Authority Key Identifier:
keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/r2Bi8dg37LaICeQ2t8UOUZzYRbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.84.0/22
185.123.103.0/24
Signature Algorithm: sha256WithRSAEncryption
57:30:20:4c:af:6f:3f:ee:81:75:71:03:e2:da:55:ce:c1:ba:
c5:c6:53:b6:1f:06:c7:bb:9e:c0:5e:90:00:99:77:08:ce:36:
7b:3d:7e:46:8c:3d:3d:87:36:0b:a5:80:ea:91:6f:93:df:de:
44:8e:1e:3d:a2:01:f2:aa:27:8f:7c:5d:36:86:b3:d6:49:5e:
15:9b:ab:2e:5d:07:d6:32:a8:b0:31:15:99:3f:00:d2:25:28:
6b:80:20:0e:9c:88:c8:a0:b5:71:b4:55:64:cb:e1:29:69:39:
44:2a:0d:b6:6b:f5:95:e8:69:29:f4:97:1b:fd:dd:47:ca:77:
ef:c7:c0:ec:81:e8:05:0d:15:3e:b3:1c:78:83:51:0d:d7:d8:
d5:bb:f3:33:12:43:dc:46:ac:02:b0:59:8a:e6:99:20:e5:00:
d9:dc:a2:f8:1e:69:3a:19:f7:c2:74:01:56:a7:7f:91:62:ca:
0c:f2:3f:39:1d:59:c0:70:0a:64:be:7d:b8:91:0a:2c:8e:e7:
1f:d9:4d:38:f0:f2:a2:8e:84:d1:3d:31:a9:79:3a:50:65:54:
f2:74:ed:f1:91:86:0a:68:cd:39:54:86:72:75:39:eb:47:74:
0c:14:23:b0:1c:9d:ac:88:04:fe:3c:7b:38:88:a9:34:f6:d5:
5e:1d:86:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdGVHIiw+U3u7bSsvdZhO0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzMxM2U5OTY1ZWFhN2IzYWU5YmQ1Y2JmMzU2NmQ0NGE1
MTA5N2QwHhcNMjMwNDAzMDg1NTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjYwNjJmMWQ4MzdlY2I2ODgwOWU0MzZiN2M1MGU1MTljZDg0NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgd3GSSenkV6buIZmtNsNzAjWHkN
9Zzca+rsIEdP403+/eYCe3eCPfVvvXP9jhBm2rqJ4A3MlOYVu1uVmPC/1c1QicPA
tuCH94VKOtdUGaDK+T74jLrWKPtAFQNB+hbVuBDio1u/3Ly0ybZNQQUAmxlezip8
yXOGVAF8phf0joez/jlXQaiavo3v5mf5g5tYz0/SZwNvhWAT6837l6o+CJATQMiN
fC5vZBRkzExqu2+moV7WE7B04o4DCllsZDdJAR1hmX1hdaJsvfKvtJKtlud09O/f
QPycE9frFyYFkM/Z0nksbu9cldoG9U6SnV2FopeCME0IoeoNYWgKtjkw8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK9gYvHYN+y2iAnkNrfFDlGc2EWxMB8GA1UdIwQY
MBaAFIXDE+mWXqp7Oum9XL81ZtRKUQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNNVDZaWmVxbnM2NmIxY3Z6Vm0xRXBSQ1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNTlhN2EtYjU2OS00NjgwLThkZTUt
ZGUyMzEyODBjMmExLzEvcjJCaThkZzM3TGFJQ2VRMnQ4VU9VWnpZUmJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNTlhN2EtYjU2OS00NjgwLThkZTUtZGUyMzEyODBjMmEx
LzEvaGNNVDZaWmVxbnM2NmIxY3Z6Vm0xRXBSQ1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuShUAwQA
uXtnMA0GCSqGSIb3DQEBCwUAA4IBAQBXMCBMr28/7oF1cQPi2lXOwbrFxlO2HwbH
u57AXpAAmXcIzjZ7PX5GjD09hzYLpYDqkW+T395Ejh49ogHyqiePfF02hrPWSV4V
m6suXQfWMqiwMRWZPwDSJShrgCAOnIjIoLVxtFVky+EpaTlEKg22a/WV6Gkp9Jcb
/d1Hynfvx8DsgegFDRU+sxx4g1EN19jVu/MzEkPcRqwCsFmK5pkg5QDZ3KL4Hmk6
GffCdAFWp3+RYsoM8j85HVnAcApkvn24kQosjucf2U048PKijoTRPTGpeTpQZVTy
dO3xkYYKaM05VIZydTnrR3QMFCOwHJ2siAT+PHs4iKk09tVeHYYK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org