Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/ZT5txH5kMHmEq-2SD7Dgc1Q-DBo.roa
File: ZT5txH5kMHmEq-2SD7Dgc1Q-DBo.roa (raw, json)
Hash identifier: 4aN+E6uya246EwMHYtkJDN0y4gDP+AWBBS7I9ItDA1g=
Subject key identifier: 65:3E:6D:C4:7E:64:30:79:84:AB:ED:92:0F:B0:E0:73:54:3E:0C:1A
Certificate issuer: /CN=b0311619a6764dbf55b5c27f11506a3be2dfcbbd
Certificate serial: 083E6A6D
Authority key identifier: B0:31:16:19:A6:76:4D:BF:55:B5:C2:7F:11:50:6A:3B:E2:DF:CB:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/ZT5txH5kMHmEq-2SD7Dgc1Q-DBo.roa
Signing time: Sat 01 Jan 2022 11:57:40 +0000
ROA not before: Sat 01 Jan 2022 11:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41033
IP address blocks: 185.235.184.0/24 maxlen: 24
185.235.185.0/24 maxlen: 24
185.235.187.0/24 maxlen: 24
2a0d:7100:6::/48 maxlen: 48
2a0d:7100:1::/48 maxlen: 48
2a0d:7100:7::/48 maxlen: 48
2a0d:7100:5::/48 maxlen: 48
2a0d:7100::/48 maxlen: 48
2a0d:9080::/48 maxlen: 48
2a0d:7100:9::/48 maxlen: 48
2a0d:7100:4::/48 maxlen: 48
2a0d:7100:2::/48 maxlen: 48
2a0d:7100:8::/48 maxlen: 48
2a0d:7100:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138308205 (0x83e6a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0311619a6764dbf55b5c27f11506a3be2dfcbbd
Validity
Not Before: Jan 1 11:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=653e6dc47e64307984abed920fb0e073543e0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:90:91:28:19:ed:50:27:0f:64:26:e5:eb:
79:a3:4e:94:af:64:86:04:58:e3:ae:b1:35:8c:61:
61:57:13:28:6d:43:5c:34:2c:3c:3c:91:c6:07:2f:
72:d1:e7:b0:1c:35:3f:56:cf:d8:b8:44:1f:c7:e4:
18:04:95:cc:5a:2a:67:4b:ec:88:18:d7:3f:b5:80:
b2:dc:2a:62:47:18:ed:09:09:55:d1:20:94:5f:81:
9a:5e:06:f6:6e:3c:2c:8f:ff:bc:f8:47:ef:9f:35:
b7:ad:08:9d:6a:27:14:52:9c:d3:e0:e7:4d:26:2f:
90:c2:29:2b:9b:77:fc:cd:04:72:a7:d5:92:ad:4d:
03:53:01:5a:06:37:39:53:0c:3f:a3:2a:ff:75:b4:
c5:29:8f:85:07:52:25:be:98:ae:98:a2:a9:bb:68:
77:77:ba:d4:7e:19:dc:d9:9a:c4:08:7d:e9:c6:7a:
9f:ed:07:b6:6b:3a:4a:7e:ad:21:f3:bb:d5:e0:9e:
bb:70:c4:25:c5:53:8e:32:e6:40:a9:76:6e:2d:8a:
26:77:00:57:dc:8b:0c:9d:52:a0:89:9b:c1:7e:64:
de:8c:32:86:26:7a:42:3e:4a:0d:4a:19:9d:4a:e9:
df:b9:ac:33:15:f7:5c:0f:6a:96:1a:3c:fd:5d:8c:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:6D:C4:7E:64:30:79:84:AB:ED:92:0F:B0:E0:73:54:3E:0C:1A
X509v3 Authority Key Identifier:
keyid:B0:31:16:19:A6:76:4D:BF:55:B5:C2:7F:11:50:6A:3B:E2:DF:CB:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/ZT5txH5kMHmEq-2SD7Dgc1Q-DBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.184.0/23
185.235.187.0/24
IPv6:
2a0d:7100::-2a0d:7100:9:ffff:ffff:ffff:ffff:ffff
2a0d:9080::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c4:fc:f8:17:e7:9b:38:92:3d:4b:ce:ac:c4:a1:31:04:04:
58:88:b4:67:40:00:f7:13:40:c9:dc:b3:37:8d:1b:6f:39:f3:
ed:9c:14:ba:a6:57:ed:3b:60:d5:52:38:1d:e4:0c:35:aa:ca:
1c:a7:7b:a5:47:60:a9:85:53:31:b1:ba:c5:44:4d:e4:b5:e1:
d8:bd:d2:cc:92:fe:93:d4:5f:3d:05:ce:ec:b1:d2:35:e9:9f:
e0:0c:23:51:91:ac:77:90:65:53:a5:ca:a7:94:08:6b:10:f0:
3d:05:f3:e5:fc:b5:96:69:52:e8:e4:37:07:68:9b:c3:3a:d6:
a2:bf:88:35:50:d4:4f:8f:e9:46:98:ce:4f:83:a5:a1:6e:f0:
25:12:09:58:d1:66:fc:68:fd:ff:19:5c:20:2a:4c:14:bc:6a:
e1:62:ba:31:54:eb:97:78:41:af:09:e8:85:5c:84:f6:f6:6c:
06:7a:5f:5a:f0:45:47:0a:d1:4c:0c:31:ae:f5:2c:d7:09:c8:
84:a0:c6:76:a3:ab:92:12:c0:53:89:2b:59:d2:c5:e6:36:bf:
83:af:37:58:16:9b:08:24:c3:2f:01:db:10:a1:fa:f6:fc:c1:
8a:a8:41:ab:3b:b2:2d:48:14:78:3c:1c:21:9e:04:99:a6:b0:
e0:e1:5e:33
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIECD5qbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MDMxMTYxOWE2NzY0ZGJmNTViNWMyN2YxMTUwNmEzYmUyZGZjYmJkMB4XDTIyMDEw
MTExNTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjUzZTZkYzQ3ZTY0
MzA3OTg0YWJlZDkyMGZiMGUwNzM1NDNlMGMxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALO0kJEoGe1QJw9kJuXreaNOlK9khgRY466xNYxhYVcTKG1D
XDQsPDyRxgcvctHnsBw1P1bP2LhEH8fkGASVzFoqZ0vsiBjXP7WAstwqYkcY7QkJ
VdEglF+Bml4G9m48LI//vPhH7581t60InWonFFKc0+DnTSYvkMIpK5t3/M0EcqfV
kq1NA1MBWgY3OVMMP6Mq/3W0xSmPhQdSJb6Yrpiiqbtod3e61H4Z3NmaxAh96cZ6
n+0Htms6Sn6tIfO71eCeu3DEJcVTjjLmQKl2bi2KJncAV9yLDJ1SoImbwX5k3owy
hiZ6Qj5KDUoZnUrp37msMxX3XA9qlho8/V2M5U8CAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBRlPm3EfmQweYSr7ZIPsOBzVD4MGjAfBgNVHSMEGDAWgBSwMRYZpnZNv1W1
wn8RUGo74t/LvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NERVdHYVoyVGI5VnRjSl9FVkJxTy1MZnk3MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvMzA3NjgxLTU1YWUtNDUzYS04M2ZkLTEzNDljNDkyMmRkOS8x
L1pUNXR4SDVrTUhtRXEtMlNEN0RnYzFRLURCby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
MzA3NjgxLTU1YWUtNDUzYS04M2ZkLTEzNDljNDkyMmRkOS8xL3NERVdHYVoyVGI5
VnRjSl9FVkJxTy1MZnk3MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwEgQCAAEwDAMEAbnruAMEALnruzAgBAIAAjAaMA8D
BAAqDXEDBwEqDXEAAAgDBwAqDZCAAAAwDQYJKoZIhvcNAQELBQADggEBAC/E/PgX
55s4kj1LzqzEoTEEBFiItGdAAPcTQMncszeNG2858+2cFLqmV+07YNVSOB3kDDWq
yhyne6VHYKmFUzGxusVETeS14di90syS/pPUXz0Fzuyx0jXpn+AMI1GRrHeQZVOl
yqeUCGsQ8D0F8+X8tZZpUujkNwdom8M61qK/iDVQ1E+P6UaYzk+DpaFu8CUSCVjR
Zvxo/f8ZXCAqTBS8auFiujFU65d4Qa8J6IVchPb2bAZ6X1rwRUcK0UwMMa71LNcJ
yISgxnajq5ISwFOJK1nSxeY2v4OvN1gWmwgkwy8B2xCh+vb8wYqoQas7si1IFHg8
HCGeBJmmsODhXjM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org