Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/CDm3uh58ERXeebmc_jlO6nuOIbo.roa
File: CDm3uh58ERXeebmc_jlO6nuOIbo.roa (raw, json)
Hash identifier: 23ZNSAcKCFqeJuNC7V80CmHaU2Kxw1dAVaoDBuPVoxQ=
Subject key identifier: 08:39:B7:BA:1E:7C:11:15:DE:79:B9:9C:FE:39:4E:EA:7B:8E:21:BA
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 018CC795532A810A8075D6B11BF07C9B1DA1
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/CDm3uh58ERXeebmc_jlO6nuOIbo.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25459
IP address blocks: 178.18.128.0/20 maxlen: 24
37.247.32.0/20 maxlen: 24
94.103.144.0/20 maxlen: 24
77.243.224.0/20 maxlen: 24
2a02:990::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:53:2a:81:0a:80:75:d6:b1:1b:f0:7c:9b:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0839b7ba1e7c1115de79b99cfe394eea7b8e21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:89:12:bf:be:95:90:7d:f7:12:2e:3a:cf:
4c:4c:fb:df:cb:7f:9f:f3:08:c7:d7:81:9c:5b:61:
ff:4f:69:b2:cb:65:e9:2a:15:ea:18:4a:10:3c:37:
3e:f3:b2:4f:8d:b2:8f:6c:a0:07:98:3b:fd:72:40:
b5:9d:84:89:c6:cd:3e:99:16:5b:05:d6:df:a6:b4:
fe:83:c4:a5:84:64:51:b5:e1:f6:8e:0a:8f:ce:63:
a9:09:a0:01:98:b3:8b:68:53:67:bd:b7:81:a3:ba:
0c:7a:6e:8b:1f:33:e5:98:b4:d8:e7:5a:26:cd:ae:
9a:e1:9a:17:f5:7e:ad:6d:3a:a0:90:36:c1:58:fb:
11:07:97:fa:0d:fe:9b:13:cd:3d:21:65:ea:69:50:
e6:8e:15:3e:fb:16:2f:86:32:84:30:3e:03:9f:9d:
b9:4b:48:b7:69:b5:b3:9e:8d:a0:b8:13:fc:90:b4:
e7:06:92:1e:09:30:13:75:da:11:51:0e:e2:63:53:
56:4d:43:35:ba:34:85:dd:d6:25:c3:92:61:f5:01:
f3:ae:82:56:2f:d8:4d:9e:c1:9f:c8:7b:9b:6a:d7:
2f:c9:56:a7:bb:32:0a:f0:26:ef:3a:3b:23:98:35:
d5:00:21:52:1b:61:ba:65:4e:8a:5a:64:79:f3:e4:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:B7:BA:1E:7C:11:15:DE:79:B9:9C:FE:39:4E:EA:7B:8E:21:BA
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/CDm3uh58ERXeebmc_jlO6nuOIbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
5f:7e:e1:31:a2:b0:79:f0:96:fa:db:36:b2:25:3c:f7:eb:7f:
60:e5:70:e3:6b:9b:fb:a3:a7:b6:56:27:fe:79:c3:f9:67:10:
4d:26:1d:19:97:f1:3f:92:48:7d:82:f3:20:a8:73:78:14:36:
2e:42:e6:10:d7:11:4c:32:4f:32:e0:5b:5e:c1:d5:dd:ef:1d:
32:b3:ed:73:5f:b4:a1:5a:bc:8f:ff:b4:47:67:54:5e:a1:ac:
3b:a7:f0:fb:bf:c3:44:9d:19:27:5d:fb:1b:7c:a9:54:4b:73:
3b:74:05:df:a9:84:63:58:c9:5c:82:36:c3:1b:b0:9a:c4:5d:
85:c0:ea:70:07:12:e4:ac:52:16:2d:ad:e0:d8:d7:08:4d:70:
15:f0:ba:68:be:5f:dd:0a:db:1b:32:17:5c:56:97:26:c7:3b:
01:85:67:be:d9:d6:b7:06:4f:a5:53:a6:2c:d5:76:e4:8a:73:
11:b0:d8:10:1f:41:b0:ad:ae:a7:23:3f:8e:ce:de:fc:32:7d:
2b:59:c4:95:2b:43:c5:8a:12:7a:b6:82:ea:c4:44:8f:56:95:
fd:93:43:a2:29:8c:81:27:7a:1c:8e:e3:a4:4d:2c:87:8c:72:
3b:4b:4b:7c:6d:1f:f3:f9:91:5d:8f:db:f9:00:0e:52:7d:7b:
6e:3d:91:8b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzHlVMqgQqAddaxG/B8mx2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjNkM2QzNTgwMGVmM2NiMmE1NmMzOGJmOTE0Mzk3Mzgx
ZTBmZjEwHhcNMjQwMTAyMDAzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODM5YjdiYTFlN2MxMTE1ZGU3OWI5OWNmZTM5NGVlYTdiOGUyMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCJEr++lZB99xIuOs9MTPvfy3+f
8wjH14GcW2H/T2myy2XpKhXqGEoQPDc+87JPjbKPbKAHmDv9ckC1nYSJxs0+mRZb
BdbfprT+g8SlhGRRteH2jgqPzmOpCaABmLOLaFNnvbeBo7oMem6LHzPlmLTY51om
za6a4ZoX9X6tbTqgkDbBWPsRB5f6Df6bE809IWXqaVDmjhU++xYvhjKEMD4Dn525
S0i3abWzno2guBP8kLTnBpIeCTATddoRUQ7iY1NWTUM1ujSF3dYlw5Jh9QHzroJW
L9hNnsGfyHubatcvyVanuzIK8CbvOjsjmDXVACFSG2G6ZU6KWmR58+QX/QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAg5t7oefBEV3nm5nP45Tup7jiG6MB8GA1UdIwQY
MBaAFIAj09NYAO88sqVsOL+RQ5c4Hg/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2Et
ZDFhMGMzMjBjMjhhLzEvQ0RtM3VoNThFUlhlZWJtY19qbE82bnVPSWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2EtZDFhMGMzMjBjMjhh
LzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE
TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB
AQBffuExorB58Jb62zayJTz3639g5XDja5v7o6e2Vif+ecP5ZxBNJh0Zl/E/kkh9
gvMgqHN4FDYuQuYQ1xFMMk8y4FtewdXd7x0ys+1zX7ShWryP/7RHZ1Reoaw7p/D7
v8NEnRknXfsbfKlUS3M7dAXfqYRjWMlcgjbDG7CaxF2FwOpwBxLkrFIWLa3g2NcI
TXAV8Lpovl/dCtsbMhdcVpcmxzsBhWe+2da3Bk+lU6Ys1XbkinMRsNgQH0Gwra6n
Iz+Ozt78Mn0rWcSVK0PFihJ6toLqxESPVpX9k0OiKYyBJ3ocjuOkTSyHjHI7S0t8
bR/z+ZFdj9v5AA5SfXtuPZGL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org