Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/j6t2XNfgi4V-EOXt7kJtdWmoOpg.roa
File: j6t2XNfgi4V-EOXt7kJtdWmoOpg.roa (raw, json)
Hash identifier: U9IEhevEGyuVA0VfiMR/0GuDSpcsmNc2ToIrd11VugM=
Subject key identifier: 8F:AB:76:5C:D7:E0:8B:85:7E:10:E5:ED:EE:42:6D:75:69:A8:3A:98
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 01857230F20ECF69005C27B0266C4D9539DE
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/j6t2XNfgi4V-EOXt7kJtdWmoOpg.roa
Signing time: Mon 02 Jan 2023 11:14:48 +0000
ROA not before: Mon 02 Jan 2023 11:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34534
IP address blocks: 37.44.238.0/24 maxlen: 24
37.44.239.0/24 maxlen: 24
37.44.236.0/24 maxlen: 24
185.157.246.0/23 maxlen: 24
2a09:ca00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f2:0e:cf:69:00:5c:27:b0:26:6c:4d:95:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Jan 2 11:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fab765cd7e08b857e10e5edee426d7569a83a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:82:0d:1a:96:48:7d:e6:5b:93:80:80:1c:
61:88:49:dc:59:8f:17:96:0a:0d:70:cb:0d:9d:39:
ec:b9:6c:2d:c0:70:fb:ed:b6:a6:b2:4c:dc:36:c7:
2a:17:af:17:68:8b:9f:a8:27:db:ee:41:4a:ea:14:
c3:5b:56:2b:dc:84:a3:04:3a:81:27:72:cc:d7:68:
4a:26:07:f6:25:7c:ac:21:5b:fb:6d:85:1b:5d:57:
56:67:e8:61:b2:6e:8f:8b:81:55:37:8d:d3:e8:fd:
0b:c2:5d:12:d1:21:b1:ec:f7:99:cd:d0:62:c4:fe:
d2:14:72:1b:8a:77:32:51:94:80:a8:14:a3:57:30:
2b:7d:c6:59:e0:48:fe:c8:78:13:4b:67:47:85:4a:
a6:1b:ee:c5:3b:69:4f:11:0b:88:82:36:42:f1:82:
e5:ce:48:d6:ee:07:47:87:e1:e2:6a:8c:60:60:4d:
ed:49:be:05:b8:c7:2f:c5:0e:fd:3b:ff:ba:2e:be:
fd:d3:e9:27:ff:3e:99:92:f0:7e:e0:49:16:38:d0:
b9:65:73:39:38:57:e8:49:fc:12:fb:25:ce:b5:16:
b8:7e:78:eb:d4:32:e6:ed:f1:c1:dc:23:91:f9:79:
77:55:45:3e:53:a3:89:f0:71:8d:bf:7b:3c:35:b4:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:76:5C:D7:E0:8B:85:7E:10:E5:ED:EE:42:6D:75:69:A8:3A:98
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/j6t2XNfgi4V-EOXt7kJtdWmoOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/24
37.44.238.0/23
185.157.246.0/23
IPv6:
2a09:ca00::/48
Signature Algorithm: sha256WithRSAEncryption
c8:61:61:49:f8:d7:c8:7b:30:7f:1f:33:89:79:af:5e:97:d0:
c1:00:75:c6:69:6b:60:d6:fc:83:3b:03:48:91:db:4d:6c:d1:
13:d8:cd:da:a0:7a:5f:59:48:d2:5a:b6:d1:d1:3e:d6:87:47:
da:03:07:35:61:fd:d0:12:7e:6b:85:27:13:45:b8:55:ae:fe:
f1:2a:b9:e2:ab:e5:9f:22:06:a8:bd:71:a2:39:b6:ba:ba:44:
41:9a:e7:f2:87:f2:11:ad:91:ef:e2:88:95:42:af:0c:a1:ec:
95:ac:e9:19:48:ec:34:27:e0:d6:b4:59:88:62:6e:04:09:eb:
34:a1:20:98:bd:d0:00:cb:ba:4c:5f:98:c6:39:b2:1c:68:d7:
6f:46:cd:f9:9a:1a:ed:8f:0e:e5:1a:c3:1a:a5:d5:5e:a0:83:
60:ac:0b:d2:1f:62:2f:76:11:b2:ec:43:15:05:d1:8a:95:41:
f1:7c:10:e0:51:8a:d8:01:bc:a6:67:b0:be:ee:cc:cf:91:f3:
2d:cc:af:8f:b1:ff:bd:13:f2:3d:ae:8c:50:77:d6:58:cb:95:
04:92:f3:e5:95:87:35:cd:df:46:2b:7b:a6:61:88:52:93:29:
e7:84:8c:85:60:e2:e0:8c:ff:76:ae:9e:28:70:7a:34:95:12:
09:54:49:c3
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVyMPIOz2kAXCewJmxNlTneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWM0N2I1MTI0NGVmNDljNTIzNzhhZWNkMjljNThjZmI3
MjA4OWIwHhcNMjMwMTAyMTExNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmFiNzY1Y2Q3ZTA4Yjg1N2UxMGU1ZWRlZTQyNmQ3NTY5YTgzYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngmCDRqWSH3mW5OAgBxhiEncWY8X
lgoNcMsNnTnsuWwtwHD77bamskzcNscqF68XaIufqCfb7kFK6hTDW1Yr3ISjBDqB
J3LM12hKJgf2JXysIVv7bYUbXVdWZ+hhsm6Pi4FVN43T6P0Lwl0S0SGx7PeZzdBi
xP7SFHIbincyUZSAqBSjVzArfcZZ4Ej+yHgTS2dHhUqmG+7FO2lPEQuIgjZC8YLl
zkjW7gdHh+HiaoxgYE3tSb4FuMcvxQ79O/+6Lr790+kn/z6ZkvB+4EkWONC5ZXM5
OFfoSfwS+yXOtRa4fnjr1DLm7fHB3COR+Xl3VUU+U6OJ8HGNv3s8NbTKBwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFI+rdlzX4IuFfhDl7e5CbXVpqDqYMB8GA1UdIwQY
MBaAFJesR7USRO9JxSN4rs0pxYz7cgibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZ4SHRSSkU3MG5GSTNpdXpTbkZqUHR5Q0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81ZjA2M2YtMTAwZC00MzEwLWEwNDYt
M2Y2NTY4YjU5NTg5LzEvajZ0MlhOZmdpNFYtRU9YdDdrSnRkV21vT3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81ZjA2M2YtMTAwZC00MzEwLWEwNDYtM2Y2NTY4YjU5NTg5
LzEvbDZ4SHRSSkU3MG5GSTNpdXpTbkZqUHR5Q0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAJSzsAwQB
JSzuAwQBuZ32MA8EAgACMAkDBwAqCcoAAAAwDQYJKoZIhvcNAQELBQADggEBAMhh
YUn418h7MH8fM4l5r16X0MEAdcZpa2DW/IM7A0iR201s0RPYzdqgel9ZSNJattHR
PtaHR9oDBzVh/dASfmuFJxNFuFWu/vEqueKr5Z8iBqi9caI5trq6REGa5/KH8hGt
ke/iiJVCrwyh7JWs6RlI7DQn4Na0WYhibgQJ6zShIJi90ADLukxfmMY5shxo129G
zfmaGu2PDuUawxql1V6gg2CsC9IfYi92EbLsQxUF0YqVQfF8EOBRitgBvKZnsL7u
zM+R8y3Mr4+x/70T8j2ujFB31ljLlQSS8+WVhzXN30Yre6ZhiFKTKeeEjIVg4uCM
/3aunihwejSVEglUScM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org