Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/71HCTPx80d_If71R-7bcYLD6sDQ.roa
File: 71HCTPx80d_If71R-7bcYLD6sDQ.roa (raw, json)
Hash identifier: 3z4tl8O0QlWZqvcApX7447ojWLhKxhyfW0eubviNMLM=
Subject key identifier: EF:51:C2:4C:FC:7C:D1:DF:C8:7F:BD:51:FB:B6:DC:60:B0:FA:B0:34
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 018571B0C82A4F130A770EF5D2FBC3246161
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/71HCTPx80d_If71R-7bcYLD6sDQ.roa
Signing time: Mon 02 Jan 2023 08:54:49 +0000
ROA not before: Mon 02 Jan 2023 08:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 91.209.127.0/24 maxlen: 24
185.16.116.0/22 maxlen: 22
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:c8:2a:4f:13:0a:77:0e:f5:d2:fb:c3:24:61:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Jan 2 08:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef51c24cfc7cd1dfc87fbd51fbb6dc60b0fab034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:6e:1b:54:7c:cc:51:8f:7b:ef:45:5a:46:
8d:96:47:92:cf:65:39:6c:4a:c3:99:d2:f4:5c:c4:
e6:ed:e0:c7:ee:43:b0:53:1f:1f:a0:32:8a:64:3c:
8d:73:63:34:d3:51:3d:19:b7:1d:5f:4e:4f:39:2c:
46:45:72:49:2f:34:17:c9:66:b6:8c:37:46:b7:13:
5f:1d:6b:73:cb:e8:fd:f5:da:15:b9:91:a1:ad:ca:
e1:93:e5:c3:79:d2:87:76:66:6a:cc:36:ef:0f:49:
60:6a:c5:cc:fd:02:e2:1c:9f:7c:89:05:93:fe:94:
40:8c:37:d3:fc:87:59:15:69:c4:1d:f6:e8:ce:18:
a1:6c:ec:df:d6:56:7f:31:23:17:34:36:ce:d1:8c:
f4:0e:f2:b1:83:fc:b8:27:a7:00:3f:2e:8d:20:30:
e9:75:c8:f5:4e:a0:e0:84:87:ab:c6:13:8e:2b:f6:
12:87:c0:cb:ba:62:47:1f:75:3b:0a:84:1c:e8:2e:
41:be:51:78:ac:d5:a2:09:cc:1a:59:17:8c:54:a4:
e4:be:97:d6:57:b0:0b:bd:c6:a2:f8:bc:a6:fe:77:
29:c2:ed:2f:fe:df:3a:7c:82:33:04:07:ab:d5:60:
ea:32:db:39:44:fc:d0:e1:c7:84:91:e4:bb:2c:1b:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:C2:4C:FC:7C:D1:DF:C8:7F:BD:51:FB:B6:DC:60:B0:FA:B0:34
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/71HCTPx80d_If71R-7bcYLD6sDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.127.0/24
185.16.116.0/22
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
30:5c:bd:39:c0:30:ab:32:1e:da:c8:e5:65:0e:7e:25:ab:93:
4e:e6:eb:09:d2:6a:91:b7:32:fa:58:8b:f4:84:41:42:5a:d2:
65:75:ee:de:9d:e0:b8:78:94:22:6d:de:9d:67:55:84:0e:7d:
28:26:52:d9:d0:e0:fe:47:a4:4e:ea:9d:43:3f:ba:78:6b:a0:
86:43:bd:ee:ef:30:e7:6a:35:6c:cb:91:95:5d:b8:95:94:8d:
d2:1c:c9:3c:da:56:d8:c0:ae:2f:86:e6:ef:0a:9b:b5:45:30:
11:25:df:92:9b:15:f6:e7:0a:26:71:56:2f:bb:8d:62:d1:6c:
95:d7:ba:17:e2:8a:82:2a:4a:45:ef:df:8d:23:1a:6c:f5:03:
41:e9:46:aa:fb:e8:fd:24:d7:ec:dd:d8:8d:05:49:c2:ce:66:
cc:9b:8b:93:8e:8c:b3:bc:77:ff:e5:d7:ea:23:2c:15:a6:dd:
86:31:9d:60:ff:eb:70:63:d6:bd:97:2f:45:5d:e6:4f:ef:52:
cb:88:72:2a:6d:f7:77:80:68:66:07:89:c7:d8:9f:13:df:89:
dc:49:3c:97:e3:c3:78:d4:65:ee:1b:6e:82:c0:62:02:d2:c2:
4e:cd:11:fe:88:d7:0a:34:10:52:ae:8d:cf:22:32:47:12:72:
4c:31:8d:19
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVxsMgqTxMKdw710vvDJGFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTA5MjczODQxYjUwYTgxZWJkMjFmNWNhMDExMGZjZWVl
MWZmM2QwHhcNMjMwMTAyMDg1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjUxYzI0Y2ZjN2NkMWRmYzg3ZmJkNTFmYmI2ZGM2MGIwZmFiMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUduG1R8zFGPe+9FWkaNlkeSz2U5
bErDmdL0XMTm7eDH7kOwUx8foDKKZDyNc2M001E9GbcdX05POSxGRXJJLzQXyWa2
jDdGtxNfHWtzy+j99doVuZGhrcrhk+XDedKHdmZqzDbvD0lgasXM/QLiHJ98iQWT
/pRAjDfT/IdZFWnEHfbozhihbOzf1lZ/MSMXNDbO0Yz0DvKxg/y4J6cAPy6NIDDp
dcj1TqDghIerxhOOK/YSh8DLumJHH3U7CoQc6C5BvlF4rNWiCcwaWReMVKTkvpfW
V7ALvcai+Lym/ncpwu0v/t86fIIzBAer1WDqMts5RPzQ4ceEkeS7LBvnqQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFO9Rwkz8fNHfyH+9Ufu23GCw+rA0MB8GA1UdIwQY
MBaAFP2QknOEG1CoHr0h9coBEPzu4f89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pDU2M0UWJVS2dldlNIMXlnRVFfTzdoX3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80MzAyMTgtN2ZjNy00MWY1LWJlNDMt
MWI0YTExN2JiMzk0LzEvNzFIQ1RQeDgwZF9JZjcxUi03YmNZTEQ2c0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80MzAyMTgtN2ZjNy00MWY1LWJlNDMtMWI0YTExN2JiMzk0
LzEvX1pDU2M0UWJVS2dldlNIMXlnRVFfTzdoX3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW9F/AwQC
uRB0MBYEAgACMBADBwAgAQZ8FIQDBQMqBAKAMA0GCSqGSIb3DQEBCwUAA4IBAQAw
XL05wDCrMh7ayOVlDn4lq5NO5usJ0mqRtzL6WIv0hEFCWtJlde7eneC4eJQibd6d
Z1WEDn0oJlLZ0OD+R6RO6p1DP7p4a6CGQ73u7zDnajVsy5GVXbiVlI3SHMk82lbY
wK4vhubvCpu1RTARJd+SmxX25womcVYvu41i0WyV17oX4oqCKkpF79+NIxps9QNB
6Uaq++j9JNfs3diNBUnCzmbMm4uTjoyzvHf/5dfqIywVpt2GMZ1g/+twY9a9ly9F
XeZP71LLiHIqbfd3gGhmB4nH2J8T34ncSTyX48N41GXuG26CwGIC0sJOzRH+iNcK
NBBSro3PIjJHEnJMMY0Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:02 2024 by rpki-client on console-ams.rpki-client.org