Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/KDkSUVyT7DRQ4sdwWiBaCwv4QXg.roa
File: KDkSUVyT7DRQ4sdwWiBaCwv4QXg.roa (raw, json)
Hash identifier: E/B0HqYBO+6uxPGysQbNQRExcCfT6COkdmmPD0hxeTg=
Subject key identifier: 28:39:12:51:5C:93:EC:34:50:E2:C7:70:5A:20:5A:0B:0B:F8:41:78
Certificate issuer: /CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Certificate serial: 024E8F13
Authority key identifier: 6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/KDkSUVyT7DRQ4sdwWiBaCwv4QXg.roa
Signing time: Thu 17 Feb 2022 08:36:41 +0000
ROA not before: Thu 17 Feb 2022 08:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47507
IP address blocks: 185.43.254.0/24 maxlen: 24
185.43.255.0/24 maxlen: 24
212.104.188.0/24 maxlen: 24
212.104.189.0/24 maxlen: 24
212.104.190.0/24 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/24 maxlen: 24
185.43.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38702867 (0x24e8f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Validity
Not Before: Feb 17 08:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=283912515c93ec3450e2c7705a205a0b0bf84178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:9d:cd:e4:fd:02:f9:d7:fe:80:48:fd:77:
6c:54:4d:6a:98:a0:83:4a:d0:d0:c0:78:d1:11:b6:
81:17:a0:d7:2c:f1:ab:22:84:76:3c:d3:cd:0e:9c:
cf:84:66:75:a0:a4:23:44:50:5a:ea:6c:ab:13:b1:
0a:5d:6b:c1:69:d2:bd:7e:c9:64:dc:1c:3f:5c:ee:
2c:b4:a8:fd:19:77:93:46:66:b7:39:f4:ed:ab:56:
52:dd:b6:ec:c9:ce:74:7d:dd:f3:e4:f0:84:d4:40:
3a:18:d6:d0:4d:f9:44:e7:b9:aa:5c:07:c6:ac:67:
30:4e:ac:57:b5:98:a1:0e:b1:f6:fe:3d:9e:b8:e3:
5f:79:82:6a:98:ea:b3:6e:89:85:c6:fb:04:69:a4:
48:0d:24:21:1e:76:36:60:8e:3e:d3:4c:b4:41:1c:
cb:01:48:5a:f8:c9:cc:36:cd:c5:7c:d5:3e:77:73:
83:a1:32:c4:c5:6e:31:35:4a:09:2a:e3:31:6a:4b:
0f:54:82:a2:cb:65:42:98:10:35:f4:39:c5:b0:01:
08:37:dd:76:8a:5d:98:dc:da:7b:1a:b5:be:3c:24:
6e:b0:22:c8:23:4b:37:95:90:52:a8:ee:06:4a:a4:
67:28:e4:66:d3:06:77:0b:c0:d1:75:5e:4f:90:f3:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:12:51:5C:93:EC:34:50:E2:C7:70:5A:20:5A:0B:0B:F8:41:78
X509v3 Authority Key Identifier:
keyid:6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/KDkSUVyT7DRQ4sdwWiBaCwv4QXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.252.0/22
193.91.10.0/24
212.104.188.0-212.104.190.255
Signature Algorithm: sha256WithRSAEncryption
4b:6a:4a:5c:c8:61:86:14:14:b0:af:ac:47:2d:12:e0:6e:7e:
83:e9:b4:81:1d:78:cf:55:57:55:40:4a:8a:7b:98:5f:33:2a:
70:7b:05:37:fe:d9:4c:e6:18:21:6a:0e:b2:f4:86:6e:90:5d:
07:84:1b:a6:1f:8b:59:7c:11:7d:97:ef:4c:c2:de:a2:4a:0d:
52:1d:65:a4:c8:ed:c7:44:fe:5b:3e:ca:7b:e6:ae:80:b3:73:
25:59:02:64:80:df:45:2e:98:9e:65:16:22:f7:64:ca:e1:e0:
23:a6:33:60:a8:48:35:e1:c0:26:a8:d9:68:0e:7d:26:a0:7e:
3c:3a:1c:d2:c3:33:6c:e1:92:5d:eb:07:b0:27:59:8c:20:92:
71:ea:6f:6d:42:35:7c:db:54:1b:15:01:8c:f6:86:11:5e:6b:
9e:12:a4:68:ac:18:77:79:8a:fb:12:89:e8:35:1b:05:0e:b7:
6a:ce:2a:00:2d:c0:97:fa:af:0c:90:b9:98:de:2b:e8:67:08:
69:98:b1:48:57:9d:00:4f:88:dd:3d:4d:8f:f1:6b:e2:06:06:
3e:ae:3d:8c:90:c3:0d:e7:c7:c1:ef:bd:e3:f0:97:09:58:d6:
d1:60:d9:68:72:d0:bc:76:24:1e:d8:df:a5:99:34:83:b4:13:
54:24:0a:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEAk6PEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDZiMjAwNDVlMWQwZmU2Y2VmMjg3ODFlYjMwMGJkZTk4MjVhNGI1MB4XDTIyMDIx
NzA4MzY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjgzOTEyNTE1Yzkz
ZWMzNDUwZTJjNzcwNWEyMDVhMGIwYmY4NDE3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMA2nc3k/QL51/6ASP13bFRNapigg0rQ0MB40RG2gReg1yzx
qyKEdjzTzQ6cz4RmdaCkI0RQWupsqxOxCl1rwWnSvX7JZNwcP1zuLLSo/Rl3k0Zm
tzn07atWUt227MnOdH3d8+TwhNRAOhjW0E35ROe5qlwHxqxnME6sV7WYoQ6x9v49
nrjjX3mCapjqs26Jhcb7BGmkSA0kIR52NmCOPtNMtEEcywFIWvjJzDbNxXzVPndz
g6EyxMVuMTVKCSrjMWpLD1SCostlQpgQNfQ5xbABCDfddopdmNzaexq1vjwkbrAi
yCNLN5WQUqjuBkqkZyjkZtMGdwvA0XVeT5DzAZ0CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQoORJRXJPsNFDix3BaIFoLC/hBeDAfBgNVHSMEGDAWgBRtayAEXh0P5s7y
h4HrMAvemCWktTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JXc2dCRjRkRC1iTzhvZUI2ekFMM3BnbHBMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvYjJlYjBjLWIwMjMtNDEzMi05ZTFhLWQ4YTZjZGM1YzIwYy8x
L0tEa1NVVnlUN0RSUTRzZHdXaUJhQ3d2NFFYZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
YjJlYjBjLWIwMjMtNDEzMi05ZTFhLWQ4YTZjZGM1YzIwYy8xL2JXc2dCRjRkRC1i
TzhvZUI2ekFMM3BnbHBMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEArkr/AMEAMFbCjAMAwQC1Gi8AwQA
1Gi+MA0GCSqGSIb3DQEBCwUAA4IBAQBLakpcyGGGFBSwr6xHLRLgbn6D6bSBHXjP
VVdVQEqKe5hfMypwewU3/tlM5hghag6y9IZukF0HhBumH4tZfBF9l+9Mwt6iSg1S
HWWkyO3HRP5bPsp75q6As3MlWQJkgN9FLpieZRYi92TK4eAjpjNgqEg14cAmqNlo
Dn0moH48OhzSwzNs4ZJd6wewJ1mMIJJx6m9tQjV821QbFQGM9oYRXmueEqRorBh3
eYr7EonoNRsFDrdqzioALcCX+q8MkLmY3ivoZwhpmLFIV50AT4jdPU2P8WviBgY+
rj2MkMMN58fB773j8JcJWNbRYNloctC8diQe2N+lmTSDtBNUJApt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org