Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/7fIuARd_vbsrKatlTiQAklx47j4.roa
File: 7fIuARd_vbsrKatlTiQAklx47j4.roa (raw, json)
Hash identifier: M7sQUfP/3QUaAHwqQyuw34enUoCohH8fiNB5JDbULGg=
Subject key identifier: ED:F2:2E:01:17:7F:BD:BB:2B:29:AB:65:4E:24:00:92:5C:78:EE:3E
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018A5060EF83EC446F8CA85FE7A79F217804
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/7fIuARd_vbsrKatlTiQAklx47j4.roa
Signing time: Fri 01 Sep 2023 10:54:04 +0000
ROA not before: Fri 01 Sep 2023 10:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51032
IP address blocks: 62.122.88.0/21 maxlen: 24
178.216.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
178.212.80.0/21 maxlen: 24
89.23.176.0/21 maxlen: 21
91.202.204.0/22 maxlen: 22
89.23.128.0/19 maxlen: 19
89.23.128.0/21 maxlen: 21
89.23.144.0/20 maxlen: 24
31.128.128.0/19 maxlen: 19
2a13:2c80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:60:ef:83:ec:44:6f:8c:a8:5f:e7:a7:9f:21:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Sep 1 10:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf22e01177fbdbb2b29ab654e2400925c78ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:c5:db:61:8a:15:3e:fd:e2:40:51:04:8b:
fd:d5:7e:8a:22:64:fc:3f:57:40:7a:9f:c0:46:29:
71:06:ec:bd:ab:49:d1:5e:9a:7c:a9:fd:a7:c4:b4:
ce:58:f1:b2:2f:d7:62:82:35:e9:44:7c:da:30:1b:
ec:02:02:f3:f6:f2:f4:ee:86:46:c7:d4:90:93:d0:
63:f7:09:b1:32:de:64:40:f2:25:3b:29:21:e2:4d:
8e:27:92:7e:e8:2f:f7:a5:8c:4b:ce:25:c1:7a:79:
b7:12:a9:df:2a:5c:6e:72:ad:11:28:c4:d9:8c:86:
ed:e2:5c:7c:ab:26:16:6f:30:bb:36:97:dc:1a:fb:
79:32:c2:90:de:9c:dc:e3:fb:20:89:78:77:5f:20:
c9:22:24:0f:56:b5:31:ab:f7:20:fd:97:8c:53:13:
04:1f:67:69:71:14:60:07:51:65:1c:b7:73:89:03:
db:10:9d:bf:b3:be:95:cd:ef:60:55:ca:92:2c:bb:
7f:e0:1d:01:c8:63:68:41:92:dd:5a:1b:f6:87:c6:
a1:94:73:d4:ff:5e:9b:5f:13:b2:57:57:41:2b:5e:
32:2f:f0:47:fd:09:ec:96:eb:4d:55:e4:95:bf:3c:
8e:af:1e:b6:3d:02:28:81:28:a3:d2:d0:f1:e5:e7:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:2E:01:17:7F:BD:BB:2B:29:AB:65:4E:24:00:92:5C:78:EE:3E
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/7fIuARd_vbsrKatlTiQAklx47j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
62.122.88.0/21
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
178.212.80.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
6a:d5:5b:a1:0f:ba:f2:70:a9:da:5a:bd:04:1b:83:d7:f2:99:
a0:1c:2d:47:9c:b9:b6:13:34:fa:28:d4:d8:d5:48:07:f6:31:
ef:db:0d:01:34:9b:6f:01:b3:ec:e6:33:b9:68:b7:39:36:21:
a8:a0:57:17:ad:60:cf:41:2d:9c:08:c9:c1:2f:68:78:73:c0:
69:0b:3e:f5:1d:7f:ef:5f:cf:2d:a3:bb:10:80:95:28:af:38:
92:00:b1:b4:09:74:a3:7e:4e:c1:7c:06:94:bd:21:60:c9:bd:
fa:24:f2:f3:c9:1e:37:51:84:74:f0:b2:37:ca:0f:a5:8b:95:
75:31:72:8b:1d:d0:81:f8:3b:b2:b2:1c:e4:99:0c:5d:05:87:
d3:3d:ce:97:31:48:ee:64:94:b7:76:10:5c:6e:4d:d6:4d:8d:
62:6e:c5:94:2a:ee:7c:9e:7a:f1:52:2c:96:dd:3f:b5:f8:52:
b5:dd:cd:f1:cc:74:db:07:aa:d9:f9:a0:81:b3:1a:1c:34:2f:
4a:95:77:d1:81:f7:17:ec:fa:da:bb:b2:12:2f:2f:e2:4f:03:
f4:4a:48:5f:ba:a1:30:c2:ac:44:5d:57:5e:e8:f8:4f:cf:9b:
f6:8d:55:62:3c:b8:57:ad:e6:96:32:62:d6:69:c9:be:cb:d4:
9c:48:53:b6
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYpQYO+D7ERvjKhf56efIXgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjMwOTAxMTA1NDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGYyMmUwMTE3N2ZiZGJiMmIyOWFiNjU0ZTI0MDA5MjVjNzhlZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15/F22GKFT794kBRBIv91X6KImT8
P1dAep/ARilxBuy9q0nRXpp8qf2nxLTOWPGyL9digjXpRHzaMBvsAgLz9vL07oZG
x9SQk9Bj9wmxMt5kQPIlOykh4k2OJ5J+6C/3pYxLziXBenm3EqnfKlxucq0RKMTZ
jIbt4lx8qyYWbzC7NpfcGvt5MsKQ3pzc4/sgiXh3XyDJIiQPVrUxq/cg/ZeMUxME
H2dpcRRgB1FlHLdziQPbEJ2/s76Vze9gVcqSLLt/4B0ByGNoQZLdWhv2h8ahlHPU
/16bXxOyV1dBK14yL/BH/QnslutNVeSVvzyOrx62PQIogSij0tDx5eeAZQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFO3yLgEXf727KymrZU4kAJJceO4+MB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvN2ZJdUFSZF92YnNyS2F0bFRpUUFrbHg0N2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFH4CAAwQD
PnpYAwQGWReAAwQEW3tQAwQCW8rMAwQDstRQAwQDstiwMA0EAgACMAcDBQMqEyyA
MA0GCSqGSIb3DQEBCwUAA4IBAQBq1VuhD7rycKnaWr0EG4PX8pmgHC1HnLm2EzT6
KNTY1UgH9jHv2w0BNJtvAbPs5jO5aLc5NiGooFcXrWDPQS2cCMnBL2h4c8BpCz71
HX/vX88to7sQgJUorziSALG0CXSjfk7BfAaUvSFgyb36JPLzyR43UYR08LI3yg+l
i5V1MXKLHdCB+DuyshzkmQxdBYfTPc6XMUjuZJS3dhBcbk3WTY1ibsWUKu58nnrx
UiyW3T+1+FK13c3xzHTbB6rZ+aCBsxocNC9KlXfRgfcX7Prau7ISLy/iTwP0Skhf
uqEwwqxEXVde6PhPz5v2jVViPLhXreaWMmLWacm+y9ScSFO2
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:42 2025 by rpki-client