Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/cAQf2Mtdt1sfqppqHe9JpKw4lys.roa
File: cAQf2Mtdt1sfqppqHe9JpKw4lys.roa (raw, json)
Hash identifier: mucBSs8GLeyvPA+WEh5PcOzUvaIQpYvUAkw01Snyu3A=
Subject key identifier: 70:04:1F:D8:CB:5D:B7:5B:1F:AA:9A:6A:1D:EF:49:A4:AC:38:97:2B
Certificate issuer: /CN=d9689b436a2a49f38d4860fd4eb701e7947bf965
Certificate serial: 0185729EBC539CAC78DD26C76F9C0C09D9DF
Authority key identifier: D9:68:9B:43:6A:2A:49:F3:8D:48:60:FD:4E:B7:01:E7:94:7B:F9:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WibQ2oqSfONSGD9TrcB55R7-WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/cAQf2Mtdt1sfqppqHe9JpKw4lys.roa
Signing time: Mon 02 Jan 2023 13:14:43 +0000
ROA not before: Mon 02 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29177
IP address blocks: 80.86.144.0/20 maxlen: 24
188.125.96.0/19 maxlen: 24
185.182.196.0/22 maxlen: 24
31.216.240.0/20 maxlen: 24
2a03:5c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:bc:53:9c:ac:78:dd:26:c7:6f:9c:0c:09:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9689b436a2a49f38d4860fd4eb701e7947bf965
Validity
Not Before: Jan 2 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70041fd8cb5db75b1faa9a6a1def49a4ac38972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:c2:f3:23:63:2b:ca:4c:9e:97:2a:fa:9e:
5b:dc:8f:8a:8b:36:18:d0:a5:84:f9:dc:43:90:eb:
c9:00:dd:6c:e7:06:4c:d5:c2:ed:8e:db:fb:45:fb:
d0:6f:d0:06:f9:7a:3e:5e:07:a8:f0:63:3d:67:a6:
3b:70:12:49:9f:a3:63:fe:3f:8c:ec:a7:31:83:1d:
b8:8c:61:63:0e:41:e7:de:a9:ad:f4:87:dd:fa:27:
38:80:24:e5:e5:50:d2:20:e2:53:52:08:01:0b:72:
a8:be:6e:99:6d:2a:9f:0e:da:ea:ad:a5:0c:f6:24:
18:a5:64:75:73:1c:99:f1:07:33:71:f0:66:dc:7c:
e2:1c:cf:a2:fd:b5:2f:d7:f5:20:1f:2b:3b:76:f0:
f9:7b:49:3c:d0:f4:90:36:20:e7:c1:56:4a:a4:7e:
41:78:71:7b:56:d4:84:0c:21:6b:39:78:3a:81:9f:
67:58:93:a3:c9:f8:18:10:b6:56:2d:51:88:59:ca:
1f:b1:90:01:ce:44:bb:03:c7:9c:01:68:d9:84:84:
7a:2c:60:a2:e3:a1:0f:89:23:e1:4f:3a:00:78:4b:
8e:71:52:c4:5b:14:fa:0c:a8:fa:23:bc:9b:f2:c2:
2c:e3:7f:41:55:4b:96:95:41:c2:61:a0:58:d0:12:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:1F:D8:CB:5D:B7:5B:1F:AA:9A:6A:1D:EF:49:A4:AC:38:97:2B
X509v3 Authority Key Identifier:
keyid:D9:68:9B:43:6A:2A:49:F3:8D:48:60:FD:4E:B7:01:E7:94:7B:F9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WibQ2oqSfONSGD9TrcB55R7-WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/cAQf2Mtdt1sfqppqHe9JpKw4lys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ad7d2e-f728-4f91-a380-3529526987cf/1/2WibQ2oqSfONSGD9TrcB55R7-WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.240.0/20
80.86.144.0/20
185.182.196.0/22
188.125.96.0/19
IPv6:
2a03:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
90:f3:9a:5c:2e:cc:6a:2d:a8:04:4d:88:5a:fc:c1:69:f6:df:
6d:0f:30:a3:04:57:69:d9:12:3a:e3:21:f7:f1:fc:73:74:16:
ab:dd:5d:c0:4f:b5:3d:28:be:0b:d6:f1:c2:5f:c9:14:c3:b8:
62:78:5b:1e:58:49:17:1f:29:d3:37:c1:24:57:87:8a:ef:2e:
b1:b0:6b:a1:01:20:4a:ed:d6:b0:db:3b:a3:0c:b4:06:03:30:
8b:3e:f4:1f:4d:d1:d3:19:11:9f:31:3b:9c:fb:08:28:c6:ab:
b4:52:40:d1:30:e3:a5:68:37:98:df:de:18:4e:74:b4:59:fe:
c1:12:1b:84:98:53:19:4a:ab:25:3a:26:47:6e:cb:43:a1:fe:
e7:af:d2:a9:25:e3:9e:a2:8b:a6:cc:26:8c:0d:73:f0:72:12:
0e:3b:8e:f7:60:8a:2e:14:ce:ae:1a:b8:3d:b0:7b:26:e8:d7:
72:e6:27:88:7c:60:5a:c2:74:6d:0f:62:86:a4:55:24:5e:6a:
e5:7d:e0:45:00:e2:6b:ea:bd:eb:35:10:67:cf:c1:69:20:5d:
07:e1:8f:7b:c2:79:91:32:45:cc:ed:03:5d:03:86:df:20:ce:
89:a6:26:7e:dd:f0:5f:e3:cd:51:cc:09:47:2f:1c:43:70:45:
19:33:b4:62
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVynrxTnKx43SbHb5wMCdnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Njg5YjQzNmEyYTQ5ZjM4ZDQ4NjBmZDRlYjcwMWU3OTQ3
YmY5NjUwHhcNMjMwMTAyMTMxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDA0MWZkOGNiNWRiNzViMWZhYTlhNmExZGVmNDlhNGFjMzg5NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+HC8yNjK8pMnpcq+p5b3I+KizYY
0KWE+dxDkOvJAN1s5wZM1cLtjtv7RfvQb9AG+Xo+Xgeo8GM9Z6Y7cBJJn6Nj/j+M
7Kcxgx24jGFjDkHn3qmt9Ifd+ic4gCTl5VDSIOJTUggBC3Kovm6ZbSqfDtrqraUM
9iQYpWR1cxyZ8QczcfBm3HziHM+i/bUv1/UgHys7dvD5e0k80PSQNiDnwVZKpH5B
eHF7VtSEDCFrOXg6gZ9nWJOjyfgYELZWLVGIWcofsZABzkS7A8ecAWjZhIR6LGCi
46EPiSPhTzoAeEuOcVLEWxT6DKj6I7yb8sIs439BVUuWlUHCYaBY0BLjVwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHAEH9jLXbdbH6qaah3vSaSsOJcrMB8GA1UdIwQY
MBaAFNlom0NqKknzjUhg/U63AeeUe/llMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldpYlEyb3FTZk9OU0dEOVRyY0I1NVI3LVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hZDdkMmUtZjcyOC00ZjkxLWEzODAt
MzUyOTUyNjk4N2NmLzEvY0FRZjJNdGR0MXNmcXBwcUhlOUpwS3c0bHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hZDdkMmUtZjcyOC00ZjkxLWEzODAtMzUyOTUyNjk4N2Nm
LzEvMldpYlEyb3FTZk9OU0dEOVRyY0I1NVI3LVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEH9jwAwQE
UFaQAwQCubbEAwQFvH1gMA0EAgACMAcDBQAqA1wAMA0GCSqGSIb3DQEBCwUAA4IB
AQCQ85pcLsxqLagETYha/MFp9t9tDzCjBFdp2RI64yH38fxzdBar3V3AT7U9KL4L
1vHCX8kUw7hieFseWEkXHynTN8EkV4eK7y6xsGuhASBK7daw2zujDLQGAzCLPvQf
TdHTGRGfMTuc+wgoxqu0UkDRMOOlaDeY394YTnS0Wf7BEhuEmFMZSqslOiZHbstD
of7nr9KpJeOeooumzCaMDXPwchIOO473YIouFM6uGrg9sHsm6Ndy5ieIfGBawnRt
D2KGpFUkXmrlfeBFAOJr6r3rNRBnz8FpIF0H4Y97wnmRMkXM7QNdA4bfIM6JpiZ+
3fBf481RzAlHLxxDcEUZM7Ri
Generated at Wed Oct 18 16:45:08 2023 by rpki-client on console-ams.rpki-client.org