Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/3Vdg1ID1yJ71BX-zF_FiFvA4XiY.roa
File: 3Vdg1ID1yJ71BX-zF_FiFvA4XiY.roa (raw, json)
Hash identifier: yTgnbgE1xQk5x7vRqlOKzjxU9AOFEpldQKGfykolb7g=
Subject key identifier: DD:57:60:D4:80:F5:C8:9E:F5:05:7F:B3:17:F1:62:16:F0:38:5E:26
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 092282ED
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/3Vdg1ID1yJ71BX-zF_FiFvA4XiY.roa
Signing time: Mon 28 Mar 2022 22:39:19 +0000
ROA not before: Mon 28 Mar 2022 22:39:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 193.160.72.0/23 maxlen: 24
194.28.156.0/24 maxlen: 25
194.28.157.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153256685 (0x92282ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 28 22:39:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd5760d480f5c89ef5057fb317f16216f0385e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:af:d0:97:1f:28:4a:3e:2e:cb:53:24:a6:
d6:8f:1b:51:ac:4e:31:59:52:c7:a3:9f:9e:46:96:
27:5f:e0:bc:ed:c5:1b:a5:d2:5c:34:05:af:38:42:
d5:e0:32:f1:17:b0:88:1b:96:7f:b6:49:9f:4d:3b:
4d:96:15:d4:14:f1:c3:35:59:9b:e8:f9:16:a8:c6:
db:9f:8c:1a:8d:29:a2:c7:a9:20:8d:06:a6:a6:11:
6f:ce:fa:d4:a8:2b:8f:58:1e:31:dd:7e:fc:3e:87:
e5:30:3f:20:f6:a3:53:d9:b4:00:1d:22:44:25:60:
f5:48:34:6a:1c:db:d2:8f:df:5b:f4:3b:11:b4:5d:
b6:d0:c4:69:17:a2:1e:0f:0f:3e:62:8c:4c:1b:e7:
78:53:69:3c:73:2f:57:dc:0c:38:4f:53:59:1e:0f:
a1:cd:be:8c:4a:e7:f1:d4:44:af:a9:a4:1c:af:7a:
1c:29:9e:91:dc:ae:01:d8:5d:e9:ad:84:30:d8:39:
3f:57:8d:01:08:1d:95:93:65:cc:b3:8a:f5:7a:63:
b0:9c:58:11:24:bb:5b:16:a7:09:a8:b2:d7:1e:cd:
c5:01:6d:cd:47:9f:3a:0d:c3:b2:27:7e:65:62:f8:
b1:11:c2:6a:3c:52:01:b2:48:7f:bc:cc:1b:c8:38:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:60:D4:80:F5:C8:9E:F5:05:7F:B3:17:F1:62:16:F0:38:5E:26
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/3Vdg1ID1yJ71BX-zF_FiFvA4XiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.72.0/23
194.28.156.0-194.28.158.255
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
2e:6a:74:5a:49:49:e0:8c:74:db:47:76:7b:48:a9:d6:b8:55:
4a:64:9c:48:df:3e:c3:89:03:e4:30:f6:85:98:9f:07:bd:f2:
81:1b:b3:eb:9d:d1:9b:1d:0c:02:6a:57:80:6e:d1:b0:b3:08:
bf:ad:dd:93:53:d2:27:c1:16:61:6d:78:69:e7:1c:48:e1:80:
f3:c6:f7:ec:04:e8:af:a7:c1:62:cc:69:68:90:88:1a:3b:75:
2a:c5:ef:e1:8d:3d:a0:04:ee:9a:f5:e8:6e:5a:a3:32:51:8e:
08:36:bd:9b:9b:49:0b:48:3a:42:11:9c:0a:06:79:6e:80:2c:
ff:b8:0c:8d:10:be:54:66:f1:af:28:f9:7c:c9:22:15:31:36:
db:2b:ab:0f:9c:62:1f:f6:76:34:cc:d3:45:8f:4d:9f:c7:23:
19:0d:ae:36:9d:15:92:62:d2:7a:b3:86:52:8c:3a:b6:a8:6d:
d7:a1:db:bc:a2:e6:d8:96:41:93:b1:90:e8:72:ba:c4:d3:2e:
5c:c6:69:34:40:27:8f:5f:b8:c8:37:25:15:ef:a3:63:a0:41:
e4:aa:9c:9c:74:09:3d:7b:01:2c:8f:f3:0b:5d:b8:d8:6f:90:
a9:45:bb:05:b3:fe:96:6e:1a:b5:d7:df:8a:44:f6:2c:f3:dd:
07:9f:91:a0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIECSKC7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjdkMmM5YWQzNmQ5Zjg4MWZhODFmZDQ3NTM4N2ZiODcwYjViNGZiMB4XDTIyMDMy
ODIyMzkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ1NzYwZDQ4MGY1
Yzg5ZWY1MDU3ZmIzMTdmMTYyMTZmMDM4NWUyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMN5r9CXHyhKPi7LUySm1o8bUaxOMVlSx6OfnkaWJ1/gvO3F
G6XSXDQFrzhC1eAy8RewiBuWf7ZJn007TZYV1BTxwzVZm+j5FqjG25+MGo0posep
II0GpqYRb8761Kgrj1geMd1+/D6H5TA/IPajU9m0AB0iRCVg9Ug0ahzb0o/fW/Q7
EbRdttDEaReiHg8PPmKMTBvneFNpPHMvV9wMOE9TWR4Poc2+jErn8dREr6mkHK96
HCmekdyuAdhd6a2EMNg5P1eNAQgdlZNlzLOK9XpjsJxYESS7WxanCaiy1x7NxQFt
zUefOg3Dsid+ZWL4sRHCajxSAbJIf7zMG8g4Ig0CAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBTdV2DUgPXInvUFf7MX8WIW8DheJjAfBgNVHSMEGDAWgBRLfSya022fiB+o
H9R1OH+4cLW0+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MzMHNtdE50bjRnZnFCX1VkVGhfdUhDMXRQcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8x
LzNWZGcxSUQxeUo3MUJYLXpGX0ZpRnZBNFhpWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8xL1MzMHNtdE50bjRn
ZnFCX1VkVGhfdUhDMXRQcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAcGgSDAMAwQCwhycAwQAwhyeMAwD
BALCaAQDBADCaAYwDAMEAtRFhAMEANRFhjANBgkqhkiG9w0BAQsFAAOCAQEALmp0
WklJ4Ix020d2e0ip1rhVSmScSN8+w4kD5DD2hZifB73ygRuz653Rmx0MAmpXgG7R
sLMIv63dk1PSJ8EWYW14aeccSOGA88b37ATor6fBYsxpaJCIGjt1KsXv4Y09oATu
mvXoblqjMlGOCDa9m5tJC0g6QhGcCgZ5boAs/7gMjRC+VGbxryj5fMkiFTE22yur
D5xiH/Z2NMzTRY9Nn8cjGQ2uNp0VkmLSerOGUow6tqht16HbvKLm2JZBk7GQ6HK6
xNMuXMZpNEAnj1+4yDclFe+jY6BB5KqcnHQJPXsBLI/zC1242G+QqUW7BbP+lm4a
tdffikT2LPPdB5+RoA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-ams.rpki-client.org