Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/X-g5xBZKaKo4fo5uM_kRG32tpi4.roa
File: X-g5xBZKaKo4fo5uM_kRG32tpi4.roa (raw, json)
Hash identifier: u3iD/6jLTNoHU90ffP3lhyyyV218byvnQQrGL181p78=
Subject key identifier: 5F:E8:39:C4:16:4A:68:AA:38:7E:8E:6E:33:F9:11:1B:7D:AD:A6:2E
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03B884BB
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/X-g5xBZKaKo4fo5uM_kRG32tpi4.roa
Signing time: Sat 01 Jan 2022 03:01:24 +0000
ROA not before: Sat 01 Jan 2022 03:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6768
IP address blocks: 185.41.22.0/24 maxlen: 24
185.212.250.0/24 maxlen: 24
185.239.27.0/24 maxlen: 24
185.239.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62424251 (0x3b884bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fe839c4164a68aa387e8e6e33f9111b7dada62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:b0:dc:64:68:ee:26:39:ae:cf:fe:d3:68:
81:2c:69:1e:4a:3d:e2:f2:15:24:6e:7c:48:a9:74:
1e:59:8b:5c:87:95:94:4e:44:1c:2d:4d:87:f2:39:
20:ad:cd:66:da:8c:71:99:e6:ef:9c:4b:51:1a:dc:
6b:ba:27:d7:1c:4c:8d:bf:ee:50:c5:34:33:f9:cb:
a0:a9:9e:af:cd:eb:f2:51:61:69:6a:3c:77:59:3a:
85:f9:6b:e4:c3:26:22:ee:66:18:88:92:aa:e4:42:
0a:3f:2e:df:39:cc:e0:a4:f4:cd:37:ab:42:54:c6:
e8:6c:7f:53:2a:51:99:a5:bc:f4:1e:b4:6f:d8:88:
85:c6:00:dc:fb:f7:32:ef:1c:13:01:d7:a8:38:30:
8a:5a:98:f6:7b:b3:78:d8:55:ab:2c:15:1b:d9:80:
6b:51:ba:a5:5a:11:2d:6e:51:7a:ca:d2:f3:30:4d:
67:e6:0c:9d:04:ec:a5:c1:d9:54:f1:2a:62:dc:dd:
fd:58:66:d2:8c:24:29:ff:1c:46:95:81:15:e8:46:
d3:fe:64:a0:1a:50:4b:3e:94:86:6d:43:69:fb:6e:
7f:23:bb:60:b5:df:53:82:a0:5f:0d:b0:11:4a:d3:
94:0f:06:44:3f:2c:9a:49:6f:4a:ad:32:b4:7e:c8:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:39:C4:16:4A:68:AA:38:7E:8E:6E:33:F9:11:1B:7D:AD:A6:2E
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/X-g5xBZKaKo4fo5uM_kRG32tpi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.22.0/24
185.212.250.0/24
185.239.26.0/23
Signature Algorithm: sha256WithRSAEncryption
96:11:e4:ca:9c:58:ca:7b:8a:aa:6e:f3:dd:a8:8c:12:6b:84:
a0:c0:bc:24:c8:d9:d8:f1:67:2e:1f:83:ae:fc:00:59:41:9e:
6d:ed:f1:d9:81:69:55:64:0f:a5:1a:33:24:c8:e3:1a:bb:7d:
eb:7d:a0:74:6b:2f:75:76:67:5e:aa:4e:4b:10:77:b9:10:d8:
1c:35:f4:2a:89:91:88:a5:dd:3d:28:a4:a8:e1:c3:85:cd:aa:
b2:c8:e4:30:22:ef:51:f0:92:c2:5f:0b:3d:3c:98:e0:e0:41:
a5:4b:b1:0c:19:5e:11:80:dd:e6:bc:d7:b2:bc:e4:76:f5:db:
12:ba:ae:2a:44:4f:3a:c0:5e:8d:8f:a5:8b:0e:ae:65:be:72:
93:ef:86:f5:22:00:45:ba:59:37:76:1b:26:0b:2a:ab:38:ee:
70:a6:88:ab:dc:d5:62:ac:d5:d6:60:df:99:26:df:35:41:86:
7d:e6:99:ca:b5:8c:34:ef:51:57:b3:ca:e9:4d:f3:65:82:a4:
8b:a1:c4:c4:fa:b5:50:62:39:98:cb:e7:da:c5:40:c7:71:09:
8d:79:db:1f:f3:14:67:5c:01:63:0f:c5:e3:b8:a7:17:93:c5:
a2:12:34:c0:3d:21:6a:bd:1e:31:ee:c9:0e:da:b6:85:62:dd:
1c:14:99:46
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA7iEuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2RmZWVhOWM3ZGUyNDZlNmQ3ZDFhNTA3NDA2Mjg1YjIyNmY5Mjg2MB4XDTIyMDEw
MTAzMDEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZlODM5YzQxNjRh
NjhhYTM4N2U4ZTZlMzNmOTExMWI3ZGFkYTYyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJAcsNxkaO4mOa7P/tNogSxpHko94vIVJG58SKl0HlmLXIeV
lE5EHC1Nh/I5IK3NZtqMcZnm75xLURrca7on1xxMjb/uUMU0M/nLoKmer83r8lFh
aWo8d1k6hflr5MMmIu5mGIiSquRCCj8u3znM4KT0zTerQlTG6Gx/UypRmaW89B60
b9iIhcYA3Pv3Mu8cEwHXqDgwilqY9nuzeNhVqywVG9mAa1G6pVoRLW5ResrS8zBN
Z+YMnQTspcHZVPEqYtzd/Vhm0owkKf8cRpWBFehG0/5koBpQSz6Uhm1DaftufyO7
YLXfU4KgXw2wEUrTlA8GRD8smklvSq0ytH7IVOkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRf6DnEFkpoqjh+jm4z+REbfa2mLjAfBgNVHSMEGDAWgBRz3+6px94kbm19
GlB0BihbIm+ShjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M5X3VxY2ZlSkc1dGZScFFkQVlvV3lKdmtvWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvOWMwYTdlLTk5NjMtNGMwZC05NGFjLTQ0NmQwYTdlOTQwNC8x
L1gtZzV4QlpLYUtvNGZvNXVNX2tSRzMydHBpNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
OWMwYTdlLTk5NjMtNGMwZC05NGFjLTQ0NmQwYTdlOTQwNC8xL2M5X3VxY2ZlSkc1
dGZScFFkQVlvV3lKdmtvWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALkpFgMEALnU+gMEAbnvGjANBgkq
hkiG9w0BAQsFAAOCAQEAlhHkypxYynuKqm7z3aiMEmuEoMC8JMjZ2PFnLh+DrvwA
WUGebe3x2YFpVWQPpRozJMjjGrt9632gdGsvdXZnXqpOSxB3uRDYHDX0KomRiKXd
PSikqOHDhc2qssjkMCLvUfCSwl8LPTyY4OBBpUuxDBleEYDd5rzXsrzkdvXbErqu
KkRPOsBejY+liw6uZb5yk++G9SIARbpZN3YbJgsqqzjucKaIq9zVYqzV1mDfmSbf
NUGGfeaZyrWMNO9RV7PK6U3zZYKki6HExPq1UGI5mMvn2sVAx3EJjXnbH/MUZ1wB
Yw/F47inF5PFohI0wD0har0eMe7JDtq2hWLdHBSZRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org