Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/Mmn68bcQyMj4kvAcT69yu7kO04U.roa
File: Mmn68bcQyMj4kvAcT69yu7kO04U.roa (raw, json)
Hash identifier: 0cpItYMDDRFDTKwIK04RZ7kwasqgU3OME9zV7eRtjPE=
Subject key identifier: 32:69:FA:F1:B7:10:C8:C8:F8:92:F0:1C:4F:AF:72:BB:B9:0E:D3:85
Certificate issuer: /CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Certificate serial: 0BE52E8A
Authority key identifier: EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/Mmn68bcQyMj4kvAcT69yu7kO04U.roa
Signing time: Wed 11 May 2022 09:11:39 +0000
ROA not before: Wed 11 May 2022 09:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20900
IP address blocks: 31.217.232.0/21 maxlen: 24
185.182.252.0/22 maxlen: 24
213.190.64.0/19 maxlen: 24
2001:1b08::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199569034 (0xbe52e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
Validity
Not Before: May 11 09:11:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3269faf1b710c8c8f892f01c4faf72bbb90ed385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:a9:40:e4:db:69:05:49:5b:c1:3f:85:e7:
67:64:4f:89:76:d6:b1:95:f7:0a:a8:68:b4:d7:0a:
44:59:0f:c9:3c:0a:e0:f8:48:d6:8d:fd:98:0a:5d:
5f:8d:7e:7f:3b:25:a1:b6:ea:ca:e8:8a:69:83:c2:
7b:10:2e:ac:a6:92:3a:4f:7b:36:36:6f:18:93:90:
7a:a1:cb:2b:46:be:99:1e:88:88:a0:3d:4f:20:61:
71:f2:41:eb:3a:92:43:6b:b4:b8:d7:ee:22:a5:37:
11:9c:e0:3c:a4:b0:e3:aa:50:6d:17:84:83:af:5b:
1a:b3:86:3e:67:db:7c:b1:6f:2f:74:53:7f:9c:4a:
b7:8c:a3:4c:96:1e:42:c5:04:b6:9b:74:8a:d0:43:
ee:cf:11:67:79:9f:0e:c1:ae:2a:12:b4:d2:17:6d:
13:0c:52:04:5f:f6:5e:91:04:ed:df:a2:ef:95:0a:
c4:c5:59:dc:a2:0f:09:51:29:c2:3e:93:94:a6:91:
a4:bf:8d:4f:59:bd:df:2b:59:ff:e8:1d:9f:ba:98:
00:67:96:d1:2c:73:4d:20:34:31:55:7b:71:37:33:
2f:96:83:50:69:40:fa:cb:49:0e:bf:9c:66:bc:36:
03:91:a6:b0:60:e7:4f:71:49:a0:47:ff:82:38:05:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:FA:F1:B7:10:C8:C8:F8:92:F0:1C:4F:AF:72:BB:B9:0E:D3:85
X509v3 Authority Key Identifier:
keyid:EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/Mmn68bcQyMj4kvAcT69yu7kO04U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/6mxSuRPG3H_6BwMYNU6IW2K2rZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.232.0/21
185.182.252.0/22
213.190.64.0/19
IPv6:
2001:1b08::/32
Signature Algorithm: sha256WithRSAEncryption
0b:78:47:8d:31:18:6e:0f:12:fc:0e:4b:b0:89:ad:3e:25:ef:
bc:90:ba:8a:e3:c8:16:e4:a9:ec:2e:93:47:ba:81:99:a1:19:
53:76:4a:09:48:10:e1:da:85:79:96:d7:58:ef:fb:19:94:d3:
95:9d:44:3e:58:a2:f4:e9:46:b2:b3:82:e2:01:30:99:b3:a2:
8c:f0:32:a7:df:57:7f:1d:7e:7a:24:ea:1e:4f:5d:5a:2b:c2:
91:00:16:32:70:07:95:9a:3d:ea:4e:84:b6:86:76:9d:f9:dc:
16:54:68:e1:89:0e:05:6f:7f:af:3b:ee:65:ad:61:a2:00:8d:
65:cb:40:06:33:a6:04:00:87:62:6f:0c:cf:2c:11:e0:e6:7e:
94:93:b6:45:9e:c4:c5:36:d1:81:4e:62:b3:cf:ae:3e:a8:ae:
5b:0c:bb:16:8a:74:5c:d5:d5:b0:6e:df:c7:98:47:e3:5d:8b:
2b:a1:87:61:42:da:83:97:f4:38:aa:82:5d:41:e6:1d:5f:b8:
42:fd:0a:eb:1f:3d:89:28:55:41:f1:41:36:ed:67:50:ad:e0:
ee:e3:27:60:ba:4b:19:2f:a6:8c:7b:0f:7f:3b:06:ad:63:76:
cf:6f:98:2f:5b:69:24:8b:7b:3a:ef:47:74:c8:af:c2:ec:f8:
e1:18:5b:e3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEC+UuijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YTZjNTJiOTEzYzZkYzdmZmEwNzAzMTgzNTRlODg1YjYyYjZhZDkzMB4XDTIyMDUx
MTA5MTEzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzI2OWZhZjFiNzEw
YzhjOGY4OTJmMDFjNGZhZjcyYmJiOTBlZDM4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALF0qUDk22kFSVvBP4XnZ2RPiXbWsZX3CqhotNcKRFkPyTwK
4PhI1o39mApdX41+fzslobbqyuiKaYPCexAurKaSOk97NjZvGJOQeqHLK0a+mR6I
iKA9TyBhcfJB6zqSQ2u0uNfuIqU3EZzgPKSw46pQbReEg69bGrOGPmfbfLFvL3RT
f5xKt4yjTJYeQsUEtpt0itBD7s8RZ3mfDsGuKhK00hdtEwxSBF/2XpEE7d+i75UK
xMVZ3KIPCVEpwj6TlKaRpL+NT1m93ytZ/+gdn7qYAGeW0SxzTSA0MVV7cTczL5aD
UGlA+stJDr+cZrw2A5GmsGDnT3FJoEf/gjgFTPsCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQyafrxtxDIyPiS8BxPr3K7uQ7ThTAfBgNVHSMEGDAWgBTqbFK5E8bcf/oH
Axg1TohbYratkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZteFN1UlBHM0hfNkJ3TVlOVTZJVzJLMnJaTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvZDViNDQwLWI1MzMtNDM1OS1iNTllLWMxNmUwM2Q2MjVhMC8x
L01tbjY4YmNReU1qNGt2QWNUNjl5dTdrTzA0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
ZDViNDQwLWI1MzMtNDM1OS1iNTllLWMxNmUwM2Q2MjVhMC8xLzZteFN1UlBHM0hf
NkJ3TVlOVTZJVzJLMnJaTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAx/Z6AMEArm2/AMEBdW+QDANBAIA
AjAHAwUAIAEbCDANBgkqhkiG9w0BAQsFAAOCAQEAC3hHjTEYbg8S/A5LsImtPiXv
vJC6iuPIFuSp7C6TR7qBmaEZU3ZKCUgQ4dqFeZbXWO/7GZTTlZ1EPlii9OlGsrOC
4gEwmbOijPAyp99Xfx1+eiTqHk9dWivCkQAWMnAHlZo96k6EtoZ2nfncFlRo4YkO
BW9/rzvuZa1hogCNZctABjOmBACHYm8MzywR4OZ+lJO2RZ7ExTbRgU5is8+uPqiu
Wwy7Fop0XNXVsG7fx5hH412LK6GHYULag5f0OKqCXUHmHV+4Qv0K6x89iShVQfFB
Nu1nUK3g7uMnYLpLGS+mjHsPfzsGrWN2z2+YL1tpJIt7Ou9HdMivwuz44Rhb4w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:17 2023 by rpki-client on console-ams.rpki-client.org