Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/8pm_IyvAPfay3blkkkjdSiBDewA.roa
File: 8pm_IyvAPfay3blkkkjdSiBDewA.roa (raw, json)
Hash identifier: +FiKMAd1xRCYbIQAAXz03QmwrHu9a5eKq3SfvJrL6iM=
Subject key identifier: F2:99:BF:23:2B:C0:3D:F6:B2:DD:B9:64:92:48:DD:4A:20:43:7B:00
Certificate issuer: /CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Certificate serial: 0186BB7128B0E40431C3D20AD3432AB7E0FC
Authority key identifier: 2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/8pm_IyvAPfay3blkkkjdSiBDewA.roa
Signing time: Tue 07 Mar 2023 09:40:00 +0000
ROA not before: Tue 07 Mar 2023 09:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
193.33.52.0/23 maxlen: 24
192.77.114.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:71:28:b0:e4:04:31:c3:d2:0a:d3:43:2a:b7:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Validity
Not Before: Mar 7 09:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f299bf232bc03df6b2ddb9649248dd4a20437b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:a7:0a:92:bd:d1:36:7a:e1:52:35:91:5b:
96:6a:e8:43:80:ca:68:6a:7d:24:46:01:69:5b:c9:
09:d3:01:14:7b:41:a7:07:35:08:ba:c8:6c:30:44:
37:a5:f5:5f:a6:19:d7:03:28:8d:7d:d3:7a:40:4b:
f8:fc:6a:66:69:76:c1:cd:f9:86:ad:b2:e4:b8:da:
d1:c8:ba:bf:b8:a3:7d:72:ff:f5:c7:b5:bd:e2:e1:
a4:c3:41:25:b4:c9:11:c8:9d:4d:a1:98:7a:bc:a2:
a8:8e:6a:20:aa:4f:42:78:e7:86:fd:5d:68:cc:60:
c4:c7:1d:d3:b5:82:1d:92:25:0c:2c:66:00:a9:1c:
ad:c0:37:65:e2:e5:0e:c6:36:43:1e:e8:c8:ac:12:
af:10:2f:0b:9d:ec:ec:4a:32:f0:fe:b0:e7:2c:29:
de:6f:36:d2:ef:3a:ec:89:41:02:4b:d4:70:83:2e:
26:3b:a9:6e:18:d1:c8:9d:4b:ca:49:7d:fd:e7:49:
e7:dc:ee:01:a6:9a:22:a8:8b:9e:e4:2b:c5:77:79:
04:d5:47:64:92:51:d2:2f:4b:ab:d2:0f:d4:fa:6b:
e8:3c:97:e5:e4:3d:7c:9d:62:90:33:cf:aa:07:c9:
7f:80:1a:3b:a0:72:d8:8f:dc:05:8f:b7:7e:26:13:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:BF:23:2B:C0:3D:F6:B2:DD:B9:64:92:48:DD:4A:20:43:7B:00
X509v3 Authority Key Identifier:
keyid:2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/8pm_IyvAPfay3blkkkjdSiBDewA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/18
149.238.160.0-149.238.255.255
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f6:4c:f9:41:c9:41:53:62:77:e9:6b:66:aa:bb:ad:73:54:
37:d0:7c:a6:4e:24:4a:95:83:23:14:af:88:cf:91:55:6d:73:
90:b7:f4:45:cb:e5:e4:1d:99:ee:7c:31:ec:0c:11:a3:07:6e:
02:cd:99:58:42:79:70:21:6b:da:fc:4e:a8:f2:c2:63:b8:b4:
bb:b3:9f:fb:b5:0b:2d:ec:dd:e6:94:99:11:e5:d5:c9:0e:bd:
97:11:f5:e2:4f:04:c6:d1:b9:68:16:38:7a:bd:62:c1:df:35:
d4:4b:c1:d1:63:d0:36:94:21:04:f4:16:b5:b2:19:f5:34:9b:
f6:e9:40:47:4c:a8:0b:e2:81:4f:bd:b1:67:00:ef:e8:39:68:
fd:da:a9:94:36:67:d0:5a:6c:31:3f:1d:4a:95:e8:5d:20:97:
9a:38:92:b0:be:8e:64:24:e7:c7:ca:4b:b8:08:af:9f:b2:00:
0e:ec:14:97:4b:5b:6e:2b:1d:4e:0b:51:ef:29:03:04:e0:ff:
01:64:b3:3a:60:be:f5:2b:aa:cd:cb:06:d8:ce:ac:ae:8d:b6:
96:cb:30:0e:24:b2:05:cd:4c:2d:5b:6f:35:5d:e3:44:40:92:
7c:4c:cd:c8:e3:30:81:7e:36:2b:0e:c1:56:29:a0:b9:71:ee:
bf:e3:69:85
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYa7cSiw5AQxw9IK00Mqt+D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWY0YzkwNDMxNmE2ZTM2NzJhYzA3MWU0MjMyNGYyMTk4
MzQ0YjUwHhcNMjMwMzA3MDk0MDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjk5YmYyMzJiYzAzZGY2YjJkZGI5NjQ5MjQ4ZGQ0YTIwNDM3YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE2nCpK90TZ64VI1kVuWauhDgMpo
an0kRgFpW8kJ0wEUe0GnBzUIushsMEQ3pfVfphnXAyiNfdN6QEv4/GpmaXbBzfmG
rbLkuNrRyLq/uKN9cv/1x7W94uGkw0EltMkRyJ1NoZh6vKKojmogqk9CeOeG/V1o
zGDExx3TtYIdkiUMLGYAqRytwDdl4uUOxjZDHujIrBKvEC8LnezsSjLw/rDnLCne
bzbS7zrsiUECS9Rwgy4mO6luGNHInUvKSX3950nn3O4BppoiqIue5CvFd3kE1Udk
klHSL0ur0g/U+mvoPJfl5D18nWKQM8+qB8l/gBo7oHLYj9wFj7d+JhMXTwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFPKZvyMrwD32st25ZJJI3UogQ3sAMB8GA1UdIwQY
MBaAFC2fTJBDFqbjZyrAceQjJPIZg0S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAt
ZmMwZTFkMTAwNjUwLzEvOHBtX0l5dkFQZmF5M2Jsa2tramRTaUJEZXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAtZmMwZTFkMTAwNjUw
LzEvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQGle4AMAsD
BAWV7qADAwCV7gMEAcBNcgMEAMBw0AMEAcEhNDANBgkqhkiG9w0BAQsFAAOCAQEA
M/ZM+UHJQVNid+lrZqq7rXNUN9B8pk4kSpWDIxSviM+RVW1zkLf0Rcvl5B2Z7nwx
7AwRowduAs2ZWEJ5cCFr2vxOqPLCY7i0u7Of+7ULLezd5pSZEeXVyQ69lxH14k8E
xtG5aBY4er1iwd811EvB0WPQNpQhBPQWtbIZ9TSb9ulAR0yoC+KBT72xZwDv6Dlo
/dqplDZn0FpsMT8dSpXoXSCXmjiSsL6OZCTnx8pLuAivn7IADuwUl0tbbisdTgtR
7ykDBOD/AWSzOmC+9SuqzcsG2M6sro22lsswDiSyBc1MLVtvNV3jRECSfEzNyOMw
gX42Kw7BVimguXHuv+NphQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:04 2024 by rpki-client on console-ams.rpki-client.org