Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/c7gP8YAYuE8993hvWm7T5D4_B0E.roa
File: c7gP8YAYuE8993hvWm7T5D4_B0E.roa (raw, json)
Hash identifier: RVJInDlfSERgRslh6Qy/3F17f762syj9yBdvUohZ1kY=
Subject key identifier: 73:B8:0F:F1:80:18:B8:4F:3D:F7:78:6F:5A:6E:D3:E4:3E:3F:07:41
Certificate issuer: /CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Certificate serial: 0186BB71291F16A3643A078823F77A397373
Authority key identifier: 2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/c7gP8YAYuE8993hvWm7T5D4_B0E.roa
Signing time: Tue 07 Mar 2023 09:40:00 +0000
ROA not before: Tue 07 Mar 2023 09:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
193.33.52.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
192.77.114.0/23 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:71:29:1f:16:a3:64:3a:07:88:23:f7:7a:39:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Validity
Not Before: Mar 7 09:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73b80ff18018b84f3df7786f5a6ed3e43e3f0741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:6b:f2:ce:57:07:02:be:5d:c3:93:67:d6:
0c:c0:7e:64:f9:28:04:34:1b:e5:c3:df:75:55:46:
91:55:39:d3:59:a2:17:56:af:76:29:dd:f7:39:58:
08:0a:24:ba:33:02:b8:37:8e:18:fa:93:68:fc:b2:
4f:90:ec:c7:0f:92:6b:49:82:75:38:21:be:d1:4f:
05:5d:17:74:92:b5:8f:17:6e:8c:c0:13:f4:37:e1:
ad:59:04:63:fd:64:d7:a6:c5:97:7c:64:3a:17:d1:
f2:4f:65:63:77:4f:24:f2:2f:17:48:ff:1d:04:29:
bc:90:0a:9b:ce:66:6c:e5:55:a8:5e:93:5e:78:fe:
d4:58:3e:a5:5d:13:25:63:c8:08:1b:70:0b:64:6f:
86:e2:32:ea:d2:ab:f7:33:e9:8a:3f:d9:a1:88:2f:
eb:a7:81:c0:f3:9b:8f:8c:7a:ea:36:28:ba:2a:fb:
28:c6:3e:01:64:b3:b5:98:83:5d:f5:86:a7:96:f6:
6c:54:98:af:99:6d:ab:84:48:f9:59:6f:e3:75:4d:
76:e3:66:b0:a1:c1:f2:7d:f4:6e:91:92:85:a9:30:
53:41:a7:70:bc:e0:dd:61:cf:b0:13:49:92:65:2a:
aa:91:83:69:30:c3:83:65:7d:ff:dc:8d:b3:c3:5f:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:0F:F1:80:18:B8:4F:3D:F7:78:6F:5A:6E:D3:E4:3E:3F:07:41
X509v3 Authority Key Identifier:
keyid:2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/c7gP8YAYuE8993hvWm7T5D4_B0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/16
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d8:5c:61:bf:1a:6d:da:b7:49:a5:bd:33:e1:e1:f7:36:ad:
7c:1a:d2:e9:11:14:5c:04:68:ae:69:4a:cc:c7:5e:17:be:4e:
9d:c6:bc:4c:10:fe:e6:e9:82:3b:2f:3b:33:91:63:e9:f4:2e:
f8:b5:1d:b5:95:5e:f6:22:23:f1:f6:5f:91:e9:35:79:e5:9f:
e9:92:23:db:d6:cb:28:d5:16:fb:49:ef:3e:f9:6b:6c:a5:cd:
f5:57:d2:ee:95:6a:48:31:cb:ae:98:c0:31:b8:38:d6:87:84:
38:25:f1:ee:8f:0a:6f:59:9e:d2:ed:d7:30:57:c0:99:1d:a3:
46:af:2c:bb:ef:60:75:d3:a9:b9:ff:dc:d1:80:e7:9f:4a:73:
cf:20:bf:5f:a1:16:bb:56:0d:c5:4f:f1:ef:91:66:9f:bd:d8:
a8:1e:29:19:c5:69:95:29:4c:22:de:aa:50:16:2d:74:f8:6d:
39:69:4f:ac:ca:55:1b:c0:fe:92:6f:24:37:47:cd:41:c4:5c:
5d:5f:a2:96:ae:b9:e7:71:38:7e:d5:47:0b:8e:03:ca:b3:b1:
44:c1:88:42:ce:e5:e5:5f:35:e5:f6:6a:e9:c9:fe:c3:e0:3b:
f7:f6:05:aa:c7:7d:c3:2c:d5:7d:1e:91:f4:de:b0:1d:0d:02:
c0:e2:19:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa7cSkfFqNkOgeII/d6OXNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWY0YzkwNDMxNmE2ZTM2NzJhYzA3MWU0MjMyNGYyMTk4
MzQ0YjUwHhcNMjMwMzA3MDk0MDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2I4MGZmMTgwMThiODRmM2RmNzc4NmY1YTZlZDNlNDNlM2YwNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphNr8s5XBwK+XcOTZ9YMwH5k+SgE
NBvlw991VUaRVTnTWaIXVq92Kd33OVgICiS6MwK4N44Y+pNo/LJPkOzHD5JrSYJ1
OCG+0U8FXRd0krWPF26MwBP0N+GtWQRj/WTXpsWXfGQ6F9HyT2Vjd08k8i8XSP8d
BCm8kAqbzmZs5VWoXpNeeP7UWD6lXRMlY8gIG3ALZG+G4jLq0qv3M+mKP9mhiC/r
p4HA85uPjHrqNii6Kvsoxj4BZLO1mINd9YanlvZsVJivmW2rhEj5WW/jdU1242aw
ocHyffRukZKFqTBTQadwvODdYc+wE0mSZSqqkYNpMMODZX3/3I2zw1+f9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHO4D/GAGLhPPfd4b1pu0+Q+PwdBMB8GA1UdIwQY
MBaAFC2fTJBDFqbjZyrAceQjJPIZg0S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAt
ZmMwZTFkMTAwNjUwLzEvYzdnUDhZQVl1RTg5OTNodldtN1Q1RDRfQjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAtZmMwZTFkMTAwNjUw
LzEvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAle4DBAHA
TXIDBADAcNADBAHBITQwDQYJKoZIhvcNAQELBQADggEBAKrYXGG/Gm3at0mlvTPh
4fc2rXwa0ukRFFwEaK5pSszHXhe+Tp3GvEwQ/ubpgjsvOzORY+n0Lvi1HbWVXvYi
I/H2X5HpNXnln+mSI9vWyyjVFvtJ7z75a2ylzfVX0u6Vakgxy66YwDG4ONaHhDgl
8e6PCm9ZntLt1zBXwJkdo0avLLvvYHXTqbn/3NGA559Kc88gv1+hFrtWDcVP8e+R
Zp+92KgeKRnFaZUpTCLeqlAWLXT4bTlpT6zKVRvA/pJvJDdHzUHEXF1fopauuedx
OH7VRwuOA8qzsUTBiELO5eVfNeX2aunJ/sPgO/f2BarHfcMs1X0ekfTesB0NAsDi
Ge4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:04 2024 by rpki-client on console-ams.rpki-client.org