Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/IuhrC1yRPXG58G5ZeaYzvWvlTMk.roa
File: IuhrC1yRPXG58G5ZeaYzvWvlTMk.roa (raw, json)
Hash identifier: EUiCSAwwsSlGksw9ghTf/r/nxMTuAKK3hZbRj2T5554=
Subject key identifier: 22:E8:6B:0B:5C:91:3D:71:B9:F0:6E:59:79:A6:33:BD:6B:E5:4C:C9
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 0182BB4CE7CD5AB09A73A80A8CC153A58304
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/IuhrC1yRPXG58G5ZeaYzvWvlTMk.roa
Signing time: Sat 20 Aug 2022 12:49:15 +0000
ROA not before: Sat 20 Aug 2022 12:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 185.242.162.0/24 maxlen: 24
185.242.161.0/24 maxlen: 24
185.242.160.0/24 maxlen: 24
185.242.163.0/24 maxlen: 24
2a09:cfc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:4c:e7:cd:5a:b0:9a:73:a8:0a:8c:c1:53:a5:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Aug 20 12:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22e86b0b5c913d71b9f06e5979a633bd6be54cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:ac:d6:9e:90:51:ce:5d:00:46:ab:1d:18:
df:f3:36:08:eb:8c:02:ba:90:03:df:9b:25:73:ca:
70:8a:94:9f:db:28:9a:28:9f:09:eb:28:a7:ae:45:
f5:53:ab:05:0c:c3:6f:f8:43:c0:a1:f0:08:c6:0c:
36:ac:5b:3d:02:2c:f2:ac:bc:70:6d:37:47:c0:e0:
3d:67:f6:c4:fd:89:a5:4d:43:64:b5:d2:68:33:0b:
ee:76:f9:a1:1d:38:db:9b:dc:47:ba:2a:26:44:1d:
c5:68:dd:b1:f9:4f:00:de:28:0f:bc:e0:9d:dc:f0:
16:e3:24:19:13:57:2f:d8:56:5f:8c:b7:7d:8b:3b:
bb:a7:6d:0a:4b:f4:33:95:e0:50:bd:85:b2:4e:73:
e4:a5:88:e4:f8:c1:e1:f2:1f:50:4d:ed:13:e0:bc:
8d:de:c9:2c:50:6f:5f:36:30:3e:64:4f:9c:f8:97:
df:77:7f:32:44:ac:63:5c:e5:fd:9c:3d:6d:9f:b7:
4f:a1:77:f2:eb:5a:80:a7:06:fe:df:ee:56:99:37:
e2:94:ce:68:cc:31:5f:8e:0c:62:71:ec:16:a7:94:
cc:4b:27:d8:b1:56:03:99:3d:92:c5:7f:2e:b6:41:
4e:5f:0d:41:4e:1c:86:b3:c1:1c:c9:31:81:62:3d:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:6B:0B:5C:91:3D:71:B9:F0:6E:59:79:A6:33:BD:6B:E5:4C:C9
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/IuhrC1yRPXG58G5ZeaYzvWvlTMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.160.0/22
IPv6:
2a09:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:76:a9:18:88:22:ad:c2:bb:90:25:32:60:04:f7:21:e2:c2:
20:a9:8d:57:c2:b9:dc:dd:cc:07:04:fd:5a:f3:d2:a2:06:a0:
31:6c:39:01:ca:0d:6f:45:a5:b1:60:a3:cf:45:be:0e:8e:e4:
98:21:bb:8a:cd:6d:38:93:9a:8c:2c:c9:39:92:77:be:7b:c0:
1b:13:33:eb:93:cd:3c:62:3a:6e:95:0a:af:8f:76:e1:ca:79:
87:c7:51:c2:d8:f0:08:e7:5c:78:76:2e:d4:0b:43:78:d9:eb:
59:52:54:2a:4c:9c:27:90:d9:34:ef:6e:b0:7d:56:99:18:e2:
7e:8b:29:d7:e2:b6:f9:a3:0b:d8:ac:8c:f9:14:fe:c7:ec:3e:
82:a8:a3:44:1e:a7:fd:42:79:ce:55:4f:e1:ea:0a:fb:9f:5b:
ea:80:e8:d7:5b:0b:43:1b:e7:5a:f4:9c:48:ed:66:f0:f1:f1:
43:26:6c:34:c4:87:7d:7d:d9:16:1c:91:73:21:0b:e3:57:67:
d3:84:77:bd:1c:8c:24:61:e8:ef:48:f6:f7:bf:a3:af:f2:ce:
e6:bf:a4:a8:b2:71:5a:b0:30:43:03:3d:b2:38:cd:db:a3:7e:
3b:ef:86:30:11:11:4d:42:6f:d4:54:37:00:28:05:e0:82:dd:
eb:3d:11:db
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYK7TOfNWrCac6gKjMFTpYMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2ZkN2ZhZTIwZDFkMzRiNzc5ZGFiNjY5YjhmMGYwN2M5
YzM0ZjgwHhcNMjIwODIwMTI0OTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmU4NmIwYjVjOTEzZDcxYjlmMDZlNTk3OWE2MzNiZDZiZTU0Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1es1p6QUc5dAEarHRjf8zYI64wC
upAD35slc8pwipSf2yiaKJ8J6yinrkX1U6sFDMNv+EPAofAIxgw2rFs9AizyrLxw
bTdHwOA9Z/bE/YmlTUNktdJoMwvudvmhHTjbm9xHuiomRB3FaN2x+U8A3igPvOCd
3PAW4yQZE1cv2FZfjLd9izu7p20KS/QzleBQvYWyTnPkpYjk+MHh8h9QTe0T4LyN
3sksUG9fNjA+ZE+c+Jffd38yRKxjXOX9nD1tn7dPoXfy61qApwb+3+5WmTfilM5o
zDFfjgxicewWp5TMSyfYsVYDmT2SxX8utkFOXw1BThyGs8EcyTGBYj1ztQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCLoawtckT1xufBuWXmmM71r5UzJMB8GA1UdIwQY
MBaAFGfP1/riDR00t3natmm48PB8nDT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhfWC11SU5IVFMzZWRxMmFianc4SHljTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0M2QtZDkyNC00Mzc4LWExMjEt
MmI2OGFiMmFkMmU5LzEvSXVockMxeVJQWEc1OEc1WmVhWXp2V3ZsVE1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0M2QtZDkyNC00Mzc4LWExMjEtMmI2OGFiMmFkMmU5
LzEvWjhfWC11SU5IVFMzZWRxMmFianc4SHljTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufKgMA0E
AgACMAcDBQMqCc/AMA0GCSqGSIb3DQEBCwUAA4IBAQCjdqkYiCKtwruQJTJgBPch
4sIgqY1Xwrnc3cwHBP1a89KiBqAxbDkByg1vRaWxYKPPRb4OjuSYIbuKzW04k5qM
LMk5kne+e8AbEzPrk808YjpulQqvj3bhynmHx1HC2PAI51x4di7UC0N42etZUlQq
TJwnkNk0726wfVaZGOJ+iynX4rb5owvYrIz5FP7H7D6CqKNEHqf9QnnOVU/h6gr7
n1vqgOjXWwtDG+da9JxI7Wbw8fFDJmw0xId9fdkWHJFzIQvjV2fThHe9HIwkYejv
SPb3v6Ov8s7mv6SosnFasDBDAz2yOM3bo34774YwERFNQm/UVDcAKAXggt3rPRHb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org