Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/QZaRIs9kzY5rDiy89Yw7pbTUp5E.roa
File: QZaRIs9kzY5rDiy89Yw7pbTUp5E.roa (raw, json)
Hash identifier: X1//7p80y0Sd/R6M8fI9hpyzj16CKAFu3jCWOf+ksfI=
Subject key identifier: 41:96:91:22:CF:64:CD:8E:6B:0E:2C:BC:F5:8C:3B:A5:B4:D4:A7:91
Certificate issuer: /CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Certificate serial: 0A154DE3
Authority key identifier: DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/QZaRIs9kzY5rDiy89Yw7pbTUp5E.roa
Signing time: Sat 01 Jan 2022 01:59:59 +0000
ROA not before: Sat 01 Jan 2022 01:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31246
IP address blocks: 83.240.76.0/23 maxlen: 23
95.82.128.0/18 maxlen: 18
83.240.0.0/17 maxlen: 17
46.39.160.0/19 maxlen: 19
185.51.240.0/22 maxlen: 22
2001:4cc8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169168355 (0xa154de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Validity
Not Before: Jan 1 01:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41969122cf64cd8e6b0e2cbcf58c3ba5b4d4a791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:2d:2f:e8:32:08:d9:36:30:9f:8f:be:4b:
a9:5d:f3:cd:18:3e:03:e0:0d:51:d7:01:6e:9e:9d:
c0:fd:4c:f9:53:f5:a7:64:8d:ed:59:a0:45:05:b6:
79:88:99:26:13:71:14:30:bd:54:02:5d:ba:3c:8a:
5a:cb:06:b9:08:f4:3e:68:da:9e:8d:cf:10:2d:1f:
21:59:58:a3:3c:38:f6:f0:1f:b6:27:9e:01:d4:77:
86:8b:29:77:94:49:1c:61:2c:5c:13:0d:6d:17:5f:
60:fc:de:c6:a1:2c:35:3a:e8:6c:7b:d2:29:06:0f:
3e:bb:d0:64:b3:a8:93:89:8c:71:5c:80:fd:2a:d9:
f2:c6:86:3a:a8:5c:c5:8d:ae:64:1b:fe:93:40:7f:
91:67:25:3e:18:4e:db:75:ea:a0:ea:3e:a1:73:6d:
bc:c1:d2:39:1a:9b:f6:5e:af:fe:2c:de:09:21:7a:
19:31:98:e0:25:27:97:4f:5d:74:eb:4b:bd:c9:d6:
7a:48:81:94:d9:fc:35:b6:71:7a:ad:9d:fc:19:51:
f2:77:bd:18:02:f2:23:e7:b5:6d:bb:a2:4a:5c:c2:
f4:46:83:5f:7a:9c:03:5b:50:ed:ba:f7:cf:3e:73:
19:a7:ca:db:1b:ec:84:67:b9:50:13:04:32:94:a8:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:91:22:CF:64:CD:8E:6B:0E:2C:BC:F5:8C:3B:A5:B4:D4:A7:91
X509v3 Authority Key Identifier:
keyid:DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/QZaRIs9kzY5rDiy89Yw7pbTUp5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
83.240.0.0/17
95.82.128.0/18
185.51.240.0/22
IPv6:
2001:4cc8::/31
Signature Algorithm: sha256WithRSAEncryption
44:e3:d9:03:18:be:cc:f0:2c:89:c5:9e:ad:cf:21:c9:1f:0c:
3c:31:21:07:9e:bf:3c:be:e1:07:64:fe:b4:e7:eb:b1:8d:07:
45:60:e7:a6:d9:f9:bf:40:5e:8d:5e:e4:bf:5b:9b:7b:d9:ec:
b8:58:58:88:fa:26:71:8c:0b:da:db:81:e9:e4:5a:04:5d:47:
62:83:c9:57:c6:b9:26:43:2b:10:99:6a:e1:c5:87:8d:ed:e6:
17:82:8b:03:0c:11:a0:34:c0:5d:d0:22:85:12:b3:42:7a:6b:
71:5d:06:67:83:16:9b:01:04:ce:41:7d:00:16:7e:77:c5:2c:
43:57:6c:76:09:18:eb:eb:9c:af:64:3f:0b:37:05:97:22:3f:
4c:03:e3:67:a5:50:a9:b7:e7:3c:b1:ba:6e:18:54:8a:b6:c8:
0d:8c:56:f6:5d:7e:4a:df:bc:73:2c:69:25:96:6b:34:fa:a6:
6e:14:ea:b4:32:77:f3:67:f2:79:29:08:06:3e:a7:76:46:1e:
cf:d4:46:a3:11:c7:49:f9:c9:30:0a:22:65:11:30:de:2a:7e:
e2:86:9f:5a:24:3a:55:09:ad:69:09:4b:44:07:dc:75:3d:10:
df:4d:42:2a:50:81:32:0f:82:0d:b8:5c:43:f7:65:65:45:ce:
54:c2:ea:c5
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEChVN4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Zjk4ZDk1YjQyNzlmMzYyNGY3OGI1ZTUzYjMxODBjM2YwMTg2OTMzMB4XDTIyMDEw
MTAxNTk1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDE5NjkxMjJjZjY0
Y2Q4ZTZiMGUyY2JjZjU4YzNiYTViNGQ0YTc5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOI9LS/oMgjZNjCfj75LqV3zzRg+A+ANUdcBbp6dwP1M+VP1
p2SN7VmgRQW2eYiZJhNxFDC9VAJdujyKWssGuQj0Pmjano3PEC0fIVlYozw49vAf
tieeAdR3hospd5RJHGEsXBMNbRdfYPzexqEsNTrobHvSKQYPPrvQZLOok4mMcVyA
/SrZ8saGOqhcxY2uZBv+k0B/kWclPhhO23XqoOo+oXNtvMHSORqb9l6v/izeCSF6
GTGY4CUnl09ddOtLvcnWekiBlNn8NbZxeq2d/BlR8ne9GALyI+e1bbuiSlzC9EaD
X3qcA1tQ7br3zz5zGafK2xvshGe5UBMEMpSo0ZECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBRBlpEiz2TNjmsOLLz1jDultNSnkTAfBgNVHSMEGDAWgBTfmNlbQnnzYk94
teU7MYDD8BhpMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzM1alpXMEo1ODJKUGVMWGxPekdBd19BWWFUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvZjliYTA0LTgyYzctNGZmNy04MDFkLTNmZWU3NWY4MmMwOC8x
L1FaYVJJczlrelk1ckRpeTg5WXc3cGJUVXA1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
ZjliYTA0LTgyYzctNGZmNy04MDFkLTNmZWU3NWY4MmMwOC8xLzM1alpXMEo1ODJK
UGVMWGxPekdBd19BWWFUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBS4noAMEB1PwAAMEBl9SgAMEArkz
8DANBAIAAjAHAwUBIAFMyDANBgkqhkiG9w0BAQsFAAOCAQEAROPZAxi+zPAsicWe
rc8hyR8MPDEhB56/PL7hB2T+tOfrsY0HRWDnptn5v0BejV7kv1ube9nsuFhYiPom
cYwL2tuB6eRaBF1HYoPJV8a5JkMrEJlq4cWHje3mF4KLAwwRoDTAXdAihRKzQnpr
cV0GZ4MWmwEEzkF9ABZ+d8UsQ1dsdgkY6+ucr2Q/CzcFlyI/TAPjZ6VQqbfnPLG6
bhhUirbIDYxW9l1+St+8cyxpJZZrNPqmbhTqtDJ382fyeSkIBj6ndkYez9RGoxHH
SfnJMAoiZREw3ip+4oafWiQ6VQmtaQlLRAfcdT0Q301CKlCBMg+CDbhcQ/dlZUXO
VMLqxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org