Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/434FTfHuRu_WC-ytqk66qqgI18k.roa
File: 434FTfHuRu_WC-ytqk66qqgI18k.roa (raw, json)
Hash identifier: U/ceqkN8NCGiGTmBZTwtuZr4wxv5mLhFd0YUY4+8Yk8=
Subject key identifier: E3:7E:05:4D:F1:EE:46:EF:D6:0B:EC:AD:AA:4E:BA:AA:A8:08:D7:C9
Certificate issuer: /CN=20cee5e9dbb07b1756526b866cd72a2922254adc
Certificate serial: 034F21D8
Authority key identifier: 20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM7l6duwexdWUmuGbNcqKSIlStw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/434FTfHuRu_WC-ytqk66qqgI18k.roa
Signing time: Fri 25 Mar 2022 11:23:47 +0000
ROA not before: Fri 25 Mar 2022 11:23:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5500
IP address blocks: 85.119.112.0/21 maxlen: 21
80.92.144.0/20 maxlen: 20
88.82.128.0/19 maxlen: 19
195.206.192.0/19 maxlen: 19
217.22.80.0/20 maxlen: 20
195.72.113.0/24 maxlen: 24
195.128.250.0/23 maxlen: 23
2a00:1160::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55517656 (0x34f21d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cee5e9dbb07b1756526b866cd72a2922254adc
Validity
Not Before: Mar 25 11:23:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e37e054df1ee46efd60becadaa4ebaaaa808d7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:e1:ca:d7:b6:6e:e7:35:76:e5:26:d0:30:
1d:b0:08:20:4c:d8:fa:79:37:53:ff:95:57:ad:02:
69:fb:7c:47:08:55:5b:1b:88:24:c5:bd:e8:e8:00:
f5:d6:2d:67:c5:16:72:8c:c2:2d:2c:52:bd:31:6c:
c0:75:e2:a3:05:bf:17:97:1b:99:07:5e:36:31:e0:
7e:6c:39:78:56:4d:f2:c4:d2:b5:11:5e:a3:66:5a:
aa:69:9b:d3:e5:3c:80:d3:3a:5b:b2:13:76:4b:78:
7a:b1:3a:87:43:8f:67:39:db:f1:a4:45:a2:94:12:
8e:b1:88:4b:d1:1d:50:d4:e1:cc:a6:72:df:25:48:
4b:91:85:e2:50:7d:29:4c:81:54:e0:f1:a7:93:97:
32:3b:11:1b:95:b7:2c:fd:0b:33:a3:f1:a4:7a:9e:
1d:df:e4:14:4b:05:e5:ca:6c:24:48:c1:21:c9:1a:
ad:54:13:b4:13:55:41:e8:50:9b:e8:4d:0e:6d:9d:
e7:a5:e7:59:8f:2d:16:4f:04:a5:33:df:97:cb:f6:
8e:bc:8a:0b:2a:e4:28:39:bf:d7:da:d0:e3:ea:97:
c9:f0:05:df:6a:93:64:a8:81:a9:9f:74:05:69:c4:
f7:72:55:6b:46:29:96:20:a5:58:6b:00:87:47:4a:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7E:05:4D:F1:EE:46:EF:D6:0B:EC:AD:AA:4E:BA:AA:A8:08:D7:C9
X509v3 Authority Key Identifier:
keyid:20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM7l6duwexdWUmuGbNcqKSIlStw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/434FTfHuRu_WC-ytqk66qqgI18k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/IM7l6duwexdWUmuGbNcqKSIlStw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.144.0/20
85.119.112.0/21
88.82.128.0/19
195.72.113.0/24
195.128.250.0/23
195.206.192.0/19
217.22.80.0/20
IPv6:
2a00:1160::/29
Signature Algorithm: sha256WithRSAEncryption
13:68:de:12:da:38:25:ad:6f:a7:8a:0a:69:3a:b4:51:69:77:
8f:6e:6c:d2:01:31:72:3b:0f:19:31:86:36:75:38:f5:06:82:
fa:c9:8e:16:21:5b:f4:72:8f:76:b6:26:b1:f7:0d:3d:32:04:
af:cd:51:1a:60:a9:4c:e4:94:6e:64:ce:7c:f9:2c:12:77:99:
47:6b:e7:4c:d7:9d:7e:79:cb:f7:4f:be:29:ac:18:9f:be:c6:
f0:3d:bb:19:6c:fe:aa:86:24:34:0b:d7:d3:1f:24:f6:aa:ae:
03:54:e4:82:5d:e8:ad:df:0e:2c:6d:f2:f9:9c:b5:1e:90:d5:
57:cf:19:ca:ef:84:f5:76:88:c1:83:ec:22:6e:21:77:fc:c5:
61:f4:be:83:5a:e0:97:db:ab:50:54:b0:37:b9:56:75:c9:9c:
5e:d6:06:ff:13:bf:75:d7:6c:ca:68:92:d2:a7:36:65:e2:d7:
a9:19:fa:a7:a8:05:3f:c4:a3:f1:da:75:d8:a7:42:1a:16:4b:
ac:b6:53:26:a7:7e:25:f5:9f:f8:0a:d7:6c:e5:82:98:3e:70:
d8:d7:b6:d6:36:de:48:3a:be:63:5e:80:44:3d:91:0e:c4:10:
f7:eb:8d:92:bc:04:3d:3a:31:5e:5a:3c:b3:8d:4e:91:2a:b3:
ae:f8:1a:cc
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEA08h2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MGNlZTVlOWRiYjA3YjE3NTY1MjZiODY2Y2Q3MmEyOTIyMjU0YWRjMB4XDTIyMDMy
NTExMjM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM3ZTA1NGRmMWVl
NDZlZmQ2MGJlY2FkYWE0ZWJhYWFhODA4ZDdjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAImL4crXtm7nNXblJtAwHbAIIEzY+nk3U/+VV60Caft8RwhV
WxuIJMW96OgA9dYtZ8UWcozCLSxSvTFswHXiowW/F5cbmQdeNjHgfmw5eFZN8sTS
tRFeo2Zaqmmb0+U8gNM6W7ITdkt4erE6h0OPZznb8aRFopQSjrGIS9EdUNThzKZy
3yVIS5GF4lB9KUyBVODxp5OXMjsRG5W3LP0LM6PxpHqeHd/kFEsF5cpsJEjBIcka
rVQTtBNVQehQm+hNDm2d56XnWY8tFk8EpTPfl8v2jryKCyrkKDm/19rQ4+qXyfAF
32qTZKiBqZ90BWnE93JVa0YpliClWGsAh0dKNRECAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBTjfgVN8e5G79YL7K2qTrqqqAjXyTAfBgNVHSMEGDAWgBQgzuXp27B7F1ZS
a4Zs1yopIiVK3DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lNN2w2ZHV3ZXhkV1VtdUdiTmNxS1NJbFN0dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvZjFlNDA5LTIyYzYtNGEyOS1hNGQ2LWRmZjE5YjExODIxYS8x
LzQzNEZUZkh1UnVfV0MteXRxazY2cXFnSTE4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
ZjFlNDA5LTIyYzYtNGEyOS1hNGQ2LWRmZjE5YjExODIxYS8xL0lNN2w2ZHV3ZXhk
V1VtdUdiTmNxS1NJbFN0dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEBFBckAMEA1V3cAMEBVhSgAMEAMNI
cQMEAcOA+gMEBcPOwAMEBNkWUDANBAIAAjAHAwUDKgARYDANBgkqhkiG9w0BAQsF
AAOCAQEAE2jeEto4Ja1vp4oKaTq0UWl3j25s0gExcjsPGTGGNnU49QaC+smOFiFb
9HKPdrYmsfcNPTIEr81RGmCpTOSUbmTOfPksEneZR2vnTNedfnnL90++KawYn77G
8D27GWz+qoYkNAvX0x8k9qquA1Tkgl3ord8OLG3y+Zy1HpDVV88Zyu+E9XaIwYPs
Im4hd/zFYfS+g1rgl9urUFSwN7lWdcmcXtYG/xO/dddsymiS0qc2ZeLXqRn6p6gF
P8Sj8dp12KdCGhZLrLZTJqd+JfWf+ArXbOWCmD5w2Ne21jbeSDq+Y16ARD2RDsQQ
9+uNkrwEPToxXlo8s41OkSqzrvgazA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:03 2024 by rpki-client on console-fra.rpki-client.org