Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/7MyLnP5gPiPcitYCEs_i5olJR4s.roa
File: 7MyLnP5gPiPcitYCEs_i5olJR4s.roa (raw, json)
Hash identifier: CD213JovGxxsinLxSQeT10pSIEqYj98XE0Shs0c0wq0=
Subject key identifier: EC:CC:8B:9C:FE:60:3E:23:DC:8A:D6:02:12:CF:E2:E6:89:49:47:8B
Certificate issuer: /CN=20cee5e9dbb07b1756526b866cd72a2922254adc
Certificate serial: 01856E0AF8623BE014BC8C29F3FBB472FB98
Authority key identifier: 20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM7l6duwexdWUmuGbNcqKSIlStw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/7MyLnP5gPiPcitYCEs_i5olJR4s.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5500
IP address blocks: 85.119.112.0/21 maxlen: 21
80.92.144.0/20 maxlen: 20
88.82.128.0/19 maxlen: 19
195.206.192.0/19 maxlen: 19
217.22.80.0/20 maxlen: 20
195.72.113.0/24 maxlen: 24
195.128.250.0/23 maxlen: 23
2a00:1160::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f8:62:3b:e0:14:bc:8c:29:f3:fb:b4:72:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cee5e9dbb07b1756526b866cd72a2922254adc
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eccc8b9cfe603e23dc8ad60212cfe2e68949478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:7c:ea:f9:7b:1e:93:19:b1:01:94:f2:f7:
2c:08:51:e1:2b:66:51:10:aa:fd:6d:72:46:7e:af:
88:c1:8f:bc:b3:8f:04:41:84:d8:ab:8f:58:ed:8c:
15:dc:dd:7f:c8:20:0f:3c:50:e1:b8:04:a0:38:96:
8b:9d:98:fa:17:88:bd:69:e0:4a:4c:3b:19:bc:25:
e4:6e:11:50:e5:71:2d:62:2d:27:cb:47:ee:5a:ee:
17:fd:15:a0:bb:4c:71:6e:84:d5:c6:44:60:dd:a6:
ee:b4:a8:b0:87:2c:c3:d8:b1:84:b5:66:d6:81:7b:
51:e1:9f:71:c9:4b:87:30:1f:b3:53:3d:17:78:b3:
2a:04:fb:2d:ee:1e:e0:ef:43:24:17:b6:10:00:f3:
cc:75:4e:7b:0f:6b:af:70:48:61:b4:a5:20:b4:75:
1b:ad:af:59:2b:cb:f6:b9:20:1e:8d:a9:ba:63:86:
c9:43:a7:35:07:db:46:24:16:8b:7e:89:7b:81:40:
d6:5b:6f:39:3c:aa:c7:c9:16:3d:ec:27:cd:26:15:
fd:5e:d2:f8:db:64:56:37:d4:27:30:5e:45:c1:45:
94:34:65:00:66:08:15:73:d4:ce:13:07:c3:1f:d7:
b7:70:50:fd:a5:71:8b:1d:7d:25:3b:83:77:4c:59:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:8B:9C:FE:60:3E:23:DC:8A:D6:02:12:CF:E2:E6:89:49:47:8B
X509v3 Authority Key Identifier:
keyid:20:CE:E5:E9:DB:B0:7B:17:56:52:6B:86:6C:D7:2A:29:22:25:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM7l6duwexdWUmuGbNcqKSIlStw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/7MyLnP5gPiPcitYCEs_i5olJR4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f1e409-22c6-4a29-a4d6-dff19b11821a/1/IM7l6duwexdWUmuGbNcqKSIlStw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.144.0/20
85.119.112.0/21
88.82.128.0/19
195.72.113.0/24
195.128.250.0/23
195.206.192.0/19
217.22.80.0/20
IPv6:
2a00:1160::/29
Signature Algorithm: sha256WithRSAEncryption
13:a6:f8:ed:f7:1f:b5:fd:87:ca:d3:e2:f7:77:06:7b:e0:43:
38:9b:17:ba:ba:50:e4:45:fb:4b:d1:de:ac:44:16:f1:4e:8c:
d5:dc:03:fe:2a:d2:d3:36:2d:4f:9e:07:90:55:fe:11:bd:5f:
07:3d:0b:54:9b:a8:c0:d7:81:ba:f9:13:31:51:a6:2c:92:2f:
2b:2b:49:44:d3:83:cc:a0:48:b3:83:b0:2c:02:99:a2:42:78:
c0:4d:3b:54:c9:f0:fe:c7:4c:32:10:4b:15:70:11:f2:d0:57:
7e:44:c6:73:9c:55:2e:86:0a:05:79:49:b0:62:38:ee:c0:81:
d2:aa:de:16:a2:a9:d2:7d:b7:46:dc:af:ed:d7:ce:86:95:c6:
72:e8:c1:83:f5:3c:0d:e2:7d:16:7f:0e:58:5a:1a:16:95:af:
90:42:df:44:55:49:82:65:b4:37:a4:7a:45:f1:b0:8c:a3:e2:
a3:c2:6f:8a:9c:d5:6a:68:3e:4e:ea:b6:51:af:e1:90:bc:c3:
d1:dd:43:b6:01:4c:3b:d2:e4:64:04:ee:c2:53:cf:f4:49:43:
de:c1:83:ec:60:8f:a7:6c:6c:b6:c8:22:8b:52:f9:4f:19:ce:
8e:1a:31:8b:e2:e7:8b:40:75:dd:7e:f0:a8:79:95:e6:87:74:
58:bf:fb:90
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYVuCvhiO+AUvIwp8/u0cvuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2VlNWU5ZGJiMDdiMTc1NjUyNmI4NjZjZDcyYTI5MjIy
NTRhZGMwHhcNMjMwMTAxMTU1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2NjOGI5Y2ZlNjAzZTIzZGM4YWQ2MDIxMmNmZTJlNjg5NDk0NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHt86vl7HpMZsQGU8vcsCFHhK2ZR
EKr9bXJGfq+IwY+8s48EQYTYq49Y7YwV3N1/yCAPPFDhuASgOJaLnZj6F4i9aeBK
TDsZvCXkbhFQ5XEtYi0ny0fuWu4X/RWgu0xxboTVxkRg3abutKiwhyzD2LGEtWbW
gXtR4Z9xyUuHMB+zUz0XeLMqBPst7h7g70MkF7YQAPPMdU57D2uvcEhhtKUgtHUb
ra9ZK8v2uSAejam6Y4bJQ6c1B9tGJBaLfol7gUDWW285PKrHyRY97CfNJhX9XtL4
22RWN9QnMF5FwUWUNGUAZggVc9TOEwfDH9e3cFD9pXGLHX0lO4N3TFlWLQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFOzMi5z+YD4j3IrWAhLP4uaJSUeLMB8GA1UdIwQY
MBaAFCDO5enbsHsXVlJrhmzXKikiJUrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU03bDZkdXdleGRXVW11R2JOY3FLU0lsU3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMWU0MDktMjJjNi00YTI5LWE0ZDYt
ZGZmMTliMTE4MjFhLzEvN015TG5QNWdQaVBjaXRZQ0VzX2k1b2xKUjRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMWU0MDktMjJjNi00YTI5LWE0ZDYtZGZmMTliMTE4MjFh
LzEvSU03bDZkdXdleGRXVW11R2JOY3FLU0lsU3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEUFyQAwQD
VXdwAwQFWFKAAwQAw0hxAwQBw4D6AwQFw87AAwQE2RZQMA0EAgACMAcDBQMqABFg
MA0GCSqGSIb3DQEBCwUAA4IBAQATpvjt9x+1/YfK0+L3dwZ74EM4mxe6ulDkRftL
0d6sRBbxTozV3AP+KtLTNi1PngeQVf4RvV8HPQtUm6jA14G6+RMxUaYski8rK0lE
04PMoEizg7AsApmiQnjATTtUyfD+x0wyEEsVcBHy0Fd+RMZznFUuhgoFeUmwYjju
wIHSqt4WoqnSfbdG3K/t186GlcZy6MGD9TwN4n0Wfw5YWhoWla+QQt9EVUmCZbQ3
pHpF8bCMo+Kjwm+KnNVqaD5O6rZRr+GQvMPR3UO2AUw70uRkBO7CU8/0SUPewYPs
YI+nbGy2yCKLUvlPGc6OGjGL4ueLQHXdfvCoeZXmh3RYv/uQ
-----END CERTIFICATE-----
Generated at Mon Sep 25 13:02:43 2023 by rpki-client on console-fra.rpki-client.org