Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/VL-kgrDgm4DZ3eh32xv_Q-DN4qs.roa
File: VL-kgrDgm4DZ3eh32xv_Q-DN4qs.roa (raw, json)
Hash identifier: viuGwfn6RumAgf5tpCgiWkRsbBqu4+R5Ce3Xt3O+iqk=
Subject key identifier: 54:BF:A4:82:B0:E0:9B:80:D9:DD:E8:77:DB:1B:FF:43:E0:CD:E2:AB
Certificate issuer: /CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Certificate serial: 01856C01303C4A6CA1F008106A5BED535BDE
Authority key identifier: B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/VL-kgrDgm4DZ3eh32xv_Q-DN4qs.roa
Signing time: Sun 01 Jan 2023 06:24:55 +0000
ROA not before: Sun 01 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209910
IP address blocks: 185.200.77.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.76.0/24 maxlen: 24
185.200.76.0/22 maxlen: 22
185.200.79.0/24 maxlen: 24
185.236.248.0/22 maxlen: 24
193.84.48.0/23 maxlen: 24
193.84.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:30:3c:4a:6c:a1:f0:08:10:6a:5b:ed:53:5b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Validity
Not Before: Jan 1 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54bfa482b0e09b80d9dde877db1bff43e0cde2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:5b:c1:bb:56:9f:f9:2b:46:0a:7b:23:47:
36:d4:7d:30:17:8a:e0:4b:2b:07:8c:e4:d7:07:0e:
08:4a:36:96:1c:88:89:cb:5e:8e:ca:7b:aa:ac:f6:
cb:96:e7:2a:c0:d1:e3:81:ba:8e:13:d7:be:d6:14:
0f:53:69:dc:06:c2:2c:52:ca:4e:e5:24:b8:5c:69:
50:e9:f1:f3:cd:38:41:92:34:60:a5:85:3f:f0:95:
cd:69:74:16:cd:f5:66:45:8d:7f:a8:27:34:54:f3:
97:90:96:04:ba:76:cc:74:ba:a3:b6:e8:20:47:b1:
58:a1:05:e9:a0:c0:18:8a:a8:0b:63:ba:11:cb:a6:
7e:ac:83:f1:14:69:b2:64:0d:27:5b:dd:c0:f9:c6:
47:8e:c1:f1:e0:dc:fb:ec:c4:10:a5:e9:25:8d:b0:
00:0c:c4:e3:e6:88:73:87:fa:12:5c:57:2c:66:9e:
4b:93:66:37:e6:bc:5b:c1:15:45:36:a7:8f:18:2a:
25:25:da:4e:8b:1c:3d:e6:f8:f4:3a:35:3a:ff:bd:
8c:c5:6a:f6:6f:0c:26:84:d5:a6:0e:27:48:24:6f:
00:f3:80:5c:98:68:0c:1f:ea:e6:94:96:87:bd:bd:
23:09:a8:89:1e:7d:61:57:cc:8a:fe:42:4f:03:f0:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:A4:82:B0:E0:9B:80:D9:DD:E8:77:DB:1B:FF:43:E0:CD:E2:AB
X509v3 Authority Key Identifier:
keyid:B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/VL-kgrDgm4DZ3eh32xv_Q-DN4qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/saOw3llZamTt-mWdo7Kr6EIGaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
82:c5:12:60:ac:23:73:b8:93:f2:83:89:0e:92:cd:eb:12:5c:
62:c5:e8:58:34:28:9c:63:fa:85:83:38:58:5c:f4:3a:94:0f:
0f:2f:68:73:56:ab:07:a7:22:f7:d4:6c:da:dd:1a:3a:91:21:
5a:3c:45:ba:86:8a:2d:69:59:e0:20:b8:4c:8c:f2:38:11:81:
07:56:f1:fd:01:68:8f:62:b2:d9:80:a5:87:57:53:eb:00:a1:
72:5c:65:35:7c:e1:51:e5:c9:a0:60:72:9b:9e:af:42:41:04:
ab:34:9d:99:8d:87:3b:2a:ae:72:30:df:27:85:fb:bb:4f:ef:
8a:65:89:58:3c:3d:85:5a:78:cb:2d:0f:f6:0b:c7:ca:97:52:
32:cf:26:43:16:9d:75:d1:15:e1:a6:aa:b5:ce:36:e8:9e:12:
1f:83:6c:58:44:f5:ea:72:6e:62:40:c9:68:91:d3:e3:99:0f:
39:5f:ca:ab:1a:d5:38:10:a4:96:a6:b1:27:16:de:8e:65:23:
e9:62:89:8f:bc:c4:8e:9c:5c:bc:00:3d:aa:96:1f:73:a8:f0:
ee:44:ec:3d:ac:17:be:c0:53:c5:38:a5:ff:b5:56:60:de:96:
d3:59:f5:ed:37:d7:1c:53:33:20:3b:41:87:ce:7f:a9:aa:fb:
37:de:4b:92
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVsATA8Smyh8AgQalvtU1veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTNiMGRlNTk1OTZhNjRlZGZhNjU5ZGEzYjJhYmU4NDIw
NjY4ZTgwHhcNMjMwMTAxMDYyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGJmYTQ4MmIwZTA5YjgwZDlkZGU4NzdkYjFiZmY0M2UwY2RlMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKFbwbtWn/krRgp7I0c21H0wF4rg
SysHjOTXBw4ISjaWHIiJy16OynuqrPbLlucqwNHjgbqOE9e+1hQPU2ncBsIsUspO
5SS4XGlQ6fHzzThBkjRgpYU/8JXNaXQWzfVmRY1/qCc0VPOXkJYEunbMdLqjtugg
R7FYoQXpoMAYiqgLY7oRy6Z+rIPxFGmyZA0nW93A+cZHjsHx4Nz77MQQpekljbAA
DMTj5ohzh/oSXFcsZp5Lk2Y35rxbwRVFNqePGColJdpOixw95vj0OjU6/72MxWr2
bwwmhNWmDidIJG8A84BcmGgMH+rmlJaHvb0jCaiJHn1hV8yK/kJPA/CAjQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFS/pIKw4JuA2d3od9sb/0PgzeKrMB8GA1UdIwQY
MBaAFLGjsN5ZWWpk7fplnaOyq+hCBmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FPdzNsbFphbVR0LW1XZG83S3I2RUlHYU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Mjc1ZWEtYWY3YS00YTJmLTk2MGUt
ZmJiYjUxODc5MTBhLzEvVkwta2dyRGdtNERaM2VoMzJ4dl9RLURONHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83Mjc1ZWEtYWY3YS00YTJmLTk2MGUtZmJiYjUxODc5MTBh
LzEvc2FPdzNsbFphbVR0LW1XZG83S3I2RUlHYU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuchMAwQC
uez4AwQBwVQwAwQBwVRcMA0GCSqGSIb3DQEBCwUAA4IBAQCCxRJgrCNzuJPyg4kO
ks3rElxixehYNCicY/qFgzhYXPQ6lA8PL2hzVqsHpyL31Gza3Ro6kSFaPEW6hoot
aVngILhMjPI4EYEHVvH9AWiPYrLZgKWHV1PrAKFyXGU1fOFR5cmgYHKbnq9CQQSr
NJ2ZjYc7Kq5yMN8nhfu7T++KZYlYPD2FWnjLLQ/2C8fKl1IyzyZDFp110RXhpqq1
zjbonhIfg2xYRPXqcm5iQMlokdPjmQ85X8qrGtU4EKSWprEnFt6OZSPpYomPvMSO
nFy8AD2qlh9zqPDuROw9rBe+wFPFOKX/tVZg3pbTWfXtN9ccUzMgO0GHzn+pqvs3
3kuS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org