Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/TI8dhq8sFZJP-pSlmEJU_Xv3rQ0.roa
File: TI8dhq8sFZJP-pSlmEJU_Xv3rQ0.roa (raw, json)
Hash identifier: xZDBsNr7wq1rNuNLCJuEIkgDWpN84fNwcF8tSNfkEAY=
Subject key identifier: 4C:8F:1D:86:AF:2C:15:92:4F:FA:94:A5:98:42:54:FD:7B:F7:AD:0D
Certificate issuer: /CN=aa7fa1d876d6c9cf57584456b2094daac5f3f519
Certificate serial: 31B6A04E
Authority key identifier: AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn-h2HbWyc9XWERWsglNqsXz9Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/TI8dhq8sFZJP-pSlmEJU_Xv3rQ0.roa
Signing time: Sat 01 Jan 2022 04:53:30 +0000
ROA not before: Sat 01 Jan 2022 04:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 195.178.0.0/23 maxlen: 23
185.8.84.0/23 maxlen: 23
109.75.100.0/22 maxlen: 22
109.75.105.0/24 maxlen: 24
185.65.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834052174 (0x31b6a04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7fa1d876d6c9cf57584456b2094daac5f3f519
Validity
Not Before: Jan 1 04:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c8f1d86af2c15924ffa94a5984254fd7bf7ad0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:ab:16:48:6b:f3:be:81:dd:0d:f2:92:71:
b8:4f:80:4f:36:c1:ad:b8:9e:ff:44:7f:03:89:c8:
0d:23:b7:04:40:86:63:1f:54:25:1f:c7:ca:81:b8:
da:a7:b8:c8:cb:3e:a2:8d:0e:f2:da:95:59:87:78:
81:c2:e1:29:91:44:8c:ea:e8:a2:a0:43:ad:17:8c:
a9:26:bb:d9:34:b8:6e:e8:cd:c5:bc:21:e5:b2:6c:
8b:85:2b:c1:f2:21:76:2c:c4:fe:d0:e0:a1:d1:51:
35:5b:3e:31:88:c1:9f:22:1a:ed:bf:f2:f4:a9:33:
07:79:e3:a3:88:c5:b9:a0:de:a5:68:3c:22:15:88:
f8:d0:47:43:89:83:47:41:05:38:c5:bd:cb:e5:de:
a2:36:aa:bb:2e:3f:c1:e7:4f:0f:44:35:b1:54:30:
0d:44:af:42:d2:4d:e3:62:2a:07:75:4a:c9:2b:8a:
25:fe:3b:17:c2:79:c4:5e:24:b4:e3:b3:c1:37:53:
da:c1:a3:07:16:8f:62:64:d1:b4:ba:ed:6e:2a:8a:
97:df:16:ad:1f:1e:d5:e6:55:20:01:94:18:52:57:
fc:dd:f7:3a:7f:31:27:7a:96:75:b3:f6:3e:b1:3d:
b8:c4:51:68:42:c7:4e:0a:81:60:bb:20:fb:ec:60:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:1D:86:AF:2C:15:92:4F:FA:94:A5:98:42:54:FD:7B:F7:AD:0D
X509v3 Authority Key Identifier:
keyid:AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn-h2HbWyc9XWERWsglNqsXz9Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/TI8dhq8sFZJP-pSlmEJU_Xv3rQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/qn-h2HbWyc9XWERWsglNqsXz9Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.100.0/22
109.75.105.0/24
185.8.84.0/23
185.65.196.0/23
195.178.0.0/23
Signature Algorithm: sha256WithRSAEncryption
68:9b:67:6d:92:78:38:bf:0a:23:db:aa:be:72:27:3d:e7:58:
66:ef:34:00:4b:04:eb:5c:28:47:2d:41:5b:3e:09:84:27:d3:
f0:ab:14:35:38:93:ff:b1:9d:3c:0c:b2:28:16:07:0c:0b:dc:
98:50:35:69:18:9f:ec:3f:65:19:5d:55:8e:a6:af:65:01:6a:
f2:63:d5:87:0a:ba:7f:a6:46:18:3b:68:36:18:49:7e:c4:63:
67:95:38:53:ab:e2:2c:fd:22:8f:83:52:19:8a:03:e6:bf:62:
b7:44:0f:53:34:6a:57:9a:fd:09:1e:17:58:74:a1:11:1c:44:
9b:8f:5c:7a:18:04:84:ac:0e:d4:b6:57:7a:69:00:fe:59:07:
3d:8f:55:bf:db:75:ab:ea:0b:56:e1:67:e4:f9:63:1c:ea:1b:
ec:0e:43:a3:61:d0:2a:48:44:b9:0d:38:51:3c:c6:9f:b3:bb:
69:46:82:88:a1:96:63:15:3e:77:68:b2:03:a2:2a:33:d2:3d:
b0:51:e6:e6:ff:f4:5e:0c:32:d7:f8:71:fb:07:f5:d5:cf:52:
ea:5f:40:40:4d:d3:4e:26:31:71:8b:f5:62:91:98:f3:23:e0:
1d:9e:d3:0e:ae:35:31:47:84:02:9f:e7:b8:7f:af:c0:d4:d7:
95:df:eb:15
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEMbagTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YTdmYTFkODc2ZDZjOWNmNTc1ODQ0NTZiMjA5NGRhYWM1ZjNmNTE5MB4XDTIyMDEw
MTA0NTMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM4ZjFkODZhZjJj
MTU5MjRmZmE5NGE1OTg0MjU0ZmQ3YmY3YWQwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALL8qxZIa/O+gd0N8pJxuE+ATzbBrbie/0R/A4nIDSO3BECG
Yx9UJR/HyoG42qe4yMs+oo0O8tqVWYd4gcLhKZFEjOrooqBDrReMqSa72TS4bujN
xbwh5bJsi4UrwfIhdizE/tDgodFRNVs+MYjBnyIa7b/y9KkzB3njo4jFuaDepWg8
IhWI+NBHQ4mDR0EFOMW9y+Xeojaquy4/wedPD0Q1sVQwDUSvQtJN42IqB3VKySuK
Jf47F8J5xF4ktOOzwTdT2sGjBxaPYmTRtLrtbiqKl98WrR8e1eZVIAGUGFJX/N33
On8xJ3qWdbP2PrE9uMRRaELHTgqBYLsg++xgHPMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRMjx2GrywVkk/6lKWYQlT9e/etDTAfBgNVHSMEGDAWgBSqf6HYdtbJz1dY
RFayCU2qxfP1GTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FuLWgySGJXeWM5WFdFUldzZ2xOcXNYejlSay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvMWRmOGU1LTcwNWItNDQyNS04YjQ3LWY1NTMwMDAyMjdiZC8x
L1RJOGRocThzRlpKUC1wU2xtRUpVX1h2M3JRMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
MWRmOGU1LTcwNWItNDQyNS04YjQ3LWY1NTMwMDAyMjdiZC8xL3FuLWgySGJXeWM5
WFdFUldzZ2xOcXNYejlSay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAm1LZAMEAG1LaQMEAbkIVAMEAblB
xAMEAcOyADANBgkqhkiG9w0BAQsFAAOCAQEAaJtnbZJ4OL8KI9uqvnInPedYZu80
AEsE61woRy1BWz4JhCfT8KsUNTiT/7GdPAyyKBYHDAvcmFA1aRif7D9lGV1Vjqav
ZQFq8mPVhwq6f6ZGGDtoNhhJfsRjZ5U4U6viLP0ij4NSGYoD5r9it0QPUzRqV5r9
CR4XWHShERxEm49cehgEhKwO1LZXemkA/lkHPY9Vv9t1q+oLVuFn5PljHOob7A5D
o2HQKkhEuQ04UTzGn7O7aUaCiKGWYxU+d2iyA6IqM9I9sFHm5v/0Xgwy1/hx+wf1
1c9S6l9AQE3TTiYxcYv1YpGY8yPgHZ7TDq41MUeEAp/nuH+vwNTXld/rFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org