Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/ICegFQa4EfGTHjdjRLtVfDw_kY0.roa
File: ICegFQa4EfGTHjdjRLtVfDw_kY0.roa (raw, json)
Hash identifier: VJH6lsLTGqs+hdWkseAGif/9Mhy5OrJuMuNq6j1ccA4=
Subject key identifier: 20:27:A0:15:06:B8:11:F1:93:1E:37:63:44:BB:55:7C:3C:3F:91:8D
Certificate issuer: /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial: 018571030271344C12EA83012938AB6DBF11
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/ICegFQa4EfGTHjdjRLtVfDw_kY0.roa
Signing time: Mon 02 Jan 2023 05:45:00 +0000
ROA not before: Mon 02 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210021
IP address blocks: 185.206.81.0/24 maxlen: 24
185.206.83.0/24 maxlen: 24
185.206.80.0/24 maxlen: 24
185.206.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:02:71:34:4c:12:ea:83:01:29:38:ab:6d:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
Validity
Not Before: Jan 2 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2027a01506b811f1931e376344bb557c3c3f918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:85:cd:e3:42:8d:30:fe:86:47:b8:08:0e:
05:07:73:23:94:f5:a1:7f:2a:c2:98:c4:5b:9e:65:
07:1d:0b:f2:e5:bc:22:4e:27:3b:4e:48:f0:b2:c6:
bd:2d:6d:90:92:f2:8e:16:26:a1:e0:7b:6b:3b:1f:
88:58:5f:aa:66:1b:8c:7a:1d:d7:11:76:e2:aa:fe:
fa:b9:9b:46:3b:09:e0:e3:d6:f1:12:ff:9e:1a:bc:
9b:f0:62:f0:41:19:4a:6b:f7:d4:50:43:2f:28:2e:
1e:09:41:72:e0:34:8c:e7:62:73:f9:44:57:ab:af:
8d:26:24:64:2d:bb:d7:df:48:67:2e:f4:0e:a8:8b:
00:b1:55:e3:d3:53:ee:f3:65:88:90:f5:fb:dd:35:
65:1f:5c:d5:c6:bb:f7:9b:bf:de:cc:15:aa:f8:03:
18:ba:b4:7c:13:80:90:ee:bd:3a:4d:c8:0b:d4:53:
6c:5e:e1:13:d9:a0:7f:20:af:36:f4:c2:e7:33:d5:
1c:31:1e:44:ce:7b:0a:39:dc:af:de:f2:9b:d0:63:
9b:0c:83:5d:48:f4:8d:4f:5a:27:f1:e0:48:5c:0f:
7b:01:2a:0b:e2:c2:5a:0b:a9:6c:f3:10:72:b4:de:
fa:0b:67:ab:4a:cb:ea:49:b7:c3:68:d2:b5:51:d3:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:A0:15:06:B8:11:F1:93:1E:37:63:44:BB:55:7C:3C:3F:91:8D
X509v3 Authority Key Identifier:
keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/ICegFQa4EfGTHjdjRLtVfDw_kY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.80.0/22
Signature Algorithm: sha256WithRSAEncryption
47:aa:57:71:bc:af:67:46:fa:2c:90:b7:79:71:f5:bb:46:23:
a8:65:87:2f:67:97:b7:4a:e4:94:46:69:51:12:bb:ca:03:35:
6e:df:ea:d1:92:da:4e:46:71:3d:84:50:d0:72:8c:e2:2b:ad:
5e:f5:df:38:91:a0:5f:9b:d0:f7:06:4b:36:04:a3:4d:2f:fc:
e4:7a:36:2c:c8:35:5e:88:cd:01:09:ff:10:28:70:53:42:e6:
4c:4b:f0:53:b2:12:bd:d3:a8:26:c3:9b:96:69:8e:cc:57:b6:
fc:8a:71:3e:fe:a8:9b:5b:41:6a:cf:69:f4:c5:b6:7d:44:dc:
65:89:15:35:5f:b5:67:f1:11:cd:05:2a:44:37:64:18:d5:e5:
0d:c2:4b:df:c4:f4:ce:d1:ca:04:1f:ff:46:38:35:b7:72:9e:
ba:88:96:3e:f2:d5:c9:72:ef:3f:00:b3:3c:04:9e:62:3a:ba:
f1:d1:91:d2:4f:9e:cd:cb:78:e0:d4:0d:ef:35:f9:52:82:06:
00:d6:00:cb:46:cd:bb:c0:2c:63:72:77:80:c3:7f:6c:f6:a8:
c9:ee:61:bf:3e:5d:6e:7b:46:a8:39:aa:17:8e:34:71:ca:02:
33:76:f7:59:6f:c0:01:4e:df:26:b0:bc:a5:f6:7e:c4:34:fe:
68:32:e8:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAwJxNEwS6oMBKTirbb8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTM2YzE5YTY5MWMyZjU0NDIyMGE5NTIxNDc0YTg3NjVl
NTljZjEwHhcNMjMwMTAyMDU0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDI3YTAxNTA2YjgxMWYxOTMxZTM3NjM0NGJiNTU3YzNjM2Y5MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDuFzeNCjTD+hke4CA4FB3MjlPWh
fyrCmMRbnmUHHQvy5bwiTic7Tkjwssa9LW2QkvKOFiah4HtrOx+IWF+qZhuMeh3X
EXbiqv76uZtGOwng49bxEv+eGryb8GLwQRlKa/fUUEMvKC4eCUFy4DSM52Jz+URX
q6+NJiRkLbvX30hnLvQOqIsAsVXj01Pu82WIkPX73TVlH1zVxrv3m7/ezBWq+AMY
urR8E4CQ7r06TcgL1FNsXuET2aB/IK829MLnM9UcMR5EznsKOdyv3vKb0GObDINd
SPSNT1on8eBIXA97ASoL4sJaC6ls8xBytN76C2erSsvqSbfDaNK1UdN9hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCAnoBUGuBHxkx43Y0S7VXw8P5GNMB8GA1UdIwQY
MBaAFO1TbBmmkcL1RCIKlSFHSodl5ZzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZOc0dhYVJ3dlZFSWdxVklVZEtoMlhsblBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ZTIwY2EtYTFlZi00YWU4LWFlZjEt
ZTQ1MDlmYjljZjIwLzEvSUNlZ0ZRYTRFZkdUSGpkalJMdFZmRHdfa1kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82ZTIwY2EtYTFlZi00YWU4LWFlZjEtZTQ1MDlmYjljZjIw
LzEvN1ZOc0dhYVJ3dlZFSWdxVklVZEtoMlhsblBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc5QMA0G
CSqGSIb3DQEBCwUAA4IBAQBHqldxvK9nRvoskLd5cfW7RiOoZYcvZ5e3SuSURmlR
ErvKAzVu3+rRktpORnE9hFDQcoziK61e9d84kaBfm9D3Bks2BKNNL/zkejYsyDVe
iM0BCf8QKHBTQuZMS/BTshK906gmw5uWaY7MV7b8inE+/qibW0Fqz2n0xbZ9RNxl
iRU1X7Vn8RHNBSpEN2QY1eUNwkvfxPTO0coEH/9GODW3cp66iJY+8tXJcu8/ALM8
BJ5iOrrx0ZHST57Ny3jg1A3vNflSggYA1gDLRs27wCxjcneAw39s9qjJ7mG/Pl1u
e0aoOaoXjjRxygIzdvdZb8ABTt8msLyl9n7ENP5oMuha
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:36 2024 by rpki-client on console-fra.rpki-client.org