Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/dUfgWtwFvn_-InVaC0EPR3xRb7M.roa
File: dUfgWtwFvn_-InVaC0EPR3xRb7M.roa (raw, json)
Hash identifier: ODdhu1WLENpwXbTxOA8pAcTu9khqvJgyIlKemVtOxHQ=
Subject key identifier: 75:47:E0:5A:DC:05:BE:7F:FE:22:75:5A:0B:41:0F:47:7C:51:6F:B3
Certificate issuer: /CN=b2f11d8361b052118d851d4a7807bcd24784cff5
Certificate serial: 048AFD8B
Authority key identifier: B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/dUfgWtwFvn_-InVaC0EPR3xRb7M.roa
Signing time: Sat 01 Jan 2022 00:58:16 +0000
ROA not before: Sat 01 Jan 2022 00:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58345
IP address blocks: 5.134.37.0/24 maxlen: 24
5.134.38.0/24 maxlen: 24
5.134.35.0/24 maxlen: 24
5.134.36.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
5.134.34.0/24 maxlen: 24
5.134.32.0/24 maxlen: 24
5.134.33.0/24 maxlen: 24
5.134.42.0/24 maxlen: 24
5.134.41.0/24 maxlen: 24
193.108.230.0/24 maxlen: 24
5.134.39.0/24 maxlen: 24
193.108.230.0/23 maxlen: 23
5.134.40.0/24 maxlen: 24
5.134.44.0/24 maxlen: 24
193.108.231.0/24 maxlen: 24
5.134.43.0/24 maxlen: 24
5.134.46.0/24 maxlen: 24
5.134.47.0/24 maxlen: 24
5.134.45.0/24 maxlen: 24
185.103.150.0/24 maxlen: 24
185.103.148.0/22 maxlen: 22
185.103.151.0/24 maxlen: 24
185.103.148.0/24 maxlen: 24
185.103.149.0/24 maxlen: 24
193.108.206.0/24 maxlen: 24
193.108.206.0/23 maxlen: 23
193.108.207.0/24 maxlen: 24
185.102.206.0/24 maxlen: 24
185.102.204.0/24 maxlen: 24
185.102.205.0/24 maxlen: 24
185.102.204.0/22 maxlen: 22
185.102.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76217739 (0x48afd8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f11d8361b052118d851d4a7807bcd24784cff5
Validity
Not Before: Jan 1 00:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7547e05adc05be7ffe22755a0b410f477c516fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:d5:ef:3b:ba:df:ca:12:34:a8:65:c7:ac:
32:24:e0:11:a0:c6:2b:2b:78:68:d7:87:c5:81:35:
9e:89:7a:f6:a9:d2:a8:45:0a:07:31:97:b6:97:73:
67:22:11:71:b9:47:22:b7:a8:a6:08:26:42:80:c9:
fd:e4:87:da:86:09:ea:fc:87:b8:2b:b0:a8:67:1f:
38:78:17:6e:93:5d:ba:ff:d0:8f:d3:13:ed:81:9e:
2b:6c:98:6e:73:66:a7:a9:bc:f0:78:a4:0b:9a:cc:
07:46:21:a2:1d:06:16:21:0e:08:0c:ec:cc:11:a0:
b3:a5:15:09:51:28:81:17:32:35:ab:71:c6:5a:86:
07:92:b6:e6:b1:58:5c:5e:a2:d2:5f:bd:ff:8c:1f:
f5:8c:65:60:22:9a:c2:57:7f:f0:aa:3e:b5:8e:f7:
a2:86:a8:f6:ed:8f:65:0e:38:8b:8c:1c:b0:67:1a:
73:f3:b6:1c:7d:45:f4:1a:31:19:2d:b0:1d:a7:8b:
f3:d6:91:ea:89:8f:6e:2d:a7:df:7a:b7:4a:45:f5:
52:61:bf:33:b0:62:13:4b:92:fa:01:ab:9f:37:55:
13:6f:46:8d:20:61:bf:8e:34:0f:71:f6:3e:9e:06:
b3:1a:89:d5:7d:73:e1:5c:3f:99:cf:20:03:6a:3f:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:E0:5A:DC:05:BE:7F:FE:22:75:5A:0B:41:0F:47:7C:51:6F:B3
X509v3 Authority Key Identifier:
keyid:B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/dUfgWtwFvn_-InVaC0EPR3xRb7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.32.0/20
185.102.204.0/22
185.103.148.0/22
193.108.206.0/23
193.108.230.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f8:80:dc:36:92:bf:17:4b:a4:b9:bd:eb:5c:d6:4b:fa:d4:
55:a8:e4:f4:9a:f7:87:a6:de:50:45:97:9c:91:7a:04:d8:33:
2e:06:2e:b5:39:94:64:ec:9d:c6:ef:68:89:6d:0d:b0:74:0b:
1f:a2:1d:5a:24:42:58:96:b2:db:75:04:1f:1e:19:d5:6a:70:
3f:9e:47:62:80:d1:03:6e:ba:82:29:13:f0:4c:7a:b3:66:bf:
dd:02:8d:1c:4d:d2:90:36:4f:7a:83:87:98:ff:d3:cd:09:35:
83:50:c5:6b:29:22:47:fa:91:e4:5d:a0:fd:11:21:21:89:5b:
7d:d0:ee:b0:03:80:fb:b6:68:60:99:ac:6c:13:bd:89:50:37:
56:05:eb:7b:11:a2:b3:82:f9:91:de:70:65:cd:17:a4:3f:6d:
6e:bb:44:bc:85:f3:db:0e:63:94:b7:d6:37:19:ab:97:81:d1:
b8:94:79:79:f7:4a:f6:48:c9:51:e3:78:b0:41:fb:ca:7d:18:
0a:e9:a3:ca:66:c3:f5:78:40:fb:47:ea:e7:25:3c:99:9d:d8:
d5:5b:84:c6:d2:ab:d4:b8:ae:34:74:53:af:35:55:f9:f9:21:
c3:39:5a:b4:dc:3f:68:46:cd:d8:cb:74:5e:4b:41:75:cc:12:
51:f1:2b:4d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBIr9izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmYxMWQ4MzYxYjA1MjExOGQ4NTFkNGE3ODA3YmNkMjQ3ODRjZmY1MB4XDTIyMDEw
MTAwNTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU0N2UwNWFkYzA1
YmU3ZmZlMjI3NTVhMGI0MTBmNDc3YzUxNmZiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJq+1e87ut/KEjSoZcesMiTgEaDGKyt4aNeHxYE1nol69qnS
qEUKBzGXtpdzZyIRcblHIreopggmQoDJ/eSH2oYJ6vyHuCuwqGcfOHgXbpNduv/Q
j9MT7YGeK2yYbnNmp6m88HikC5rMB0Yhoh0GFiEOCAzszBGgs6UVCVEogRcyNatx
xlqGB5K25rFYXF6i0l+9/4wf9YxlYCKawld/8Ko+tY73ooao9u2PZQ44i4wcsGca
c/O2HH1F9BoxGS2wHaeL89aR6omPbi2n33q3SkX1UmG/M7BiE0uS+gGrnzdVE29G
jSBhv440D3H2Pp4GsxqJ1X1z4Vw/mc8gA2o/rOMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBR1R+Ba3AW+f/4idVoLQQ9HfFFvszAfBgNVHSMEGDAWgBSy8R2DYbBSEY2F
HUp4B7zSR4TP9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N2RWRnMkd3VWhHTmhSMUtlQWU4MGtlRXpfVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvMTVkMjM5LTdjMDMtNDVkMy04M2U3LWI1MmNkZWE1YmJiNS8x
L2RVZmdXdHdGdm5fLUluVmFDMEVQUjN4UmI3TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
MTVkMjM5LTdjMDMtNDVkMy04M2U3LWI1MmNkZWE1YmJiNS8xL3N2RWRnMkd3VWhH
TmhSMUtlQWU4MGtlRXpfVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEBAWGIAMEArlmzAMEArlnlAMEAcFs
zgMEAcFs5jANBgkqhkiG9w0BAQsFAAOCAQEAJPiA3DaSvxdLpLm961zWS/rUVajk
9Jr3h6beUEWXnJF6BNgzLgYutTmUZOydxu9oiW0NsHQLH6IdWiRCWJay23UEHx4Z
1WpwP55HYoDRA266gikT8Ex6s2a/3QKNHE3SkDZPeoOHmP/TzQk1g1DFaykiR/qR
5F2g/REhIYlbfdDusAOA+7ZoYJmsbBO9iVA3VgXrexGis4L5kd5wZc0XpD9tbrtE
vIXz2w5jlLfWNxmrl4HRuJR5efdK9kjJUeN4sEH7yn0YCumjymbD9XhA+0fq5yU8
mZ3Y1VuExtKr1LiuNHRTrzVV+fkhwzlatNw/aEbN2Mt0XktBdcwSUfErTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:45 2024 by rpki-client on console-ams.rpki-client.org