Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/vp7fJ-hE2r1idme_tCyA3E5N1BI.roa
File: vp7fJ-hE2r1idme_tCyA3E5N1BI.roa (raw, json)
Hash identifier: yXY1gbksrdT9JYguIk1FBPTxlXZ2Llal3Tzdc0LyTVw=
Subject key identifier: BE:9E:DF:27:E8:44:DA:BD:62:76:67:BF:B4:2C:80:DC:4E:4D:D4:12
Certificate issuer: /CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Certificate serial: FAE7E7
Authority key identifier: A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/vp7fJ-hE2r1idme_tCyA3E5N1BI.roa
Signing time: Sat 01 Jan 2022 01:00:34 +0000
ROA not before: Sat 01 Jan 2022 01:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.185.54.0/24 maxlen: 24
185.185.53.0/24 maxlen: 24
185.185.52.0/24 maxlen: 24
185.185.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16443367 (0xfae7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Validity
Not Before: Jan 1 01:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9edf27e844dabd627667bfb42c80dc4e4dd412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:2b:1d:b3:97:99:52:0e:19:16:64:ef:3d:
32:ed:f2:dc:ed:9f:56:82:8f:ed:72:17:75:63:cd:
c5:63:3b:1c:95:ed:41:16:5b:88:e7:8b:90:17:95:
c4:89:e1:4d:db:99:9c:d6:f5:ba:70:c2:dd:23:9f:
b7:2a:9f:27:57:35:8d:95:c1:60:1c:0a:96:3f:c6:
d4:01:e2:bc:6b:51:04:fb:ca:a7:dc:c1:c7:e2:0f:
06:7a:ef:94:fb:2e:71:b4:f2:4a:95:a3:dc:ec:58:
de:55:81:b4:93:61:c3:1d:a7:b7:36:5e:a8:45:45:
53:02:4a:49:0f:a1:34:09:f9:90:36:90:77:f7:ad:
7c:24:44:f2:e5:76:b3:35:34:1a:e4:0c:1d:25:9a:
8f:77:a7:e2:0f:3e:de:47:de:8b:05:f1:70:5b:5d:
0e:b0:fc:09:a1:a4:1e:bc:da:d1:f2:63:70:e5:5f:
40:03:bb:be:ab:ef:47:91:05:4a:f1:45:c7:40:f4:
6f:8e:61:fd:b7:fb:da:5c:eb:3d:e4:f8:40:45:25:
91:18:01:a2:54:a9:3f:ce:23:71:35:5e:37:33:fe:
18:7b:aa:59:8b:59:51:28:52:5c:de:26:1d:d0:8d:
9f:d2:de:91:e9:33:73:f6:ac:bd:5f:36:81:a6:0e:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:DF:27:E8:44:DA:BD:62:76:67:BF:B4:2C:80:DC:4E:4D:D4:12
X509v3 Authority Key Identifier:
keyid:A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/vp7fJ-hE2r1idme_tCyA3E5N1BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.52.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b6:5f:12:97:e4:bd:bc:f1:b8:67:8c:21:a3:67:a5:f4:21:
49:38:95:69:39:db:5f:3d:80:01:aa:b8:9f:d1:bd:98:93:df:
c2:1b:bc:65:4b:a1:6a:5e:21:23:ae:cb:cc:bf:e7:cc:59:14:
12:34:40:7a:b7:06:63:fc:70:b7:15:0f:60:2d:b4:15:49:63:
74:a1:2c:ce:51:2d:9e:ef:b5:88:69:59:fb:bc:38:9c:81:b4:
06:a5:fb:bf:5b:5f:5e:de:ba:0a:0a:5e:f5:29:29:b9:64:89:
b0:a8:73:7f:ad:71:46:79:2f:e2:0d:54:fd:71:57:bd:3c:be:
7b:63:34:6a:b1:0f:53:1a:23:20:17:a7:69:e5:07:3a:9a:a8:
9f:fb:d4:77:d2:44:13:2d:b2:45:93:f5:d8:58:b2:02:a7:cc:
9f:88:73:b1:96:eb:49:6a:27:c3:01:08:cb:24:f9:66:d2:c3:
e1:60:8e:f4:5c:d8:fc:1a:5b:0d:63:8f:bb:67:3b:ac:bc:f7:
3c:81:7b:6c:7e:e9:f0:28:74:d3:ce:e9:7f:e2:69:50:07:3d:
c0:e4:15:78:4c:7b:ce:83:af:4a:5b:d3:0d:b0:6c:0a:ef:78:
1a:2a:cb:9a:0f:38:46:c8:86:5f:33:b8:78:e8:c2:51:67:e9:
81:16:e7:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPrn5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzQ2MzgzMTYyNzZjOWM4MTkzNWU0M2JkMmJkOWQyNWUyODY1YzQ4MB4XDTIyMDEw
MTAxMDAzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU5ZWRmMjdlODQ0
ZGFiZDYyNzY2N2JmYjQyYzgwZGM0ZTRkZDQxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKoGKx2zl5lSDhkWZO89Mu3y3O2fVoKP7XIXdWPNxWM7HJXt
QRZbiOeLkBeVxInhTduZnNb1unDC3SOftyqfJ1c1jZXBYBwKlj/G1AHivGtRBPvK
p9zBx+IPBnrvlPsucbTySpWj3OxY3lWBtJNhwx2ntzZeqEVFUwJKSQ+hNAn5kDaQ
d/etfCRE8uV2szU0GuQMHSWaj3en4g8+3kfeiwXxcFtdDrD8CaGkHrza0fJjcOVf
QAO7vqvvR5EFSvFFx0D0b45h/bf72lzrPeT4QEUlkRgBolSpP84jcTVeNzP+GHuq
WYtZUShSXN4mHdCNn9Lekekzc/asvV82gaYOEj8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+nt8n6ETavWJ2Z7+0LIDcTk3UEjAfBgNVHSMEGDAWgBSnRjgxYnbJyBk1
5DvSvZ0l4oZcSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3AwWTRNV0oyeWNnWk5lUTcwcjJkSmVLR1hFZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMGQ4NWYwLWM5ZGItNDgzOC1hNzg1LTI4NjE3NDZjNzNiZi8x
L3ZwN2ZKLWhFMnIxaWRtZV90Q3lBM0U1TjFCSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MGQ4NWYwLWM5ZGItNDgzOC1hNzg1LTI4NjE3NDZjNzNiZi8xL3AwWTRNV0oyeWNn
Wk5lUTcwcjJkSmVLR1hFZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm5NDANBgkqhkiG9w0BAQsFAAOC
AQEAdbZfEpfkvbzxuGeMIaNnpfQhSTiVaTnbXz2AAaq4n9G9mJPfwhu8ZUuhal4h
I67LzL/nzFkUEjRAercGY/xwtxUPYC20FUljdKEszlEtnu+1iGlZ+7w4nIG0BqX7
v1tfXt66Cgpe9SkpuWSJsKhzf61xRnkv4g1U/XFXvTy+e2M0arEPUxojIBenaeUH
Opqon/vUd9JEEy2yRZP12FiyAqfMn4hzsZbrSWonwwEIyyT5ZtLD4WCO9FzY/Bpb
DWOPu2c7rLz3PIF7bH7p8Ch0087pf+JpUAc9wOQVeEx7zoOvSlvTDbBsCu94GirL
mg84RsiGXzO4eOjCUWfpgRbnoQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net