Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa
File: cPBYVrES6J9FMFQ8V2bgzknEMb8.roa (raw, json)
Hash identifier: Zkw7mdVfWJ4Nox1Lq313eh8pldDBc3CcrX/uTR2Ds3w=
Subject key identifier: 70:F0:58:56:B1:12:E8:9F:45:30:54:3C:57:66:E0:CE:49:C4:31:BF
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 091EDC15
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa
Signing time: Mon 28 Mar 2022 22:39:17 +0000
ROA not before: Mon 28 Mar 2022 22:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 193.160.72.0/23 maxlen: 24
194.28.158.0/24 maxlen: 25
194.28.157.0/24 maxlen: 25
194.28.156.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.6.0/24 maxlen: 25
194.104.5.0/24 maxlen: 25
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153017365 (0x91edc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 28 22:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f05856b112e89f4530543c5766e0ce49c431bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:80:8b:00:81:2f:a9:7e:02:4e:8a:f4:62:
6e:cd:d4:cf:63:a8:28:1b:d9:3a:04:53:03:84:12:
af:2e:86:62:d8:af:30:58:8a:e4:4c:ea:b2:d3:93:
e0:c3:23:86:82:fd:07:75:65:fe:bf:d0:62:9d:f0:
f5:6b:fc:fb:be:73:94:e9:26:04:1d:a3:e3:e8:f6:
63:ca:1d:13:10:ad:a0:52:84:41:de:70:0f:28:78:
eb:4b:9d:1c:60:29:4c:36:16:04:f8:0f:b0:21:30:
72:c5:66:d4:e6:a0:f8:9b:e0:68:64:05:8e:20:eb:
06:2d:60:79:82:2b:e1:6f:6c:5c:f8:d6:33:89:8b:
37:d7:60:ab:99:87:f6:66:86:ca:f6:04:ac:b4:30:
14:29:b8:96:f6:a0:e6:63:39:95:4c:3e:aa:a8:3d:
2e:a6:8e:c7:a6:59:82:3e:dc:0f:38:a3:61:4c:79:
89:93:cf:48:96:f3:49:a7:73:3f:16:1a:ed:b0:9c:
9e:7e:93:15:07:91:85:27:51:70:d0:1e:d9:2a:d1:
58:07:ee:c9:6f:48:a0:93:59:41:f5:3c:e7:b9:31:
0b:c7:d9:b3:74:5e:8b:2b:ce:7d:a8:35:f6:c4:e5:
f5:9c:8c:cf:63:6e:65:09:86:a1:a4:80:71:dc:76:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:58:56:B1:12:E8:9F:45:30:54:3C:57:66:E0:CE:49:C4:31:BF
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/cPBYVrES6J9FMFQ8V2bgzknEMb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.72.0/23
194.28.156.0-194.28.158.255
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
88:13:61:8f:36:4a:52:61:d5:55:ef:e2:de:9c:6f:b1:32:50:
75:e2:1a:42:1b:81:81:1e:48:4b:b6:5f:59:68:56:40:27:5f:
b1:42:88:43:1a:78:06:c7:22:31:d9:27:4e:c4:e8:ff:4b:3e:
b2:63:39:7e:6f:69:96:17:61:ce:38:16:bf:89:bd:f9:e2:64:
eb:41:80:d8:e1:36:c1:01:64:1c:b1:d8:09:5b:42:44:70:ea:
89:c5:27:3d:20:76:a9:7f:cc:01:18:f8:a3:8d:08:60:66:a9:
60:2d:ac:e6:14:5a:7e:c6:fd:8a:73:f7:38:fa:3a:16:df:f5:
0c:2b:b4:60:5c:20:b1:7e:46:d8:a9:ab:53:c2:bc:0a:76:3a:
ab:c2:69:30:49:ae:3d:f5:24:80:34:1c:42:28:71:d7:5b:df:
19:9f:b3:7d:4b:84:2e:72:c6:97:cb:31:09:03:74:42:3e:ef:
19:cb:d4:07:41:1b:9b:bb:0a:12:95:ab:ec:e2:7b:f8:4d:ff:
9b:78:3b:e0:62:fc:29:2d:93:a6:23:fe:b6:bb:13:e9:5b:08:
47:d6:08:82:82:f1:22:95:51:bf:4a:05:8e:61:21:51:92:72:
7a:79:c9:80:53:ac:cf:fd:5a:1c:79:95:4f:b7:b8:8b:c1:bc:
08:d4:0d:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIECR7cFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjdkMmM5YWQzNmQ5Zjg4MWZhODFmZDQ3NTM4N2ZiODcwYjViNGZiMB4XDTIyMDMy
ODIyMzkxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzBmMDU4NTZiMTEy
ZTg5ZjQ1MzA1NDNjNTc2NmUwY2U0OWM0MzFiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJWogIsAgS+pfgJOivRibs3Uz2OoKBvZOgRTA4QSry6GYtiv
MFiK5EzqstOT4MMjhoL9B3Vl/r/QYp3w9Wv8+75zlOkmBB2j4+j2Y8odExCtoFKE
Qd5wDyh460udHGApTDYWBPgPsCEwcsVm1Oag+JvgaGQFjiDrBi1geYIr4W9sXPjW
M4mLN9dgq5mH9maGyvYErLQwFCm4lvag5mM5lUw+qqg9LqaOx6ZZgj7cDzijYUx5
iZPPSJbzSadzPxYa7bCcnn6TFQeRhSdRcNAe2SrRWAfuyW9IoJNZQfU857kxC8fZ
s3ReiyvOfag19sTl9ZyMz2NuZQmGoaSAcdx2Zw8CAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBRw8FhWsRLon0UwVDxXZuDOScQxvzAfBgNVHSMEGDAWgBRLfSya022fiB+o
H9R1OH+4cLW0+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MzMHNtdE50bjRnZnFCX1VkVGhfdUhDMXRQcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8x
L2NQQllWckVTNko5Rk1GUThWMmJnemtuRU1iOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8xL1MzMHNtdE50bjRn
ZnFCX1VkVGhfdUhDMXRQcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAcGgSDAMAwQCwhycAwQAwhyeMAwD
BALCaAQDBADCaAYwDAMEAtRFhAMEANRFhjANBgkqhkiG9w0BAQsFAAOCAQEAiBNh
jzZKUmHVVe/i3pxvsTJQdeIaQhuBgR5IS7ZfWWhWQCdfsUKIQxp4BsciMdknTsTo
/0s+smM5fm9plhdhzjgWv4m9+eJk60GA2OE2wQFkHLHYCVtCRHDqicUnPSB2qX/M
ARj4o40IYGapYC2s5hRafsb9inP3OPo6Ft/1DCu0YFwgsX5G2KmrU8K8CnY6q8Jp
MEmuPfUkgDQcQihx11vfGZ+zfUuELnLGl8sxCQN0Qj7vGcvUB0Ebm7sKEpWr7OJ7
+E3/m3g74GL8KS2TpiP+trsT6VsIR9YIgoLxIpVRv0oFjmEhUZJyennJgFOsz/1a
HHmVT7e4i8G8CNQNtQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net