Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/y9a6QlnlFVBfrOjYhA1w23iZ8bI.roa
File: y9a6QlnlFVBfrOjYhA1w23iZ8bI.roa (raw, json)
Hash identifier: 9lAs+yOQrtG5Yn8efbGijinlOZXb3FBnebB92Z9fnm0=
Subject key identifier: CB:D6:BA:42:59:E5:15:50:5F:AC:E8:D8:84:0D:70:DB:78:99:F1:B2
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 05258059
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/y9a6QlnlFVBfrOjYhA1w23iZ8bI.roa
Signing time: Sat 01 Jan 2022 14:05:49 +0000
ROA not before: Sat 01 Jan 2022 14:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20910
IP address blocks: 89.191.96.0/19 maxlen: 32
91.188.32.0/19 maxlen: 32
185.7.236.0/22 maxlen: 32
185.211.96.0/22 maxlen: 22
85.115.96.0/19 maxlen: 32
79.132.64.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
62.84.0.0/19 maxlen: 32
80.255.224.0/20 maxlen: 20
188.112.128.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
185.47.92.0/22 maxlen: 22
89.18.192.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
91.123.64.0/20 maxlen: 32
62.205.192.0/18 maxlen: 18
87.226.0.0/17 maxlen: 32
217.198.224.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
195.62.128.0/19 maxlen: 32
94.30.128.0/17 maxlen: 32
217.199.96.0/19 maxlen: 32
217.24.64.0/20 maxlen: 32
188.64.176.0/21 maxlen: 21
37.148.168.0/21 maxlen: 32
80.254.208.0/20 maxlen: 32
85.234.160.0/19 maxlen: 32
109.110.0.0/19 maxlen: 32
91.142.0.0/20 maxlen: 32
136.169.0.0/17 maxlen: 17
89.201.0.0/17 maxlen: 32
2a00:f4a0::/29 maxlen: 29
2a00:9000::/29 maxlen: 32
2a03:6740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86343769 (0x5258059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 1 14:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd6ba4259e515505face8d8840d70db7899f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:95:bb:38:e8:08:26:54:e4:f1:c9:c3:41:
4e:54:64:6f:7f:c9:94:ab:20:21:d3:09:0d:12:bf:
25:51:eb:9d:ca:c6:da:34:3c:dc:6b:54:02:a1:53:
f1:13:2b:d3:ae:78:d8:49:6f:de:2d:84:f9:90:9f:
69:b9:14:c0:1a:8a:f0:38:07:f0:8b:11:5d:8d:e9:
a6:50:d4:05:66:84:95:fa:98:38:45:ca:9c:25:51:
24:88:16:43:20:51:04:38:15:1e:26:a2:dd:61:4f:
a9:da:4b:50:dd:91:5d:9e:16:92:7a:ab:f1:4b:e5:
59:e4:cd:6d:6d:fa:f5:8c:4f:98:b6:e9:e2:cf:09:
10:67:d3:e9:f8:3c:c7:11:5a:47:b7:c8:78:bc:ae:
b7:41:4a:63:a2:fb:b8:c6:8f:39:5f:30:05:c8:8e:
6c:2b:5c:ac:5c:88:45:2a:f8:61:75:0e:97:65:94:
9b:43:41:6a:a7:23:15:96:9e:49:92:6c:78:c2:f3:
73:61:50:78:91:21:13:6d:1e:f5:64:5e:57:c8:75:
b9:e5:7a:59:1b:ed:be:87:83:4c:69:4c:7d:56:54:
76:0f:85:e2:a7:b1:41:1b:34:1b:aa:0e:b0:1a:f1:
97:ff:55:7d:0f:4a:e3:88:90:e8:22:a8:67:31:8f:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:BA:42:59:E5:15:50:5F:AC:E8:D8:84:0D:70:DB:78:99:F1:B2
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/y9a6QlnlFVBfrOjYhA1w23iZ8bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/19
62.205.192.0/18
77.38.128.0/17
79.132.64.0/19
80.254.208.0/20
80.255.224.0/20
85.115.96.0/19
85.234.160.0/19
87.226.0.0/17
89.18.192.0/19
89.191.96.0/19
89.201.0.0/17
91.123.64.0/20
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.7.236.0/22
185.47.92.0/22
185.211.96.0/22
188.64.176.0/21
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.24.64.0/20
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
96:d9:1a:c6:39:16:f6:c2:52:54:02:ea:b0:d3:bc:30:d5:cc:
eb:db:31:49:7e:22:66:35:b0:ea:e7:29:83:68:c9:06:2b:d9:
c3:3e:c0:1b:bc:e0:7c:ef:1e:ee:ff:16:80:47:51:a1:c5:51:
93:e0:c8:82:72:4b:cb:3c:b0:7d:3b:ac:bc:b9:5c:f0:7b:3a:
9a:da:d5:fd:0d:a3:af:3f:0d:3b:49:3c:e6:48:1f:03:68:e6:
19:bb:53:ca:7a:89:6a:ae:40:4b:8b:a1:27:de:ea:8e:01:09:
90:a0:24:71:94:3b:d4:54:1b:0c:f2:3e:0f:7a:90:65:b5:8f:
b2:e0:3a:a0:32:cd:6c:bb:34:b7:c2:c0:27:86:f8:42:77:e3:
8f:9d:29:34:aa:35:2d:f8:97:b2:57:08:c9:6a:2e:4c:85:72:
ef:eb:75:15:a9:52:5c:eb:6d:d4:ed:4e:f2:01:b8:e0:4a:7e:
d0:b6:37:f6:ed:77:3e:65:91:b7:dc:07:24:da:b0:b0:63:71:
51:04:87:fc:5b:50:f6:70:ba:20:d5:d1:e7:29:1c:0d:df:d7:
c6:68:b0:12:95:3e:c8:f8:5f:ff:80:b6:c2:37:2d:40:b3:f0:
79:d6:d1:ab:92:fc:b0:36:ea:24:a6:c5:21:bc:c7:57:f7:19:
97:f2:c4:1b
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIEBSWAWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODViODNjODdjNGEzZDgzMTUwMjUzNzlmNzI5ODc1MjBiYjVkMDQ2MB4XDTIyMDEw
MTE0MDU0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JkNmJhNDI1OWU1
MTU1MDVmYWNlOGQ4ODQwZDcwZGI3ODk5ZjFiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKEFlbs46AgmVOTxycNBTlRkb3/JlKsgIdMJDRK/JVHrncrG
2jQ83GtUAqFT8RMr06542Elv3i2E+ZCfabkUwBqK8DgH8IsRXY3pplDUBWaElfqY
OEXKnCVRJIgWQyBRBDgVHiai3WFPqdpLUN2RXZ4Wknqr8UvlWeTNbW369YxPmLbp
4s8JEGfT6fg8xxFaR7fIeLyut0FKY6L7uMaPOV8wBciObCtcrFyIRSr4YXUOl2WU
m0NBaqcjFZaeSZJseMLzc2FQeJEhE20e9WReV8h1ueV6WRvtvoeDTGlMfVZUdg+F
4qexQRs0G6oOsBrxl/9VfQ9K44iQ6CKoZzGPftMCAwEAAaOCAt8wggLbMB0GA1Ud
DgQWBBTL1rpCWeUVUF+s6NiEDXDbeJnxsjAfBgNVHSMEGDAWgBToW4PIfEo9gxUC
U3n3KYdSC7XQRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZGdUR5SHhLUFlNVkFsTjU5eW1IVWd1MTBFWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvMzM5NGUzLTczNmUtNDg3OS1iOGRiLTg5YWFlYTM2Mjg1ZS8x
L3k5YTZRbG5sRlZCZnJPalloQTF3MjNpWjhiSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
MzM5NGUzLTczNmUtNDg3OS1iOGRiLTg5YWFlYTM2Mjg1ZS8xLzZGdUR5SHhLUFlN
VkFsTjU5eW1IVWd1MTBFWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
9AYIKwYBBQUHAQcBAf8EgeQwgeEwgcEEAgABMIG6AwQDJZSoAwQFPlQAAwQGPs3A
AwQHTSaAAwQFT4RAAwQEUP7QAwQEUP/gAwQFVXNgAwQFVeqgAwQHV+IAAwQFWRLA
AwQFWb9gAwQHWckAAwQEW3tAAwQEW44AAwQFW7wgAwQGXbHAAwQHXh6AAwQFbW4A
AwQHiKkAAwQCuQfsAwQCuS9cAwQCudNgAwQDvECwAwQGvHCAAwQFwz6AAwQEw/SA
AwQF1bRgAwQE2RhAAwQE2cbgAwQF2cdgMBsEAgACMBUDBQMqAJAAAwUDKgD0oAMF
AyoDZ0AwDQYJKoZIhvcNAQELBQADggEBAJbZGsY5FvbCUlQC6rDTvDDVzOvbMUl+
ImY1sOrnKYNoyQYr2cM+wBu84HzvHu7/FoBHUaHFUZPgyIJyS8s8sH07rLy5XPB7
Opra1f0No68/DTtJPOZIHwNo5hm7U8p6iWquQEuLoSfe6o4BCZCgJHGUO9RUGwzy
Pg96kGW1j7LgOqAyzWy7NLfCwCeG+EJ344+dKTSqNS34l7JXCMlqLkyFcu/rdRWp
UlzrbdTtTvIBuOBKftC2N/btdz5lkbfcByTasLBjcVEEh/xbUPZwuiDV0ecpHA3f
18ZosBKVPsj4X/+AtsI3LUCz8HnW0auS/LA26iSmxSG8x1f3GZfyxBs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:09 2025 by rpki-client