Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8g7ojw9w4l20Gx7xHWHOJfR6rHw.roa
File: 8g7ojw9w4l20Gx7xHWHOJfR6rHw.roa (raw, json)
Hash identifier: /Rdzy3k4q+yRBJ/vf0SLIY7UonIVkFL7dk5egNHGk2w=
Subject key identifier: F2:0E:E8:8F:0F:70:E2:5D:B4:1B:1E:F1:1D:61:CE:25:F4:7A:AC:7C
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 088A8998
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8g7ojw9w4l20Gx7xHWHOJfR6rHw.roa
Signing time: Sat 01 Jan 2022 14:58:45 +0000
ROA not before: Sat 01 Jan 2022 14:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15517
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.144.0/20 maxlen: 20
80.238.140.0/22 maxlen: 22
80.238.160.0/20 maxlen: 20
45.85.92.0/22 maxlen: 22
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.132.0/22 maxlen: 22
80.238.128.0/17 maxlen: 17
80.238.130.0/23 maxlen: 23
62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.143.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.158.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
80.238.192.0/21 maxlen: 21
80.238.200.0/21 maxlen: 21
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.226.0/23 maxlen: 23
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
80.238.232.0/21 maxlen: 21
80.238.228.0/22 maxlen: 22
94.78.3.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
94.78.2.0/24 maxlen: 24
2a01:330::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143296920 (0x88a8998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Jan 1 14:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f20ee88f0f70e25db41b1ef11d61ce25f47aac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:39:46:4a:8d:80:8e:c5:7d:56:18:31:ab:
c3:5c:26:78:b7:e4:a1:dc:fe:38:46:fa:27:59:ef:
ab:f8:3e:89:43:0c:13:0c:79:4f:4e:91:a4:b9:e3:
06:4f:74:82:66:7b:36:5d:0b:05:01:0c:ab:b8:b1:
09:d5:87:a2:a5:ee:a5:c8:5f:ce:59:02:83:91:86:
c0:f3:44:a2:5c:0d:9a:03:1c:fd:41:91:0b:0f:32:
a9:7b:dd:cf:35:59:75:56:a3:36:ed:e5:29:87:85:
86:51:93:c2:ce:3d:c4:5c:a5:6b:95:9f:61:2a:9f:
d6:82:41:46:3a:d3:c2:03:5b:21:4b:de:ef:e3:85:
c7:d4:e3:a2:21:ae:56:68:5d:a8:f7:e6:a8:1d:b2:
5b:06:91:64:27:bc:15:65:55:13:65:43:c2:c1:1e:
e3:d7:a3:e1:4d:39:41:1c:83:99:b2:09:31:63:e2:
1d:da:56:51:a3:de:84:30:47:df:f7:ff:2a:5e:7f:
4a:39:e6:75:68:10:7e:82:29:b6:4d:65:c5:2d:f9:
37:b6:76:fe:88:52:e3:aa:15:17:ec:83:ed:6e:1b:
6e:9e:92:4d:a6:a8:66:c1:0f:3a:c9:b1:ff:c7:c3:
52:86:7a:87:47:dc:07:19:de:39:eb:68:13:1c:cd:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:E8:8F:0F:70:E2:5D:B4:1B:1E:F1:1D:61:CE:25:F4:7A:AC:7C
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8g7ojw9w4l20Gx7xHWHOJfR6rHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/22
62.65.128.0/19
80.238.128.0/17
94.78.0.0/18
IPv6:
2a01:330::/32
Signature Algorithm: sha256WithRSAEncryption
25:ba:28:12:66:39:40:61:55:d0:bc:bd:e2:cc:8c:db:6e:b1:
48:d1:bb:c3:81:ec:f4:0e:e5:ba:a4:67:2a:32:0f:03:1b:53:
49:24:58:1a:a0:0b:73:63:19:13:81:09:b9:16:8a:9f:64:4c:
0e:22:91:02:92:39:cc:1f:47:bc:30:22:43:01:59:66:92:ee:
e3:51:0c:04:41:17:49:49:7f:cb:4b:e2:51:1c:51:58:00:3a:
47:fe:5d:49:f1:2a:56:67:bf:06:96:3e:d5:a2:b7:5b:f7:59:
26:f8:61:43:d9:09:f4:e1:d7:61:41:21:ef:2a:a5:e3:e9:b5:
aa:de:22:e7:07:b7:a4:a4:82:0a:47:61:99:e2:c0:6c:c1:d5:
45:d8:0b:4e:78:78:98:c1:6e:d5:18:89:44:a2:ae:10:6b:65:
fb:a1:dd:68:18:8f:4f:88:6d:ed:16:67:a3:61:8e:72:37:c8:
a1:dd:96:17:94:c2:63:4a:b5:26:80:f1:e4:fd:03:00:ca:43:
6f:dc:1d:96:84:28:d2:e1:31:db:ca:27:d7:5c:e4:22:be:cf:
1c:1a:44:01:0d:ba:29:2d:5e:74:36:08:1e:e3:99:91:9e:8f:
c1:99:98:e1:fe:3a:91:4b:ce:b5:a0:41:ed:61:b1:61:6c:3b:
85:8f:bf:43
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIECIqJmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjY2MmIzY2ZhOGI5MDU5MDY4YzI5ZDQ2Yjk5MjYzYmEyZGU1MGMxMB4XDTIyMDEw
MTE0NTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjIwZWU4OGYwZjcw
ZTI1ZGI0MWIxZWYxMWQ2MWNlMjVmNDdhYWM3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3UOUZKjYCOxX1WGDGrw1wmeLfkodz+OEb6J1nvq/g+iUMM
Ewx5T06RpLnjBk90gmZ7Nl0LBQEMq7ixCdWHoqXupchfzlkCg5GGwPNEolwNmgMc
/UGRCw8yqXvdzzVZdVajNu3lKYeFhlGTws49xFyla5WfYSqf1oJBRjrTwgNbIUve
7+OFx9TjoiGuVmhdqPfmqB2yWwaRZCe8FWVVE2VDwsEe49ej4U05QRyDmbIJMWPi
HdpWUaPehDBH3/f/Kl5/SjnmdWgQfoIptk1lxS35N7Z2/ohS46oVF+yD7W4bbp6S
TaaoZsEPOsmx/8fDUoZ6h0fcBxneOetoExzN/B8CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBTyDuiPD3DiXbQbHvEdYc4l9HqsfDAfBgNVHSMEGDAWgBSfZis8+ouQWQaM
KdRrmSY7ot5QwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L24yWXJQUHFMa0ZrR2pDblVhNWttTzZMZVVNRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvMjUxMmM1LTI1MmItNDk2Ny04OWE3LTZhMWY5N2ZmOGQzNC8x
LzhnN29qdzl3NGwyMEd4N3hIV0hPSmZSNnJIdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
MjUxMmM1LTI1MmItNDk2Ny04OWE3LTZhMWY5N2ZmOGQzNC8xL24yWXJQUHFMa0Zr
R2pDblVhNWttTzZMZVVNRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAi1VXAMEBT5BgAMEB1DugAMEBl5O
ADANBAIAAjAHAwUAKgEDMDANBgkqhkiG9w0BAQsFAAOCAQEAJbooEmY5QGFV0Ly9
4syM226xSNG7w4Hs9A7luqRnKjIPAxtTSSRYGqALc2MZE4EJuRaKn2RMDiKRApI5
zB9HvDAiQwFZZpLu41EMBEEXSUl/y0viURxRWAA6R/5dSfEqVme/BpY+1aK3W/dZ
JvhhQ9kJ9OHXYUEh7yql4+m1qt4i5we3pKSCCkdhmeLAbMHVRdgLTnh4mMFu1RiJ
RKKuEGtl+6HdaBiPT4ht7RZno2GOcjfIod2WF5TCY0q1JoDx5P0DAMpDb9wdloQo
0uEx28on11zkIr7PHBpEAQ26KS1edDYIHuOZkZ6PwZmY4f46kUvOtaBB7WGxYWw7
hY+/Qw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:33 2024 by rpki-client on console-fra.rpki-client.org