Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/f3tvTUxCjAXGTdtDaPQvEQdK0-k.roa
File: f3tvTUxCjAXGTdtDaPQvEQdK0-k.roa (raw, json)
Hash identifier: MGKJ6Nmic14OiHJHnzzqTYRamwSMBHlG49tkVjYq1U8=
Subject key identifier: 7F:7B:6F:4D:4C:42:8C:05:C6:4D:DB:43:68:F4:2F:11:07:4A:D3:E9
Certificate issuer: /CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
Certificate serial: 02AFA3
Authority key identifier: 9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/f3tvTUxCjAXGTdtDaPQvEQdK0-k.roa
Signing time: Fri 04 Mar 2022 07:54:54 +0000
ROA not before: Fri 04 Mar 2022 07:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.255.226.0/23 maxlen: 23
185.255.224.0/23 maxlen: 23
185.248.232.0/23 maxlen: 23
194.33.90.0/23 maxlen: 23
194.33.88.0/23 maxlen: 23
185.248.234.0/23 maxlen: 23
185.241.14.0/23 maxlen: 23
185.241.12.0/23 maxlen: 23
91.193.250.0/23 maxlen: 23
91.193.248.0/23 maxlen: 23
185.254.186.0/23 maxlen: 23
185.254.184.0/23 maxlen: 23
185.92.172.0/24 maxlen: 24
185.92.172.0/23 maxlen: 23
185.92.174.0/23 maxlen: 23
185.92.173.0/24 maxlen: 24
185.92.174.0/24 maxlen: 24
185.92.175.0/24 maxlen: 24
185.227.250.0/23 maxlen: 23
185.227.248.0/23 maxlen: 23
185.227.248.0/22 maxlen: 22
185.246.244.0/24 maxlen: 24
185.246.245.0/24 maxlen: 24
185.246.246.0/24 maxlen: 24
185.246.246.0/23 maxlen: 23
185.246.244.0/23 maxlen: 23
185.246.247.0/24 maxlen: 24
192.145.226.0/23 maxlen: 23
192.145.224.0/23 maxlen: 23
185.227.40.0/24 maxlen: 24
185.227.41.0/24 maxlen: 24
185.227.42.0/24 maxlen: 24
185.227.43.0/24 maxlen: 24
185.227.42.0/23 maxlen: 23
185.227.40.0/23 maxlen: 23
185.240.192.0/23 maxlen: 23
185.240.194.0/23 maxlen: 23
185.247.72.0/24 maxlen: 24
185.247.73.0/24 maxlen: 24
185.247.74.0/24 maxlen: 24
185.247.75.0/24 maxlen: 24
185.233.226.0/23 maxlen: 23
185.233.224.0/23 maxlen: 23
185.246.136.0/24 maxlen: 24
185.246.137.0/24 maxlen: 24
185.246.138.0/24 maxlen: 24
185.246.139.0/24 maxlen: 24
185.145.138.0/23 maxlen: 23
185.145.136.0/23 maxlen: 23
185.145.136.0/22 maxlen: 22
185.246.109.0/24 maxlen: 24
185.246.110.0/24 maxlen: 24
185.246.111.0/24 maxlen: 24
185.246.110.0/23 maxlen: 23
185.246.108.0/24 maxlen: 24
185.226.68.0/24 maxlen: 24
185.226.69.0/24 maxlen: 24
185.226.70.0/24 maxlen: 24
185.226.71.0/24 maxlen: 24
185.226.70.0/23 maxlen: 23
185.226.68.0/23 maxlen: 23
193.56.212.0/23 maxlen: 23
185.231.248.0/24 maxlen: 24
185.231.250.0/23 maxlen: 23
185.231.249.0/24 maxlen: 24
185.231.250.0/24 maxlen: 24
185.231.248.0/23 maxlen: 23
185.231.251.0/24 maxlen: 24
193.43.22.0/23 maxlen: 23
193.43.20.0/23 maxlen: 23
185.252.106.0/23 maxlen: 23
185.245.216.0/24 maxlen: 24
185.245.217.0/24 maxlen: 24
185.245.218.0/24 maxlen: 24
185.245.219.0/24 maxlen: 24
185.245.218.0/23 maxlen: 23
185.245.216.0/23 maxlen: 23
193.56.214.0/23 maxlen: 23
185.252.104.0/23 maxlen: 23
185.244.88.0/22 maxlen: 22
185.251.158.0/23 maxlen: 23
185.251.156.0/23 maxlen: 23
185.251.170.0/23 maxlen: 23
185.251.168.0/23 maxlen: 23
91.197.202.0/23 maxlen: 23
91.197.200.0/23 maxlen: 23
185.243.198.0/23 maxlen: 23
185.243.196.0/23 maxlen: 23
185.243.196.0/22 maxlen: 22
193.223.64.0/23 maxlen: 23
193.223.66.0/23 maxlen: 23
185.95.190.0/23 maxlen: 23
185.95.188.0/23 maxlen: 23
185.54.26.0/23 maxlen: 23
185.249.130.0/23 maxlen: 23
185.249.128.0/23 maxlen: 23
185.242.240.0/22 maxlen: 22
185.242.240.0/23 maxlen: 23
185.54.24.0/22 maxlen: 22
185.54.24.0/23 maxlen: 23
185.249.246.0/23 maxlen: 23
185.249.244.0/23 maxlen: 23
185.249.250.0/23 maxlen: 23
185.249.248.0/23 maxlen: 23
185.249.248.0/22 maxlen: 22
185.242.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176035 (0x2afa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
Validity
Not Before: Mar 4 07:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f7b6f4d4c428c05c64ddb4368f42f11074ad3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:d1:43:9f:76:9f:bb:4b:f5:88:ab:b4:a3:
db:35:3e:ee:cc:7b:69:f1:c3:59:7c:3d:f0:8b:f0:
ca:98:1e:2b:53:98:69:c3:cb:d3:b7:86:97:7e:fb:
da:4b:a8:99:e4:a8:5a:b6:04:da:fd:ed:10:e3:5e:
90:58:50:16:8f:cf:20:d5:95:28:3f:0d:7a:c9:4f:
de:9d:71:86:6b:da:95:fa:cf:c3:3a:1b:a3:f8:17:
74:61:df:38:24:1d:20:54:3e:d5:58:49:f9:e7:1f:
22:f6:76:43:c1:01:56:da:cb:71:03:87:4a:cb:43:
ee:8b:6a:f8:74:56:e6:04:55:81:d6:54:41:4f:c7:
c9:36:f9:63:a3:11:2a:5c:d0:fd:64:48:c6:ba:a8:
d2:eb:77:b0:b0:f8:ef:2c:6f:3a:bc:ac:a1:c5:73:
f4:09:98:f9:ca:8b:2d:99:7c:76:22:91:d0:1e:24:
9c:7f:2a:cb:5a:40:56:80:84:38:b5:b7:61:9a:43:
a9:3b:0b:c1:22:af:b2:d2:34:9d:5b:c2:da:a9:00:
51:2e:80:2b:90:01:33:48:0d:11:f3:77:39:9f:f5:
e9:8f:2d:38:5d:4f:ce:a0:b4:70:85:f0:95:6e:69:
40:78:b4:57:7a:4d:c9:02:66:b5:02:84:39:d0:4c:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:6F:4D:4C:42:8C:05:C6:4D:DB:43:68:F4:2F:11:07:4A:D3:E9
X509v3 Authority Key Identifier:
keyid:9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/f3tvTUxCjAXGTdtDaPQvEQdK0-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.248.0/22
91.197.200.0/22
185.54.24.0/22
185.92.172.0/22
185.95.188.0/22
185.145.136.0/22
185.226.68.0/22
185.227.40.0/22
185.227.248.0/22
185.231.248.0/22
185.233.224.0/22
185.240.192.0/22
185.241.12.0/22
185.242.240.0/22
185.243.196.0/22
185.244.88.0/22
185.245.216.0/22
185.246.108.0/22
185.246.136.0/22
185.246.244.0/22
185.247.72.0/22
185.248.232.0/22
185.249.128.0/22
185.249.244.0-185.249.251.255
185.251.156.0/22
185.251.168.0/22
185.252.104.0/22
185.254.184.0/22
185.255.224.0/22
192.145.224.0/22
193.43.20.0/22
193.56.212.0/22
193.223.64.0/22
194.33.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a6:05:3a:fc:1c:68:75:b5:fe:9a:1a:23:b2:ce:3e:93:12:
f8:13:17:02:dd:8d:08:95:8f:f7:2e:80:ca:4b:20:45:08:0a:
e7:d4:dc:4e:0a:4e:55:c8:8b:6f:3e:ef:a4:40:ec:a1:80:c0:
22:66:6b:4b:46:b7:f3:3e:d3:79:1c:0d:f9:55:cb:52:c3:d1:
0c:6e:a4:83:ca:66:a2:84:7d:fd:42:79:42:67:78:9d:76:bb:
9c:d1:92:84:07:f1:0e:aa:a2:b9:32:a9:9b:29:c2:66:0d:fb:
ac:d6:57:56:05:ca:44:46:5b:17:1c:57:68:f7:62:9d:06:ae:
d2:66:5a:29:08:53:93:7a:e6:04:e3:fd:20:0b:d1:b9:97:08:
86:79:fd:5b:33:43:69:c1:6d:f4:86:d7:20:52:6d:3c:2c:22:
76:2c:cc:2d:57:7d:95:21:22:5f:d6:01:f6:78:0c:80:3f:5a:
e3:39:dc:ea:cc:ca:4a:57:78:da:c4:13:30:98:83:d4:1d:22:
cc:4e:09:d2:12:ad:07:61:4a:32:ae:78:65:5c:45:e9:db:37:
80:8b:57:44:da:c9:0f:62:77:32:37:3a:2c:7e:5c:02:10:41:
84:0c:89:3b:14:49:84:f6:c4:58:c9:cb:d3:ad:f7:f2:cd:17:
dc:3b:f8:ea
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIDAq+jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
ODQ1ZjQwOWFiMmZmMmM4MTQ3ZmMxYzlhOGQwMGRkZjEyODYxMTcwHhcNMjIwMzA0
MDc1NDU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZjdiNmY0ZDRjNDI4
YzA1YzY0ZGRiNDM2OGY0MmYxMTA3NGFkM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuWHRQ592n7tL9YirtKPbNT7uzHtp8cNZfD3wi/DKmB4rU5hp
w8vTt4aXfvvaS6iZ5KhatgTa/e0Q416QWFAWj88g1ZUoPw16yU/enXGGa9qV+s/D
Ohuj+Bd0Yd84JB0gVD7VWEn55x8i9nZDwQFW2stxA4dKy0Pui2r4dFbmBFWB1lRB
T8fJNvljoxEqXND9ZEjGuqjS63ewsPjvLG86vKyhxXP0CZj5yostmXx2IpHQHiSc
fyrLWkBWgIQ4tbdhmkOpOwvBIq+y0jSdW8LaqQBRLoArkAEzSA0R83c5n/Xpjy04
XU/OoLRwhfCVbmlAeLRXek3JAma1AoQ50EwhVQIDAQABo4IC3DCCAtgwHQYDVR0O
BBYEFH97b01MQowFxk3bQ2j0LxEHStPpMB8GA1UdIwQYMBaAFJ2EX0Casv8sgUf8
HJqNAN3xKGEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bllSZlFKcXlfeXlCUl93Y21vMEEzZkVvWVJjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMy9lOGFmMWQtODUzNy00YjJkLWI5ZGYtNTJiOGNkNWE5ZDg4LzEv
ZjN0dlRVeENqQVhHVGR0RGFQUXZFUWRLMC1rLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9l
OGFmMWQtODUzNy00YjJkLWI5ZGYtNTJiOGNkNWE5ZDg4LzEvbllSZlFKcXlfeXlC
Ul93Y21vMEEzZkVvWVJjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHx
BggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAJbwfgDBAJbxcgDBAK5NhgD
BAK5XKwDBAK5X7wDBAK5kYgDBAK54kQDBAK54ygDBAK54/gDBAK55/gDBAK56eAD
BAK58MADBAK58QwDBAK58vADBAK588QDBAK59FgDBAK59dgDBAK59mwDBAK59ogD
BAK59vQDBAK590gDBAK5+OgDBAK5+YAwDAMEArn59AMEArn5+AMEArn7nAMEArn7
qAMEArn8aAMEArn+uAMEArn/4AMEAsCR4AMEAsErFAMEAsE41AMEAsHfQAMEAsIh
WDANBgkqhkiG9w0BAQsFAAOCAQEAoKYFOvwcaHW1/poaI7LOPpMS+BMXAt2NCJWP
9y6AyksgRQgK59TcTgpOVciLbz7vpEDsoYDAImZrS0a38z7TeRwN+VXLUsPRDG6k
g8pmooR9/UJ5Qmd4nXa7nNGShAfxDqqiuTKpmynCZg37rNZXVgXKREZbFxxXaPdi
nQau0mZaKQhTk3rmBOP9IAvRuZcIhnn9WzNDacFt9IbXIFJtPCwidizMLVd9lSEi
X9YB9ngMgD9a4znc6szKSld42sQTMJiD1B0izE4J0hKtB2FKMq54ZVxF6ds3gItX
RNrJD2J3Mjc6LH5cAhBBhAyJOxRJhPbEWMnL06338s0X3Dv46g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:52 2023 by rpki-client on console-fra.rpki-client.org