Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_2suY_gi2fLHRJIqVbhomPvFYSg.roa
File: _2suY_gi2fLHRJIqVbhomPvFYSg.roa (raw, json)
Hash identifier: P0yUl5PRKy29YJZvPGZJCmjx9BFnDAbEpEEk9XJUTn4=
Subject key identifier: FF:6B:2E:63:F8:22:D9:F2:C7:44:92:2A:55:B8:68:98:FB:C5:61:28
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03A9F2E4
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_2suY_gi2fLHRJIqVbhomPvFYSg.roa
Signing time: Thu 03 Mar 2022 14:42:57 +0000
ROA not before: Thu 03 Mar 2022 14:42:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.236.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
141.98.72.0/22 maxlen: 24
141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61469412 (0x3a9f2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Mar 3 14:42:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff6b2e63f822d9f2c744922a55b86898fbc56128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:8a:b0:35:86:02:2c:d2:77:26:59:9e:45:
c1:4e:07:98:72:42:04:ff:66:9f:9a:ac:f7:d0:64:
55:9b:67:6f:a1:55:f0:ef:03:5c:5f:c9:42:f3:b2:
00:50:30:47:de:c4:06:60:32:01:ba:2b:af:7c:79:
94:74:07:30:83:91:81:35:1b:78:05:b5:3a:98:85:
e7:20:d6:1e:e1:36:49:a5:4b:d3:63:ba:0f:9d:1f:
22:be:57:f0:2a:0e:a3:70:c8:b0:fc:cb:c0:3b:f4:
a9:c9:47:cc:b7:ab:85:aa:fc:91:db:ce:d4:58:89:
85:49:79:2c:d7:ef:89:07:52:5a:06:2b:fe:1a:97:
9e:e5:58:36:68:e6:a6:60:de:73:b2:ed:c8:fd:0e:
72:5b:7e:62:4e:9d:5d:3a:34:63:a1:0f:26:46:8c:
a1:ca:45:f3:99:20:f8:fc:c6:11:e3:2f:72:84:39:
b9:88:a9:52:8f:53:ed:0c:ac:c0:31:53:de:e0:a2:
11:1d:f3:25:df:f5:1a:c7:f3:d8:f9:5b:65:aa:c2:
7b:3a:70:34:a7:81:a1:25:b3:0e:25:63:f9:56:e9:
73:9b:5c:ad:35:0d:1e:8c:3e:76:c3:c3:eb:3d:aa:
3c:5e:19:c6:15:7b:ca:ca:29:d8:ea:35:fb:fc:dd:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:2E:63:F8:22:D9:F2:C7:44:92:2A:55:B8:68:98:FB:C5:61:28
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_2suY_gi2fLHRJIqVbhomPvFYSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
141.98.72.0/22
212.2.236.0/22
213.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
04:27:83:65:d5:41:3a:99:2b:73:95:7e:36:7d:15:d2:b6:a9:
a6:76:0b:8f:ec:df:0b:e5:0b:6e:a2:bc:d9:17:01:03:9d:83:
aa:af:d8:3a:70:5e:5c:1f:6b:19:41:3d:19:63:c5:35:ef:7b:
a0:8c:c6:83:52:9d:ab:d9:0c:95:ac:c3:99:fd:b0:04:8a:93:
53:98:07:8f:a3:1c:6a:ae:90:19:b4:70:cd:2e:34:b4:37:0e:
28:e5:c1:53:4e:b8:1e:67:a0:9e:9a:cf:79:f4:88:d9:4f:71:
32:2c:96:75:0f:82:68:13:f9:f3:b7:26:70:6f:25:bb:72:6e:
27:a6:58:2c:ca:a6:99:e9:94:5d:1b:bb:7c:49:64:16:47:e6:
08:6d:e9:f9:29:5f:e3:05:f2:97:b4:22:0a:74:1f:42:a5:b8:
ed:f3:f9:bb:e3:d1:28:98:cc:2f:1e:c4:2f:a4:f8:79:ab:a2:
7d:31:30:a4:2a:43:75:e0:70:62:49:75:e3:f4:56:cd:d5:00:
98:90:b1:47:f5:00:4a:bb:bd:01:30:90:1a:d7:0b:91:a8:10:
43:dd:23:db:74:9b:a0:cc:07:d3:52:a4:35:9d:cb:99:fe:db:
bd:12:da:00:33:26:d5:d9:73:85:d6:6f:2e:62:e8:45:b7:64:
f1:6f:8a:77
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEA6ny5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDMw
MzE0NDI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY2YjJlNjNmODIy
ZDlmMmM3NDQ5MjJhNTViODY4OThmYmM1NjEyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGTirA1hgIs0ncmWZ5FwU4HmHJCBP9mn5qs99BkVZtnb6FV
8O8DXF/JQvOyAFAwR97EBmAyAborr3x5lHQHMIORgTUbeAW1OpiF5yDWHuE2SaVL
02O6D50fIr5X8CoOo3DIsPzLwDv0qclHzLerhar8kdvO1FiJhUl5LNfviQdSWgYr
/hqXnuVYNmjmpmDec7LtyP0Oclt+Yk6dXTo0Y6EPJkaMocpF85kg+PzGEeMvcoQ5
uYipUo9T7QyswDFT3uCiER3zJd/1Gsfz2PlbZarCezpwNKeBoSWzDiVj+Vbpc5tc
rTUNHow+dsPD6z2qPF4ZxhV7ysop2Oo1+/zdOs0CAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBT/ay5j+CLZ8sdEkipVuGiY+8VhKDAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L18yc3VZX2dpMmZMSFJKSXFWYmhvbVB2RllTZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAi1QBAMEAi2EYAMEAC2SaAMEAC2S
ajAMAwQAUnYZAwQFUnYAAwQCjWJIAwQC1ALsAwQC1eHsMA0GCSqGSIb3DQEBCwUA
A4IBAQAEJ4Nl1UE6mStzlX42fRXStqmmdguP7N8L5QtuorzZFwEDnYOqr9g6cF5c
H2sZQT0ZY8U173ugjMaDUp2r2QyVrMOZ/bAEipNTmAePoxxqrpAZtHDNLjS0Nw4o
5cFTTrgeZ6Cems959IjZT3EyLJZ1D4JoE/nztyZwbyW7cm4nplgsyqaZ6ZRdG7t8
SWQWR+YIben5KV/jBfKXtCIKdB9Cpbjt8/m749EomMwvHsQvpPh5q6J9MTCkKkN1
4HBiSXXj9FbN1QCYkLFH9QBKu70BMJAa1wuRqBBD3SPbdJugzAfTUqQ1ncuZ/tu9
EtoAMybV2XOF1m8uYuhFt2Txb4p3
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:57 2025 by rpki-client