Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cvLSbwVPs4jKJHDz3otedNTRlqY.roa
File: cvLSbwVPs4jKJHDz3otedNTRlqY.roa (raw, json)
Hash identifier: jCoSaoPaHowExkDk7HUTwsKr6+b14DQlnJBN2clGK84=
Subject key identifier: 72:F2:D2:6F:05:4F:B3:88:CA:24:70:F3:DE:8B:5E:74:D4:D1:96:A6
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 06BBEBCE
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cvLSbwVPs4jKJHDz3otedNTRlqY.roa
Signing time: Sat 01 Jan 2022 11:03:13 +0000
ROA not before: Sat 01 Jan 2022 11:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 80.245.104.0/23 maxlen: 23
80.245.104.0/22 maxlen: 24
80.245.106.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
93.90.72.0/22 maxlen: 24
93.90.74.0/23 maxlen: 24
109.206.244.0/22 maxlen: 24
185.249.63.0/24 maxlen: 24
193.178.58.0/23 maxlen: 23
193.178.56.0/23 maxlen: 23
193.178.56.0/22 maxlen: 22
185.243.240.0/22 maxlen: 24
84.252.100.0/22 maxlen: 24
85.8.180.0/23 maxlen: 24
185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.247.182.0/23 maxlen: 23
185.247.180.0/22 maxlen: 22
185.247.180.0/23 maxlen: 23
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
91.132.48.0/22 maxlen: 24
93.177.76.0/22 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112978894 (0x6bbebce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72f2d26f054fb388ca2470f3de8b5e74d4d196a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:8d:b6:15:9b:29:0e:96:5f:5b:6f:eb:56:
64:2a:97:df:ca:e5:85:69:f1:44:b4:ac:9a:9e:f3:
d4:a5:c9:60:4b:17:4e:bd:94:4d:fa:9b:1e:7c:6b:
f2:ab:e7:36:ee:14:10:75:85:f2:69:07:17:53:46:
31:33:83:6f:65:52:cd:9e:8f:fd:93:8a:96:a1:4e:
30:ae:4f:c8:6f:8f:75:dc:08:ea:d2:f0:1f:89:3c:
f9:e8:31:c4:02:a2:3f:0b:ed:9e:3d:8a:de:9a:03:
ca:5f:c8:b8:a5:c9:84:7b:4f:5c:7d:a4:b1:1a:19:
68:c7:78:93:ad:48:6b:c0:df:cf:18:99:07:8e:48:
2b:02:47:d1:db:9a:1e:ea:03:88:7d:ac:df:e9:99:
e4:e5:a4:48:cd:41:ed:2c:d7:3e:81:2b:1c:50:50:
8d:4b:16:28:52:d5:02:8f:47:4b:a5:1a:d9:f3:83:
67:15:93:ea:75:70:34:86:da:f3:bf:76:ba:23:59:
a1:52:e7:fe:7d:f0:da:cd:57:cc:ac:95:de:e7:89:
b4:41:2a:85:ff:93:91:bc:2f:d0:d2:66:55:ba:4c:
77:d7:c2:6b:99:60:1f:90:f0:34:89:14:34:37:f0:
08:3d:a3:05:f0:1c:de:d7:0b:23:77:22:cf:8a:e5:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:D2:6F:05:4F:B3:88:CA:24:70:F3:DE:8B:5E:74:D4:D1:96:A6
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cvLSbwVPs4jKJHDz3otedNTRlqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.104.0/22
84.252.100.0/22
85.8.180.0/23
91.132.48.0/22
93.90.72.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
185.247.180.0/22
185.249.63.0/24
193.178.56.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
13:75:29:27:ba:64:ff:93:8a:85:5b:68:93:ba:a5:04:dd:18:
86:26:42:ae:09:73:f5:92:16:3b:50:3c:22:17:d1:18:43:c3:
53:9e:13:e7:2c:51:0f:de:45:58:d3:a0:62:a7:7d:84:81:2a:
e0:33:fd:b0:43:25:09:e0:c0:37:cc:4f:96:9d:60:8f:9f:ce:
ac:c5:75:b0:9f:2c:12:44:f0:c2:59:6b:cf:58:c6:b8:9d:b6:
2d:61:2e:8b:af:04:0d:9b:9f:fb:1a:44:16:cb:7b:78:81:05:
6b:7c:bc:a2:e2:f1:cb:a2:f5:7c:a2:19:f8:90:de:41:db:fe:
96:05:82:65:1a:2f:9b:6f:59:32:38:97:ea:03:58:cb:a2:22:
d9:61:22:aa:4a:64:54:ba:88:26:d3:58:53:c4:8c:8f:84:39:
e9:6c:59:9c:8f:f5:65:56:8b:0b:28:bb:e2:83:00:a6:59:19:
6f:e1:9e:9f:22:41:41:4b:3d:94:a5:83:fc:df:e4:b9:3e:9c:
fd:1f:5b:d1:d5:fc:17:92:26:20:18:30:03:d9:02:ac:44:95:
6c:25:e2:e2:00:fb:5d:3b:e4:b7:31:0d:63:10:2a:c7:4b:ed:
18:ca:6f:9f:80:8c:d1:bf:2b:24:37:2e:53:5c:cd:4d:4e:74:
a7:bf:21:b2
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIEBrvrzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDg5NDIzYWYxYmUwMzAyNzE5NmQxZjgxZGYyMjk5Mjk3OGNkYTZlMB4XDTIyMDEw
MTExMDMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJmMmQyNmYwNTRm
YjM4OGNhMjQ3MGYzZGU4YjVlNzRkNGQxOTZhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIe3jbYVmykOll9bb+tWZCqX38rlhWnxRLSsmp7z1KXJYEsX
Tr2UTfqbHnxr8qvnNu4UEHWF8mkHF1NGMTODb2VSzZ6P/ZOKlqFOMK5PyG+PddwI
6tLwH4k8+egxxAKiPwvtnj2K3poDyl/IuKXJhHtPXH2ksRoZaMd4k61Ia8DfzxiZ
B45IKwJH0duaHuoDiH2s3+mZ5OWkSM1B7SzXPoErHFBQjUsWKFLVAo9HS6Ua2fOD
ZxWT6nVwNIba8792uiNZoVLn/n3w2s1XzKyV3ueJtEEqhf+Tkbwv0NJmVbpMd9fC
a5lgH5DwNIkUNDfwCD2jBfAc3tcLI3ciz4rl8gsCAwEAAaOCAm4wggJqMB0GA1Ud
DgQWBBRy8tJvBU+ziMokcPPei1501NGWpjAfBgNVHSMEGDAWgBTAiUI68b4DAnGW
0fgd8imSl4zabjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dJbENPdkctQXdKeGx0SDRIZklwa3BlTTJtNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZGMyOTEyLWM3YjAtNGRmNC05YWE4LTY1MzMyYjQ3ZjVlYi8x
L2N2TFNid1ZQczRqS0pIRHozb3RlZE5UUmxxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZGMyOTEyLWM3YjAtNGRmNC05YWE4LTY1MzMyYjQ3ZjVlYi8xL3dJbENPdkctQXdK
eGx0SDRIZklwa3BlTTJtNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
gwYIKwYBBQUHAQcBAf8EdDByMFoEAgABMFQDBAJQ9WgDBAJU/GQDBAFVCLQDBAJb
hDADBAJdWkgDBAJdsUwDBAJtzvQDBAK571QDBAK58ugDBAK58/ADBAK59SgDBAK5
97QDBAC5+T8DBALBsjgwFAQCAAIwDgMFAyoM9IADBQMqDSSAMA0GCSqGSIb3DQEB
CwUAA4IBAQATdSknumT/k4qFW2iTuqUE3RiGJkKuCXP1khY7UDwiF9EYQ8NTnhPn
LFEP3kVY06Bip32EgSrgM/2wQyUJ4MA3zE+WnWCPn86sxXWwnywSRPDCWWvPWMa4
nbYtYS6LrwQNm5/7GkQWy3t4gQVrfLyi4vHLovV8ohn4kN5B2/6WBYJlGi+bb1ky
OJfqA1jLoiLZYSKqSmRUuogm01hTxIyPhDnpbFmcj/VlVosLKLvigwCmWRlv4Z6f
IkFBSz2UpYP83+S5Ppz9H1vR1fwXkiYgGDAD2QKsRJVsJeLiAPtdO+S3MQ1jECrH
S+0Yym+fgIzRvyskNy5TXM1NTnSnvyGy
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:28 2025 by rpki-client