Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rAXKk_Y67Pgk9or7gAI5-WPWvd8.roa
File: rAXKk_Y67Pgk9or7gAI5-WPWvd8.roa (raw, json)
Hash identifier: RrJ7wRPVR2d/SRK2KacDnqv0laJEWSpWSjXSawUPqns=
Subject key identifier: AC:05:CA:93:F6:3A:EC:F8:24:F6:8A:FB:80:02:39:F9:63:D6:BD:DF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182FDB0DD54315C729D246C8E0F00C0564D
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rAXKk_Y67Pgk9or7gAI5-WPWvd8.roa
Signing time: Fri 02 Sep 2022 10:13:22 +0000
ROA not before: Fri 02 Sep 2022 10:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:b0:dd:54:31:5c:72:9d:24:6c:8e:0f:00:c0:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 2 10:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac05ca93f63aecf824f68afb800239f963d6bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:4a:4e:4c:54:8a:d5:2a:07:40:37:84:85:
3b:69:77:af:17:41:6d:3b:ce:87:dc:83:34:4d:48:
e3:9c:c4:98:3a:87:e1:3e:85:00:44:9f:19:2d:da:
97:da:c5:fc:7b:71:cf:d3:38:2c:31:b1:16:85:79:
3a:cb:91:e7:98:b8:60:65:b2:91:41:23:97:ca:1a:
e4:23:7d:6b:9c:2b:e3:61:2d:fa:43:b3:39:56:df:
ce:61:e7:47:3f:3c:d8:4c:4f:db:40:11:85:be:ab:
ef:c8:c5:a0:7a:b3:df:65:38:f3:e2:70:75:a0:21:
53:11:90:fd:01:e4:2a:67:aa:19:a7:b6:31:79:16:
66:15:aa:d1:58:bb:ab:5f:c0:1c:b7:2f:09:47:0c:
16:da:1a:5b:eb:d4:58:e4:e1:00:b3:f4:06:3d:94:
ae:b6:82:66:fd:a9:4d:9e:da:df:db:44:c7:db:3a:
2d:1a:74:45:e8:f9:a5:7c:bc:ed:7d:54:22:97:fa:
a1:9b:7a:fd:f8:c2:14:38:1e:da:0b:b9:29:37:ea:
1e:7b:7f:9a:b0:d7:ca:07:4a:60:ed:1a:d4:97:32:
51:ea:ea:b9:c4:50:62:7c:68:00:00:3a:4f:88:c0:
ee:e9:53:0a:1a:f8:fe:0d:ce:7b:b5:f8:8e:95:69:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:CA:93:F6:3A:EC:F8:24:F6:8A:FB:80:02:39:F9:63:D6:BD:DF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/rAXKk_Y67Pgk9or7gAI5-WPWvd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.4.0/22
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
87:fe:b8:98:df:ab:18:b9:ea:50:ac:df:80:52:10:0a:29:f8:
fd:9a:cb:b3:fa:8b:cd:7b:5a:25:1a:b3:89:31:33:a7:af:56:
cb:54:57:88:e6:7b:d4:eb:20:85:1a:99:6c:d6:10:17:b5:e3:
e7:47:0e:b9:b7:af:4f:3d:30:75:31:70:44:cf:51:c7:c7:cc:
15:5c:03:6c:0f:e1:01:93:1b:b3:32:32:61:c1:29:c0:70:77:
10:18:1c:00:18:04:4d:af:34:23:0a:1d:f7:f6:04:16:af:c8:
79:f9:1d:ed:73:ae:97:81:b8:88:76:d2:03:bb:68:01:d6:cd:
93:b4:05:fa:97:76:6d:60:a2:04:ac:d2:c6:19:a9:20:98:35:
bc:23:dd:8b:79:fc:27:59:fd:84:79:ce:14:dd:9b:c5:51:93:
76:4b:a9:89:bc:36:ba:f9:88:9a:49:7b:81:2f:05:7b:fa:3e:
8a:3b:29:97:3e:0e:0c:90:d1:ed:35:a9:39:29:0b:fd:2c:44:
26:7f:41:97:15:4b:f8:57:05:f8:7f:10:c0:cb:2c:f9:bd:9a:
fd:04:73:46:ec:5c:4b:ee:92:7a:ae:38:3b:31:39:dd:c8:1a:
2c:47:c5:28:fe:e5:02:16:0d:b0:6c:fc:44:72:5d:ba:da:a6:
4a:a5:b2:ac
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYL9sN1UMVxynSRsjg8AwFZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwOTAyMTAxMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzA1Y2E5M2Y2M2FlY2Y4MjRmNjhhZmI4MDAyMzlmOTYzZDZiZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCFKTkxUitUqB0A3hIU7aXevF0Ft
O86H3IM0TUjjnMSYOofhPoUARJ8ZLdqX2sX8e3HP0zgsMbEWhXk6y5HnmLhgZbKR
QSOXyhrkI31rnCvjYS36Q7M5Vt/OYedHPzzYTE/bQBGFvqvvyMWgerPfZTjz4nB1
oCFTEZD9AeQqZ6oZp7YxeRZmFarRWLurX8Acty8JRwwW2hpb69RY5OEAs/QGPZSu
toJm/alNntrf20TH2zotGnRF6PmlfLztfVQil/qhm3r9+MIUOB7aC7kpN+oee3+a
sNfKB0pg7RrUlzJR6uq5xFBifGgAADpPiMDu6VMKGvj+Dc57tfiOlWltHwIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFKwFypP2Ouz4JPaK+4ACOflj1r3fMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvckFYS2tfWTY3UGdrOW9yN2dBSTUtV1BXdmQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAIt
juwDBAItlbgDBAItmQQDBAItnggDBAItnqgDBABbx6gDBAGNYpwDBAKTTngDBAKY
WfgDBAKwaeADBALBHWADBAHBb3QDBADBjhYDBALBl7QDBAHBsDYDBAHCBZIDBADC
aJwDBADCaJ4DBADCaRUDBALCkwQDBAHDFGIDBADDFGkDBAHDzuYDBAHDzuowDQYJ
KoZIhvcNAQELBQADggEBAIf+uJjfqxi56lCs34BSEAop+P2ay7P6i817WiUas4kx
M6evVstUV4jme9TrIIUamWzWEBe14+dHDrm3r089MHUxcETPUcfHzBVcA2wP4QGT
G7MyMmHBKcBwdxAYHAAYBE2vNCMKHff2BBavyHn5He1zrpeBuIh20gO7aAHWzZO0
BfqXdm1gogSs0sYZqSCYNbwj3Yt5/CdZ/YR5zhTdm8VRk3ZLqYm8Nrr5iJpJe4Ev
BXv6Poo7KZc+DgyQ0e01qTkpC/0sRCZ/QZcVS/hXBfh/EMDLLPm9mv0Ec0bsXEvu
knquODsxOd3IGixHxSj+5QIWDbBs/ERyXbrapkqlsqw=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:21 2025 by rpki-client