Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa
File: mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa (raw, json)
Hash identifier: F3sI/j1FU1D4iu0QxE9mBM8KQhU2JtaStMZPVDBxEok=
Subject key identifier: 98:07:BC:9F:CA:E5:C7:32:F9:4C:9D:01:0B:9F:B8:DA:08:67:FA:E5
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 043D0FD7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa
Signing time: Sat 01 Jan 2022 00:50:47 +0000
ROA not before: Sat 01 Jan 2022 00:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.192.0/21 maxlen: 24
85.237.192.0/21 maxlen: 24
85.237.206.0/23 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.200.0/23 maxlen: 24
85.237.208.0/20 maxlen: 24
85.237.216.0/24 maxlen: 24
185.89.76.0/22 maxlen: 24
185.89.77.0/24 maxlen: 24
85.158.56.0/21 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
185.93.33.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71110615 (0x43d0fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9807bc9fcae5c732f94c9d010b9fb8da0867fae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:9d:1a:ca:8f:8b:a1:f8:37:ca:10:c9:b7:
3d:b9:84:7c:51:4f:7e:8a:d6:a4:ff:33:08:95:4d:
66:d5:0d:bf:d9:96:40:d0:3e:be:70:e1:0f:cb:22:
a2:91:32:6e:90:ab:29:da:b9:a1:04:59:cc:8f:02:
fa:af:ee:b0:35:2c:de:5c:59:75:5d:f6:51:7a:9b:
e5:2f:aa:6a:4f:3d:a0:d9:2d:9d:3c:97:9f:ea:a5:
26:02:08:24:e8:71:ce:5c:be:e2:ee:3c:87:0b:54:
50:8b:e2:48:fc:f7:97:32:6c:d7:b9:06:fc:2b:4b:
e2:1e:80:14:25:a0:7c:15:f9:ab:9a:69:a3:37:cc:
4d:a6:0d:78:db:82:ae:3b:7b:81:31:b7:b7:e3:da:
d6:76:59:51:72:a8:ed:89:83:bd:76:b5:0c:1b:0a:
9c:16:b2:9e:55:c0:db:67:97:2d:b4:65:83:e4:2e:
b1:6b:15:e1:37:b8:c5:cf:40:71:cf:30:21:29:15:
94:ed:85:ba:b7:29:71:a6:92:6f:a7:29:18:22:0b:
0d:58:1f:c0:28:13:c6:ec:93:a1:aa:73:eb:cc:de:
6d:de:93:77:04:91:87:85:64:ae:87:65:ef:d0:85:
85:90:39:34:5b:c9:49:c1:79:96:ec:56:84:5f:79:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:BC:9F:CA:E5:C7:32:F9:4C:9D:01:0B:9F:B8:DA:08:67:FA:E5
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/21
85.237.192.0-85.237.203.255
85.237.205.0-85.237.223.255
185.89.76.0/22
185.93.32.0/22
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0c:ab:3a:a9:6e:53:54:02:69:ef:b7:b7:a8:a5:51:51:24:
59:61:5b:47:56:5a:26:bd:da:4a:3e:18:0c:cf:74:30:b6:7d:
d5:aa:4b:22:64:68:27:31:13:d0:32:82:0e:17:ae:3e:61:3b:
06:13:d1:91:c2:92:04:ee:0a:06:19:d1:c4:11:10:9d:6c:e1:
3b:02:30:f0:d1:be:5e:9b:c8:de:1f:3a:0c:3e:4e:bf:f3:3d:
e5:d1:f7:95:b7:6f:f9:39:c4:f6:dc:94:4c:a2:b4:f2:f5:12:
39:8e:f4:2d:a9:7a:88:0e:d0:99:07:1f:0b:fc:c2:1f:93:d3:
14:f3:de:f0:f1:c9:c7:39:04:40:60:86:2a:75:e3:29:ce:2c:
17:07:f2:cb:3d:01:ed:2a:fe:a6:7a:af:63:2e:c4:b3:78:2a:
b0:d2:ff:51:9e:35:f9:1b:bf:db:a0:9f:19:7a:b7:88:52:4c:
21:3d:df:14:d8:85:6c:8a:20:46:ff:df:19:a0:2b:ef:2f:6f:
78:d1:fc:f9:30:ac:a1:b7:fb:cb:a5:4b:89:a6:e7:84:94:51:
c7:9b:79:d7:77:6c:80:96:0a:e9:a3:d0:2d:a2:fa:51:c5:fc:
7f:56:55:1e:73:b9:9e:c8:1b:28:87:9b:61:44:1b:ee:49:44:
a7:bf:41:06
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIEBD0P1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEw
MTAwNTA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgwN2JjOWZjYWU1
YzczMmY5NGM5ZDAxMGI5ZmI4ZGEwODY3ZmFlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPsnRrKj4uh+DfKEMm3PbmEfFFPforWpP8zCJVNZtUNv9mW
QNA+vnDhD8siopEybpCrKdq5oQRZzI8C+q/usDUs3lxZdV32UXqb5S+qak89oNkt
nTyXn+qlJgIIJOhxzly+4u48hwtUUIviSPz3lzJs17kG/CtL4h6AFCWgfBX5q5pp
ozfMTaYNeNuCrjt7gTG3t+Pa1nZZUXKo7YmDvXa1DBsKnBaynlXA22eXLbRlg+Qu
sWsV4Te4xc9Acc8wISkVlO2FurcpcaaSb6cpGCILDVgfwCgTxuyToapz68zebd6T
dwSRh4Vkrodl79CFhZA5NFvJScF5luxWhF95MccCAwEAAaOCAj0wggI5MB0GA1Ud
DgQWBBSYB7yfyuXHMvlMnQELn7jaCGf65TAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L21BZThuOHJseHpMNVRKMEJDNS00Mmdobi11VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBT
BggrBgEFBQcBBwEB/wREMEIwQAQCAAEwOgMEA1WeODAMAwQGVe3AAwQCVe3IMAwD
BABV7c0DBAVV7cADBAK5WUwDBAK5XSADBAPBbcADBADCqdkwDQYJKoZIhvcNAQEL
BQADggEBABoMqzqpblNUAmnvt7eopVFRJFlhW0dWWia92ko+GAzPdDC2fdWqSyJk
aCcxE9Aygg4Xrj5hOwYT0ZHCkgTuCgYZ0cQREJ1s4TsCMPDRvl6byN4fOgw+Tr/z
PeXR95W3b/k5xPbclEyitPL1EjmO9C2peogO0JkHHwv8wh+T0xTz3vDxycc5BEBg
hip14ynOLBcH8ss9Ae0q/qZ6r2MuxLN4KrDS/1GeNfkbv9ugnxl6t4hSTCE93xTY
hWyKIEb/3xmgK+8vb3jR/PkwrKG3+8ulS4mm54SUUcebedd3bICWCumj0C2i+lHF
/H9WVR5zuZ7IGyiHm2FEG+5JRKe/QQY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org