Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/35cDKWe9wsPkrMf5a9BhXmIdVhc.roa
File: 35cDKWe9wsPkrMf5a9BhXmIdVhc.roa (raw, json)
Hash identifier: LZ68I44ViK1uMBorFFuVdisPnW39KZb7Uztgaqs4hd0=
Subject key identifier: DF:97:03:29:67:BD:C2:C3:E4:AC:C7:F9:6B:D0:61:5E:62:1D:56:17
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09D5768B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/35cDKWe9wsPkrMf5a9BhXmIdVhc.roa
Signing time: Sun 20 Feb 2022 16:50:37 +0000
ROA not before: Sun 20 Feb 2022 16:50:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
85.209.223.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164984459 (0x9d5768b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 20 16:50:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df97032967bdc2c3e4acc7f96bd0615e621d5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:7e:2b:01:97:86:cf:0d:8b:d1:e7:96:bd:
8e:ac:b1:02:47:d4:b7:87:61:88:a8:e0:50:61:e1:
af:d7:53:4a:1c:54:f1:21:ec:4c:c5:8a:f6:00:9c:
0f:72:66:58:44:72:e0:e2:9b:d7:03:65:84:e9:df:
5a:14:0a:91:d6:d6:0e:91:50:00:5a:8e:07:04:f8:
99:63:8d:54:95:a4:73:b4:b5:fe:ca:03:ed:a9:13:
6f:54:43:75:ff:fb:2b:35:68:d9:94:73:ec:09:96:
a4:7c:0c:c8:42:7c:9d:16:53:25:fe:75:59:3e:b8:
1a:28:4f:3b:32:be:f2:19:03:8f:75:83:a6:18:1e:
ba:f0:43:37:a8:01:b9:60:3e:f6:0c:d3:53:8f:17:
cb:28:21:c9:83:a5:b8:bb:be:a6:b2:b5:2f:f7:ee:
7b:01:13:33:e1:e6:74:88:e9:8b:3b:7d:26:0e:c6:
05:3c:d4:9a:6c:dd:ab:dd:af:16:5a:77:1c:ed:93:
c3:bf:9d:3c:83:56:ac:81:60:16:67:a8:5e:1b:ec:
be:19:ae:b1:27:2d:6e:99:60:cd:64:b4:63:00:53:
db:8c:7d:2e:eb:d6:d3:67:dc:e6:62:16:4e:be:41:
8e:ee:9d:89:ea:92:eb:16:70:a7:83:e0:c1:aa:c6:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:03:29:67:BD:C2:C3:E4:AC:C7:F9:6B:D0:61:5E:62:1D:56:17
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/35cDKWe9wsPkrMf5a9BhXmIdVhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
85.209.223.0/24
193.37.239.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3e:a9:3a:b1:ce:c7:94:b1:5c:00:09:12:6d:b4:0c:9a:6b:
d6:b5:a5:fc:a9:b0:fa:03:a3:09:4c:68:ca:bf:fe:a1:1d:97:
21:12:5a:3b:64:98:af:59:88:ca:1a:3d:97:62:af:7f:4c:ce:
12:76:b0:7b:ee:87:08:40:97:e8:4c:a3:9e:49:49:16:a6:e6:
31:97:ea:f5:c4:da:89:c8:17:d6:b9:91:71:7b:37:7f:31:d1:
c6:d1:7a:0c:d9:be:94:aa:94:09:8c:e7:17:4b:c4:35:e1:3a:
0a:1c:0a:e6:c9:f8:cf:9d:86:9f:15:6d:0c:a1:4d:9e:26:1d:
14:3b:ee:65:7e:b0:02:91:3b:3b:94:50:aa:cf:fb:ab:5c:87:
86:70:27:18:1e:74:2f:ff:24:b9:94:ab:1e:a7:81:a6:81:64:
82:46:93:13:76:b2:a4:d2:05:0f:12:0f:37:dd:5d:d6:06:95:
b5:91:e1:28:51:1b:bf:60:d9:a9:3b:73:20:a2:3c:76:aa:e7:
84:88:64:a4:da:6e:7c:f0:cc:4c:af:6b:66:d8:80:ea:59:08:
80:67:02:a8:ed:66:ff:e6:4e:f2:8b:b9:04:4b:de:25:f2:34:
d0:3d:18:36:3c:6f:0c:47:21:36:84:0a:c8:4a:d9:80:7f:72:
99:47:bc:25
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECdV2izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDIy
MDE2NTAzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGY5NzAzMjk2N2Jk
YzJjM2U0YWNjN2Y5NmJkMDYxNWU2MjFkNTYxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOtfisBl4bPDYvR55a9jqyxAkfUt4dhiKjgUGHhr9dTShxU
8SHsTMWK9gCcD3JmWERy4OKb1wNlhOnfWhQKkdbWDpFQAFqOBwT4mWONVJWkc7S1
/soD7akTb1RDdf/7KzVo2ZRz7AmWpHwMyEJ8nRZTJf51WT64GihPOzK+8hkDj3WD
phgeuvBDN6gBuWA+9gzTU48XyyghyYOluLu+prK1L/fuewETM+HmdIjpizt9Jg7G
BTzUmmzdq92vFlp3HO2Tw7+dPINWrIFgFmeoXhvsvhmusSctbplgzWS0YwBT24x9
LuvW02fc5mIWTr5Bju6dieqS6xZwp4PgwarGyhMCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTflwMpZ73Cw+Ssx/lr0GFeYh1WFzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
LzM1Y0RLV2U5d3NQa3JNZjVhOUJoWG1JZFZoYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAi0MUAMEAC2JYQMEAFXR3AMEAFXR
3wMEAMEl7wMEAMEmNQMEAMEnCjANBgkqhkiG9w0BAQsFAAOCAQEAAD6pOrHOx5Sx
XAAJEm20DJpr1rWl/Kmw+gOjCUxoyr/+oR2XIRJaO2SYr1mIyho9l2Kvf0zOEnaw
e+6HCECX6EyjnklJFqbmMZfq9cTaicgX1rmRcXs3fzHRxtF6DNm+lKqUCYznF0vE
NeE6ChwK5sn4z52GnxVtDKFNniYdFDvuZX6wApE7O5RQqs/7q1yHhnAnGB50L/8k
uZSrHqeBpoFkgkaTE3aypNIFDxIPN91d1gaVtZHhKFEbv2DZqTtzIKI8dqrnhIhk
pNpufPDMTK9rZtiA6lkIgGcCqO1m/+ZO8ou5BEveJfI00D0YNjxvDEchNoQKyErZ
gH9ymUe8JQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:08 2025 by rpki-client