Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa
File: vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa (raw, json)
Hash identifier: yR+dsINA+Kgy4GwysZ9tPZAVK2Kn1S/k/1rARqu1mx4=
Subject key identifier: BC:CB:12:0D:F5:76:75:0E:A9:A0:CC:8F:32:67:D7:5D:59:EB:26:A0
Certificate issuer: /CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
Certificate serial: 06CB5D86
Authority key identifier: 2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa
Signing time: Sat 01 Jan 2022 11:56:32 +0000
ROA not before: Sat 01 Jan 2022 11:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 185.37.231.0/24 maxlen: 24
185.37.229.0/24 maxlen: 24
185.37.230.0/24 maxlen: 24
185.37.228.0/24 maxlen: 24
185.37.228.0/23 maxlen: 23
185.226.152.0/22 maxlen: 24
185.100.72.0/22 maxlen: 22
185.226.154.0/24 maxlen: 24
185.162.168.0/23 maxlen: 23
185.162.171.0/24 maxlen: 24
185.162.170.0/24 maxlen: 24
45.146.188.0/22 maxlen: 22
185.156.216.0/24 maxlen: 24
185.156.219.0/24 maxlen: 24
185.156.217.0/24 maxlen: 24
185.156.218.0/24 maxlen: 24
185.167.24.0/24 maxlen: 24
185.167.27.0/24 maxlen: 24
185.167.25.0/24 maxlen: 24
185.167.26.0/24 maxlen: 24
45.151.192.0/22 maxlen: 22
185.125.78.0/24 maxlen: 24
185.125.76.0/22 maxlen: 22
185.125.76.0/24 maxlen: 24
185.125.77.0/24 maxlen: 24
91.199.102.0/24 maxlen: 24
91.199.108.0/24 maxlen: 24
185.125.79.0/24 maxlen: 24
91.199.123.0/24 maxlen: 24
185.202.145.0/24 maxlen: 24
185.202.144.0/24 maxlen: 24
185.202.147.0/24 maxlen: 24
185.202.146.0/24 maxlen: 24
91.199.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113991046 (0x6cb5d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
Validity
Not Before: Jan 1 11:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bccb120df576750ea9a0cc8f3267d75d59eb26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:35:b7:9e:4e:ff:87:4c:32:5f:45:f6:a7:
85:a2:1f:95:65:06:49:81:5e:de:cd:a0:d7:ee:c2:
19:02:a2:88:76:07:87:8c:b2:4e:07:6c:7e:14:4c:
ca:de:5b:15:1a:bd:c6:23:2a:ec:2a:e0:30:b1:67:
62:7e:fe:6d:b5:53:bf:37:4c:1c:74:53:a6:60:74:
31:23:7b:f9:36:97:58:79:ce:72:fa:dd:e0:33:ae:
12:74:32:96:17:18:16:2d:0b:da:56:4e:38:cb:e0:
70:a4:fb:74:08:13:0c:c4:99:24:1a:a0:ff:4f:1e:
2f:53:74:f8:ce:99:d1:d3:47:85:5d:f2:f9:e6:4b:
1e:e1:7d:54:47:8e:e1:b8:a7:98:2a:fd:83:0c:99:
d6:0d:e2:2c:09:1a:d4:d1:5a:03:eb:2a:95:05:ed:
37:0a:0b:1b:31:6b:25:1c:2a:ee:52:af:f6:22:8a:
d0:7a:d9:a9:4e:57:de:54:cd:0e:4c:c6:45:1d:32:
bc:c7:f7:05:9d:ae:2f:b0:ae:8f:04:07:4d:ea:e1:
f7:0a:28:7d:8c:68:1b:2f:59:34:6e:f5:0c:fb:5c:
d9:b6:cc:5c:31:d7:95:12:84:ab:f6:43:2a:a8:fb:
7c:28:b0:a4:d3:e6:dd:3a:7b:07:6a:e7:37:63:c6:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:12:0D:F5:76:75:0E:A9:A0:CC:8F:32:67:D7:5D:59:EB:26:A0
X509v3 Authority Key Identifier:
keyid:2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/vMsSDfV2dQ6poMyPMmfXXVnrJqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/Kte28PZRjYLhK5vcN2YCsjthKZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.188.0/22
45.151.192.0/22
91.199.90.0/24
91.199.102.0/24
91.199.108.0/24
91.199.123.0/24
185.37.228.0/22
185.100.72.0/22
185.125.76.0/22
185.156.216.0/22
185.162.168.0/22
185.167.24.0/22
185.202.144.0/22
185.226.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:46:22:3b:cf:14:28:ea:47:60:cb:92:3f:61:b3:18:3c:ae:
16:bb:6f:55:16:ce:7a:97:96:14:b3:11:57:d4:96:7d:0b:dc:
98:cc:a1:ad:7b:88:f0:ac:74:af:c9:7a:f1:bf:3e:31:3c:3a:
94:82:98:71:de:20:48:22:66:ca:65:ec:b4:c8:a9:ce:ed:aa:
2e:ea:e3:58:42:78:e9:fe:f5:b7:5a:57:b7:9e:93:4e:16:26:
55:97:36:dc:e7:e4:36:09:23:97:59:c6:8f:e6:21:cf:50:d7:
18:90:6b:8f:ee:c0:e6:a4:08:b2:44:58:bb:ad:02:f3:cd:2d:
3a:14:a7:58:9e:f4:56:55:c7:36:34:e0:9e:30:4e:5f:ea:eb:
65:65:1a:2d:c6:44:72:6c:cd:8d:3a:0e:2f:b7:93:d8:ff:3d:
73:5c:a6:14:b9:97:3a:4d:c4:8c:59:9a:51:8f:42:cb:7a:5e:
21:a8:88:a2:cb:48:e2:27:81:2e:39:ca:7e:e6:98:05:5d:38:
73:05:f1:db:9c:43:30:ae:6f:45:8f:e5:dc:3b:5d:dd:85:67:
b1:26:8d:ef:f9:1e:c5:28:78:df:88:38:f5:a8:43:8b:cb:1e:
c4:e4:2f:a0:f3:8c:58:85:84:ce:9b:34:52:da:4d:9a:5c:56:
fa:e9:90:26
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIEBstdhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWQ3YjZmMGY2NTE4ZDgyZTEyYjliZGMzNzY2MDJiMjNiNjEyOTk0MB4XDTIyMDEw
MTExNTYzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNjYjEyMGRmNTc2
NzUwZWE5YTBjYzhmMzI2N2Q3NWQ1OWViMjZhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvmNbeeTv+HTDJfRfanhaIflWUGSYFe3s2g1+7CGQKiiHYH
h4yyTgdsfhRMyt5bFRq9xiMq7CrgMLFnYn7+bbVTvzdMHHRTpmB0MSN7+TaXWHnO
cvrd4DOuEnQylhcYFi0L2lZOOMvgcKT7dAgTDMSZJBqg/08eL1N0+M6Z0dNHhV3y
+eZLHuF9VEeO4binmCr9gwyZ1g3iLAka1NFaA+sqlQXtNwoLGzFrJRwq7lKv9iKK
0HrZqU5X3lTNDkzGRR0yvMf3BZ2uL7CujwQHTerh9woofYxoGy9ZNG71DPtc2bbM
XDHXlRKEq/ZDKqj7fCiwpNPm3Tp7B2rnN2PGpS0CAwEAAaOCAlcwggJTMB0GA1Ud
DgQWBBS8yxIN9XZ1DqmgzI8yZ9ddWesmoDAfBgNVHSMEGDAWgBQq17bw9lGNguEr
m9w3ZgKyO2EplDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t0ZTI4UFpSallMaEs1dmNOMllDc2p0aEtaUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvNzhlN2UwLTdiOWQtNGQ4MC1iMTA3LWNiOWIxYWNmM2E2Yy8x
L3ZNc1NEZlYyZFE2cG9NeVBNbWZYWFZuckpxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
NzhlN2UwLTdiOWQtNGQ4MC1iMTA3LWNiOWIxYWNmM2E2Yy8xL0t0ZTI4UFpSallM
aEs1dmNOMllDc2p0aEtaUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBt
BggrBgEFBQcBBwEB/wReMFwwWgQCAAEwVAMEAi2SvAMEAi2XwAMEAFvHWgMEAFvH
ZgMEAFvHbAMEAFvHewMEArkl5AMEArlkSAMEArl9TAMEArmc2AMEArmiqAMEArmn
GAMEArnKkAMEArnimDANBgkqhkiG9w0BAQsFAAOCAQEAmkYiO88UKOpHYMuSP2Gz
GDyuFrtvVRbOepeWFLMRV9SWfQvcmMyhrXuI8Kx0r8l68b8+MTw6lIKYcd4gSCJm
ymXstMipzu2qLurjWEJ46f71t1pXt56TThYmVZc23OfkNgkjl1nGj+Yhz1DXGJBr
j+7A5qQIskRYu60C880tOhSnWJ70VlXHNjTgnjBOX+rrZWUaLcZEcmzNjToOL7eT
2P89c1ymFLmXOk3EjFmaUY9Cy3peIaiIostI4ieBLjnKfuaYBV04cwXx25xDMK5v
RY/l3Dtd3YVnsSaN7/kexSh434g49ahDi8sexOQvoPOMWIWEzps0UtpNmlxW+umQ
Jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org