Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/qJqjPxwa2aEpf8c_KF2etpIFWOI.roa
File: qJqjPxwa2aEpf8c_KF2etpIFWOI.roa (raw, json)
Hash identifier: SVTJg9Q1eaHaUtawJIMw8j7ZhoD0/yDW9A3fxa70V9Q=
Subject key identifier: A8:9A:A3:3F:1C:1A:D9:A1:29:7F:C7:3F:28:5D:9E:B6:92:05:58:E2
Certificate issuer: /CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Certificate serial: 09ABF84E
Authority key identifier: E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/qJqjPxwa2aEpf8c_KF2etpIFWOI.roa
Signing time: Sat 01 Jan 2022 14:55:37 +0000
ROA not before: Sat 01 Jan 2022 14:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202425
IP address blocks: 89.248.161.0/24 maxlen: 24
89.248.162.0/24 maxlen: 24
89.248.160.0/24 maxlen: 24
89.248.165.0/24 maxlen: 24
89.248.166.0/24 maxlen: 24
89.248.163.0/24 maxlen: 24
89.248.164.0/24 maxlen: 24
89.248.168.0/24 maxlen: 24
89.248.169.0/24 maxlen: 24
89.248.167.0/24 maxlen: 24
89.248.172.0/24 maxlen: 24
89.248.170.0/24 maxlen: 24
89.248.171.0/24 maxlen: 24
89.248.173.0/24 maxlen: 24
89.248.174.0/24 maxlen: 24
93.174.89.0/24 maxlen: 24
93.174.90.0/24 maxlen: 24
93.174.88.0/24 maxlen: 24
93.174.91.0/24 maxlen: 24
93.174.94.0/24 maxlen: 24
93.174.95.0/24 maxlen: 24
93.174.93.0/24 maxlen: 24
93.174.92.0/24 maxlen: 24
94.102.48.0/24 maxlen: 24
94.102.51.0/24 maxlen: 24
94.102.49.0/24 maxlen: 24
94.102.50.0/24 maxlen: 24
94.102.58.0/24 maxlen: 24
94.102.56.0/24 maxlen: 24
94.102.57.0/24 maxlen: 24
94.102.52.0/24 maxlen: 24
94.102.54.0/24 maxlen: 24
94.102.55.0/24 maxlen: 24
94.102.53.0/24 maxlen: 24
94.102.59.0/24 maxlen: 24
94.102.61.0/24 maxlen: 24
94.102.62.0/24 maxlen: 24
94.102.60.0/24 maxlen: 24
94.102.63.0/24 maxlen: 24
80.82.79.0/24 maxlen: 24
80.82.64.0/24 maxlen: 24
80.82.67.0/24 maxlen: 24
80.82.65.0/24 maxlen: 24
80.82.66.0/24 maxlen: 24
80.82.70.0/24 maxlen: 24
80.82.68.0/24 maxlen: 24
80.82.69.0/24 maxlen: 24
80.82.77.0/24 maxlen: 24
80.82.78.0/24 maxlen: 24
80.82.76.0/24 maxlen: 24
2a02:6c8:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162265166 (0x9abf84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Validity
Not Before: Jan 1 14:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89aa33f1c1ad9a1297fc73f285d9eb6920558e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:e5:bc:58:cd:f0:e6:91:91:9f:27:86:7b:
93:ed:b6:96:52:88:96:f3:3f:fa:f6:07:2c:62:39:
a6:e2:48:f7:51:d7:bb:c0:d1:e2:34:10:72:6b:52:
42:a1:43:fc:36:71:7e:41:e9:56:7f:18:cd:41:7b:
de:2d:ca:f5:2e:80:e2:bd:ca:0a:95:52:b2:3c:d8:
0a:a1:84:fe:49:f9:34:96:10:29:b6:17:36:22:50:
de:97:74:02:5e:d7:8c:66:c5:f5:95:3b:92:ff:36:
de:7d:e3:2a:35:22:40:bf:be:12:a8:da:8b:45:3d:
aa:b1:8f:6f:1b:19:0b:43:cb:26:e4:96:0c:67:ec:
83:b7:93:5f:8b:bb:0e:4e:6a:c4:fd:ab:d7:b2:7f:
2a:c0:13:e8:7e:b8:63:a3:7b:ca:dc:be:1d:52:6c:
b3:69:c1:a6:7c:ad:df:24:a9:5c:a2:78:95:48:56:
a0:94:fd:f3:dd:52:5d:5a:de:1a:83:23:87:d6:87:
a4:1e:bc:58:aa:3d:5a:a4:db:18:27:1b:60:9b:dc:
c6:d7:2f:8b:60:19:22:98:7e:b6:fc:97:f4:08:22:
4a:f8:2a:50:02:f5:c7:0e:55:3b:84:48:7b:87:92:
62:50:a4:34:15:0f:5d:69:b9:a7:5a:4b:5a:8e:00:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:A3:3F:1C:1A:D9:A1:29:7F:C7:3F:28:5D:9E:B6:92:05:58:E2
X509v3 Authority Key Identifier:
keyid:E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/qJqjPxwa2aEpf8c_KF2etpIFWOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/4pY7MLtS79mPDO5jJP8vmKgRtDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.64.0-80.82.70.255
80.82.76.0/22
89.248.160.0-89.248.174.255
93.174.88.0/21
94.102.48.0/20
IPv6:
2a02:6c8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
8b:0c:54:e7:85:4d:c6:19:49:68:cb:fb:27:5a:88:f9:2e:ff:
16:2c:ec:53:86:27:82:65:ed:ee:93:e5:f6:4e:86:0a:5c:e4:
c3:85:89:af:8e:c3:f5:4e:ec:c4:2a:38:9f:77:5e:1e:96:9c:
1e:56:c4:71:f7:da:b8:17:67:fe:c8:61:bc:93:1f:21:00:4d:
ec:5c:9e:54:d5:57:db:4e:a6:0e:2b:46:46:e0:86:d4:32:69:
0a:7b:dd:04:47:ea:b9:5a:de:f6:5c:29:20:c4:ae:64:96:f7:
d5:0f:61:d5:73:7e:bf:f6:f8:aa:7b:fd:b4:a4:45:44:09:40:
10:be:57:81:5a:19:dd:7d:19:b7:23:07:4b:7f:d5:49:5c:df:
63:57:67:78:af:d6:fd:dd:f7:ae:2c:58:d5:cd:46:5e:ac:fd:
56:06:1a:2a:25:5a:19:eb:e6:60:44:0d:3d:d1:e4:d0:ed:f8:
ac:ee:c5:41:3e:42:38:d3:9c:34:fe:39:1e:5a:74:4d:df:37:
52:ab:35:f9:3d:f3:06:8f:c9:9e:b8:5a:de:c3:84:dc:f5:63:
f6:43:72:1f:87:45:4a:8c:bb:95:14:fb:70:c0:6c:12:e0:74:
42:ea:3f:f0:72:ee:08:24:92:bb:c4:e3:05:c1:c4:33:a8:d0:
40:69:d3:5d
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIECav4TjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Mjk2M2IzMGJiNTJlZmQ5OGYwY2VlNjMyNGZmMmY5OGE4MTFiNDM5MB4XDTIyMDEw
MTE0NTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg5YWEzM2YxYzFh
ZDlhMTI5N2ZjNzNmMjg1ZDllYjY5MjA1NThlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOja5bxYzfDmkZGfJ4Z7k+22llKIlvM/+vYHLGI5puJI91HX
u8DR4jQQcmtSQqFD/DZxfkHpVn8YzUF73i3K9S6A4r3KCpVSsjzYCqGE/kn5NJYQ
KbYXNiJQ3pd0Al7XjGbF9ZU7kv823n3jKjUiQL++Eqjai0U9qrGPbxsZC0PLJuSW
DGfsg7eTX4u7Dk5qxP2r17J/KsAT6H64Y6N7yty+HVJss2nBpnyt3ySpXKJ4lUhW
oJT9891SXVreGoMjh9aHpB68WKo9WqTbGCcbYJvcxtcvi2AZIph+tvyX9AgiSvgq
UAL1xw5VO4RIe4eSYlCkNBUPXWm5p1pLWo4AKhECAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBSomqM/HBrZoSl/xz8oXZ62kgVY4jAfBgNVHSMEGDAWgBTiljswu1Lv2Y8M
7mMk/y+YqBG0OTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRwWTdNTHRTNzltUERPNWpKUDh2bUtnUnREay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvNTQzNTA0LTdmMmYtNDcyNy05ZWVjLTg2YmFhYTBiMjdlMC8x
L3FKcWpQeHdhMmFFcGY4Y19LRjJldHBJRldPSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
NTQzNTA0LTdmMmYtNDcyNy05ZWVjLTg2YmFhYTBiMjdlMC8xLzRwWTdNTHRTNzlt
UERPNWpKUDh2bUtnUnREay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwNAQCAAEwLjAMAwQGUFJAAwQAUFJGAwQCUFJMMAwD
BAVZ+KADBABZ+K4DBANdrlgDBAReZjAwDgQCAAIwCAMGByoCBsiAMA0GCSqGSIb3
DQEBCwUAA4IBAQCLDFTnhU3GGUloy/snWoj5Lv8WLOxThieCZe3uk+X2ToYKXOTD
hYmvjsP1TuzEKjifd14elpweVsRx99q4F2f+yGG8kx8hAE3sXJ5U1VfbTqYOK0ZG
4IbUMmkKe90ER+q5Wt72XCkgxK5klvfVD2HVc36/9viqe/20pEVECUAQvleBWhnd
fRm3IwdLf9VJXN9jV2d4r9b93feuLFjVzUZerP1WBhoqJVoZ6+ZgRA090eTQ7fis
7sVBPkI405w0/jkeWnRN3zdSqzX5PfMGj8meuFrew4Tc9WP2Q3Ifh0VKjLuVFPtw
wGwS4HRC6j/wcu4IJJK7xOMFwcQzqNBAadNd
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org