Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/05BvKtsezgPJrmAuRES9VsdnpeM.roa
File: 05BvKtsezgPJrmAuRES9VsdnpeM.roa (raw, json)
Hash identifier: aLVnTNRiJkaS7PcjMfEOZS2Jt0nUsnlA9uRGxCkGaDU=
Subject key identifier: D3:90:6F:2A:DB:1E:CE:03:C9:AE:60:2E:44:44:BD:56:C7:67:A5:E3
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 0182152655E3A85CF5D3092497654C28B9C4
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/05BvKtsezgPJrmAuRES9VsdnpeM.roa
Signing time: Tue 19 Jul 2022 06:30:09 +0000
ROA not before: Tue 19 Jul 2022 06:30:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31484
IP address blocks: 80.246.240.0/20 maxlen: 20
185.7.200.0/22 maxlen: 22
176.221.11.0/24 maxlen: 24
176.221.8.0/21 maxlen: 21
176.221.14.0/24 maxlen: 24
83.136.240.0/21 maxlen: 21
2a03:cf80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:26:55:e3:a8:5c:f5:d3:09:24:97:65:4c:28:b9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jul 19 06:30:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3906f2adb1ece03c9ae602e4444bd56c767a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:21:93:8f:11:95:37:2f:f7:73:06:4c:a1:
0f:ef:86:f4:3a:2f:c7:fc:bb:e1:83:00:55:1e:d5:
5f:d4:0d:89:4c:69:11:0b:61:70:be:21:61:b6:e5:
f2:74:6a:12:73:02:f8:5f:79:37:c5:f1:5d:4b:8e:
0a:0d:7b:63:f4:aa:21:10:e7:0f:34:c0:03:59:f7:
bf:4c:0b:ee:1c:80:33:3c:12:9a:5d:6b:0b:f0:90:
3c:bd:6c:79:33:c0:04:73:54:7d:2b:96:f4:c7:c2:
b5:c9:5b:84:ec:ca:ed:ce:51:61:50:8e:ba:e8:1b:
44:e7:2a:b5:df:1a:58:7e:e1:3d:fb:70:4a:c9:7a:
12:c2:3c:05:6f:e4:4f:1a:f2:42:09:47:6e:33:72:
18:62:7d:89:93:74:18:c2:68:bf:b8:25:02:54:73:
f6:d2:f8:9b:bf:56:6a:71:a0:44:71:7c:99:04:04:
3b:cf:e6:a4:08:bd:39:dc:53:e4:a5:09:df:c3:61:
e0:f4:7b:4e:13:e4:43:81:fa:68:89:3e:82:17:b7:
1c:4d:06:e3:99:c9:7b:4a:2a:31:20:7b:e8:59:40:
62:28:f0:97:45:f3:c1:5f:dc:95:b0:91:3e:64:30:
f3:89:6c:9a:08:72:7c:0e:78:28:15:da:0c:5a:d9:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:6F:2A:DB:1E:CE:03:C9:AE:60:2E:44:44:BD:56:C7:67:A5:E3
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/05BvKtsezgPJrmAuRES9VsdnpeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.240.0/20
83.136.240.0/21
176.221.8.0/21
185.7.200.0/22
IPv6:
2a03:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
9f:1c:a4:e8:a4:97:c3:a5:e3:06:7e:e8:dd:16:77:7f:3a:da:
d2:aa:04:b7:bc:86:61:1b:ef:49:0a:ab:33:d8:03:7d:c1:0b:
b9:8e:00:47:f2:48:9d:15:10:9e:f5:4d:8a:76:91:df:7e:7c:
b3:d6:ee:6d:9f:a5:20:ce:5d:34:db:3e:92:ff:c5:16:7b:d7:
bd:a7:d8:f6:ac:c8:20:d9:b3:34:f6:28:26:a7:71:3f:ac:07:
6e:44:c9:11:89:b7:42:63:37:b8:50:94:f8:57:33:89:2c:ec:
a8:d9:e8:ed:df:da:b3:02:e9:8d:52:04:90:2d:85:d8:e0:06:
af:24:0c:9c:0c:30:82:ee:b1:be:bc:24:3e:47:ce:fc:63:23:
5a:7b:36:f7:9d:ed:a6:48:87:af:fd:13:fd:9e:a7:5b:b9:05:
46:76:cb:89:9c:08:1d:21:f0:15:27:16:76:4b:1b:49:02:92:
f9:db:5d:d1:77:31:1a:af:d8:e1:e3:81:c3:b9:f4:e6:9a:95:
08:1d:af:f4:e1:17:e5:ba:24:a7:07:8d:61:db:69:a4:36:49:
e4:45:fa:6b:7a:0c:13:f2:63:a7:40:cb:ca:09:08:68:fe:87:
ac:df:dd:9d:02:d4:3a:ff:bf:54:33:db:cc:42:a6:97:e0:34:
6a:84:1f:02
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYIVJlXjqFz10wkkl2VMKLnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjZmNWRlYzA5YmM3YTEyMDMwNDU2OTliYTA1ODI5NWQz
OGUzNDYwHhcNMjIwNzE5MDYzMDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzkwNmYyYWRiMWVjZTAzYzlhZTYwMmU0NDQ0YmQ1NmM3NjdhNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHghk48RlTcv93MGTKEP74b0Oi/H
/LvhgwBVHtVf1A2JTGkRC2FwviFhtuXydGoScwL4X3k3xfFdS44KDXtj9KohEOcP
NMADWfe/TAvuHIAzPBKaXWsL8JA8vWx5M8AEc1R9K5b0x8K1yVuE7MrtzlFhUI66
6BtE5yq13xpYfuE9+3BKyXoSwjwFb+RPGvJCCUduM3IYYn2Jk3QYwmi/uCUCVHP2
0vibv1ZqcaBEcXyZBAQ7z+akCL053FPkpQnfw2Hg9HtOE+RDgfpoiT6CF7ccTQbj
mcl7SioxIHvoWUBiKPCXRfPBX9yVsJE+ZDDziWyaCHJ8DngoFdoMWtktVQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNOQbyrbHs4Dya5gLkREvVbHZ6XjMB8GA1UdIwQY
MBaAFMj29d7Am8ehIDBFaZugWCldOONGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBiMTNzQ2J4NkVnTUVWcG02QllLVjA0NDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80OGNiODYtMjc1MC00ZDZhLThhNzEt
MWJlNTI1NTc2ODYzLzEvMDVCdkt0c2V6Z1BKcm1BdVJFUzlWc2RucGVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80OGNiODYtMjc1MC00ZDZhLThhNzEtMWJlNTI1NTc2ODYz
LzEveVBiMTNzQ2J4NkVnTUVWcG02QllLVjA0NDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUPbwAwQD
U4jwAwQDsN0IAwQCuQfIMA0EAgACMAcDBQAqA8+AMA0GCSqGSIb3DQEBCwUAA4IB
AQCfHKTopJfDpeMGfujdFnd/OtrSqgS3vIZhG+9JCqsz2AN9wQu5jgBH8kidFRCe
9U2KdpHffnyz1u5tn6Ugzl002z6S/8UWe9e9p9j2rMgg2bM09igmp3E/rAduRMkR
ibdCYze4UJT4VzOJLOyo2ejt39qzAumNUgSQLYXY4AavJAycDDCC7rG+vCQ+R878
YyNaezb3ne2mSIev/RP9nqdbuQVGdsuJnAgdIfAVJxZ2SxtJApL5213RdzEar9jh
44HDufTmmpUIHa/04RfluiSnB41h22mkNknkRfpregwT8mOnQMvKCQho/oes392d
AtQ6/79UM9vMQqaX4DRqhB8C
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:44:23 2025 by rpki-client