Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/3rz9BystRZyExNjTRzI6esobiEo.roa
File: 3rz9BystRZyExNjTRzI6esobiEo.roa (raw, json)
Hash identifier: MVUVKccUn09ySXdUS1pgvPhGMxkfo2kwU2+oG19PMlg=
Subject key identifier: DE:BC:FD:07:2B:2D:45:9C:84:C4:D8:D3:47:32:3A:7A:CA:1B:88:4A
Certificate issuer: /CN=185228c77144d945c51633cecb94c02a434e1db6
Certificate serial: 090A2086
Authority key identifier: 18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/3rz9BystRZyExNjTRzI6esobiEo.roa
Signing time: Sat 01 Jan 2022 01:58:46 +0000
ROA not before: Sat 01 Jan 2022 01:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62235
IP address blocks: 86.107.56.0/24 maxlen: 24
188.213.80.0/22 maxlen: 24
92.119.0.0/22 maxlen: 24
89.39.167.0/24 maxlen: 24
85.204.200.0/21 maxlen: 24
37.156.108.0/22 maxlen: 24
89.46.247.0/24 maxlen: 24
188.212.16.0/22 maxlen: 24
185.41.244.0/22 maxlen: 24
195.82.98.0/23 maxlen: 24
185.228.244.0/22 maxlen: 24
87.247.128.0/22 maxlen: 24
185.87.128.0/22 maxlen: 24
194.124.56.0/22 maxlen: 24
89.36.169.0/24 maxlen: 24
45.14.204.0/22 maxlen: 24
5.183.56.0/22 maxlen: 24
37.156.76.0/22 maxlen: 24
139.28.88.0/22 maxlen: 24
89.45.220.0/22 maxlen: 24
94.177.0.0/22 maxlen: 24
89.46.35.0/24 maxlen: 24
89.46.37.0/24 maxlen: 24
89.46.32.0/24 maxlen: 24
89.46.39.0/24 maxlen: 24
185.56.76.0/22 maxlen: 24
188.212.253.0/24 maxlen: 24
45.86.184.0/22 maxlen: 24
89.35.231.0/24 maxlen: 24
89.35.227.0/24 maxlen: 24
89.44.82.0/24 maxlen: 24
188.214.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151658630 (0x90a2086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185228c77144d945c51633cecb94c02a434e1db6
Validity
Not Before: Jan 1 01:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=debcfd072b2d459c84c4d8d347323a7aca1b884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:2f:1e:28:ff:00:f8:bf:a8:17:91:eb:68:
4f:ab:51:bc:7c:bb:ba:b7:7b:ec:73:04:90:30:5e:
28:00:21:69:06:8c:08:42:9d:d7:96:8f:03:36:30:
2a:5b:bc:01:d5:ab:e5:ed:f5:71:4c:d6:18:0a:ec:
77:ad:7a:39:bf:26:18:d3:20:0c:f8:71:3b:47:02:
47:6b:4b:52:03:b9:58:47:74:52:95:54:c4:49:88:
9f:22:86:fa:d4:97:0f:bb:7e:5d:26:69:89:10:0e:
81:a3:27:0d:1d:03:8d:b0:19:a3:03:ad:07:f3:ac:
ae:48:87:a3:cc:68:64:1f:c3:05:88:f3:89:f7:d0:
d4:26:f8:f7:29:50:2a:ff:99:fa:19:82:cd:a8:f3:
96:a8:af:16:d3:77:8c:1b:d7:f1:a3:d0:ed:88:35:
74:e5:af:5a:50:dd:21:d3:3f:bf:e2:30:69:1e:0d:
63:46:ec:d6:63:aa:ef:7e:2e:f9:88:e2:5f:f9:f5:
9f:f9:27:6e:97:28:07:d3:35:36:7d:3d:81:c6:9e:
f6:0e:b8:e7:3d:e6:91:a8:df:20:8f:99:3c:1a:e1:
f1:84:f3:8b:02:c0:ad:f1:58:4c:57:ef:04:3b:66:
f0:19:d3:d0:7d:59:2c:b1:c4:52:24:13:c9:a0:e0:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:FD:07:2B:2D:45:9C:84:C4:D8:D3:47:32:3A:7A:CA:1B:88:4A
X509v3 Authority Key Identifier:
keyid:18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/3rz9BystRZyExNjTRzI6esobiEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.56.0/22
37.156.76.0/22
37.156.108.0/22
45.14.204.0/22
45.86.184.0/22
85.204.200.0/21
86.107.56.0/24
87.247.128.0/22
89.35.227.0/24
89.35.231.0/24
89.36.169.0/24
89.39.167.0/24
89.44.82.0/24
89.45.220.0/22
89.46.32.0/24
89.46.35.0/24
89.46.37.0/24
89.46.39.0/24
89.46.247.0/24
92.119.0.0/22
94.177.0.0/22
139.28.88.0/22
185.41.244.0/22
185.56.76.0/22
185.87.128.0/22
185.228.244.0/22
188.212.16.0/22
188.212.253.0/24
188.213.80.0/22
188.214.112.0/21
194.124.56.0/22
195.82.98.0/23
Signature Algorithm: sha256WithRSAEncryption
23:83:4b:67:38:d4:7c:b7:f6:87:7d:ba:cb:bf:d9:29:f8:72:
71:ff:f5:d1:67:9f:ef:36:0b:6c:5e:c3:d9:76:80:91:45:c3:
0d:09:25:8b:2f:21:1c:4b:8b:dc:c2:a4:2e:fd:b4:1f:a2:7f:
63:d0:cf:05:38:5f:ec:7f:ee:5e:a5:f7:2c:07:31:6d:d2:46:
f9:a0:ae:bd:c5:ff:07:07:78:4e:64:c4:89:ee:26:6c:34:72:
9f:c0:9e:2f:20:47:21:d2:da:eb:77:18:dc:6c:86:05:92:09:
aa:e3:0b:42:84:bf:84:15:7c:16:8b:aa:f2:41:fa:38:bd:98:
94:16:df:ed:f5:fc:9c:c3:b8:bc:a4:86:8b:90:42:1f:46:73:
50:fe:23:30:80:26:72:32:7c:21:33:0a:a1:67:04:f6:d5:9f:
06:79:e0:aa:df:b4:55:ce:80:eb:dc:83:63:b2:6d:e7:3a:27:
bf:4a:02:41:84:80:ca:d0:5a:86:5f:e3:31:5c:c0:00:6e:2e:
6b:21:4e:84:4a:6c:e6:be:b9:f8:2a:fc:37:b5:1c:a8:46:c7:
b4:5d:7e:31:57:86:b4:c4:3f:46:df:88:1d:81:19:08:2b:ab:
9c:b6:c2:ae:18:36:a0:1d:33:02:cd:41:de:6a:44:64:9d:14:
0e:13:e7:38
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIECQoghjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ODUyMjhjNzcxNDRkOTQ1YzUxNjMzY2VjYjk0YzAyYTQzNGUxZGI2MB4XDTIyMDEw
MTAxNTg0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGViY2ZkMDcyYjJk
NDU5Yzg0YzRkOGQzNDczMjNhN2FjYTFiODg0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVQLx4o/wD4v6gXketoT6tRvHy7urd77HMEkDBeKAAhaQaM
CEKd15aPAzYwKlu8AdWr5e31cUzWGArsd616Ob8mGNMgDPhxO0cCR2tLUgO5WEd0
UpVUxEmInyKG+tSXD7t+XSZpiRAOgaMnDR0DjbAZowOtB/OsrkiHo8xoZB/DBYjz
iffQ1Cb49ylQKv+Z+hmCzajzlqivFtN3jBvX8aPQ7Yg1dOWvWlDdIdM/v+IwaR4N
Y0bs1mOq734u+YjiX/n1n/knbpcoB9M1Nn09gcae9g645z3mkajfII+ZPBrh8YTz
iwLArfFYTFfvBDtm8BnT0H1ZLLHEUiQTyaDgHj8CAwEAAaOCAsgwggLEMB0GA1Ud
DgQWBBTevP0HKy1FnITE2NNHMjp6yhuISjAfBgNVHSMEGDAWgBQYUijHcUTZRcUW
M87LlMAqQ04dtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dGSW94M0ZFMlVYRkZqUE95NVRBS2tOT0hiWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNDkyZTY1LWQyMjUtNDMyYi04ZDkxLWI5YjRiMGE1Yzk3ZC8x
LzNyejlCeXN0Ulp5RXhOalRSekk2ZXNvYmlFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NDkyZTY1LWQyMjUtNDMyYi04ZDkxLWI5YjRiMGE1Yzk3ZC8xL0dGSW94M0ZFMlVY
RkZqUE95NVRBS2tOT0hiWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
3QYIKwYBBQUHAQcBAf8Egc0wgcowgccEAgABMIHAAwQCBbc4AwQCJZxMAwQCJZxs
AwQCLQ7MAwQCLVa4AwQDVczIAwQAVms4AwQCV/eAAwQAWSPjAwQAWSPnAwQAWSSp
AwQAWSenAwQAWSxSAwQCWS3cAwQAWS4gAwQAWS4jAwQAWS4lAwQAWS4nAwQAWS73
AwQCXHcAAwQCXrEAAwQCixxYAwQCuSn0AwQCuThMAwQCuVeAAwQCueT0AwQCvNQQ
AwQAvNT9AwQCvNVQAwQDvNZwAwQCwnw4AwQBw1JiMA0GCSqGSIb3DQEBCwUAA4IB
AQAjg0tnONR8t/aHfbrLv9kp+HJx//XRZ5/vNgtsXsPZdoCRRcMNCSWLLyEcS4vc
wqQu/bQfon9j0M8FOF/sf+5epfcsBzFt0kb5oK69xf8HB3hOZMSJ7iZsNHKfwJ4v
IEch0trrdxjcbIYFkgmq4wtChL+EFXwWi6ryQfo4vZiUFt/t9fycw7i8pIaLkEIf
RnNQ/iMwgCZyMnwhMwqhZwT21Z8GeeCq37RVzoDr3INjsm3nOie/SgJBhIDK0FqG
X+MxXMAAbi5rIU6ESmzmvrn4Kvw3tRyoRse0XX4xV4a0xD9G34gdgRkIK6uctsKu
GDagHTMCzUHeakRknRQOE+c4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org