Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/yK4Z1HdW1bO3wuUZAug4T40rSh0.roa
File: yK4Z1HdW1bO3wuUZAug4T40rSh0.roa (raw, json)
Hash identifier: CYf+DVyweIR9ApLOzl/gBiCKtCgbLurbuRaPBpNTkEU=
Subject key identifier: C8:AE:19:D4:77:56:D5:B3:B7:C2:E5:19:02:E8:38:4F:8D:2B:4A:1D
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 0182D4B48E2AADBF3F44C46DFFEA6AE735B6
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/yK4Z1HdW1bO3wuUZAug4T40rSh0.roa
Signing time: Thu 25 Aug 2022 11:12:58 +0000
ROA not before: Thu 25 Aug 2022 11:12:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.58.0/23 maxlen: 23
86.107.57.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
193.138.192.0/23 maxlen: 23
193.138.192.0/22 maxlen: 22
193.138.194.0/24 maxlen: 24
89.47.0.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.234.0/23 maxlen: 23
89.35.238.0/24 maxlen: 24
2a05:8880::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:b4:8e:2a:ad:bf:3f:44:c4:6d:ff:ea:6a:e7:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Aug 25 11:12:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8ae19d47756d5b3b7c2e51902e8384f8d2b4a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:e6:9f:6c:b1:c8:99:aa:0f:06:69:a0:63:
cf:ea:d1:4f:a2:ef:d2:5f:06:34:e1:b1:97:51:b6:
89:95:fa:55:9b:67:5b:4e:72:19:48:38:6a:f4:18:
33:c0:8c:92:ba:07:af:50:20:a6:3a:48:7c:ec:bd:
00:25:ae:1c:8f:f6:d3:08:78:df:b8:41:e4:dc:e4:
a4:55:92:9c:a3:9e:67:10:eb:00:a1:b4:f9:3f:57:
07:ed:49:ad:db:a6:ec:9e:c7:40:31:26:57:68:2b:
dc:05:44:b6:38:e6:fc:26:b3:aa:75:e8:20:79:24:
53:e7:ad:13:13:f3:b0:63:a8:07:5f:de:61:27:b1:
92:c8:bd:cc:00:a9:2a:f7:69:8d:b5:87:19:8e:ef:
7e:03:ef:81:83:1b:ad:89:f4:ea:7a:05:05:29:df:
19:d8:51:a1:e3:e2:36:70:48:4a:a4:95:bf:2b:51:
4c:9a:f6:4c:b6:da:03:a1:67:64:04:37:74:ba:af:
cb:a9:70:44:34:be:4e:c7:28:0f:be:5a:4f:e7:58:
b4:c7:72:ff:4b:75:fb:cb:02:9c:fc:93:50:d4:b7:
ce:ca:1c:c3:15:f3:f0:7a:73:cb:bb:59:31:49:c2:
59:ed:c9:53:56:59:62:87:c6:8e:f8:a1:76:3f:3f:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:19:D4:77:56:D5:B3:B7:C2:E5:19:02:E8:38:4F:8D:2B:4A:1D
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/yK4Z1HdW1bO3wuUZAug4T40rSh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0-86.107.61.255
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.234.0-89.35.236.255
89.35.238.0/24
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
188.211.164.0/23
193.138.192.0/22
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
39:63:ca:be:c1:e2:00:a0:81:63:8f:5f:8c:dc:85:a0:7b:7f:
5d:4e:e0:0e:c6:53:5e:b6:f4:dc:44:ef:ee:ec:69:46:9e:9b:
96:ad:e6:74:fe:f4:73:12:17:6d:99:2f:c9:c7:7a:1c:da:dd:
67:ad:0b:06:9f:4d:a0:24:ed:9f:58:35:5b:4d:53:f8:d5:1f:
7e:fa:55:94:dc:9e:7b:e9:c6:cd:ac:09:1f:2b:2e:77:36:5e:
f6:21:ab:70:ab:a1:0c:3f:da:8a:d6:02:16:eb:e4:92:6e:67:
20:a9:8c:2d:31:ea:c1:d1:17:77:fe:49:b7:9a:29:f7:17:e5:
2f:5b:0d:88:48:cf:7c:e9:c2:84:48:ad:56:2f:b1:ed:e9:71:
35:44:52:66:a4:28:3e:4a:02:32:ad:5c:20:6e:67:e4:f0:db:
11:29:f2:60:71:80:bb:c3:99:b9:40:70:3e:16:11:2d:ad:49:
77:0f:4a:3a:ed:d4:df:87:c3:0e:c8:5e:8e:3e:6a:2c:ca:4a:
af:4e:4d:2b:89:23:4d:04:15:fd:ca:cb:f5:5a:43:af:16:ea:
2c:e3:12:c5:ee:b3:9c:de:0c:ba:1b:e7:4d:d4:92:85:76:38:
50:40:72:4e:04:db:11:3a:cf:8a:fe:18:56:05:b7:0e:3b:46:
21:61:54:a3
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAYLUtI4qrb8/RMRt/+pq5zW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjQ4ZjdmYWUwMTI5MTZhNzc1ZDVlM2I2ZmEyMzEwOTgz
NDNlYTAwHhcNMjIwODI1MTExMjU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGFlMTlkNDc3NTZkNWIzYjdjMmU1MTkwMmU4Mzg0ZjhkMmI0YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmTmn2yxyJmqDwZpoGPP6tFPou/S
XwY04bGXUbaJlfpVm2dbTnIZSDhq9BgzwIySugevUCCmOkh87L0AJa4cj/bTCHjf
uEHk3OSkVZKco55nEOsAobT5P1cH7Umt26bsnsdAMSZXaCvcBUS2OOb8JrOqdegg
eSRT560TE/OwY6gHX95hJ7GSyL3MAKkq92mNtYcZju9+A++BgxutifTqegUFKd8Z
2FGh4+I2cEhKpJW/K1FMmvZMttoDoWdkBDd0uq/LqXBENL5OxygPvlpP51i0x3L/
S3X7ywKc/JNQ1LfOyhzDFfPwenPLu1kxScJZ7clTVllih8aO+KF2Pz/w9QIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFMiuGdR3VtWzt8LlGQLoOE+NK0odMB8GA1UdIwQY
MBaAFEL0j3+uASkWp3XV47b6IxCYND6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZTUGY2NEJLUmFuZGRYanR2b2pFSmcwUHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OTQ0NTUtMWQyZS00ZTJiLThmMGUt
OWEwY2ZjZTg3OGE0LzEveUs0WjFIZFcxYk8zd3VVWkF1ZzRUNDByU2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OTQ0NTUtMWQyZS00ZTJiLThmMGUtOWEwY2ZjZTg3OGE0
LzEvUXZTUGY2NEJLUmFuZGRYanR2b2pFSmcwUHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXgQCAAEwWDAMAwQAVms5
AwQBVms8AwQAVms/AwQAWSPgAwQAWSPlAwQAWSPoMAwDBAFZI+oDBABZI+wDBABZ
I+4DBABZLwADBABZLwwDBABZLw4DBAG806QDBALBisAwDQQCAAIwBwMFAioFiIAw
DQYJKoZIhvcNAQELBQADggEBADljyr7B4gCggWOPX4zchaB7f11O4A7GU1629NxE
7+7saUaem5at5nT+9HMSF22ZL8nHehza3WetCwafTaAk7Z9YNVtNU/jVH376VZTc
nnvpxs2sCR8rLnc2XvYhq3CroQw/2orWAhbr5JJuZyCpjC0x6sHRF3f+SbeaKfcX
5S9bDYhIz3zpwoRIrVYvse3pcTVEUmakKD5KAjKtXCBuZ+Tw2xEp8mBxgLvDmblA
cD4WES2tSXcPSjrt1N+Hww7IXo4+aizKSq9OTSuJI00EFf3Ky/VaQ68W6izjEsXu
s5zeDLob503UkoV2OFBAck4E2xE6z4r+GFYFtw47RiFhVKM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org