Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/siQGKPLvFM-czytZ6qcXkCIZH48.roa
File: siQGKPLvFM-czytZ6qcXkCIZH48.roa (raw, json)
Hash identifier: e5RnFZofzqaKYtPJoyhamvQ1Zf7ITsm2OkCtioxUEVc=
Subject key identifier: B2:24:06:28:F2:EF:14:CF:9C:CF:2B:59:EA:A7:17:90:22:19:1F:8F
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 022011
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/siQGKPLvFM-czytZ6qcXkCIZH48.roa
Signing time: Fri 25 Mar 2022 07:35:01 +0000
ROA not before: Fri 25 Mar 2022 07:35:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 86.104.192.0/24 maxlen: 24
86.104.195.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139281 (0x22011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Mar 25 07:35:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2240628f2ef14cf9ccf2b59eaa7179022191f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:f8:48:4b:ba:6c:da:9a:37:9d:eb:fd:f2:
fa:bc:46:a2:9f:64:e2:19:54:4f:e8:1b:22:22:f4:
9b:ed:bc:03:ae:82:e6:a3:64:24:63:7a:cf:f5:8a:
16:78:ea:a9:87:79:70:53:7e:7d:48:02:b6:3b:47:
1d:c9:ab:1e:96:2a:35:8d:9b:7b:1c:f6:27:f9:70:
9f:fc:d5:95:3f:46:8f:53:1d:6a:91:8f:e8:fb:57:
d9:13:4d:81:fb:fc:e1:d0:1e:65:49:20:61:cf:8a:
14:14:44:5b:e6:8f:f2:93:84:0d:26:9d:70:da:af:
b8:5b:ca:d9:81:ca:2d:45:92:42:cf:b1:92:10:27:
1a:5e:7c:e5:15:3c:59:0e:dd:af:20:88:76:70:ad:
21:64:13:32:25:53:3f:6a:32:fd:16:77:b6:1d:0f:
8c:27:88:a2:50:5a:02:39:5b:d7:27:a7:49:cb:14:
5f:6d:3d:e4:b7:28:5f:36:a0:66:0a:4f:e4:27:0a:
b7:4e:ce:cf:4a:02:ec:fb:33:66:2b:5a:d5:3d:5c:
48:f9:8f:dc:2e:17:16:f9:05:30:b5:78:2a:06:36:
00:76:cd:b6:a8:11:4a:cc:14:f6:95:1e:dd:57:1a:
69:f3:88:f5:7f:28:8c:99:75:3e:67:cf:0e:01:1f:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:24:06:28:F2:EF:14:CF:9C:CF:2B:59:EA:A7:17:90:22:19:1F:8F
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/siQGKPLvFM-czytZ6qcXkCIZH48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.192.0/24
86.104.195.0/24
89.32.126.0/24
94.231.198.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d2:15:22:2f:2e:8d:e7:3b:e7:3a:3a:36:13:bf:27:54:72:
6c:f4:ea:7e:b4:ce:a7:26:e2:bb:18:af:6b:8a:ab:13:8d:27:
95:c2:92:03:ed:c9:bb:64:49:cb:ee:37:30:f8:ad:95:a7:7b:
52:b3:b7:8d:35:6e:c8:fd:08:31:66:ce:fe:d3:0e:c4:ca:4f:
5c:aa:27:4d:75:cd:7c:f0:58:cf:36:02:13:7e:0c:c6:15:74:
92:a4:17:de:8a:31:1e:b2:29:90:34:9c:a0:dc:4c:dc:b5:f7:
4f:18:74:fa:e2:c8:ad:c2:b6:22:2b:09:ea:54:43:79:49:70:
26:de:46:bd:4c:ea:fe:c1:07:bd:d4:72:0d:e1:84:f4:db:9e:
6b:0e:4b:be:b9:b3:0d:17:23:c1:7a:ec:f4:ec:b5:dd:b5:4b:
76:05:28:77:78:43:43:02:1a:74:6d:40:8f:02:35:a5:d5:1b:
44:e0:9a:4c:a7:5e:67:d6:fc:77:cc:9d:ac:89:b7:1f:a4:77:
35:fc:9b:bf:85:e5:c5:00:34:0b:4c:e1:38:47:07:57:f9:de:
b9:52:d4:d8:21:c2:1a:2b:2c:6c:45:9b:29:65:1f:86:45:26:
7a:6c:62:d3:96:c9:30:0a:90:0f:a8:a0:1e:93:3f:51:89:7c:
7d:a3:64:b2
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIDAiARMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
MWQ2MTAxZDcyOWJjOTU1OTdkYTUyODYwNGVjMGIwYjdlMDA0MmMwHhcNMjIwMzI1
MDczNTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiMjI0MDYyOGYyZWYx
NGNmOWNjZjJiNTllYWE3MTc5MDIyMTkxZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuej4SEu6bNqaN53r/fL6vEain2TiGVRP6BsiIvSb7bwDroLm
o2QkY3rP9YoWeOqph3lwU359SAK2O0cdyaselio1jZt7HPYn+XCf/NWVP0aPUx1q
kY/o+1fZE02B+/zh0B5lSSBhz4oUFERb5o/yk4QNJp1w2q+4W8rZgcotRZJCz7GS
ECcaXnzlFTxZDt2vIIh2cK0hZBMyJVM/ajL9Fne2HQ+MJ4iiUFoCOVvXJ6dJyxRf
bT3ktyhfNqBmCk/kJwq3Ts7PSgLs+zNmK1rVPVxI+Y/cLhcW+QUwtXgqBjYAds22
qBFKzBT2lR7dVxpp84j1fyiMmXU+Z88OAR+9/wIDAQABo4ICITCCAh0wHQYDVR0O
BBYEFLIkBijy7xTPnM8rWeqnF5AiGR+PMB8GA1UdIwQYMBaAFIkdYQHXKbyVWX2l
KGBOwLC34AQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aVIxaEFkY3B2SlZaZmFVb1lFN0FzTGZnQkN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZS80YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEv
c2lRR0tQTHZGTS1jenl0WjZxY1hrQ0laSDQ4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80
YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEvaVIxaEFkY3B2SlZa
ZmFVb1lFN0FzTGZnQkN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG
CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmgTAwQAVmjAAwQAVmjDAwQAWSB+
AwQAXufGMA0GCSqGSIb3DQEBCwUAA4IBAQBY0hUiLy6N5zvnOjo2E78nVHJs9Op+
tM6nJuK7GK9riqsTjSeVwpID7cm7ZEnL7jcw+K2Vp3tSs7eNNW7I/QgxZs7+0w7E
yk9cqidNdc188FjPNgITfgzGFXSSpBfeijEesimQNJyg3EzctfdPGHT64sitwrYi
KwnqVEN5SXAm3ka9TOr+wQe91HIN4YT0255rDku+ubMNFyPBeuz07LXdtUt2BSh3
eENDAhp0bUCPAjWl1RtE4JpMp15n1vx3zJ2sibcfpHc1/Ju/heXFADQLTOE4RwdX
+d65UtTYIcIaKyxsRZspZR+GRSZ6bGLTlskwCpAPqKAekz9RiXx9o2Sy
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:35 2025 by rpki-client