Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ACeJRysMyMtjuwq7lu8ClKqePy0.roa
File: ACeJRysMyMtjuwq7lu8ClKqePy0.roa (raw, json)
Hash identifier: Koyj8kqjDx1o3juZ/81y5QZ7qP0anZasF7IrIkRpOjQ=
Subject key identifier: 00:27:89:47:2B:0C:C8:CB:63:BB:0A:BB:96:EF:02:94:AA:9E:3F:2D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0184065D3C2944C25C4B2C6DEFF8E4C8C587
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ACeJRysMyMtjuwq7lu8ClKqePy0.roa
Signing time: Sun 23 Oct 2022 19:41:24 +0000
ROA not before: Sun 23 Oct 2022 19:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:06:5d:3c:29:44:c2:5c:4b:2c:6d:ef:f8:e4:c8:c5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 23 19:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002789472b0cc8cb63bb0abb96ef0294aa9e3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:79:42:a3:58:22:5a:52:65:05:36:e2:fe:
1b:d5:7d:19:42:08:8a:65:e9:06:40:6c:ca:03:4e:
7c:3f:bc:7d:58:53:70:ba:77:8b:97:6d:cb:3d:88:
28:e6:36:c3:c1:5f:b0:41:67:b7:0b:69:db:a5:94:
c0:00:d7:d8:ff:cb:66:22:93:a5:ad:2d:a1:bb:0f:
d4:ab:25:d7:9b:eb:97:aa:7c:62:17:5e:64:73:be:
94:48:ab:d6:c9:00:8d:0d:74:10:f1:40:6d:d1:31:
47:eb:ee:54:28:d8:2b:05:66:1e:68:a3:b1:6e:48:
3f:74:93:d9:1c:2a:ba:96:23:93:9f:1c:70:23:8f:
17:a1:d3:66:6c:70:28:be:ef:a9:c3:ae:ee:d7:19:
93:8d:7b:83:9a:68:ab:f2:29:e7:65:59:1b:c9:ac:
25:18:e6:72:6d:62:62:89:c2:bc:dc:ec:70:11:41:
80:e6:89:fb:97:d2:ef:eb:1f:2b:2d:e1:79:64:63:
7f:71:23:0b:26:68:60:58:e5:d5:b1:bb:be:2c:c8:
6c:06:5b:42:5a:9f:ff:67:07:c0:52:dd:5a:4c:ca:
59:08:10:49:3a:5d:7c:fb:74:d3:47:e5:da:46:f3:
fa:e6:36:7a:ed:3a:c1:ee:3b:06:ed:0e:bf:79:eb:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:89:47:2B:0C:C8:CB:63:BB:0A:BB:96:EF:02:94:AA:9E:3F:2D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ACeJRysMyMtjuwq7lu8ClKqePy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.210.0/23
89.116.252.0/24
89.117.8.0/23
89.117.32.0/23
89.117.94.0/23
89.117.116.0/23
89.117.190.0/24
89.117.222.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:57:c7:bb:1a:fa:c6:31:51:fd:58:1d:dc:4f:18:c8:31:87:
d5:57:dc:13:79:cc:33:66:0c:dc:4c:40:b5:ee:a8:95:91:20:
52:40:1d:2d:d2:4a:d0:df:4f:11:0a:e6:fd:07:73:69:a0:25:
39:62:98:47:61:eb:67:a2:68:3e:9b:c7:6e:65:a7:75:00:b8:
80:2e:4c:87:a1:d6:3e:70:6a:8a:d8:e5:0f:a4:3c:5e:c2:a9:
59:c3:4c:af:24:5d:35:65:a0:cc:e8:5c:ad:db:72:f3:30:5f:
90:4b:89:bb:e6:18:91:ef:2d:82:9e:f6:7f:5d:97:9e:79:27:
05:3a:b7:68:4d:ed:46:53:3e:b0:61:7b:66:9f:f2:b1:bc:8c:
59:2c:88:93:f1:4a:cc:0d:2c:be:11:58:37:f8:c4:92:68:39:
ee:eb:18:80:c2:a1:f9:20:8d:50:f3:0f:4c:8d:a6:1f:7d:1d:
5c:44:dc:27:ce:8e:70:06:56:26:bc:a7:56:ea:9b:67:a2:87:
9e:30:32:5a:70:5b:c0:b4:34:0d:66:89:77:a6:2d:56:af:b2:
76:68:da:99:cd:97:ba:91:66:1c:34:60:5d:3e:99:e4:fe:6d:
27:40:ee:98:c4:38:ed:51:c9:5b:3d:53:5a:2d:32:2f:d4:14:
de:ae:91:1c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYQGXTwpRMJcSyxt7/jkyMWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDIzMTk0MTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDI3ODk0NzJiMGNjOGNiNjNiYjBhYmI5NmVmMDI5NGFhOWUzZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz15QqNYIlpSZQU24v4b1X0ZQgiK
ZekGQGzKA058P7x9WFNwuneLl23LPYgo5jbDwV+wQWe3C2nbpZTAANfY/8tmIpOl
rS2huw/UqyXXm+uXqnxiF15kc76USKvWyQCNDXQQ8UBt0TFH6+5UKNgrBWYeaKOx
bkg/dJPZHCq6liOTnxxwI48XodNmbHAovu+pw67u1xmTjXuDmmir8innZVkbyawl
GOZybWJiicK83OxwEUGA5on7l9Lv6x8rLeF5ZGN/cSMLJmhgWOXVsbu+LMhsBltC
Wp//ZwfAUt1aTMpZCBBJOl18+3TTR+XaRvP65jZ67TrB7jsG7Q6/ees/6wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFAAniUcrDMjLY7sKu5bvApSqnj8tMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvQUNlSlJ5c015TXRqdXdxN2x1OENsS3FlUHkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAVYm
sgMEAlYmuAMEAVYmygMEAVYm9gMEAFl0bAMEAFl0hAMEAFl0hwMEAFl0lgMEAFl0
oQMEAFl0owMEAFl0pgMEAVl00gMEAFl0/AMEAVl1CAMEAVl1IAMEAVl1XgMEAVl1
dAMEAFl1vgMEAFl13gMEAFl19QMEAFl1+jANBgkqhkiG9w0BAQsFAAOCAQEALVfH
uxr6xjFR/Vgd3E8YyDGH1VfcE3nMM2YM3ExAte6olZEgUkAdLdJK0N9PEQrm/Qdz
aaAlOWKYR2HrZ6JoPpvHbmWndQC4gC5Mh6HWPnBqitjlD6Q8XsKpWcNMryRdNWWg
zOhcrdty8zBfkEuJu+YYke8tgp72f12XnnknBTq3aE3tRlM+sGF7Zp/ysbyMWSyI
k/FKzA0svhFYN/jEkmg57usYgMKh+SCNUPMPTI2mH30dXETcJ86OcAZWJrynVuqb
Z6KHnjAyWnBbwLQ0DWaJd6YtVq+ydmjamc2XupFmHDRgXT6Z5P5tJ0DumMQ47VHJ
Wz1TWi0yL9QU3q6RHA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:53 2025 by rpki-client