Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gF_2JGBRJRFnQM-PBdFlC0FVwSg.roa
File: gF_2JGBRJRFnQM-PBdFlC0FVwSg.roa (raw, json)
Hash identifier: O7cRfo0rx0kRCq2aYtcRiM/PjbdrU82hATjFyecUg+g=
Subject key identifier: 80:5F:F6:24:60:51:25:11:67:40:CF:8F:05:D1:65:0B:41:55:C1:28
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063CA9AE3C3B13A77362C9FB09D7CBD
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gF_2JGBRJRFnQM-PBdFlC0FVwSg.roa
Signing time: Thu 13 Oct 2022 08:09:04 +0000
ROA not before: Thu 13 Oct 2022 08:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:ca:9a:e3:c3:b1:3a:77:36:2c:9f:b0:9d:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805ff624605125116740cf8f05d1650b4155c128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:bc:47:90:ee:98:a6:a1:40:9f:9c:0f:b1:
7d:28:b6:28:06:5a:ed:9a:f3:d3:6f:ea:f5:d3:5d:
db:58:dc:0b:79:78:c4:20:e0:f0:82:3b:ae:fa:76:
22:88:1e:d6:1d:1f:7f:92:1c:e6:15:0b:6c:91:80:
6e:bc:1a:5d:d4:d5:cf:ee:b4:81:e0:65:ed:34:2b:
0f:0a:ab:e6:d5:f4:a6:43:5b:fe:a4:58:70:67:15:
54:0e:bf:17:14:1d:36:e4:f4:c8:e8:7d:33:a3:8e:
fc:4a:45:83:3c:3e:33:86:9c:69:23:16:eb:38:49:
5a:61:ef:19:d9:af:0c:a8:6a:71:88:cc:56:b0:db:
16:f1:bf:ec:85:bc:24:69:f0:39:c1:8f:f4:ed:17:
57:a8:9e:34:14:e2:2c:4e:a5:18:ae:a6:70:3f:94:
c2:5e:65:1b:fd:6d:76:71:23:ff:b5:60:1e:2b:29:
3a:40:e9:e2:01:10:ff:7e:ed:62:27:af:db:99:9e:
48:c9:49:8a:9e:52:53:1b:a9:d2:d6:8d:9b:38:fa:
56:10:6a:03:aa:ce:42:f1:df:54:70:c7:1a:90:5f:
4a:67:44:e2:83:d0:e8:ab:14:8d:72:93:88:e6:cd:
33:c0:8b:74:a3:18:19:c7:a5:93:51:36:c7:25:44:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:F6:24:60:51:25:11:67:40:CF:8F:05:D1:65:0B:41:55:C1:28
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gF_2JGBRJRFnQM-PBdFlC0FVwSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.117.27.0/24
89.117.94.0/23
89.117.109.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e6:81:a4:5a:6c:97:98:28:fc:d2:55:28:80:b7:7e:03:64:
de:4e:01:82:15:4d:9e:2b:f6:1b:c7:78:1e:59:5b:6d:5a:0f:
1e:a7:30:d3:5c:83:8c:9f:42:fd:03:cc:7d:62:2e:2a:08:55:
08:ed:20:d4:c8:ba:d2:7e:f9:ea:0c:d0:b3:c0:1b:b9:c6:e3:
25:9b:79:74:e0:9f:33:34:f0:98:46:00:ff:16:24:a9:b6:37:
d5:db:4a:e3:0e:5f:5d:66:fc:ed:16:91:2a:ab:84:58:93:9d:
d5:56:6a:43:38:e8:5a:a2:d1:96:05:11:c1:be:15:8c:99:01:
ca:7f:0e:b5:7c:c1:f8:1d:43:e9:fd:28:f1:69:09:ba:ee:a9:
08:ea:96:f2:26:24:62:ac:08:22:b5:b2:23:ff:b1:3e:7b:f7:
dd:4c:4c:ae:87:37:62:c4:90:84:f7:ad:7b:99:37:16:9f:54:
64:7a:9f:06:18:40:6d:2b:64:d5:b0:2d:f2:d5:0b:f3:aa:b7:
37:c6:2d:91:90:b1:29:68:3b:65:58:88:bb:30:e4:72:4c:d0:
ff:35:fe:49:4c:a0:74:45:ad:92:d3:e7:7d:e1:55:a0:a8:d6:
84:f9:56:14:61:da:ab:cd:21:65:7e:ef:f2:e6:fb:2d:0f:73:
75:8a:db:79
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYPQY8qa48OxOnc2LJ+wnXy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDEzMDgwOTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDVmZjYyNDYwNTEyNTExNjc0MGNmOGYwNWQxNjUwYjQxNTVjMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx68R5DumKahQJ+cD7F9KLYoBlrt
mvPTb+r1013bWNwLeXjEIODwgjuu+nYiiB7WHR9/khzmFQtskYBuvBpd1NXP7rSB
4GXtNCsPCqvm1fSmQ1v+pFhwZxVUDr8XFB025PTI6H0zo478SkWDPD4zhpxpIxbr
OElaYe8Z2a8MqGpxiMxWsNsW8b/shbwkafA5wY/07RdXqJ40FOIsTqUYrqZwP5TC
XmUb/W12cSP/tWAeKyk6QOniARD/fu1iJ6/bmZ5IyUmKnlJTG6nS1o2bOPpWEGoD
qs5C8d9UcMcakF9KZ0Tig9DoqxSNcpOI5s0zwIt0oxgZx6WTUTbHJUTc1wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFIBf9iRgUSURZ0DPjwXRZQtBVcEoMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvZ0ZfMkpHQlJKUkZuUU0tUEJkRmxDMEZWd1NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAVC6rAwQA
ViYHAwQAViYlAwQAViaxAwQAVibIAwQAWXQ4AwQAWXRkAwQAWXRzAwQAWXUbAwQB
WXVeAwQAWXVtAwQAWXX6MA0GCSqGSIb3DQEBCwUAA4IBAQCC5oGkWmyXmCj80lUo
gLd+A2TeTgGCFU2eK/Ybx3geWVttWg8epzDTXIOMn0L9A8x9Yi4qCFUI7SDUyLrS
fvnqDNCzwBu5xuMlm3l04J8zNPCYRgD/FiSptjfV20rjDl9dZvztFpEqq4RYk53V
VmpDOOhaotGWBRHBvhWMmQHKfw61fMH4HUPp/SjxaQm67qkI6pbyJiRirAgitbIj
/7E+e/fdTEyuhzdixJCE9617mTcWn1Rkep8GGEBtK2TVsC3y1Qvzqrc3xi2RkLEp
aDtlWIi7MORyTND/Nf5JTKB0Ra2S0+d94VWgqNaE+VYUYdqrzSFlfu/y5vstD3N1
itt5
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:20 2025 by rpki-client