Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/2ynWj-RhStMFWGBf0RHKcb3dTkA.roa
File: 2ynWj-RhStMFWGBf0RHKcb3dTkA.roa (raw, json)
Hash identifier: OY4bRkr4f5lXGVL18PwHpRCKStgJZ0SdqRzo4xwUZqs=
Subject key identifier: DB:29:D6:8F:E4:61:4A:D3:05:58:60:5F:D1:11:CA:71:BD:DD:4E:40
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 069D0A69
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/2ynWj-RhStMFWGBf0RHKcb3dTkA.roa
Signing time: Mon 02 May 2022 03:41:11 +0000
ROA not before: Mon 02 May 2022 03:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
93.113.31.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
94.176.96.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.61.156.0/22 maxlen: 24
31.177.0.0/21 maxlen: 24
188.241.223.0/24 maxlen: 24
185.137.36.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110955113 (0x69d0a69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: May 2 03:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db29d68fe4614ad30558605fd111ca71bddd4e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:1c:01:11:4c:63:1f:86:fd:c1:b7:3a:5d:
4f:c5:2a:af:db:d8:fa:98:0f:f4:b7:a5:3f:ee:ab:
5e:58:b3:7f:af:41:c8:c5:5d:2c:58:cf:75:71:12:
23:55:21:14:0b:c5:96:92:cf:33:c9:62:f9:0f:ba:
c4:73:eb:2d:1c:13:5c:e1:de:96:53:21:46:88:68:
3d:fe:da:8f:aa:df:19:d0:36:73:66:84:0f:b7:b9:
e5:49:15:5e:84:5b:25:b5:60:ae:dd:cd:67:4d:4d:
77:1d:6e:f0:24:49:ab:03:53:57:4f:ce:6b:99:9e:
1a:6e:ac:53:92:86:00:e2:e2:bb:a9:a4:f4:bc:1c:
c8:78:eb:7b:10:d6:95:eb:a2:a9:21:46:75:c9:80:
73:00:b5:6a:24:5f:ce:e9:b5:c6:bd:1a:bf:41:c3:
b6:91:7d:5c:94:0c:a9:36:21:48:8b:5f:d5:14:4a:
2a:ef:22:eb:fe:2e:9b:a0:07:79:8a:15:5d:00:a4:
2b:33:de:5d:75:3e:c3:98:e1:30:4c:6d:ae:f7:3b:
cc:de:92:db:dc:13:4e:2b:c2:0b:35:41:1e:4e:7b:
3d:18:a1:0d:73:d7:41:8f:3b:6e:a4:4f:cd:94:ed:
aa:c0:5e:38:d1:95:84:ae:76:f8:de:2d:ec:b1:79:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:D6:8F:E4:61:4A:D3:05:58:60:5F:D1:11:CA:71:BD:DD:4E:40
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/2ynWj-RhStMFWGBf0RHKcb3dTkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
86.106.135.0/24
87.121.136.0/21
89.44.77.0/24
93.113.31.0/24
93.113.175.0/24
93.114.129.0/24
94.176.96.0/24
185.61.156.0/22
185.137.36.0/22
188.241.223.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ce:27:d6:43:5a:a1:56:db:b0:c9:53:cc:15:a3:5f:48:d6:
00:de:3e:a0:de:41:52:71:43:be:01:b8:f2:b5:55:bd:d9:37:
93:a9:ff:cd:ac:a9:4c:17:9f:e5:db:a0:01:97:59:8e:3b:72:
d8:5e:d5:f8:a8:29:46:3f:a5:3b:d7:cb:71:7c:00:3a:7f:7b:
cc:3f:e2:41:7f:cf:84:e1:cc:49:91:cb:d6:40:a8:7e:eb:8c:
9b:3d:b4:32:40:0f:af:12:a8:a0:2b:0c:9b:17:ae:27:57:ea:
01:03:cb:09:37:45:b5:a5:11:4d:31:60:69:df:a4:92:e2:ce:
23:08:71:fe:d0:c1:c7:07:c1:fa:91:98:97:09:45:41:04:f1:
32:18:48:d5:d4:11:31:af:14:77:12:41:16:9f:07:bd:80:4f:
d0:72:14:06:a0:36:e6:56:e2:3f:77:6d:80:ac:36:a9:86:15:
51:3a:f1:3e:28:7a:f8:61:2e:d4:9d:81:ca:ef:2a:2a:e1:64:
58:c6:d8:37:dd:7a:a1:2f:60:61:dd:ae:cc:82:a5:27:64:cf:
ee:87:e0:7b:f6:3c:c9:08:ab:f3:62:03:d3:8a:4d:70:d9:69:
72:06:c6:ad:25:42:ee:29:6f:47:43:69:b5:30:e2:cd:6f:4a:
52:9c:60:4c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIEBp0KaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDUw
MjAzNDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGIyOWQ2OGZlNDYx
NGFkMzA1NTg2MDVmZDExMWNhNzFiZGRkNGU0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOQ/HAERTGMfhv3BtzpdT8Uqr9vY+pgP9LelP+6rXlizf69B
yMVdLFjPdXESI1UhFAvFlpLPM8li+Q+6xHPrLRwTXOHellMhRohoPf7aj6rfGdA2
c2aED7e55UkVXoRbJbVgrt3NZ01Ndx1u8CRJqwNTV0/Oa5meGm6sU5KGAOLiu6mk
9LwcyHjrexDWleuiqSFGdcmAcwC1aiRfzum1xr0av0HDtpF9XJQMqTYhSItf1RRK
Ku8i6/4um6AHeYoVXQCkKzPeXXU+w5jhMExtrvc7zN6S29wTTivCCzVBHk57PRih
DXPXQY87bqRPzZTtqsBeONGVhK52+N4t7LF5Pm0CAwEAAaOCAlcwggJTMB0GA1Ud
DgQWBBTbKdaP5GFK0wVYYF/REcpxvd1OQDAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
LzJ5bldqLVJoU3RNRldHQmYwUkhLY2IzZFRrQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBt
BggrBgEFBQcBBwEB/wReMFwwWgQCAAEwVAMEAx+xAAMEACWc4gMEAC5mdAMEBT71
AAMEAFZqhwMEA1d5iAMEAFksTQMEAF1xHwMEAF1xrwMEAF1ygQMEAF6wYAMEArk9
nAMEArmJJAMEALzx3zANBgkqhkiG9w0BAQsFAAOCAQEAks4n1kNaoVbbsMlTzBWj
X0jWAN4+oN5BUnFDvgG48rVVvdk3k6n/zaypTBef5dugAZdZjjty2F7V+KgpRj+l
O9fLcXwAOn97zD/iQX/PhOHMSZHL1kCofuuMmz20MkAPrxKooCsMmxeuJ1fqAQPL
CTdFtaURTTFgad+kkuLOIwhx/tDBxwfB+pGYlwlFQQTxMhhI1dQRMa8UdxJBFp8H
vYBP0HIUBqA25lbiP3dtgKw2qYYVUTrxPih6+GEu1J2Byu8qKuFkWMbYN916oS9g
Yd2uzIKlJ2TP7ofge/Y8yQir82ID04pNcNlpcgbGrSVC7ilvR0NptTDizW9KUpxg
TA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:35 2025 by rpki-client