Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/QYBZv6Rzc9aStpwcFsTWQL6yvFg.roa
File: QYBZv6Rzc9aStpwcFsTWQL6yvFg.roa (raw, json)
Hash identifier: PRJKkQnpn/tcg+dzdcZ1qZ1BEesvrG2oeYDcyqyikNA=
Subject key identifier: 41:80:59:BF:A4:73:73:D6:92:B6:9C:1C:16:C4:D6:40:BE:B2:BC:58
Certificate issuer: /CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Certificate serial: 02803377
Authority key identifier: 6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/QYBZv6Rzc9aStpwcFsTWQL6yvFg.roa
Signing time: Wed 09 Mar 2022 15:34:39 +0000
ROA not before: Wed 09 Mar 2022 15:34:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.43.254.0/24 maxlen: 24
185.43.255.0/24 maxlen: 24
212.104.188.0/24 maxlen: 24
212.104.187.0/24 maxlen: 24
212.104.191.0/24 maxlen: 24
212.104.190.0/24 maxlen: 24
212.104.189.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.253.0/24 maxlen: 24
185.43.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41956215 (0x2803377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Validity
Not Before: Mar 9 15:34:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=418059bfa47373d692b69c1c16c4d640beb2bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:f9:10:52:16:36:65:04:a6:8b:9a:af:f2:
99:db:69:60:9a:55:a3:37:5c:71:1d:7e:53:3a:b7:
b9:0a:14:da:2c:01:49:59:6a:d5:ac:b2:06:24:b1:
0b:01:ab:2d:d4:fc:0e:5f:02:a2:44:23:ca:95:5e:
43:c7:b2:16:d3:d4:0b:d4:16:32:ba:33:0d:43:c9:
11:8e:57:a2:d3:b8:69:c4:53:b3:a3:5f:fa:7f:df:
34:b4:8c:f6:57:22:b8:ff:90:2d:e0:3e:26:b0:f3:
eb:d1:a4:66:a7:b9:9f:cc:03:a1:17:3b:8f:f7:95:
59:75:53:d9:3c:fa:73:5d:4c:c9:3c:7a:a2:44:f3:
03:33:68:39:ad:cf:d4:b2:10:d4:b3:00:56:16:69:
df:0c:b2:13:58:a8:a5:6e:95:d4:fc:6e:94:7b:de:
4a:08:19:cc:98:08:d6:1e:d0:db:dd:fd:7e:66:9f:
f5:14:23:90:5e:f0:19:c8:69:45:24:73:3f:64:f4:
1a:1f:15:1d:db:bc:2f:c1:e9:aa:6a:fd:d6:65:2a:
43:f7:8c:9f:b2:c4:1e:7d:2c:6e:93:a2:55:fc:c8:
da:98:a8:b0:22:6a:e6:b4:4b:6f:62:11:7a:49:05:
84:59:bb:33:fd:5c:40:ee:3b:43:a1:64:a2:5f:b3:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:59:BF:A4:73:73:D6:92:B6:9C:1C:16:C4:D6:40:BE:B2:BC:58
X509v3 Authority Key Identifier:
keyid:6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/QYBZv6Rzc9aStpwcFsTWQL6yvFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.252.0/22
193.91.0.0/24
193.91.10.0/24
212.104.187.0-212.104.191.255
Signature Algorithm: sha256WithRSAEncryption
73:45:d1:72:97:83:1f:1f:4b:c2:e5:65:39:47:a8:2b:5a:c9:
f2:6d:b8:3e:23:dd:8b:04:b2:2d:3b:fb:8e:38:cc:ed:b5:9d:
6b:1c:0d:ea:f9:fa:0c:25:62:19:f2:7c:9a:49:8d:fc:5e:98:
e2:24:73:0f:d5:26:5d:8b:48:6e:c7:ca:cc:d0:7d:ce:51:f3:
ab:d2:4f:19:37:4f:dd:79:31:b3:0a:f3:27:19:76:f4:02:8f:
68:c8:91:d8:13:77:36:ea:5c:59:75:9d:12:3f:68:4a:e8:37:
d4:aa:cc:60:b9:64:86:22:7a:d3:10:96:25:87:e1:10:09:25:
7d:51:57:9f:d0:37:da:72:9e:e9:32:47:08:22:28:d2:eb:8b:
25:9b:6b:49:87:b6:74:de:0c:cb:15:be:3e:e6:ee:54:86:f1:
2e:15:9c:ac:17:ac:e2:53:3d:61:ab:1a:c2:20:aa:56:69:ca:
05:49:7b:ac:69:ad:40:48:81:c1:af:9c:00:28:43:11:c9:45:
75:10:ce:69:64:c9:1e:26:b4:1d:a6:c3:9b:34:5e:6e:80:f9:
60:c9:74:33:7e:0d:cf:ac:0f:73:c2:5d:d8:c4:ec:aa:d9:e6:
d3:68:e8:a4:89:fa:c9:7e:48:b5:0e:3a:fb:33:9c:f9:66:13:
62:f4:c1:e1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEAoAzdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDZiMjAwNDVlMWQwZmU2Y2VmMjg3ODFlYjMwMGJkZTk4MjVhNGI1MB4XDTIyMDMw
OTE1MzQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDE4MDU5YmZhNDcz
NzNkNjkyYjY5YzFjMTZjNGQ2NDBiZWIyYmM1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzw+RBSFjZlBKaLmq/ymdtpYJpVozdccR1+Uzq3uQoU2iwB
SVlq1ayyBiSxCwGrLdT8Dl8CokQjypVeQ8eyFtPUC9QWMrozDUPJEY5XotO4acRT
s6Nf+n/fNLSM9lciuP+QLeA+JrDz69GkZqe5n8wDoRc7j/eVWXVT2Tz6c11MyTx6
okTzAzNoOa3P1LIQ1LMAVhZp3wyyE1iopW6V1PxulHveSggZzJgI1h7Q2939fmaf
9RQjkF7wGchpRSRzP2T0Gh8VHdu8L8Hpqmr91mUqQ/eMn7LEHn0sbpOiVfzI2pio
sCJq5rRLb2IRekkFhFm7M/1cQO47Q6Fkol+zspUCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBRBgFm/pHNz1pK2nBwWxNZAvrK8WDAfBgNVHSMEGDAWgBRtayAEXh0P5s7y
h4HrMAvemCWktTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JXc2dCRjRkRC1iTzhvZUI2ekFMM3BnbHBMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvYjJlYjBjLWIwMjMtNDEzMi05ZTFhLWQ4YTZjZGM1YzIwYy8x
L1FZQlp2NlJ6YzlhU3Rwd2NGc1RXUUw2eXZGZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
YjJlYjBjLWIwMjMtNDEzMi05ZTFhLWQ4YTZjZGM1YzIwYy8xL2JXc2dCRjRkRC1i
TzhvZUI2ekFMM3BnbHBMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEArkr/AMEAMFbAAMEAMFbCjAMAwQA
1Gi7AwQG1GiAMA0GCSqGSIb3DQEBCwUAA4IBAQBzRdFyl4MfH0vC5WU5R6grWsny
bbg+I92LBLItO/uOOMzttZ1rHA3q+foMJWIZ8nyaSY38XpjiJHMP1SZdi0hux8rM
0H3OUfOr0k8ZN0/deTGzCvMnGXb0Ao9oyJHYE3c26lxZdZ0SP2hK6DfUqsxguWSG
InrTEJYlh+EQCSV9UVef0Dfacp7pMkcIIijS64slm2tJh7Z03gzLFb4+5u5UhvEu
FZysF6ziUz1hqxrCIKpWacoFSXusaa1ASIHBr5wAKEMRyUV1EM5pZMkeJrQdpsOb
NF5ugPlgyXQzfg3PrA9zwl3YxOyq2ebTaOikifrJfki1Djr7M5z5ZhNi9MHh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org