Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/I742j-2VRVVzh6pSxorkT1mB950.roa
File: I742j-2VRVVzh6pSxorkT1mB950.roa (raw, json)
Hash identifier: l6ZTkLwhZRp8QCWcodbR+H6Rs//MTXO+sqx0DzOAVn4=
Subject key identifier: 23:BE:36:8F:ED:95:45:55:73:87:AA:52:C6:8A:E4:4F:59:81:F7:9D
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018B443CF09CAA8E1E54FFAEAE4100CC2426
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/I742j-2VRVVzh6pSxorkT1mB950.roa
Signing time: Wed 18 Oct 2023 19:22:06 +0000
ROA not before: Wed 18 Oct 2023 19:22:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
77.83.197.0/24 maxlen: 24
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
79.141.174.0/23 maxlen: 23
185.104.192.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:3c:f0:9c:aa:8e:1e:54:ff:ae:ae:41:00:cc:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 18 19:22:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23be368fed9545557387aa52c68ae44f5981f79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:3a:13:c1:44:46:e4:39:2e:c5:5e:f6:c8:
87:90:ac:84:5d:15:56:ad:0f:c1:40:79:44:9e:e5:
5d:ea:13:4a:15:01:a8:2d:44:08:37:40:b6:23:72:
71:33:6f:31:2b:09:2c:19:f9:45:fb:b5:2c:23:c7:
c1:8a:62:42:b1:01:96:bd:05:8e:12:8f:72:d0:01:
d4:20:37:75:1a:b4:b9:e5:a7:d3:06:9e:d4:20:ba:
bb:84:98:c8:66:e6:98:40:fd:32:61:ae:09:23:db:
78:16:f1:2f:f3:54:b8:68:ee:e1:d0:d9:8d:95:ca:
2d:93:0d:bb:d6:0e:96:b1:c8:31:11:6a:d0:43:a5:
45:84:b7:ec:f1:50:17:3e:88:b9:86:e1:12:2a:12:
c5:d0:64:dd:3f:9e:6d:61:5b:2c:a4:5f:72:12:f5:
55:6a:ba:55:6c:be:d7:9d:7d:b7:35:2c:83:01:e0:
17:ba:4e:48:3c:37:50:c6:f0:d2:d2:8d:ac:96:5a:
70:1e:ef:29:32:01:9a:ec:d2:16:83:c6:00:e4:b1:
35:bb:1b:53:67:ee:ae:c4:bc:4d:e6:23:d5:37:e0:
f7:f6:e3:61:cd:38:10:aa:c3:0b:82:68:e5:40:b8:
24:e2:a7:67:e1:b0:d0:0b:20:3b:0d:d7:32:09:ce:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:36:8F:ED:95:45:55:73:87:AA:52:C6:8A:E4:4F:59:81:F7:9D
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/I742j-2VRVVzh6pSxorkT1mB950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.172.0/24
79.141.174.0/23
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:6b:82:11:6b:f9:0d:39:96:e9:83:5f:41:4a:e2:9b:92:f6:
4f:0d:5f:2e:d3:30:40:e8:8a:cd:df:f9:57:e2:13:2c:c7:74:
dc:9a:e3:dd:e5:82:b6:3e:08:7f:39:e4:09:22:10:b4:d1:17:
86:a5:c2:e2:e9:db:dc:07:e4:f9:31:4c:33:66:02:ce:ce:b9:
db:7e:c2:17:6b:b3:ba:c1:54:09:45:53:49:4a:9c:b5:71:2c:
8c:7a:4c:58:e7:34:4d:95:96:31:2c:d9:19:15:75:80:79:90:
49:26:6f:d6:6c:88:f7:5d:ea:fb:40:9b:7f:97:aa:06:ec:8b:
89:3e:06:82:d9:26:45:01:bc:55:08:f4:9e:fd:7e:72:ec:a1:
c2:68:3b:02:8d:0c:be:19:2f:8d:3f:9f:81:c8:38:84:d6:6c:
3e:a5:e4:d0:a4:c4:d2:fd:8d:d8:40:f3:28:6f:5d:26:b9:ea:
84:fd:d0:26:7d:49:b5:87:4c:c6:a5:44:e7:b5:42:8f:15:5c:
f7:fb:20:f0:23:a4:97:9f:ac:05:52:0a:5d:d7:d5:a0:21:6d:
9c:92:61:9e:58:78:cc:27:88:94:2b:4b:6d:94:af:03:a1:31:
26:9a:82:38:4e:73:7a:a6:2a:d4:35:c3:39:14:16:3f:ca:19:
3c:fc:e2:72
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAYtEPPCcqo4eVP+urkEAzCQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjMxMDE4MTkyMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JlMzY4ZmVkOTU0NTU1NzM4N2FhNTJjNjhhZTQ0ZjU5ODFmNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicQ6E8FERuQ5LsVe9siHkKyEXRVW
rQ/BQHlEnuVd6hNKFQGoLUQIN0C2I3JxM28xKwksGflF+7UsI8fBimJCsQGWvQWO
Eo9y0AHUIDd1GrS55afTBp7UILq7hJjIZuaYQP0yYa4JI9t4FvEv81S4aO7h0NmN
lcotkw271g6WscgxEWrQQ6VFhLfs8VAXPoi5huESKhLF0GTdP55tYVsspF9yEvVV
arpVbL7XnX23NSyDAeAXuk5IPDdQxvDS0o2sllpwHu8pMgGa7NIWg8YA5LE1uxtT
Z+6uxLxN5iPVN+D39uNhzTgQqsMLgmjlQLgk4qdn4bDQCyA7DdcyCc4yDwIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFCO+No/tlUVVc4eqUsaK5E9ZgfedMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvSTc0MmotMlZSVlZ6aDZwU3hvcmtUMW1COTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHuBggrBgEFBQcBBwEB/wSB3jCB2zCBhAQCAAEwfgMEAQWV
+AMEAQWV/jAMAwQCTVPEAwQATVPGAwQBT42kAwQAT42sAwQBT42uAwQAW8ESAwQC
uVA0AwQBuVFyMAwDBAa5aMADBAC5aMIDBAK5dVgDBAC5roUDBAC5rocwDAMEALnr
iQMEALnrigMEAMEqJAMEAMEqJwMEAMNfmzBSBAIAAjBMAwcAKgGGQAAAAwcAKgGG
QAACAwcAKgGGQAAGMBIDBwAqAYZAAAkDBwAqAYZAAAoDBwAqAYZAAA8wEgMHACoB
hkAAEQMHAioBhkAAEDANBgkqhkiG9w0BAQsFAAOCAQEAG2uCEWv5DTmW6YNfQUri
m5L2Tw1fLtMwQOiKzd/5V+ITLMd03Jrj3eWCtj4IfznkCSIQtNEXhqXC4unb3Afk
+TFMM2YCzs65237CF2uzusFUCUVTSUqctXEsjHpMWOc0TZWWMSzZGRV1gHmQSSZv
1myI913q+0Cbf5eqBuyLiT4GgtkmRQG8VQj0nv1+cuyhwmg7Ao0MvhkvjT+fgcg4
hNZsPqXk0KTE0v2N2EDzKG9dJrnqhP3QJn1JtYdMxqVE57VCjxVc9/sg8COkl5+s
BVIKXdfVoCFtnJJhnlh4zCeIlCtLbZSvA6ExJpqCOE5zeqYq1DXDORQWP8oZPPzi
cg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:19 2025 by rpki-client