Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/V-wEQSQ40qQ1oXIxomev5tusYYY.roa
File: V-wEQSQ40qQ1oXIxomev5tusYYY.roa (raw, json)
Hash identifier: gNnxVbAZyNao+SMrgnsaHkl4OJ7R6IaE02mm/ZL3Eus=
Subject key identifier: 57:EC:04:41:24:38:D2:A4:35:A1:72:31:A2:67:AF:E6:DB:AC:61:86
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 043C5D63
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/V-wEQSQ40qQ1oXIxomev5tusYYY.roa
Signing time: Fri 21 Jan 2022 22:06:55 +0000
ROA not before: Fri 21 Jan 2022 22:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.60.0/22 maxlen: 22
194.31.194.0/23 maxlen: 23
194.31.195.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71064931 (0x43c5d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 21 22:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57ec04412438d2a435a17231a267afe6dbac6186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:91:74:8a:0c:d8:20:76:b2:dd:2d:9f:df:
0e:12:2a:59:fc:d8:4a:2d:ed:a9:fa:91:31:d6:82:
86:36:8a:c8:1d:11:8f:0c:a6:51:d4:f1:06:50:72:
3d:76:7a:0c:76:d2:52:ef:09:f4:2c:52:d2:16:a6:
1e:71:3e:64:37:af:0f:be:8b:f7:22:92:16:e6:50:
75:b0:95:53:06:54:e2:8d:45:49:da:cc:31:ff:7c:
70:22:db:d3:74:00:09:7a:0c:7e:f3:d7:c0:c2:45:
e6:c6:3d:ab:3f:34:1c:20:23:be:9a:f6:cd:d6:c8:
d9:b5:c1:b9:fa:39:b7:87:6f:44:0c:ca:1d:7c:fe:
b6:e3:2a:a3:cf:73:d7:c4:37:33:93:f9:7a:60:97:
cf:c7:e0:62:4c:74:ff:1a:8f:64:af:40:66:8e:cd:
87:99:7f:db:7b:be:56:f8:ad:4a:f6:8e:3a:21:81:
6d:67:37:70:c9:aa:0f:75:ca:77:53:2e:36:83:e9:
a4:6a:23:3f:b7:5b:98:a4:c6:e4:cb:27:e5:22:ac:
44:37:f0:fc:4b:5e:d4:2d:21:61:c6:31:fe:05:28:
93:c0:2d:11:d9:25:0b:8b:6f:b2:3e:5a:51:da:39:
7a:72:af:28:55:7a:9e:97:f5:a7:07:be:39:ec:a2:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:04:41:24:38:D2:A4:35:A1:72:31:A2:67:AF:E6:DB:AC:61:86
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/V-wEQSQ40qQ1oXIxomev5tusYYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/22
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
b0:b6:03:90:08:cd:9b:a9:35:1a:8a:aa:09:a1:03:e2:63:b5:
b5:a1:9c:d7:22:fd:e3:91:e1:47:8b:15:35:8d:6a:bb:03:c8:
7e:be:f7:26:1f:20:39:e9:de:35:29:78:35:a8:42:3e:ff:db:
3b:08:2c:23:3f:0b:d9:35:76:0c:27:1f:93:40:b1:4a:d5:37:
41:7b:19:52:e8:97:4f:52:f8:ab:f6:24:9d:8d:39:07:d8:f9:
60:5f:a7:c3:a2:f4:a2:b3:b6:39:71:20:c1:8e:e1:64:8b:02:
d6:95:0a:ea:1e:3a:6f:ad:b7:20:b4:31:9c:cb:2a:2a:cb:bd:
37:f2:90:7a:85:2a:a9:2e:5e:d2:21:aa:76:be:4a:7f:4a:3b:
00:38:82:ee:b3:65:77:db:fe:ad:6c:8e:4f:8d:6c:11:44:ea:
0d:6c:ef:12:74:b6:62:80:28:c0:fd:20:fa:80:81:17:f8:cd:
56:72:3c:b5:94:b7:b4:d6:5a:49:f4:ca:0c:e5:6f:97:17:ed:
96:83:1b:ae:50:f5:ec:54:ef:ec:a8:1b:d4:f0:3d:98:18:41:
14:76:6d:5e:41:5c:eb:ce:04:7e:52:6f:33:f2:75:1f:01:e3:
4a:97:22:54:88:8e:2a:b8:a9:9f:6d:a4:3e:fa:02:f6:23:51:
92:86:e3:92
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEBDxdYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjQwMzkzOTkwMTdmYTA5M2RjOGQ1MDM3OTlmNmNhNDAzZjBiZDA1MB4XDTIyMDEy
MTIyMDY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdlYzA0NDEyNDM4
ZDJhNDM1YTE3MjMxYTI2N2FmZTZkYmFjNjE4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIH/kXSKDNggdrLdLZ/fDhIqWfzYSi3tqfqRMdaChjaKyB0R
jwymUdTxBlByPXZ6DHbSUu8J9CxS0hamHnE+ZDevD76L9yKSFuZQdbCVUwZU4o1F
SdrMMf98cCLb03QACXoMfvPXwMJF5sY9qz80HCAjvpr2zdbI2bXBufo5t4dvRAzK
HXz+tuMqo89z18Q3M5P5emCXz8fgYkx0/xqPZK9AZo7Nh5l/23u+VvitSvaOOiGB
bWc3cMmqD3XKd1MuNoPppGojP7dbmKTG5Msn5SKsRDfw/Ete1C0hYcYx/gUok8At
EdklC4tvsj5aUdo5enKvKFV6npf1pwe+OeyiBNsCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRX7ARBJDjSpDWhcjGiZ6/m26xhhjAfBgNVHSMEGDAWgBRiQDk5kBf6CT3I
1QN5n2ykA/C9BTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lrQTVPWkFYLWdrOXlOVURlWjlzcEFQd3ZRVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8x
L1Ytd0VRU1E0MHFRMW9YSXhvbWV2NXR1c1lZWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
ZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8xL1lrQTVPWkFYLWdr
OXlOVURlWjlzcEFQd3ZRVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAgI7PAMEAi1f1AMEAFXR5AMEAFXR
5jAMAwQBwh/CAwQBwh/EMA0GCSqGSIb3DQEBCwUAA4IBAQCwtgOQCM2bqTUaiqoJ
oQPiY7W1oZzXIv3jkeFHixU1jWq7A8h+vvcmHyA56d41KXg1qEI+/9s7CCwjPwvZ
NXYMJx+TQLFK1TdBexlS6JdPUvir9iSdjTkH2PlgX6fDovSis7Y5cSDBjuFkiwLW
lQrqHjpvrbcgtDGcyyoqy7038pB6hSqpLl7SIap2vkp/SjsAOILus2V32/6tbI5P
jWwRROoNbO8SdLZigCjA/SD6gIEX+M1Wcjy1lLe01lpJ9MoM5W+XF+2WgxuuUPXs
VO/sqBvU8D2YGEEUdm1eQVzrzgR+Um8z8nUfAeNKlyJUiI4quKmfbaQ++gL2I1GS
huOS
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:48 2025 by rpki-client