Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Z_ivryAxfs7fzn3e0SoGL4DAc4E.roa
File: Z_ivryAxfs7fzn3e0SoGL4DAc4E.roa (raw, json)
Hash identifier: bqvSVmtQau5bQWfnY6K+2giQs1DT4mwMkSW56xXskWA=
Subject key identifier: 67:F8:AF:AF:20:31:7E:CE:DF:CE:7D:DE:D1:2A:06:2F:80:C0:73:81
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0583E0DC
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Z_ivryAxfs7fzn3e0SoGL4DAc4E.roa
Signing time: Fri 03 Jun 2022 15:26:20 +0000
ROA not before: Fri 03 Jun 2022 15:26:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.195.0/24 maxlen: 24
194.31.194.0/23 maxlen: 23
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92528860 (0x583e0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 3 15:26:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f8afaf20317ecedfce7dded12a062f80c07381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:3a:76:ca:70:2d:7d:a1:4a:bd:f5:16:49:
d1:eb:82:6a:14:de:c8:7c:74:5f:79:c0:51:23:6b:
41:c3:00:36:6a:8c:f7:77:68:f3:1f:68:a7:63:9e:
93:ac:b8:c8:22:e4:54:aa:0b:42:64:7d:d4:2e:43:
9f:04:be:f0:34:91:30:ec:84:b8:48:d6:f6:d9:95:
b6:34:03:da:7b:ab:79:28:f6:ab:ea:50:8a:25:0f:
03:4f:b5:33:17:41:f0:14:48:da:90:06:03:b2:43:
bf:29:61:50:f0:b0:79:53:0d:52:f7:04:1c:c9:65:
54:4d:cd:c7:28:75:3a:b5:9e:85:4e:c9:6d:75:a6:
f7:f2:dd:32:6e:c1:50:83:e1:f7:ba:9b:9b:49:08:
de:c2:a4:53:b0:b5:c5:50:7c:0b:c4:07:37:a4:63:
39:cd:4d:03:85:d2:81:7d:19:81:9c:2f:46:51:6b:
92:85:0f:12:e3:d4:9e:2f:af:c7:22:52:54:60:8a:
12:39:9c:2b:a3:8d:92:7f:6d:7b:51:a0:39:44:05:
0e:c2:d4:9b:a2:e0:f1:b0:e8:6c:27:50:4c:5b:b2:
1e:ac:ef:52:dc:aa:e6:8d:32:50:a6:3e:61:40:8a:
cf:6e:1a:af:cd:2b:26:65:04:3f:43:b2:b4:53:32:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:AF:AF:20:31:7E:CE:DF:CE:7D:DE:D1:2A:06:2F:80:C0:73:81
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Z_ivryAxfs7fzn3e0SoGL4DAc4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
05:da:d7:7a:7a:96:c9:ab:5b:8a:20:08:86:c9:76:c7:3f:ee:
16:df:45:30:a9:28:25:9e:e5:46:80:f5:8b:2a:4b:c9:59:86:
ad:c5:e5:e4:e6:64:63:35:5b:9f:30:6d:76:6d:0b:49:b0:7a:
90:6e:14:e4:d7:22:c6:4b:d2:a3:3c:ab:28:25:9e:95:e0:f9:
22:f9:96:68:87:f5:53:fd:61:ac:ad:60:d0:16:4a:03:60:e4:
b1:6c:cb:08:e1:52:8b:10:1f:f4:c3:f0:a8:cc:e1:6e:32:14:
64:b3:86:22:44:e8:b9:44:58:7d:65:d3:14:36:ab:5a:a2:e5:
41:61:f6:d7:2a:3c:c5:c7:a4:29:b7:1b:a3:79:3f:6a:b0:c1:
22:0a:d7:22:60:e9:48:26:69:e2:34:3a:57:4b:e6:0c:10:18:
90:bd:5a:e3:81:e1:9c:be:67:7b:8a:5e:01:2e:6e:b9:13:69:
4a:7b:81:70:d9:64:97:96:82:ca:f4:e2:21:62:7c:0c:f1:d4:
b7:1c:a8:67:9f:82:94:c6:1e:cb:40:c4:02:9e:cf:c7:53:d1:
ea:6d:18:72:14:52:c1:32:a6:c5:41:af:de:1f:28:71:3f:ba:
0a:cb:5b:ad:ef:39:a1:10:71:b5:a5:bd:d0:6f:a3:63:9d:10:
bb:1f:23:c5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEBYPg3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjQwMzkzOTkwMTdmYTA5M2RjOGQ1MDM3OTlmNmNhNDAzZjBiZDA1MB4XDTIyMDYw
MzE1MjYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjdmOGFmYWYyMDMx
N2VjZWRmY2U3ZGRlZDEyYTA2MmY4MGMwNzM4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMwROnbKcC19oUq99RZJ0euCahTeyHx0X3nAUSNrQcMANmqM
93do8x9op2Oek6y4yCLkVKoLQmR91C5DnwS+8DSRMOyEuEjW9tmVtjQD2nureSj2
q+pQiiUPA0+1MxdB8BRI2pAGA7JDvylhUPCweVMNUvcEHMllVE3Nxyh1OrWehU7J
bXWm9/LdMm7BUIPh97qbm0kI3sKkU7C1xVB8C8QHN6RjOc1NA4XSgX0ZgZwvRlFr
koUPEuPUni+vxyJSVGCKEjmcK6ONkn9te1GgOUQFDsLUm6Lg8bDobCdQTFuyHqzv
Utyq5o0yUKY+YUCKz24ar80rJmUEP0OytFMyfvMCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRn+K+vIDF+zt/Ofd7RKgYvgMBzgTAfBgNVHSMEGDAWgBRiQDk5kBf6CT3I
1QN5n2ykA/C9BTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lrQTVPWkFYLWdrOXlOVURlWjlzcEFQd3ZRVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8x
L1pfaXZyeUF4ZnM3ZnpuM2UwU29HTDREQWM0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
ZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8xL1lrQTVPWkFYLWdr
OXlOVURlWjlzcEFQd3ZRVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAAI7PAMEAi1f1AMEAFXR5AMEAFXR
5jAMAwQBwh/CAwQBwh/EMA0GCSqGSIb3DQEBCwUAA4IBAQAF2td6epbJq1uKIAiG
yXbHP+4W30UwqSglnuVGgPWLKkvJWYatxeXk5mRjNVufMG12bQtJsHqQbhTk1yLG
S9KjPKsoJZ6V4Pki+ZZoh/VT/WGsrWDQFkoDYOSxbMsI4VKLEB/0w/CozOFuMhRk
s4YiROi5RFh9ZdMUNqtaouVBYfbXKjzFx6QptxujeT9qsMEiCtciYOlIJmniNDpX
S+YMEBiQvVrjgeGcvmd7il4BLm65E2lKe4Fw2WSXloLK9OIhYnwM8dS3HKhnn4KU
xh7LQMQCns/HU9HqbRhyFFLBMqbFQa/eHyhxP7oKy1ut7zmhEHG1pb3Qb6NjnRC7
HyPF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org