Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/w-ZAs2yjzuPAbUy_GcK9XuJ6PQY.roa
File: w-ZAs2yjzuPAbUy_GcK9XuJ6PQY.roa (raw, json)
Hash identifier: 4j8P6qUQMCJOWJa9wADuTF++omfh2ytqfd+qxE0Ihow=
Subject key identifier: C3:E6:40:B3:6C:A3:CE:E3:C0:6D:4C:BF:19:C2:BD:5E:E2:7A:3D:06
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 15CB34
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/w-ZAs2yjzuPAbUy_GcK9XuJ6PQY.roa
Signing time: Sat 29 Jan 2022 09:50:58 +0000
ROA not before: Sat 29 Jan 2022 09:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/22 maxlen: 22
85.204.44.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428276 (0x15cb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 29 09:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3e640b36ca3cee3c06d4cbf19c2bd5ee27a3d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:1d:17:27:bc:01:bf:b3:40:89:18:da:9b:
6c:97:a3:2a:ed:9f:98:9d:9a:28:04:3c:87:ac:fa:
66:f2:e7:db:94:f0:02:74:99:f9:54:58:50:b3:75:
53:bc:cf:9d:af:c0:9e:79:2b:41:dd:a9:d0:33:6f:
18:80:1e:5b:e0:80:15:34:f3:34:9e:67:39:65:36:
ab:2d:cf:09:6d:5c:46:3a:40:fc:1a:32:f7:51:b2:
40:4f:37:7c:8f:ae:a0:84:32:c3:32:9e:82:cc:cd:
af:a7:4c:52:91:cf:d9:db:5c:b6:f4:ab:b7:a5:05:
f7:7a:b6:0b:fa:af:e9:06:36:b8:1b:8b:30:fd:85:
0b:7c:c8:69:a6:6f:98:59:7b:a2:9f:2d:23:82:54:
b0:8c:91:5b:5d:56:7c:a0:d4:02:59:52:f3:d5:ac:
ec:0b:b7:60:85:e7:99:02:2d:00:93:1e:6a:48:e5:
9d:83:4c:21:1a:f5:d3:d2:1a:5c:15:0d:57:55:69:
ae:1f:f6:97:bc:12:7c:e8:a8:03:3d:47:b5:59:e2:
b8:c6:11:1c:5b:04:d5:9e:bc:e9:73:d1:00:4c:98:
e8:66:17:75:c5:63:0d:ab:48:fc:34:bb:15:6e:e9:
ab:16:4e:fc:28:d5:6f:dc:d6:66:43:1f:33:70:79:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:40:B3:6C:A3:CE:E3:C0:6D:4C:BF:19:C2:BD:5E:E2:7A:3D:06
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/w-ZAs2yjzuPAbUy_GcK9XuJ6PQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/22
85.204.56.0/21
185.88.130.0/23
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:be:9f:b2:b4:23:3c:37:12:a2:f2:cc:62:dd:dc:ac:9b:49:
d1:7a:a3:66:a5:8e:ae:0e:fa:16:83:26:37:d6:71:ab:ee:3a:
ae:a7:5a:52:7c:ab:67:02:c8:a4:28:62:d2:8d:e8:15:47:46:
25:19:35:e8:33:0b:e7:b4:fb:12:f1:19:f8:11:8a:98:3e:98:
19:81:5c:c8:bb:1e:82:f7:32:33:c3:29:03:09:94:fa:4a:17:
ae:8e:7d:c1:d3:70:22:32:88:48:87:18:81:36:b0:33:c1:8c:
c4:a6:00:94:61:97:9d:3e:80:67:db:1a:c1:df:d3:dc:6c:66:
b4:72:bb:b0:8d:85:44:9a:07:d2:49:ed:2f:b3:2f:ee:67:05:
51:2b:44:4c:6e:e5:f8:2c:b9:43:35:f6:90:6d:20:60:55:62:
f1:4b:02:9a:dd:72:05:71:0c:64:6d:f0:1d:58:51:e9:4a:1f:
9f:ef:3f:c0:6b:62:6f:17:a0:dc:9d:b6:6f:08:c8:a4:53:1a:
a9:ab:b8:0d:51:e1:da:33:69:f9:cf:60:1f:1b:5a:53:a5:d9:
c2:6f:65:52:2d:0c:f2:54:14:2c:f2:70:a4:73:0a:52:87:cb:
c2:2c:8d:74:dd:b6:84:a1:56:9c:9a:cb:0e:d7:b1:55:91:7c:
a9:27:3e:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDFcs0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
ZWIzYjNiNTc5YzkwYjRiOTk2YTdmZTQwZjIwNTAzOTEzYTI1Y2YwHhcNMjIwMTI5
MDk1MDU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjM2U2NDBiMzZjYTNj
ZWUzYzA2ZDRjYmYxOWMyYmQ1ZWUyN2EzZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqYAdFye8Ab+zQIkY2ptsl6Mq7Z+YnZooBDyHrPpm8ufblPAC
dJn5VFhQs3VTvM+dr8CeeStB3anQM28YgB5b4IAVNPM0nmc5ZTarLc8JbVxGOkD8
GjL3UbJATzd8j66ghDLDMp6CzM2vp0xSkc/Z21y29Ku3pQX3erYL+q/pBja4G4sw
/YULfMhppm+YWXuiny0jglSwjJFbXVZ8oNQCWVLz1azsC7dgheeZAi0Akx5qSOWd
g0whGvXT0hpcFQ1XVWmuH/aXvBJ86KgDPUe1WeK4xhEcWwTVnrzpc9EATJjoZhd1
xWMNq0j8NLsVbumrFk78KNVv3NZmQx8zcHnixQIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFMPmQLNso87jwG1MvxnCvV7iej0GMB8GA1UdIwQYMBaAFEbrOztXnJC0uZan
/kDyBQOROiXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UnVzN08xZWNrTFM1bHFmLVFQSUZBNUU2SmM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNC9hNmFkOWYtOGQ2OS00NmVhLWJkN2MtMzJiMTUwZjhlNjFmLzEv
dy1aQXMyeWp6dVBBYlV5X0djSzlYdUo2UFFZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9h
NmFkOWYtOGQ2OS00NmVhLWJkN2MtMzJiMTUwZjhlNjFmLzEvUnVzN08xZWNrTFM1
bHFmLVFQSUZBNUU2SmM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCVcwsAwQDVcw4AwQBuViCAwQAwma8
MA0GCSqGSIb3DQEBCwUAA4IBAQC9vp+ytCM8NxKi8sxi3dysm0nReqNmpY6uDvoW
gyY31nGr7jqup1pSfKtnAsikKGLSjegVR0YlGTXoMwvntPsS8Rn4EYqYPpgZgVzI
ux6C9zIzwykDCZT6Sheujn3B03AiMohIhxiBNrAzwYzEpgCUYZedPoBn2xrB39Pc
bGa0cruwjYVEmgfSSe0vsy/uZwVRK0RMbuX4LLlDNfaQbSBgVWLxSwKa3XIFcQxk
bfAdWFHpSh+f7z/Aa2JvF6DcnbZvCMikUxqpq7gNUeHaM2n5z2AfG1pTpdnCb2VS
LQzyVBQs8nCkcwpSh8vCLI103baEoVacmssO17FVkXypJz46
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:15 2025 by rpki-client