Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/agtEDwAENErk3MT8tvZCPU9kOFg.roa
File: agtEDwAENErk3MT8tvZCPU9kOFg.roa (raw, json)
Hash identifier: iCYc4DfgYtHeWkfdsSXCz5N1f1XBfZAWD5yeZqemlYU=
Subject key identifier: 6A:0B:44:0F:00:04:34:4A:E4:DC:C4:FC:B6:F6:42:3D:4F:64:38:58
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 0692125E
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/agtEDwAENErk3MT8tvZCPU9kOFg.roa
Signing time: Sat 01 Jan 2022 16:02:56 +0000
ROA not before: Sat 01 Jan 2022 16:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49360
IP address blocks: 45.90.232.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
5.83.122.0/24 maxlen: 24
5.83.121.0/24 maxlen: 24
5.83.120.0/22 maxlen: 22
5.83.120.0/24 maxlen: 24
2a0a:d3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110236254 (0x692125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Jan 1 16:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a0b440f0004344ae4dcc4fcb6f6423d4f643858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:37:f9:dc:d0:74:88:eb:58:14:0d:60:78:
be:9b:ff:5b:b6:40:42:87:4d:ca:63:28:9d:4e:78:
dc:d1:33:b0:fa:ab:73:94:48:7c:c3:f0:14:fd:02:
e0:8d:02:47:79:92:1d:b0:c0:b5:56:3a:d1:17:fe:
18:94:62:7a:4c:19:82:36:17:2e:a2:21:f2:03:2a:
ed:64:a7:a9:8f:62:11:df:f4:7e:cc:8b:56:c8:55:
c4:cd:a2:34:5e:a5:d0:fc:75:ab:b9:8d:e4:b8:86:
d9:72:ea:87:a4:5c:77:cd:b8:78:f4:46:1b:50:85:
23:f6:f4:3b:dc:92:d9:4e:c6:08:8c:9c:d0:35:72:
bb:92:7e:99:e9:43:d4:91:3a:0f:52:16:f6:0c:3a:
3f:15:50:04:38:57:9b:80:42:16:4e:22:b2:94:1b:
89:b3:e0:0c:ec:35:04:c4:02:5c:07:00:b2:f6:62:
49:4f:7d:a9:39:71:4f:0b:37:c3:66:59:d7:93:af:
bc:90:8f:df:0a:18:69:4a:6a:2d:49:80:9b:f7:59:
b6:0e:43:08:73:34:7e:b4:fb:95:52:5a:ad:e9:7c:
14:a7:52:60:fb:c0:75:e1:c7:89:82:0f:bb:4d:50:
8b:8f:89:77:12:d2:46:20:8e:5d:f7:4e:5b:96:bc:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:44:0F:00:04:34:4A:E4:DC:C4:FC:B6:F6:42:3D:4F:64:38:58
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/agtEDwAENErk3MT8tvZCPU9kOFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.120.0/22
31.7.144.0/20
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
IPv6:
2a0a:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:d8:56:58:a0:63:29:4c:4b:4c:a6:f7:19:f1:a5:f6:e0:26:
e3:d5:5f:84:6a:fe:e3:74:a3:1a:23:2c:6d:f2:c0:12:77:3d:
e7:d5:ff:0f:63:35:b8:48:be:c4:5b:25:18:d8:67:14:0e:9b:
eb:64:f2:d7:05:ba:f5:8a:18:16:61:32:4b:49:a3:ee:47:fd:
07:ec:ad:90:9e:59:d2:44:db:ea:94:85:65:ce:97:d4:4d:df:
ef:30:fd:37:27:33:d8:d8:12:a8:98:d9:0e:10:b6:60:4d:a5:
11:c7:75:9f:af:2f:e4:22:e2:90:89:9e:57:26:3a:9f:27:9a:
1a:5f:d1:4e:93:b6:02:da:58:cc:9e:34:25:cc:2e:36:cf:5f:
2d:37:19:e1:c1:b9:2e:17:8d:5f:e5:1c:6c:72:cf:1e:1c:a9:
b5:53:4e:3c:c1:44:c6:1e:7c:d0:3f:84:e7:e2:cf:a3:95:21:
d0:d6:06:5c:e6:65:73:3f:41:e9:62:f8:e7:2d:cd:59:92:76:
f7:0c:2f:e8:77:0c:b5:74:46:d0:02:5d:83:b7:eb:98:8d:d1:
89:98:cb:a4:c6:7c:43:3f:08:1c:38:ea:e7:49:d1:a1:c9:ee:
36:9b:b8:20:01:9d:c0:97:82:36:a9:ac:75:62:ec:20:9e:d9:
a6:57:81:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEBpISXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Njk1NjlhMjUyNjY4N2RhOTFhN2VjZDRmNTY3ZjU0MDljZGZmZTc5MB4XDTIyMDEw
MTE2MDI1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmEwYjQ0MGYwMDA0
MzQ0YWU0ZGNjNGZjYjZmNjQyM2Q0ZjY0Mzg1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMcyN/nc0HSI61gUDWB4vpv/W7ZAQodNymMonU543NEzsPqr
c5RIfMPwFP0C4I0CR3mSHbDAtVY60Rf+GJRiekwZgjYXLqIh8gMq7WSnqY9iEd/0
fsyLVshVxM2iNF6l0Px1q7mN5LiG2XLqh6Rcd824ePRGG1CFI/b0O9yS2U7GCIyc
0DVyu5J+melD1JE6D1IW9gw6PxVQBDhXm4BCFk4ispQbibPgDOw1BMQCXAcAsvZi
SU99qTlxTws3w2ZZ15OvvJCP3woYaUpqLUmAm/dZtg5DCHM0frT7lVJarel8FKdS
YPvAdeHHiYIPu01Qi4+JdxLSRiCOXfdOW5a8/3ECAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBRqC0QPAAQ0SuTcxPy29kI9T2Q4WDAfBgNVHSMEGDAWgBSGlWmiUmaH2pGn
7NT1Z/VAnN/+eTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hwVnBvbEptaDlxUnAtelU5V2YxUUp6Zl9uay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvNzQwZGVjLTA1OWYtNDVjMC05OTlhLTFlYWE1OTFiNjc3MS8x
L2FndEVEd0FFTkVyazNNVDh0dlpDUFU5a09GZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
NzQwZGVjLTA1OWYtNDVjMC05OTlhLTFlYWE1OTFiNjc3MS8xL2hwVnBvbEptaDlx
UnAtelU5V2YxUUp6Zl9uay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAgVTeAMEBB8HkAMEAi1a6AMEAlvW
SAMEArkd+DANBAIAAjAHAwUDKgrTwDANBgkqhkiG9w0BAQsFAAOCAQEAwdhWWKBj
KUxLTKb3GfGl9uAm49VfhGr+43SjGiMsbfLAEnc959X/D2M1uEi+xFslGNhnFA6b
62Ty1wW69YoYFmEyS0mj7kf9B+ytkJ5Z0kTb6pSFZc6X1E3f7zD9Nycz2NgSqJjZ
DhC2YE2lEcd1n68v5CLikImeVyY6nyeaGl/RTpO2AtpYzJ40JcwuNs9fLTcZ4cG5
LheNX+UcbHLPHhyptVNOPMFExh580D+E5+LPo5Uh0NYGXOZlcz9B6WL45y3NWZJ2
9wwv6HcMtXRG0AJdg7frmI3RiZjLpMZ8Qz8IHDjq50nRocnuNpu4IAGdwJeCNqms
dWLsIJ7ZpleBng==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:12 2025 by rpki-client