Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/yqoAYULNth6ObA8_qlWnIzXwIWM.roa
File: yqoAYULNth6ObA8_qlWnIzXwIWM.roa (raw, json)
Hash identifier: rhcxQ1xOeT8wUVI8xFb0B+mvJCxSi8Ws+qBOKZmgvLQ=
Subject key identifier: CA:AA:00:61:42:CD:B6:1E:8E:6C:0F:3F:AA:55:A7:23:35:F0:21:63
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193B5E9DBDF8F43C504D88CD863DBB86938
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/yqoAYULNth6ObA8_qlWnIzXwIWM.roa
Signing time: Wed 11 Dec 2024 13:30:22 +0000
ROA not before: Wed 11 Dec 2024 13:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:e9:db:df:8f:43:c5:04:d8:8c:d8:63:db:b8:69:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 11 13:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caaa006142cdb61e8e6c0f3faa55a72335f02163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:f1:fa:98:87:3e:18:7f:be:34:6a:be:ae:
45:69:ea:59:7c:87:44:e4:17:da:f0:78:67:3b:da:
e9:73:b7:3e:7d:ba:98:11:98:e5:38:88:9b:5c:27:
19:4f:18:64:2a:5b:02:65:d2:f3:84:47:cc:67:16:
55:04:ef:ef:f8:29:78:0a:b4:9c:23:38:e8:10:15:
ef:eb:fd:77:60:d8:1d:65:e3:d4:86:3b:99:32:79:
7a:ef:b4:e8:fe:19:99:fc:ec:32:69:70:9f:2b:2a:
02:51:e5:c7:84:30:ce:c3:e9:24:54:70:16:ca:94:
1f:53:48:78:b4:5f:f2:ca:92:3d:fc:60:cc:63:85:
1b:d5:d8:f4:db:d2:4c:70:ca:18:36:5b:09:8c:2e:
f6:79:ba:25:77:57:d4:03:bd:80:9a:2e:3a:39:72:
33:63:41:70:d8:d3:0e:dd:89:ee:2b:99:d4:b2:69:
d4:81:fa:ef:fc:cc:01:0a:7d:8b:0d:79:9e:c8:81:
c3:5b:fb:5a:61:b2:72:71:0c:51:20:83:2e:07:b3:
13:f6:8a:27:de:fd:0b:7a:5e:4b:ee:71:73:04:8f:
73:16:97:70:9f:e0:2a:e4:40:e8:f6:ed:8a:77:a3:
17:b4:d5:76:bb:52:cf:bf:13:23:d1:38:d1:b6:2f:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:00:61:42:CD:B6:1E:8E:6C:0F:3F:AA:55:A7:23:35:F0:21:63
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/yqoAYULNth6ObA8_qlWnIzXwIWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
77.241.72.0/22
185.254.55.0/24
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:34:9d:2f:d6:94:ac:d7:20:a7:22:04:9b:c4:5d:3e:52:96:
3e:06:b8:08:47:b9:56:58:49:96:c9:eb:f1:da:8a:e7:d3:aa:
8a:02:d4:b6:c6:b4:74:e5:cb:26:24:b6:88:2e:d9:7a:db:cc:
ed:68:00:72:92:a4:cb:b4:6a:bd:fa:2a:2f:4f:5b:b8:1d:eb:
db:7d:1f:e7:33:69:4c:ac:7d:70:66:80:28:d7:d8:72:2c:a9:
7b:48:5e:dc:64:1d:ea:a8:51:8c:5d:36:ad:ca:5f:40:28:c1:
10:7d:4e:7d:ee:c7:f3:01:c6:dd:04:a1:79:64:e6:e5:1d:8d:
9f:e2:a4:39:20:11:c1:b4:2a:62:6f:8d:4c:d0:39:09:c9:76:
34:f1:ec:a7:b4:74:10:28:dd:d7:cd:bc:07:7a:08:49:73:20:
16:b5:57:dc:38:00:50:ad:d0:2b:d4:ce:c9:6c:9f:dc:f2:17:
13:74:31:b8:6e:5c:2c:ee:6c:6e:af:67:f1:1d:f6:f6:aa:20:
4f:03:5c:0c:9d:9b:e0:ea:35:78:ed:64:87:30:5c:fa:c7:f3:
27:50:89:db:df:be:22:40:4e:5e:13:c6:ec:21:57:27:8e:e8:
4c:84:f1:f3:b2:f3:f6:be:b8:e1:48:07:08:54:f2:9f:1d:e2:
9a:93:cc:dc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZO16dvfj0PFBNiM2GPbuGk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMjExMTMzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWFhMDA2MTQyY2RiNjFlOGU2YzBmM2ZhYTU1YTcyMzM1ZjAyMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQzx+piHPhh/vjRqvq5FaepZfIdE
5Bfa8HhnO9rpc7c+fbqYEZjlOIibXCcZTxhkKlsCZdLzhEfMZxZVBO/v+Cl4CrSc
IzjoEBXv6/13YNgdZePUhjuZMnl677To/hmZ/OwyaXCfKyoCUeXHhDDOw+kkVHAW
ypQfU0h4tF/yypI9/GDMY4Ub1dj029JMcMoYNlsJjC72ebold1fUA72Ami46OXIz
Y0Fw2NMO3YnuK5nUsmnUgfrv/MwBCn2LDXmeyIHDW/taYbJycQxRIIMuB7MT9oon
3v0Lel5L7nFzBI9zFpdwn+Aq5EDo9u2Kd6MXtNV2u1LPvxMj0TjRti/1eQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMqqAGFCzbYejmwPP6pVpyM18CFjMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEveXFvQVlVTE50aDZPYkE4X3FsV25Jelh3SVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCPrYgAwQC
TfFIAwQAuf43AwQBwji6AwQCwqlcMA0GCSqGSIb3DQEBCwUAA4IBAQCPNJ0v1pSs
1yCnIgSbxF0+UpY+BrgIR7lWWEmWyevx2orn06qKAtS2xrR05csmJLaILtl628zt
aABykqTLtGq9+iovT1u4HevbfR/nM2lMrH1wZoAo19hyLKl7SF7cZB3qqFGMXTat
yl9AKMEQfU597sfzAcbdBKF5ZOblHY2f4qQ5IBHBtCpib41M0DkJyXY08eyntHQQ
KN3XzbwHeghJcyAWtVfcOABQrdAr1M7JbJ/c8hcTdDG4blws7mxur2fxHfb2qiBP
A1wMnZvg6jV47WSHMFz6x/MnUInb374iQE5eE8bsIVcnjuhMhPHzsvP2vrjhSAcI
VPKfHeKak8zc
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net