Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/044zkCdJ5KsrCzmhjvznJRm9WNo.roa
File: 044zkCdJ5KsrCzmhjvznJRm9WNo.roa (raw, json)
Hash identifier: aMk1+7ZhksE/wiJ1SdMXwgSUgCvg12+1WQsoy5VdC74=
Subject key identifier: D3:8E:33:90:27:49:E4:AB:2B:0B:39:A1:8E:FC:E7:25:19:BD:58:DA
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018562230C5F84B0737DE4F1FE4DA7261F80
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/044zkCdJ5KsrCzmhjvznJRm9WNo.roa
Signing time: Fri 30 Dec 2022 08:25:42 +0000
ROA not before: Fri 30 Dec 2022 08:25:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.192.0/21 maxlen: 24
85.237.192.0/21 maxlen: 24
85.237.198.0/24 maxlen: 24
85.237.206.0/23 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.237.208.0/20 maxlen: 24
85.237.213.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:23:0c:5f:84:b0:73:7d:e4:f1:fe:4d:a7:26:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 30 08:25:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d38e33902749e4ab2b0b39a18efce72519bd58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:00:d1:37:64:9a:0f:c0:91:08:be:c3:3c:
49:3e:36:86:e3:21:3f:00:01:5c:6c:26:6b:db:cf:
7b:0a:59:a7:e4:ab:6a:e5:3c:e2:5e:35:c2:cb:88:
00:1d:b3:fd:30:44:97:6b:52:ed:ee:ee:5d:f0:73:
48:a9:11:6c:35:95:93:52:fa:cf:66:47:1d:f1:4f:
6d:11:00:33:ea:ef:cc:01:8e:cd:4c:c0:b1:00:eb:
21:c6:31:e1:6a:71:64:aa:b6:e0:aa:aa:50:de:b9:
93:db:eb:59:02:6e:79:c8:d7:66:e5:8b:cd:ce:1c:
fe:42:6f:59:62:16:fb:69:33:c6:a5:b7:00:89:72:
de:e8:2a:c9:3b:2b:a9:b2:1f:90:bd:ce:38:db:0a:
c6:ba:f7:09:01:a1:39:32:4a:3c:44:de:9f:1a:35:
61:ae:ac:cb:f5:5d:9f:87:ba:4e:1a:d3:d1:40:41:
1c:40:48:ef:cd:33:ea:0a:03:42:45:26:69:20:cb:
e9:f4:9d:2b:4e:1d:3d:dc:64:8c:d1:e9:4e:9b:2b:
91:4c:5d:cc:29:22:bd:89:b5:2c:97:6e:86:b4:7e:
2f:38:67:f5:8c:a0:a3:79:31:40:3d:63:90:fe:8e:
ae:e3:1d:f1:29:a4:88:e5:c3:30:07:71:a2:7a:62:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:33:90:27:49:E4:AB:2B:0B:39:A1:8E:FC:E7:25:19:BD:58:DA
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/044zkCdJ5KsrCzmhjvznJRm9WNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.192.0/21
85.237.203.0/24
85.237.205.0-85.237.223.255
185.93.32.0/24
185.93.34.0/23
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
43:62:de:d8:8f:69:bd:bd:80:e6:df:2d:fd:40:62:47:c5:ae:
d5:8b:74:19:90:bc:12:4e:5e:3d:01:bf:2f:39:dc:d6:0b:5e:
a0:c4:8a:df:a0:77:1c:f8:97:7c:c1:d9:f6:22:42:49:4a:0e:
f0:13:f2:7f:ea:6e:de:74:37:61:f0:ca:c6:ff:2a:9e:0a:63:
2f:0b:b2:a9:cd:ce:e3:c2:f1:4e:80:82:2d:b1:34:60:08:51:
14:41:83:60:7d:ac:03:d8:8e:1d:f0:04:c6:59:44:8b:b0:2f:
1b:dc:62:bc:0a:20:c6:dd:ba:95:e9:5b:39:2d:70:30:bf:b0:
61:52:6d:7c:c3:54:1d:a0:d3:18:da:0d:96:c9:07:c1:6f:4c:
52:ac:0a:3e:40:83:ad:43:71:c9:4a:ef:b9:fb:05:ea:d2:a8:
1f:5f:fb:55:a3:ab:5d:b6:cd:4c:8a:8b:cf:22:5a:dd:b1:67:
82:1f:52:23:2f:0c:57:66:c4:d2:50:48:e8:e1:20:6e:65:4d:
12:73:9c:38:bf:ff:59:3d:79:ad:79:ba:7f:a1:1f:ea:81:b3:
ce:b6:c6:4d:98:be:9f:65:be:3c:52:fd:de:c3:65:7c:f1:59:
29:d6:8f:83:58:ee:78:39:dd:0e:0d:6d:66:c6:76:0e:4d:a8:
60:c2:74:92
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYViIwxfhLBzfeTx/k2nJh+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjIxMjMwMDgyNTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzhlMzM5MDI3NDllNGFiMmIwYjM5YTE4ZWZjZTcyNTE5YmQ1OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBAA0Tdkmg/AkQi+wzxJPjaG4yE/
AAFcbCZr2897Clmn5Ktq5TziXjXCy4gAHbP9MESXa1Lt7u5d8HNIqRFsNZWTUvrP
Zkcd8U9tEQAz6u/MAY7NTMCxAOshxjHhanFkqrbgqqpQ3rmT2+tZAm55yNdm5YvN
zhz+Qm9ZYhb7aTPGpbcAiXLe6CrJOyupsh+Qvc442wrGuvcJAaE5Mko8RN6fGjVh
rqzL9V2fh7pOGtPRQEEcQEjvzTPqCgNCRSZpIMvp9J0rTh093GSM0elOmyuRTF3M
KSK9ibUsl26GtH4vOGf1jKCjeTFAPWOQ/o6u4x3xKaSI5cMwB3GiemLXdQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFNOOM5AnSeSrKws5oY785yUZvVjaMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvMDQ0emtDZEo1S3NyQ3ptaGp2em5KUm05V05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAVZ45AwQD
Ve3AAwQAVe3LMAwDBABV7c0DBAVV7cADBAC5XSADBAG5XSIDBAPBbcADBADCqdkw
DQYJKoZIhvcNAQELBQADggEBAENi3tiPab29gObfLf1AYkfFrtWLdBmQvBJOXj0B
vy853NYLXqDEit+gdxz4l3zB2fYiQklKDvAT8n/qbt50N2Hwysb/Kp4KYy8LsqnN
zuPC8U6Agi2xNGAIURRBg2B9rAPYjh3wBMZZRIuwLxvcYrwKIMbdupXpWzktcDC/
sGFSbXzDVB2g0xjaDZbJB8FvTFKsCj5Ag61DcclK77n7BerSqB9f+1Wjq122zUyK
i88iWt2xZ4IfUiMvDFdmxNJQSOjhIG5lTRJznDi//1k9ea15un+hH+qBs862xk2Y
vp9lvjxS/d7DZXzxWSnWj4NY7ng53Q4NbWbGdg5NqGDCdJI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net