Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/m882wITinec56a9U7dgFH6MvWHA.roa
File: m882wITinec56a9U7dgFH6MvWHA.roa (raw, json)
Hash identifier: VCVqTsrK8kF+QvyaoZvGgwbe7B723mCs10M1bTWJaPI=
Subject key identifier: 9B:CF:36:C0:84:E2:9D:E7:39:E9:AF:54:ED:D8:05:1F:A3:2F:58:70
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 019422FC05A1A80D01ACAFF4508102275FED
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/m882wITinec56a9U7dgFH6MvWHA.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200062
IP address blocks: 80.209.244.0/22 maxlen: 22
158.181.48.0/21 maxlen: 21
185.9.128.0/22 maxlen: 22
185.64.112.0/22 maxlen: 22
185.127.116.0/22 maxlen: 22
188.64.56.0/21 maxlen: 21
2a00:6140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:05:a1:a8:0d:01:ac:af:f4:50:81:02:27:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcf36c084e29de739e9af54edd8051fa32f5870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:8b:d6:f8:ce:51:21:ac:ea:6a:1c:da:a9:
39:51:85:09:97:2b:f4:54:cb:f3:b9:a6:ed:5e:28:
44:8b:71:91:b6:ea:18:1e:88:c0:3c:72:d9:43:6e:
0b:04:bc:28:0a:eb:58:c3:fa:b8:c2:8a:85:91:14:
00:d6:b1:94:86:08:52:8d:81:47:9e:73:93:b2:d4:
87:92:03:e4:12:e9:bf:83:a7:e7:83:9c:e0:a9:d6:
0f:1f:60:13:da:83:26:6c:db:52:13:b5:2e:4f:bf:
ce:05:c1:ae:87:d1:0f:de:7f:7c:e2:41:f6:5b:6f:
8c:0b:68:b4:d1:9e:ed:d4:6e:07:7c:04:7c:95:c1:
b5:48:a1:71:04:1b:36:d9:b8:75:3b:bc:67:db:31:
a4:d0:81:ed:2e:b5:2f:3b:de:bb:3e:8b:cf:6a:9b:
e8:91:f9:d5:e5:96:27:7d:32:1c:59:33:d8:f0:bb:
00:45:64:d6:a6:7f:59:0e:e4:b5:96:3e:ed:91:40:
88:8d:e5:eb:4d:e2:5f:15:fe:c9:7d:f8:b2:27:19:
7a:a4:16:a2:8f:26:2e:af:8d:a2:f9:28:61:45:81:
c7:65:53:d5:97:fa:a1:3a:d8:f8:39:e7:42:05:96:
7e:28:0a:b9:0d:40:f3:fa:a2:f9:b8:38:2a:44:6f:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:36:C0:84:E2:9D:E7:39:E9:AF:54:ED:D8:05:1F:A3:2F:58:70
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/m882wITinec56a9U7dgFH6MvWHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.209.244.0/22
158.181.48.0/21
185.9.128.0/22
185.64.112.0/22
185.127.116.0/22
188.64.56.0/21
IPv6:
2a00:6140::/32
Signature Algorithm: sha256WithRSAEncryption
95:0d:51:b2:39:b4:3e:fc:4c:87:9a:28:f5:34:2c:78:21:40:
60:97:47:ee:d3:da:a4:ce:fc:cc:db:cc:95:ca:ef:1b:37:d8:
33:d0:8a:f2:d9:e0:c2:24:07:1a:6f:95:b1:0c:e8:e2:45:e1:
6b:11:42:c3:1d:8c:89:a5:53:1f:29:16:e6:32:5f:93:cf:25:
7f:1f:63:a7:93:1b:09:3d:be:e4:23:73:0f:91:71:a8:b1:3d:
0d:e1:5d:c2:30:e2:a8:f1:77:49:cb:c8:2b:90:06:36:12:5c:
b3:70:8b:32:b8:e1:b5:b4:65:a1:39:ed:73:94:dd:0d:c5:35:
07:01:ee:73:71:9c:dc:43:af:12:11:73:ac:5f:5a:5d:d7:7d:
c9:09:42:bb:cc:8a:26:87:f3:a6:02:ae:42:2c:1c:5e:9d:ca:
0b:84:31:c3:a4:69:c9:de:21:4e:53:91:f1:fa:57:78:ae:03:
7f:f6:15:5c:8f:b0:63:12:b0:7f:bd:b5:18:42:a7:49:b6:59:
47:3a:b6:80:ae:65:4b:f2:97:cf:be:ef:6e:b6:49:8f:1c:51:
30:a6:c4:35:d1:c5:c8:6d:13:90:4a:b0:c0:3c:f5:3d:49:74:
87:3b:9e:ee:5c:c5:1e:dd:f7:9a:86:92:bf:0a:36:77:15:85:
2b:2a:9a:fa
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQi/AWhqA0BrK/0UIECJ1/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1
NWFiMTIwHhcNMjUwMTAxMTc0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmNmMzZjMDg0ZTI5ZGU3MzllOWFmNTRlZGQ4MDUxZmEzMmY1ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bOL1vjOUSGs6moc2qk5UYUJlyv0
VMvzuabtXihEi3GRtuoYHojAPHLZQ24LBLwoCutYw/q4woqFkRQA1rGUhghSjYFH
nnOTstSHkgPkEum/g6fng5zgqdYPH2AT2oMmbNtSE7UuT7/OBcGuh9EP3n984kH2
W2+MC2i00Z7t1G4HfAR8lcG1SKFxBBs22bh1O7xn2zGk0IHtLrUvO967PovPapvo
kfnV5ZYnfTIcWTPY8LsARWTWpn9ZDuS1lj7tkUCIjeXrTeJfFf7JffiyJxl6pBai
jyYur42i+ShhRYHHZVPVl/qhOtj4OedCBZZ+KAq5DUDz+qL5uDgqRG/XQwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFJvPNsCE4p3nOemvVO3YBR+jL1hwMB8GA1UdIwQY
MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt
OTQwYzZiOGI1MDJhLzEvbTg4MndJVGluZWM1NmE5VTdkZ0ZINk12V0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh
LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCUNH0AwQD
nrUwAwQCuQmAAwQCuUBwAwQCuX90AwQDvEA4MA0EAgACMAcDBQAqAGFAMA0GCSqG
SIb3DQEBCwUAA4IBAQCVDVGyObQ+/EyHmij1NCx4IUBgl0fu09qkzvzM28yVyu8b
N9gz0Iry2eDCJAcab5WxDOjiReFrEULDHYyJpVMfKRbmMl+TzyV/H2OnkxsJPb7k
I3MPkXGosT0N4V3CMOKo8XdJy8grkAY2ElyzcIsyuOG1tGWhOe1zlN0NxTUHAe5z
cZzcQ68SEXOsX1pd133JCUK7zIomh/OmAq5CLBxencoLhDHDpGnJ3iFOU5Hx+ld4
rgN/9hVcj7BjErB/vbUYQqdJtllHOraArmVL8pfPvu9utkmPHFEwpsQ10cXIbROQ
SrDAPPU9SXSHO57uXMUe3feahpK/CjZ3FYUrKpr6
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:38 2025 by rpki-client on console.sobornost.net