Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa
File: i0onS2YYCo1zPV4el58FhnrFtX0.roa (raw, json)
Hash identifier: 49hZxyKwfkEgoJGd7ZwRY+T8ycVriPCEZrUcG0KlQrA=
Subject key identifier: 8B:4A:27:4B:66:18:0A:8D:73:3D:5E:1E:97:9F:05:86:7A:C5:B5:7D
Certificate issuer: /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial: 0710E5D7
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa
Signing time: Sat 01 Jan 2022 11:59:35 +0000
ROA not before: Sat 01 Jan 2022 11:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 24
185.254.17.0/24 maxlen: 24
185.254.16.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
185.244.104.0/24 maxlen: 24
185.244.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118547927 (0x710e5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Validity
Not Before: Jan 1 11:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4a274b66180a8d733d5e1e979f05867ac5b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:75:5c:85:01:c4:42:53:84:37:88:ff:0f:
d0:b2:65:9a:af:b6:ef:b3:6f:9f:95:7a:a4:86:9b:
f3:df:96:18:ed:80:9f:44:99:67:07:d2:ea:92:e1:
e4:25:51:6d:b9:1e:e3:2f:e7:ad:5e:35:da:1f:7e:
55:5f:e0:29:c7:62:d0:6e:a7:b3:24:45:1f:e1:0d:
4c:1f:1e:bc:19:66:8e:b3:f4:e8:1e:1f:da:1a:61:
df:f0:af:12:7b:b9:f2:f5:cc:87:e5:70:bd:9f:e7:
6a:4c:ac:9e:37:f2:1a:08:29:ac:73:96:fa:27:93:
39:4c:9c:b3:43:b7:e3:91:3f:3a:07:1c:53:c1:5e:
f3:43:4e:07:5e:ff:85:9e:2f:7e:6c:a5:8a:40:bb:
47:c4:b5:fc:d4:0f:07:da:1d:ac:82:0e:46:f5:c0:
7a:b3:ac:e5:89:44:e0:d8:93:79:c3:56:cb:26:10:
29:a1:fa:46:ae:c0:43:45:b2:00:e7:85:3e:f2:53:
06:b2:db:bc:6e:a5:af:f4:7f:80:29:c5:ea:d2:c3:
27:d7:d8:16:c4:39:5c:26:4a:d2:e7:85:e8:db:19:
ba:55:17:71:b5:5e:ac:c7:31:03:5d:16:d1:fb:1b:
1c:3e:77:3f:f9:4d:dd:40:bd:34:3b:a8:96:00:7c:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:27:4B:66:18:0A:8D:73:3D:5E:1E:97:9F:05:86:7A:C5:B5:7D
X509v3 Authority Key Identifier:
keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/i0onS2YYCo1zPV4el58FhnrFtX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.104.0/23
185.246.236.0/22
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
60:8e:ea:04:d9:7d:2e:a3:9f:1b:5d:08:b9:29:ec:59:58:6f:
43:37:80:c4:d9:6d:ea:92:c4:c9:f2:90:ce:e8:39:16:30:bf:
ac:f1:a8:6d:97:cf:62:7c:88:32:81:d4:a6:79:f9:ff:dd:02:
9d:28:db:3c:4e:8b:97:95:e2:b9:08:12:b7:6a:a1:c4:f2:61:
13:e6:ab:db:95:26:03:43:e3:17:af:71:4d:92:04:9e:e4:9c:
ff:45:c9:59:d9:7c:36:2c:a2:06:b7:27:ad:e3:f9:f1:44:a4:
00:bb:05:4c:ee:1d:a7:fb:70:51:66:f9:e9:84:2a:85:a5:20:
e9:82:11:b9:2b:6c:21:12:4a:b7:c0:d6:e0:08:27:a7:f3:aa:
15:fc:b2:e1:cd:a1:49:a5:19:a4:79:32:c6:57:ca:b3:46:1c:
35:9e:46:87:76:20:0e:1b:c0:a2:ed:66:62:42:79:9f:c6:cf:
95:0a:bb:20:c2:d8:1c:4b:7e:42:97:b5:7b:ff:43:5c:28:0f:
d6:94:a4:20:8b:4f:be:ff:51:f3:7f:02:c5:f1:76:26:f8:d1:
66:36:53:c5:87:f1:fc:c9:8b:a6:91:fd:3b:75:c8:73:0a:ea:
2f:e2:a6:09:fd:91:3e:78:61:6b:e2:65:bf:70:0e:65:6c:2b:
41:bf:63:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBxDl1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY2MWFkY2JmNjk2MmVlZWM4MjVjNmQ0ZGU5YjQ0OWYwMmU4NDFkMB4XDTIyMDEw
MTExNTkzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI0YTI3NGI2NjE4
MGE4ZDczM2Q1ZTFlOTc5ZjA1ODY3YWM1YjU3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALIVdVyFAcRCU4Q3iP8P0LJlmq+277Nvn5V6pIab89+WGO2A
n0SZZwfS6pLh5CVRbbke4y/nrV412h9+VV/gKcdi0G6nsyRFH+ENTB8evBlmjrP0
6B4f2hph3/CvEnu58vXMh+VwvZ/nakysnjfyGggprHOW+ieTOUycs0O345E/Ogcc
U8Fe80NOB17/hZ4vfmylikC7R8S1/NQPB9odrIIORvXAerOs5YlE4NiTecNWyyYQ
KaH6Rq7AQ0WyAOeFPvJTBrLbvG6lr/R/gCnF6tLDJ9fYFsQ5XCZK0ueF6NsZulUX
cbVerMcxA10W0fsbHD53P/lN3UC9NDuolgB8XLkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSLSidLZhgKjXM9Xh6XnwWGesW1fTAfBgNVHSMEGDAWgBRbZhrcv2li7uyC
XG1N6bRJ8C6EHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cyWWEzTDlwWXU3c2dseHRUZW0wU2ZBdWhCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvY2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8x
L2kwb25TMllZQ28xelBWNGVsNThGaG5yRnRYMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
Y2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8xL1cyWWEzTDlwWXU3
c2dseHRUZW0wU2ZBdWhCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEALnv9AMEAbnv9gMEAbn0aAMEArn2
7AMEAbn+EDANBgkqhkiG9w0BAQsFAAOCAQEAYI7qBNl9LqOfG10IuSnsWVhvQzeA
xNlt6pLEyfKQzug5FjC/rPGobZfPYnyIMoHUpnn5/90CnSjbPE6Ll5XiuQgSt2qh
xPJhE+ar25UmA0PjF69xTZIEnuSc/0XJWdl8NiyiBrcnreP58USkALsFTO4dp/tw
UWb56YQqhaUg6YIRuStsIRJKt8DW4Agnp/OqFfyy4c2hSaUZpHkyxlfKs0YcNZ5G
h3YgDhvAou1mYkJ5n8bPlQq7IMLYHEt+Qpe1e/9DXCgP1pSkIItPvv9R838CxfF2
JvjRZjZTxYfx/MmLppH9O3XIcwrqL+KmCf2RPnhha+Jlv3AOZWwrQb9jog==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net