Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/AkkqTkgoNjucTbIenc-XdoQnIZI.roa
File: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (raw, json)
Hash identifier: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=
Subject key identifier: 02:49:2A:4E:48:28:36:3B:9C:4D:B2:1E:9D:CF:97:76:84:27:21:92
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 019422202C23CC225B042AE4B0B76929C006
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/AkkqTkgoNjucTbIenc-XdoQnIZI.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42428
IP address blocks: 87.230.128.0/19 maxlen: 19
87.230.160.0/19 maxlen: 19
87.230.192.0/18 maxlen: 18
88.84.96.0/19 maxlen: 19
88.84.96.0/20 maxlen: 20
88.84.96.0/22 maxlen: 22
88.84.100.0/22 maxlen: 22
88.84.104.0/21 maxlen: 21
88.84.112.0/20 maxlen: 20
185.90.16.0/22 maxlen: 22
212.11.160.0/23 maxlen: 23
212.11.162.0/24 maxlen: 24
212.11.163.0/24 maxlen: 24
212.11.164.0/24 maxlen: 24
212.11.165.0/24 maxlen: 24
212.11.166.0/24 maxlen: 24
212.11.167.0/24 maxlen: 24
212.11.168.0/23 maxlen: 23
212.11.170.0/24 maxlen: 24
212.11.171.0/24 maxlen: 24
212.11.172.0/24 maxlen: 24
212.11.173.0/24 maxlen: 24
212.11.174.0/23 maxlen: 23
212.11.176.0/24 maxlen: 24
212.11.177.0/24 maxlen: 24
212.11.178.0/23 maxlen: 23
212.11.180.0/24 maxlen: 24
212.11.181.0/24 maxlen: 24
212.11.182.0/24 maxlen: 24
212.11.183.0/24 maxlen: 24
212.11.184.0/24 maxlen: 24
212.11.185.0/24 maxlen: 24
212.11.186.0/23 maxlen: 23
212.11.188.0/22 maxlen: 22
2a02:fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:23:cc:22:5b:04:2a:e4:b0:b7:69:29:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02492a4e4828363b9c4db21e9dcf977684272192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:d5:b2:5e:89:8e:9a:84:6a:c9:fd:5d:16:
9f:bc:de:82:8f:60:e4:c0:28:c9:2a:12:43:59:4a:
12:c0:f7:0f:02:56:f4:2f:d1:f6:63:ac:3e:7e:d8:
f8:01:9e:8d:c4:9e:af:20:84:f8:c8:c9:4d:5c:4f:
b0:f6:0d:1d:ce:11:97:cd:52:8b:1b:95:53:70:8f:
5d:24:11:d9:c2:43:ae:12:2e:2c:ac:3e:17:2c:9a:
97:bc:0c:ef:38:2f:08:9d:f8:53:70:f9:83:43:ba:
df:13:34:1f:9b:a7:5c:dc:48:0e:ff:7f:a6:60:30:
5c:6b:2c:d4:f3:42:2b:c0:7a:d7:ac:19:b0:5c:03:
ab:06:02:d9:45:96:35:9b:2d:94:63:97:78:b7:90:
59:e7:be:3f:df:23:bd:a5:8e:66:12:2d:da:90:b6:
eb:bf:73:90:69:85:e4:71:73:11:be:84:16:fb:42:
4e:bf:14:72:57:bf:c1:99:b6:3b:79:ac:78:0f:d9:
dd:cb:3a:2a:be:33:5e:85:f6:ed:57:1f:4c:4c:8b:
68:2a:e5:23:12:55:1c:bb:4e:d7:91:cc:65:37:b1:
47:36:f8:47:09:fa:52:2b:72:ad:bb:49:34:c3:52:
45:64:d1:d7:b6:c5:ab:0e:4e:c7:b9:62:18:79:0f:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:2A:4E:48:28:36:3B:9C:4D:B2:1E:9D:CF:97:76:84:27:21:92
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/AkkqTkgoNjucTbIenc-XdoQnIZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.230.128.0/17
88.84.96.0/19
185.90.16.0/22
212.11.160.0/19
IPv6:
2a02:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
74:6b:fe:4e:d1:1f:ee:55:6b:d3:b8:0b:9e:60:90:01:68:47:
e7:a7:3d:56:b8:0c:2d:38:53:78:3f:a9:98:83:e0:1a:83:ed:
90:d6:de:ca:0d:50:80:be:36:17:2b:ad:6b:2d:82:a6:e7:8b:
53:16:fb:20:c7:9e:a9:2e:a8:d7:66:32:07:13:26:ab:07:86:
80:1e:c9:6d:cd:ac:be:4b:2d:f9:9d:ca:4c:39:fb:cc:b1:3e:
b7:c5:12:60:21:9b:51:09:22:39:65:39:08:67:8f:8b:92:73:
d0:66:cc:81:b1:a2:aa:55:e2:4e:92:d4:e0:06:5d:55:82:8a:
ea:db:df:0d:28:16:8f:25:15:a7:af:89:ad:31:7a:22:72:f6:
76:7a:2f:4f:7d:5f:ae:6f:d3:a1:b9:f3:1c:11:72:5b:d8:9c:
44:f0:ae:7f:47:52:a7:6e:6a:37:92:52:1e:d0:2d:05:69:c7:
be:e9:c8:5f:5f:7e:8a:ea:c4:79:80:15:13:fa:8a:e0:ec:f9:
06:25:26:d7:08:73:94:7d:73:a7:ad:37:7c:d8:f2:07:e5:1c:
e8:e3:85:8a:b9:30:2b:18:47:57:6a:cf:db:e0:3c:06:cf:2d:
2c:74:e6:95:22:cb:61:36:5a:66:a0:5d:96:32:be:7f:1d:3b:
54:66:4e:a5
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQiICwjzCJbBCrksLdpKcAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx
YWYyNDIwHhcNMjUwMTAxMTM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ5MmE0ZTQ4MjgzNjNiOWM0ZGIyMWU5ZGNmOTc3Njg0MjcyMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf3Vsl6JjpqEasn9XRafvN6Cj2Dk
wCjJKhJDWUoSwPcPAlb0L9H2Y6w+ftj4AZ6NxJ6vIIT4yMlNXE+w9g0dzhGXzVKL
G5VTcI9dJBHZwkOuEi4srD4XLJqXvAzvOC8InfhTcPmDQ7rfEzQfm6dc3EgO/3+m
YDBcayzU80IrwHrXrBmwXAOrBgLZRZY1my2UY5d4t5BZ574/3yO9pY5mEi3akLbr
v3OQaYXkcXMRvoQW+0JOvxRyV7/BmbY7eax4D9ndyzoqvjNehfbtVx9MTItoKuUj
ElUcu07XkcxlN7FHNvhHCfpSK3Ktu0k0w1JFZNHXtsWrDk7HuWIYeQ+tYQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAJJKk5IKDY7nE2yHp3Pl3aEJyGSMB8GA1UdIwQY
MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt
Nzc5M2I5ZWZiMWJkLzEvQWtrcVRrZ29OanVjVGJJZW5jLVhkb1FuSVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk
LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHV+aAAwQF
WFRgAwQCuVoQAwQF1AugMA0EAgACMAcDBQMqAg/AMA0GCSqGSIb3DQEBCwUAA4IB
AQB0a/5O0R/uVWvTuAueYJABaEfnpz1WuAwtOFN4P6mYg+Aag+2Q1t7KDVCAvjYX
K61rLYKm54tTFvsgx56pLqjXZjIHEyarB4aAHsltzay+Sy35ncpMOfvMsT63xRJg
IZtRCSI5ZTkIZ4+LknPQZsyBsaKqVeJOktTgBl1Vgorq298NKBaPJRWnr4mtMXoi
cvZ2ei9PfV+ub9OhufMcEXJb2JxE8K5/R1Knbmo3klIe0C0Face+6chfX36K6sR5
gBUT+org7PkGJSbXCHOUfXOnrTd82PIH5Rzo44WKuTArGEdXas/b4DwGzy0sdOaV
IsthNlpmoF2WMr5/HTtUZk6l
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net