Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g4z85eXP6AQ-6Q-E7LyrsNAZn3M.roa
File: g4z85eXP6AQ-6Q-E7LyrsNAZn3M.roa (raw, json)
Hash identifier: GyiBTjSHikdJQ4zwjgEyxxIUjTiDaa7uRGCxbmglAMw=
Subject key identifier: 83:8C:FC:E5:E5:CF:E8:04:3E:E9:0F:84:EC:BC:AB:B0:D0:19:9F:73
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0193F275C66E3357842F203ACD2B63DA83F8
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g4z85eXP6AQ-6Q-E7LyrsNAZn3M.roa
Signing time: Mon 23 Dec 2024 07:40:25 +0000
ROA not before: Mon 23 Dec 2024 07:40:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.76.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.82.0/24 maxlen: 24
85.142.84.0/23 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.112.0/22 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.244.0/24 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.252.0/22 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:75:c6:6e:33:57:84:2f:20:3a:cd:2b:63:da:83:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 23 07:40:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=838cfce5e5cfe8043ee90f84ecbcabb0d0199f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:96:2b:b3:2d:4a:d4:f7:f8:b3:62:89:93:
cb:b6:54:b0:a5:2e:1a:33:f6:9b:7f:82:91:12:d8:
80:e8:5a:ac:91:6d:24:94:e2:e6:20:eb:de:16:f1:
b1:47:a3:22:e6:a1:90:a3:a6:9b:b2:39:67:b4:5e:
09:33:8d:5d:3c:e3:3f:ac:63:a2:6c:e0:b6:7d:f1:
e5:ab:39:0b:72:8e:2c:a5:60:f3:cd:a8:91:73:c1:
fe:82:ee:15:4e:66:d5:55:18:da:f8:f5:58:24:5e:
b1:64:1b:38:e4:e1:3a:21:23:0c:50:25:56:b2:14:
32:06:50:1e:e7:2a:34:a9:af:58:bc:d0:63:a5:66:
2c:37:d3:7f:69:d8:64:ac:5c:9f:63:0d:5e:9e:a6:
27:0b:79:d3:1c:2a:09:67:75:a4:8f:32:06:11:c2:
b0:a1:8c:ae:ba:4b:32:4a:42:3e:f7:be:b1:44:15:
5d:6d:c9:02:c5:41:7f:3d:c2:9a:87:7e:4c:07:8b:
c5:53:f8:da:ce:fa:15:f7:7a:bd:42:9e:79:7f:36:
09:1b:08:76:42:ed:cb:05:9a:11:6d:94:4f:9e:7d:
da:42:68:00:e1:cf:3a:ff:30:06:e6:9a:8c:a4:32:
0f:83:91:34:cf:be:c3:85:e3:a9:27:40:d4:d7:7d:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:FC:E5:E5:CF:E8:04:3E:E9:0F:84:EC:BC:AB:B0:D0:19:9F:73
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g4z85eXP6AQ-6Q-E7LyrsNAZn3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.76.0/24
85.142.81.0-85.142.82.255
85.142.84.0/23
85.142.87.0/24
85.142.99.0-85.142.101.255
85.142.112.0/22
85.142.128.0/20
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.244.0/24
85.142.246.0/24
85.142.250.0/24
85.142.252.0/22
85.143.41.0-85.143.44.255
85.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:59:67:53:76:0d:db:c1:8c:5d:b8:1b:1b:52:ee:21:5b:2d:
d7:a0:ad:f0:bf:fd:7e:57:34:28:39:6f:76:ea:41:30:5d:85:
f4:20:dd:a3:43:96:79:fb:6d:56:f0:46:98:bb:66:93:92:a4:
cf:c2:00:1c:f2:df:ef:9f:47:27:3e:c2:09:40:57:26:7a:c6:
c1:79:00:24:cd:2f:ed:e7:49:98:99:03:03:e8:93:33:16:a5:
8e:36:31:2f:fa:fa:54:5d:79:01:83:45:ae:57:b8:5e:c2:73:
46:b0:28:7b:f3:81:6e:91:3f:6a:af:1c:39:b3:4a:a5:b0:06:
5b:57:54:27:7d:52:d1:57:7a:05:2b:98:83:8c:94:07:ea:f2:
32:3e:03:de:a7:f6:f5:df:e7:b9:c3:94:1f:94:4b:c1:85:63:
10:3c:57:61:a7:d2:72:85:36:ae:58:94:a1:52:74:25:c9:6a:
a5:da:62:31:16:16:b2:91:05:f2:ca:9d:e8:94:20:bf:79:00:
d3:41:4a:5d:ef:ac:4d:b2:ac:6a:70:1b:1e:9c:93:58:5c:df:
33:cd:ec:23:08:db:af:5b:33:a9:0a:14:a9:18:91:2e:0c:78:
92:52:e4:e6:53:40:68:46:d8:b2:fc:fe:15:a1:7b:fa:00:b5:
79:08:5e:1c
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZPydcZuM1eELyA6zStj2oP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQxMjIzMDc0MDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzhjZmNlNWU1Y2ZlODA0M2VlOTBmODRlY2JjYWJiMGQwMTk5ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8eWK7MtStT3+LNiiZPLtlSwpS4a
M/abf4KREtiA6FqskW0klOLmIOveFvGxR6Mi5qGQo6absjlntF4JM41dPOM/rGOi
bOC2ffHlqzkLco4spWDzzaiRc8H+gu4VTmbVVRja+PVYJF6xZBs45OE6ISMMUCVW
shQyBlAe5yo0qa9YvNBjpWYsN9N/adhkrFyfYw1enqYnC3nTHCoJZ3WkjzIGEcKw
oYyuuksySkI+976xRBVdbckCxUF/PcKah35MB4vFU/jazvoV93q9Qp55fzYJGwh2
Qu3LBZoRbZRPnn3aQmgA4c86/zAG5pqMpDIPg5E0z77DheOpJ0DU131ltQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFIOM/OXlz+gEPukPhOy8q7DQGZ9zMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvZzR6ODVlWFA2QVEtNlEtRTdMeXJzTkFabjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBANV
jgAwDAMEA1WOKAMEAlWOMAMEAlWOQAMEAFWOSAMEAFWOTDAMAwQAVY5RAwQAVY5S
AwQBVY5UAwQAVY5XMAwDBABVjmMDBAFVjmQDBAJVjnADBARVjoADBAFVjtQDBABV
jtcDBABVjvADBABVjvIDBABVjvQDBABVjvYDBABVjvoDBAJVjvwwDAMEAFWPKQME
AFWPLAMEAlWPMDANBgkqhkiG9w0BAQsFAAOCAQEAWllnU3YN28GMXbgbG1LuIVst
16Ct8L/9flc0KDlvdupBMF2F9CDdo0OWefttVvBGmLtmk5Kkz8IAHPLf759HJz7C
CUBXJnrGwXkAJM0v7edJmJkDA+iTMxaljjYxL/r6VF15AYNFrle4XsJzRrAoe/OB
bpE/aq8cObNKpbAGW1dUJ31S0Vd6BSuYg4yUB+ryMj4D3qf29d/nucOUH5RLwYVj
EDxXYafScoU2rliUoVJ0JclqpdpiMRYWspEF8sqd6JQgv3kA00FKXe+sTbKsanAb
HpyTWFzfM83sIwjbr1szqQoUqRiRLgx4klLk5lNAaEbYsvz+FaF7+gC1eQheHA==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net