Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/F_-tNRuBQPAC4wd6pgfTPIsJqos.roa
File: F_-tNRuBQPAC4wd6pgfTPIsJqos.roa (raw, json)
Hash identifier: no2Z7X26MWCKze0srx2+YchCVE6ztWGlJ/QGvSTLIE0=
Subject key identifier: 17:FF:AD:35:1B:81:40:F0:02:E3:07:7A:A6:07:D3:3C:8B:09:AA:8B
Certificate issuer: /CN=ac89582220b58417a3a9459f55c5b947cc357c25
Certificate serial: 32DDD769
Authority key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/F_-tNRuBQPAC4wd6pgfTPIsJqos.roa
Signing time: Sat 01 Jan 2022 13:58:42 +0000
ROA not before: Sat 01 Jan 2022 13:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 188.120.64.0/19 maxlen: 19
212.60.120.0/21 maxlen: 21
217.74.208.0/20 maxlen: 20
94.18.211.0/24 maxlen: 24
188.120.80.0/21 maxlen: 21
94.18.245.0/24 maxlen: 24
80.243.112.0/20 maxlen: 20
80.243.124.0/24 maxlen: 24
212.60.96.0/19 maxlen: 19
2a01:4f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853399401 (0x32ddd769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89582220b58417a3a9459f55c5b947cc357c25
Validity
Not Before: Jan 1 13:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ffad351b8140f002e3077aa607d33c8b09aa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:b9:d9:6b:5d:48:72:fa:cf:73:33:4e:2a:
36:42:7b:a0:92:35:51:6a:24:42:13:f0:f3:96:14:
16:eb:ac:32:7c:66:91:30:78:46:49:4e:99:e6:23:
3e:9a:1a:77:f9:43:97:01:44:e1:67:8b:88:ba:b1:
a8:7c:8d:54:db:79:be:f1:bf:a6:93:a7:99:d7:84:
44:1d:9a:94:26:de:8e:00:b7:a4:3c:ed:0d:53:2b:
7e:08:78:fc:92:3a:ec:1a:21:b4:c7:4c:03:5f:7a:
7d:96:a2:1e:c6:f9:86:ea:78:43:fe:4c:d0:f1:70:
a9:da:e0:57:e9:7c:92:c0:ed:fc:c3:11:11:79:9d:
46:04:ae:76:64:93:11:2b:a9:2b:0b:27:4a:82:03:
51:dd:e6:b8:06:ee:31:a7:0a:e0:49:6f:7b:4c:be:
02:b4:db:7d:ea:7e:25:58:f7:9c:99:60:79:20:ec:
0b:7a:20:88:d9:92:11:c3:fc:b7:e4:45:6d:07:20:
64:59:d3:82:59:15:a7:45:1d:d4:c8:02:9d:69:cf:
b0:2e:ad:8e:d2:f7:e1:d4:2a:af:60:75:6a:2c:77:
d4:6a:21:0d:f0:9d:c4:58:d3:b6:f0:05:14:7e:da:
c7:09:d5:93:fd:ed:16:9b:cc:18:df:1b:64:34:23:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:AD:35:1B:81:40:F0:02:E3:07:7A:A6:07:D3:3C:8B:09:AA:8B
X509v3 Authority Key Identifier:
keyid:AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/F_-tNRuBQPAC4wd6pgfTPIsJqos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.112.0/20
94.18.211.0/24
94.18.245.0/24
188.120.64.0/19
212.60.96.0/19
217.74.208.0/20
IPv6:
2a01:4f0::/32
Signature Algorithm: sha256WithRSAEncryption
73:c9:9d:76:64:d4:72:6d:e7:03:c4:01:77:66:d3:e1:06:d7:
46:6b:54:d2:23:a0:67:6b:49:95:4c:ee:51:4d:34:78:86:dd:
55:cd:45:17:dd:ca:fe:99:38:c0:54:1c:6a:c4:ee:23:71:e7:
0e:30:18:11:80:1b:01:65:1b:14:46:a0:65:20:ee:ed:ca:7b:
84:72:67:2a:6e:19:0a:28:a5:fe:8b:a6:36:93:02:d4:3f:52:
4e:1d:33:7f:da:1b:94:f4:b9:ee:4e:a3:94:13:9e:d5:85:b5:
d9:a6:26:a6:11:62:13:5a:72:65:fc:5a:94:77:b6:b2:d1:f0:
0a:4e:65:9e:86:ce:91:97:a3:c6:e0:f2:44:17:f4:95:db:1b:
c6:3c:76:20:83:01:51:94:32:56:ab:c4:9b:b5:63:90:23:69:
4d:02:71:e4:1a:f5:7e:4c:2b:b2:1c:84:90:27:69:e6:50:bf:
ae:fa:8e:1c:f1:06:a7:4d:28:df:c4:8e:b4:a9:b3:2f:32:41:
46:32:8f:11:4e:a2:2d:80:6e:8a:2e:2e:99:04:37:65:18:c2:
9c:3e:29:28:c2:8f:9e:b6:9e:25:ad:3f:ff:e1:47:6e:ae:c7:
31:16:4d:3a:a1:4e:cb:7b:44:53:d8:21:b3:00:db:d1:59:45:
d0:7f:15:6b
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIEMt3XaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Yzg5NTgyMjIwYjU4NDE3YTNhOTQ1OWY1NWM1Yjk0N2NjMzU3YzI1MB4XDTIyMDEw
MTEzNTg0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTdmZmFkMzUxYjgx
NDBmMDAyZTMwNzdhYTYwN2QzM2M4YjA5YWE4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3cudlrXUhy+s9zM04qNkJ7oJI1UWokQhPw85YUFuusMnxm
kTB4RklOmeYjPpoad/lDlwFE4WeLiLqxqHyNVNt5vvG/ppOnmdeERB2alCbejgC3
pDztDVMrfgh4/JI67BohtMdMA196fZaiHsb5hup4Q/5M0PFwqdrgV+l8ksDt/MMR
EXmdRgSudmSTESupKwsnSoIDUd3muAbuMacK4Elve0y+ArTbfep+JVj3nJlgeSDs
C3ogiNmSEcP8t+RFbQcgZFnTglkVp0Ud1MgCnWnPsC6tjtL34dQqr2B1aix31Goh
DfCdxFjTtvAFFH7axwnVk/3tFpvMGN8bZDQjQa8CAwEAAaOCAjYwggIyMB0GA1Ud
DgQWBBQX/601G4FA8ALjB3qmB9M8iwmqizAfBgNVHSMEGDAWgBSsiVgiILWEF6Op
RZ9VxblHzDV8JTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JJbFlJaUMxaEJlanFVV2ZWY1c1Ujh3MWZDVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvYmFiNDg5LThhNGUtNDYwMi04NGI0LWExMzY4ZWVjYjgyYi8x
L0ZfLXROUnVCUVBBQzR3ZDZwZ2ZUUElzSnFvcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
YmFiNDg5LThhNGUtNDYwMi04NGI0LWExMzY4ZWVjYjgyYi8xL3JJbFlJaUMxaEJl
anFVV2ZWY1c1Ujh3MWZDVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEBFDzcAMEAF4S0wMEAF4S9QMEBbx4
QAMEBdQ8YAMEBNlK0DANBAIAAjAHAwUAKgEE8DANBgkqhkiG9w0BAQsFAAOCAQEA
c8mddmTUcm3nA8QBd2bT4QbXRmtU0iOgZ2tJlUzuUU00eIbdVc1FF93K/pk4wFQc
asTuI3HnDjAYEYAbAWUbFEagZSDu7cp7hHJnKm4ZCiil/oumNpMC1D9STh0zf9ob
lPS57k6jlBOe1YW12aYmphFiE1pyZfxalHe2stHwCk5lnobOkZejxuDyRBf0ldsb
xjx2IIMBUZQyVqvEm7VjkCNpTQJx5Br1fkwrshyEkCdp5lC/rvqOHPEGp00o38SO
tKmzLzJBRjKPEU6iLYBuii4umQQ3ZRjCnD4pKMKPnraeJa0//+FHbq7HMRZNOqFO
y3tEU9ghswDb0VlF0H8Vaw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net