Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/jwVhNxmxiBeCBmf-HVw0DZEWRss.roa
File: jwVhNxmxiBeCBmf-HVw0DZEWRss.roa (raw, json)
Hash identifier: B2kHxn8ctrFcaPX+rHUGGnloDhc4VRTBCOOOv/SVCk8=
Subject key identifier: 8F:05:61:37:19:B1:88:17:82:06:67:FE:1D:5C:34:0D:91:16:46:CB
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 018CC9BCF5E231413946EC817AB622C384AD
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/jwVhNxmxiBeCBmf-HVw0DZEWRss.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199335
IP address blocks: 188.241.40.0/21 maxlen: 21
185.113.60.0/22 maxlen: 22
85.92.164.0/22 maxlen: 22
85.92.160.0/22 maxlen: 22
85.92.168.0/22 maxlen: 22
85.92.172.0/22 maxlen: 22
85.92.176.0/22 maxlen: 22
85.92.184.0/22 maxlen: 22
85.92.180.0/22 maxlen: 22
85.92.188.0/22 maxlen: 22
185.5.64.0/22 maxlen: 22
80.94.192.0/20 maxlen: 20
185.99.21.0/24 maxlen: 24
176.126.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:e2:31:41:39:46:ec:81:7a:b6:22:c3:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f05613719b18817820667fe1d5c340d911646cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:71:ab:e3:fa:89:33:18:3b:2d:0c:fe:ad:
4e:58:27:f2:19:45:3a:07:0b:ae:1d:df:d2:08:35:
c9:b1:7b:55:3f:71:7a:54:cc:5c:b2:1c:9b:2f:49:
44:30:02:24:17:bd:a0:d7:d1:ca:eb:4e:3c:b8:33:
4c:c1:3c:4d:26:6e:91:5e:fa:8d:64:1c:ad:24:c8:
c3:d6:ea:7d:30:bc:e6:a5:75:8b:0e:a6:bd:50:17:
3d:c5:47:f6:0e:ed:7d:55:f2:c3:e3:5c:70:d8:7a:
dc:90:7a:bf:6b:06:2e:f5:45:b2:67:eb:65:81:c4:
3f:37:30:f6:12:5a:bb:1e:6a:93:97:71:93:fb:d0:
e4:94:0e:f9:57:89:35:40:f5:c6:30:89:3f:6c:6d:
ed:08:46:96:67:65:8f:23:bc:9f:ba:80:03:36:4e:
2f:5e:d9:f5:4b:05:a2:08:4d:e9:ea:3a:f1:88:f5:
36:cd:99:d1:1b:26:66:a5:93:f2:28:20:10:04:61:
b0:16:5c:79:95:51:8b:27:4d:ee:f9:ed:53:e3:5a:
57:47:99:0d:a8:e8:8d:97:ea:ea:ba:99:fc:04:49:
a3:56:23:62:0c:f3:83:b0:9a:a5:3f:5e:16:93:cf:
96:d4:a8:a2:bf:1a:04:45:dc:bd:3b:70:f3:3b:17:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:61:37:19:B1:88:17:82:06:67:FE:1D:5C:34:0D:91:16:46:CB
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/jwVhNxmxiBeCBmf-HVw0DZEWRss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.192.0/20
85.92.160.0/19
176.126.224.0/21
185.5.64.0/22
185.99.21.0/24
185.113.60.0/22
188.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
26:24:37:87:8e:f4:83:35:5d:b0:8b:13:6c:92:44:6f:dd:53:
93:46:76:03:08:e2:1e:05:44:d1:c9:fd:8b:ef:36:98:17:18:
9d:45:c9:67:f6:c2:bb:80:c5:b3:66:50:f1:87:81:05:9f:56:
ff:1a:d7:26:51:fa:5b:67:62:c4:22:2a:6e:d0:6c:af:d0:05:
c2:17:f7:ff:e5:e7:95:d1:fe:7a:ef:de:48:13:0c:d5:b0:95:
aa:39:a7:5a:a6:29:01:01:50:68:e5:3e:0d:15:3d:13:94:d6:
96:3a:f3:e8:0a:b8:15:41:3a:ed:78:fa:2e:d5:9c:26:f6:53:
53:a2:c9:be:8a:fa:d4:f1:4c:f0:f1:a3:4c:ec:80:35:36:5d:
e6:38:d9:0b:02:43:21:ff:bb:e0:2e:24:80:2d:5d:8e:c0:c6:
db:bd:cc:55:e5:ff:f6:f0:7f:e1:92:5c:9c:d0:06:89:f6:7c:
fe:aa:1f:81:7c:88:d7:9a:65:ef:78:ec:07:37:2f:24:e1:14:
07:a2:09:e9:fc:13:78:c7:65:05:c5:87:81:a3:77:1f:8a:f0:
60:26:ae:32:df:a0:20:91:72:89:47:82:16:07:aa:e5:94:b6:
00:f6:81:bf:7b:70:44:8c:7b:72:2d:b3:ef:57:f5:96:85:0b:
bf:fd:41:d6
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzJvPXiMUE5RuyBerYiw4StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw
ZGUwOTQwHhcNMjQwMTAyMTAzNDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA1NjEzNzE5YjE4ODE3ODIwNjY3ZmUxZDVjMzQwZDkxMTY0NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRxq+P6iTMYOy0M/q1OWCfyGUU6
BwuuHd/SCDXJsXtVP3F6VMxcshybL0lEMAIkF72g19HK6048uDNMwTxNJm6RXvqN
ZBytJMjD1up9MLzmpXWLDqa9UBc9xUf2Du19VfLD41xw2HrckHq/awYu9UWyZ+tl
gcQ/NzD2Elq7HmqTl3GT+9DklA75V4k1QPXGMIk/bG3tCEaWZ2WPI7yfuoADNk4v
Xtn1SwWiCE3p6jrxiPU2zZnRGyZmpZPyKCAQBGGwFlx5lVGLJ03u+e1T41pXR5kN
qOiNl+rqupn8BEmjViNiDPODsJqlP14Wk8+W1KiivxoERdy9O3DzOxfDyQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFI8FYTcZsYgXggZn/h1cNA2RFkbLMB8GA1UdIwQY
MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt
NTg3MjEwOWI2N2E4LzEvandWaE54bXhpQmVDQm1mLUhWdzBEWkVXUnNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4
LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQEUF7AAwQF
VVygAwQDsH7gAwQCuQVAAwQAuWMVAwQCuXE8AwQDvPEoMA0GCSqGSIb3DQEBCwUA
A4IBAQAmJDeHjvSDNV2wixNskkRv3VOTRnYDCOIeBUTRyf2L7zaYFxidRcln9sK7
gMWzZlDxh4EFn1b/GtcmUfpbZ2LEIipu0Gyv0AXCF/f/5eeV0f56795IEwzVsJWq
OadapikBAVBo5T4NFT0TlNaWOvPoCrgVQTrtePou1Zwm9lNTosm+ivrU8Uzw8aNM
7IA1Nl3mONkLAkMh/7vgLiSALV2OwMbbvcxV5f/28H/hklyc0AaJ9nz+qh+BfIjX
mmXveOwHNy8k4RQHognp/BN4x2UFxYeBo3cfivBgJq4y36AgkXKJR4IWB6rllLYA
9oG/e3BEjHtyLbPvV/WWhQu//UHW
-----END CERTIFICATE-----
Generated at Thu May 9 03:59:45 2024 by rpki-client on console.sobornost.net