Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/b7sNWlzHmaj36hpl7542OiFeLhk.roa
File: b7sNWlzHmaj36hpl7542OiFeLhk.roa (raw, json)
Hash identifier: r2LdfaqH2ThvketoRQBfUQ9ZRTad2+2P2sxQXJTCIiQ=
Subject key identifier: 6F:BB:0D:5A:5C:C7:99:A8:F7:EA:1A:65:EF:9E:36:3A:21:5E:2E:19
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 01941FFA8E744727CF24EA4E31D9FF29A37F
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/b7sNWlzHmaj36hpl7542OiFeLhk.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57300
IP address blocks: 91.109.168.0/24 maxlen: 24
91.109.169.0/24 maxlen: 24
91.109.170.0/24 maxlen: 24
91.109.171.0/24 maxlen: 24
91.109.172.0/24 maxlen: 24
91.109.173.0/24 maxlen: 24
91.109.174.0/24 maxlen: 24
91.109.175.0/24 maxlen: 24
95.87.120.0/24 maxlen: 24
95.87.121.0/24 maxlen: 24
95.87.122.0/24 maxlen: 24
95.87.123.0/24 maxlen: 24
95.87.124.0/24 maxlen: 24
95.87.125.0/24 maxlen: 24
95.87.126.0/24 maxlen: 24
95.87.127.0/24 maxlen: 24
185.73.164.0/24 maxlen: 24
185.73.165.0/24 maxlen: 24
185.73.166.0/24 maxlen: 24
185.73.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8e:74:47:27:cf:24:ea:4e:31:d9:ff:29:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fbb0d5a5cc799a8f7ea1a65ef9e363a215e2e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:e7:d6:b6:4d:45:2d:ce:02:23:f9:f9:1c:
00:9e:ee:97:c5:0d:db:85:81:32:01:2b:7d:0b:d6:
cb:7f:88:44:53:87:50:4d:5f:fc:33:e9:86:71:9a:
64:1c:13:08:7a:bf:9c:3e:70:aa:f7:c7:d3:73:04:
40:31:43:21:19:a1:97:30:29:5a:c6:16:0b:ed:6e:
04:28:43:9d:f2:66:08:01:1b:27:b5:5e:33:4b:b8:
c9:02:49:75:eb:e1:57:38:e1:13:18:e4:ea:0d:aa:
76:d4:9f:65:a1:e6:bb:7d:96:0b:81:31:d5:f1:9d:
8e:1d:f5:1d:fb:e2:18:7a:42:bc:90:af:38:bd:0f:
c3:5b:21:42:0d:7a:fd:16:bd:16:f5:2b:83:65:12:
0a:87:60:d5:94:d9:b5:b4:45:b1:97:66:84:ac:b2:
f7:30:87:83:eb:6e:e9:ea:c9:0e:50:dc:77:87:02:
d7:24:60:a1:c1:29:38:47:1d:48:0c:9d:4e:8c:39:
55:dd:af:39:74:7d:d7:93:aa:a7:3d:fa:cd:33:38:
e9:c4:c3:01:1d:a5:f9:9c:98:2d:b2:73:29:91:f9:
af:aa:a6:0c:d3:60:f2:42:c1:68:4e:89:13:ee:ee:
70:77:0b:e8:73:c4:51:ad:20:3c:7d:67:23:eb:a1:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:0D:5A:5C:C7:99:A8:F7:EA:1A:65:EF:9E:36:3A:21:5E:2E:19
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/b7sNWlzHmaj36hpl7542OiFeLhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.168.0/21
95.87.120.0/21
185.73.164.0/22
Signature Algorithm: sha256WithRSAEncryption
85:eb:cf:30:4f:39:4e:b6:c6:4f:21:7d:f7:83:72:c2:20:58:
6d:9c:b1:f5:fb:58:b6:c6:12:a4:a6:e0:78:93:a7:0d:0e:58:
c7:86:ac:73:81:5e:0c:f5:51:c6:97:9f:5b:52:b7:02:53:8e:
e6:27:8c:85:9d:b5:13:41:01:fa:f2:b0:fb:88:fd:0d:fd:4c:
e1:c6:60:f1:28:28:83:6a:5e:08:4e:11:65:25:b9:fc:d9:0f:
61:58:c6:c4:22:0e:fe:04:44:7e:61:c8:c8:7f:55:8a:e7:38:
ee:75:73:8c:5a:28:5e:3a:70:49:fc:39:84:a3:4f:af:71:ef:
83:6d:7e:c7:21:d7:75:10:c0:9b:7c:e7:45:12:48:4f:2b:8a:
8b:2e:74:fe:4c:7c:37:80:8f:f9:49:6b:e1:a8:b3:b8:33:87:
5c:2d:2b:df:09:59:10:f2:c5:69:f0:88:c4:8c:24:3b:bd:af:
d2:f8:2b:ee:6f:a3:23:19:a0:41:6c:3f:d9:d1:ec:64:4d:d7:
0f:68:16:b2:97:dc:fc:3b:1c:af:5d:af:00:df:93:76:dd:33:
fd:93:f3:87:6d:cf:f5:66:ee:14:5d:4b:6b:15:48:43:9d:b9:
05:ab:62:4d:e0:60:57:66:51:df:8f:d5:38:23:b9:01:13:da:
a3:55:08:39
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+o50RyfPJOpOMdn/KaN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGRhODMyNzY5YzMxNjgxZjgyNTY4NTE0NzM2OGFmM2Ex
MWY2ZjgwHhcNMjUwMTAxMDM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmJiMGQ1YTVjYzc5OWE4ZjdlYTFhNjVlZjllMzYzYTIxNWUyZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X7n1rZNRS3OAiP5+RwAnu6XxQ3b
hYEyASt9C9bLf4hEU4dQTV/8M+mGcZpkHBMIer+cPnCq98fTcwRAMUMhGaGXMCla
xhYL7W4EKEOd8mYIARsntV4zS7jJAkl16+FXOOETGOTqDap21J9loea7fZYLgTHV
8Z2OHfUd++IYekK8kK84vQ/DWyFCDXr9Fr0W9SuDZRIKh2DVlNm1tEWxl2aErLL3
MIeD627p6skOUNx3hwLXJGChwSk4Rx1IDJ1OjDlV3a85dH3Xk6qnPfrNMzjpxMMB
HaX5nJgtsnMpkfmvqqYM02DyQsFoTokT7u5wdwvoc8RRrSA8fWcj66FPqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG+7DVpcx5mo9+oaZe+eNjohXi4ZMB8GA1UdIwQY
MBaAFNHdqDJ2nDFoH4JWhRRzaK86Efb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDIt
ODYyMzZiYWMxMzA4LzEvYjdzTldsekhtYWozNmhwbDc1NDJPaUZlTGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDItODYyMzZiYWMxMzA4
LzEvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDW22oAwQD
X1d4AwQCuUmkMA0GCSqGSIb3DQEBCwUAA4IBAQCF688wTzlOtsZPIX33g3LCIFht
nLH1+1i2xhKkpuB4k6cNDljHhqxzgV4M9VHGl59bUrcCU47mJ4yFnbUTQQH68rD7
iP0N/UzhxmDxKCiDal4IThFlJbn82Q9hWMbEIg7+BER+YcjIf1WK5zjudXOMWihe
OnBJ/DmEo0+vce+DbX7HIdd1EMCbfOdFEkhPK4qLLnT+THw3gI/5SWvhqLO4M4dc
LSvfCVkQ8sVp8IjEjCQ7va/S+Cvub6MjGaBBbD/Z0exkTdcPaBayl9z8OxyvXa8A
35N23TP9k/OHbc/1Zu4UXUtrFUhDnbkFq2JN4GBXZlHfj9U4I7kBE9qjVQg5
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:18 2025 by rpki-client