Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/SfjznWa5tXP4Q3v6D4BmezqKpco.roa
File: SfjznWa5tXP4Q3v6D4BmezqKpco.roa (raw, json)
Hash identifier: 7UuflO7wrwdBo0LAuG6j0vL3Sf+ggb8LSx6p/AmbPeU=
Subject key identifier: 49:F8:F3:9D:66:B9:B5:73:F8:43:7B:FA:0F:80:66:7B:3A:8A:A5:CA
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019425FDA33AEDD97F793BCF22CEA74FDE0A
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/SfjznWa5tXP4Q3v6D4BmezqKpco.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199508
IP address blocks: 45.8.128.0/22 maxlen: 22
62.220.252.0/22 maxlen: 22
85.194.236.0/23 maxlen: 23
89.41.48.0/24 maxlen: 24
89.42.43.0/24 maxlen: 24
185.11.208.0/22 maxlen: 22
185.195.149.0/24 maxlen: 24
185.195.150.0/23 maxlen: 23
195.192.250.0/23 maxlen: 23
2a01:b5a0::/32 maxlen: 32
2a03:6f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a3:3a:ed:d9:7f:79:3b:cf:22:ce:a7:4f:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49f8f39d66b9b573f8437bfa0f80667b3a8aa5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:d7:84:c9:56:79:e1:1b:2a:09:58:03:99:
57:26:e6:ee:5e:e5:5e:d6:69:49:39:45:02:18:0b:
2f:b7:f3:28:5d:a1:ae:84:30:b7:90:5b:69:45:bd:
1e:cf:7e:39:fc:4e:8d:31:f6:6e:1a:dd:d9:72:50:
aa:dc:06:83:c2:78:b1:27:79:bc:f4:84:65:2d:26:
c5:ae:f4:f3:84:f5:82:ec:73:b7:26:96:c1:4e:5d:
34:9c:33:17:51:21:c3:b4:63:8a:36:d9:fe:86:45:
2c:ad:7d:70:9f:f4:a7:ba:43:95:31:86:e2:13:16:
81:22:8a:58:be:12:8a:17:61:92:f1:f3:ec:20:ee:
9c:b0:71:ee:2c:b1:97:dc:99:5f:cf:e2:27:60:31:
ac:52:94:5e:dc:3a:e3:6b:9f:36:94:4f:95:76:64:
2a:4f:60:82:d4:d2:bb:cb:32:e8:e6:bd:30:07:61:
59:ab:07:6f:0a:ad:54:0c:3e:4b:09:44:2a:ef:59:
4b:c1:7e:06:62:cf:52:15:29:2d:57:e1:fe:2d:e1:
31:a6:12:01:45:b4:b8:f5:96:e1:3e:f0:ca:b9:77:
c2:f4:9f:6d:f2:f1:f3:04:c6:24:fa:90:92:8f:d3:
5e:2a:27:ca:67:9f:48:f3:6c:f2:ed:41:35:44:e3:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:F3:9D:66:B9:B5:73:F8:43:7B:FA:0F:80:66:7B:3A:8A:A5:CA
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/SfjznWa5tXP4Q3v6D4BmezqKpco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.128.0/22
62.220.252.0/22
85.194.236.0/23
89.41.48.0/24
89.42.43.0/24
185.11.208.0/22
185.195.149.0-185.195.151.255
195.192.250.0/23
IPv6:
2a01:b5a0::/32
2a03:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
10:43:81:08:21:f4:be:95:ef:cf:69:e2:f0:93:41:e5:0c:27:
33:db:a6:b6:83:aa:44:81:be:ec:40:5e:d6:ce:83:4d:45:a0:
73:b9:6a:9a:ee:60:8d:eb:c8:ad:74:76:c3:1a:cd:eb:06:2d:
29:c3:79:b9:27:74:f5:08:95:00:45:44:0a:9e:35:37:07:04:
51:2f:8e:b7:9b:5b:49:37:e6:66:d9:d2:5c:fe:6f:a8:69:7e:
7a:73:79:c3:0c:5b:8b:e1:ca:54:07:5a:e5:a7:6c:ac:5e:e8:
84:40:67:d5:a6:5c:7d:bc:f0:de:8d:36:c9:2f:e8:b8:84:2e:
39:60:c0:ad:56:bc:59:4f:89:c9:c4:0c:b9:97:c9:b9:2e:98:
a2:c7:e6:a6:77:8c:f7:79:c7:16:57:f5:6d:7b:88:03:ca:51:
c6:42:e1:c2:e9:06:d3:b6:84:a7:3c:69:1b:2e:07:81:2c:46:
00:6a:3f:2c:95:6a:d7:89:7d:0c:39:a6:44:f6:bd:79:05:b3:
fb:de:34:f0:13:db:ee:e4:76:be:4c:a1:fc:4d:f5:e3:cb:a1:
1d:15:ae:b5:ac:89:46:86:28:ad:8a:35:29:f4:88:cc:e4:66:
4f:2a:d4:eb:a6:4b:fe:13:9c:c3:ae:f6:95:98:99:97:5b:8d:
a5:0e:f1:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZQl/aM67dl/eTvPIs6nT94KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx
ZjI2YWIwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWY4ZjM5ZDY2YjliNTczZjg0MzdiZmEwZjgwNjY3YjNhOGFhNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/XhMlWeeEbKglYA5lXJubuXuVe
1mlJOUUCGAsvt/MoXaGuhDC3kFtpRb0ez345/E6NMfZuGt3ZclCq3AaDwnixJ3m8
9IRlLSbFrvTzhPWC7HO3JpbBTl00nDMXUSHDtGOKNtn+hkUsrX1wn/SnukOVMYbi
ExaBIopYvhKKF2GS8fPsIO6csHHuLLGX3Jlfz+InYDGsUpRe3Drja582lE+VdmQq
T2CC1NK7yzLo5r0wB2FZqwdvCq1UDD5LCUQq71lLwX4GYs9SFSktV+H+LeExphIB
RbS49ZbhPvDKuXfC9J9t8vHzBMYk+pCSj9NeKifKZ59I82zy7UE1RONO6wIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFEn4851mubVz+EN7+g+AZns6iqXKMB8GA1UdIwQY
MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt
N2QyMGViMDYzNDU1LzEvU2Zqem5XYTV0WFA0UTN2NkQ0Qm1lenFLcGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1
LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA+BAIAATA4AwQCLQiAAwQC
Ptz8AwQBVcLsAwQAWSkwAwQAWSorAwQCuQvQMAwDBAC5w5UDBAO5w5ADBAHDwPow
FAQCAAIwDgMFACoBtaADBQAqA29AMA0GCSqGSIb3DQEBCwUAA4IBAQAQQ4EIIfS+
le/PaeLwk0HlDCcz26a2g6pEgb7sQF7WzoNNRaBzuWqa7mCN68itdHbDGs3rBi0p
w3m5J3T1CJUARUQKnjU3BwRRL463m1tJN+Zm2dJc/m+oaX56c3nDDFuL4cpUB1rl
p2ysXuiEQGfVplx9vPDejTbJL+i4hC45YMCtVrxZT4nJxAy5l8m5Lpiix+amd4z3
eccWV/Vte4gDylHGQuHC6QbTtoSnPGkbLgeBLEYAaj8slWrXiX0MOaZE9r15BbP7
3jTwE9vu5Ha+TKH8TfXjy6EdFa61rIlGhiitijUp9IjM5GZPKtTrpkv+E5zDrvaV
mJmXW42lDvE6
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:37 2025 by rpki-client