Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa
File: 6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa (raw, json)
Hash identifier: u7nakvY2IzZI/nPIoCHOpaknwKeAH1RDuYLRGXqd0p4=
Subject key identifier: EA:DE:5F:E1:48:DB:D0:50:0E:F3:87:4C:AA:04:40:AA:05:75:8D:5B
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 0194214437786154D6F3A7DF4830DF2789FF
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44941
IP address blocks: 83.142.8.0/24 maxlen: 24
83.142.9.0/24 maxlen: 24
83.142.10.0/24 maxlen: 24
83.142.11.0/24 maxlen: 24
83.142.12.0/24 maxlen: 24
83.142.13.0/24 maxlen: 24
83.142.14.0/24 maxlen: 24
83.142.15.0/24 maxlen: 24
91.202.252.0/24 maxlen: 24
91.202.253.0/24 maxlen: 24
91.202.254.0/24 maxlen: 24
91.202.255.0/24 maxlen: 24
91.211.140.0/24 maxlen: 24
91.211.141.0/24 maxlen: 24
91.211.142.0/24 maxlen: 24
91.211.143.0/24 maxlen: 24
195.82.134.0/24 maxlen: 24
195.82.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:37:78:61:54:d6:f3:a7:df:48:30:df:27:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eade5fe148dbd0500ef3874caa0440aa05758d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:cb:22:50:b9:64:21:1d:ea:f4:af:c5:73:
50:11:7e:f7:83:70:24:16:4a:78:59:2f:72:94:1e:
ed:c3:3b:11:a5:7b:f1:e0:bf:94:8f:df:08:7e:cc:
f7:8b:f5:af:03:03:b9:d3:bb:c8:d9:be:35:98:44:
f0:d5:82:88:81:8a:52:f8:dd:f9:66:fd:9b:7c:4b:
8f:95:38:14:92:5e:81:cd:39:d5:6e:dd:b3:ea:64:
39:5d:a3:b8:4b:09:e1:ec:af:2b:5b:7f:54:4d:34:
2b:f3:70:28:52:fa:87:ab:1b:11:c8:cd:2d:6b:21:
62:d7:89:d1:57:79:a2:c0:cc:57:a7:03:3c:66:a9:
c2:5d:3a:8a:3c:08:4a:96:e3:f1:c7:ec:3b:70:3e:
06:1a:a8:4f:dc:af:c1:fc:78:a9:a2:fb:55:85:ee:
fa:4d:ad:bd:df:13:2e:64:a3:8d:b1:48:83:1d:09:
52:b6:87:1d:f6:39:36:14:3a:14:74:a1:12:10:11:
3f:c6:a9:b4:7a:b7:b6:5a:c2:5a:ec:f0:1f:13:19:
a4:9b:99:b6:9a:08:00:49:b7:fd:ed:8b:04:2a:f3:
4a:f7:e3:9f:c5:eb:dd:4e:62:ec:af:66:e3:01:1d:
99:98:e8:10:67:73:90:2e:02:37:b8:13:e3:e4:38:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:5F:E1:48:DB:D0:50:0E:F3:87:4C:AA:04:40:AA:05:75:8D:5B
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.8.0/21
91.202.252.0/22
91.211.140.0/22
195.82.134.0/23
Signature Algorithm: sha256WithRSAEncryption
44:d6:3d:28:0d:02:de:c0:98:1d:87:62:e2:d7:ee:1f:3b:b8:
c0:a1:79:84:eb:35:02:2b:5d:83:6b:d9:b2:db:2f:f4:da:d7:
de:70:f7:f3:a3:92:40:95:5f:a4:7b:0c:09:f2:77:94:ce:c0:
17:73:82:e3:29:f1:20:01:45:9c:03:c3:18:87:43:23:ba:fb:
47:62:72:07:7b:3b:70:9c:81:c6:18:df:32:db:36:bb:6e:00:
0a:18:96:f5:2f:b9:33:d4:10:94:62:66:9d:cb:ff:ca:a8:53:
53:85:08:8f:fc:e0:32:4f:b8:15:76:18:b2:b1:6a:b1:fc:b0:
3a:ef:1b:5d:ac:f2:2a:a7:3b:ec:d0:43:13:2e:65:0c:43:0e:
46:2e:34:42:4e:1a:ba:98:6b:2c:25:29:8a:a3:a2:ae:35:3b:
5a:e7:a1:77:71:71:fb:e2:81:55:0d:b7:23:2c:6c:f2:3a:46:
01:f0:47:9b:c0:32:47:e1:60:3d:37:ee:aa:48:ae:bd:b2:6e:
7b:86:7d:18:8b:79:fe:1a:97:58:21:c8:be:47:50:a0:bb:7e:
90:f6:e0:24:a6:68:0d:41:4d:ca:0f:81:8c:84:9c:a9:da:3b:
c3:fd:66:1a:45:74:21:9e:37:c0:24:ba:9d:ce:00:c3:9d:70:
49:61:c2:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhRDd4YVTW86ffSDDfJ4n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzA1Zjk3YTI2ZjMxZDgwMDYwNTlmYjNhYjE5ZWFjZmI3
ODM0NTUwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWRlNWZlMTQ4ZGJkMDUwMGVmMzg3NGNhYTA0NDBhYTA1NzU4ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjLIlC5ZCEd6vSvxXNQEX73g3Ak
Fkp4WS9ylB7twzsRpXvx4L+Uj98Ifsz3i/WvAwO507vI2b41mETw1YKIgYpS+N35
Zv2bfEuPlTgUkl6BzTnVbt2z6mQ5XaO4Swnh7K8rW39UTTQr83AoUvqHqxsRyM0t
ayFi14nRV3miwMxXpwM8ZqnCXTqKPAhKluPxx+w7cD4GGqhP3K/B/HipovtVhe76
Ta293xMuZKONsUiDHQlStocd9jk2FDoUdKESEBE/xqm0ere2WsJa7PAfExmkm5m2
mggASbf97YsEKvNK9+OfxevdTmLsr2bjAR2ZmOgQZ3OQLgI3uBPj5DiVJwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOreX+FI29BQDvOHTKoEQKoFdY1bMB8GA1UdIwQY
MBaAFDswX5eibzHYAGBZ+zqxnqz7eDRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODkt
NThiOWIwYzI0NDBiLzEvNnQ1ZjRVamIwRkFPODRkTXFnUkFxZ1YxalZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODktNThiOWIwYzI0NDBi
LzEvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU44IAwQC
W8r8AwQCW9OMAwQBw1KGMA0GCSqGSIb3DQEBCwUAA4IBAQBE1j0oDQLewJgdh2Li
1+4fO7jAoXmE6zUCK12Da9my2y/02tfecPfzo5JAlV+kewwJ8neUzsAXc4LjKfEg
AUWcA8MYh0MjuvtHYnIHeztwnIHGGN8y2za7bgAKGJb1L7kz1BCUYmady//KqFNT
hQiP/OAyT7gVdhiysWqx/LA67xtdrPIqpzvs0EMTLmUMQw5GLjRCThq6mGssJSmK
o6KuNTta56F3cXH74oFVDbcjLGzyOkYB8EebwDJH4WA9N+6qSK69sm57hn0Yi3n+
GpdYIci+R1Cgu36Q9uAkpmgNQU3KD4GMhJyp2jvD/WYaRXQhnjfAJLqdzgDDnXBJ
YcKY
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:25 2025 by rpki-client