Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/o4qJydU8QHB9yf5elCeoJvNBmoA.roa
File: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (raw, json)
Hash identifier: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=
Subject key identifier: A3:8A:89:C9:D5:3C:40:70:7D:C9:FE:5E:94:27:A8:26:F3:41:9A:80
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 0194BBF50CA58E51E531C7E0C19C4CE3358A
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/o4qJydU8QHB9yf5elCeoJvNBmoA.roa
Signing time: Fri 31 Jan 2025 10:43:06 +0000
ROA not before: Fri 31 Jan 2025 10:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29695
IP address blocks: 5.172.182.0/24 maxlen: 24
45.14.52.0/22 maxlen: 22
79.160.0.0/15 maxlen: 24
80.203.0.0/17 maxlen: 17
81.166.0.0/15 maxlen: 24
84.234.128.0/17 maxlen: 24
89.11.128.0/17 maxlen: 17
92.220.0.0/15 maxlen: 21
109.247.0.0/16 maxlen: 21
141.0.64.0/18 maxlen: 18
213.167.96.0/19 maxlen: 19
2a01:798::/29 maxlen: 32
2a11:5100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:f5:0c:a5:8e:51:e5:31:c7:e0:c1:9c:4c:e3:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Jan 31 10:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a38a89c9d53c40707dc9fe5e9427a826f3419a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:79:7d:aa:5f:03:2c:e3:be:f1:c5:cc:13:
c5:92:df:88:1d:2f:80:44:e2:d4:c2:25:6e:c4:4c:
85:82:a5:06:26:f0:8c:e7:e3:93:7c:b5:c5:87:10:
68:6c:a3:8e:6b:f3:d5:21:9e:4c:ac:7c:8c:20:8c:
02:93:05:e2:d4:8e:ce:54:4a:c5:bb:3d:70:db:d2:
51:4d:1e:77:9b:10:c6:ac:31:11:ce:fa:9e:9b:f8:
9d:b3:17:f8:f6:fd:13:e6:45:7b:e7:90:6f:a7:fe:
ee:be:6a:df:70:37:f6:39:21:6a:b5:0e:57:ba:f1:
78:e4:a3:07:77:02:d6:cc:4c:80:da:81:37:01:e8:
3e:f1:ab:0e:33:18:ee:de:ea:b9:99:1e:54:6e:ec:
86:48:ab:29:67:7e:59:c6:18:46:83:bc:f9:90:85:
af:c5:2a:b2:31:86:b8:6f:d8:9b:dd:19:2a:75:25:
f1:23:d2:bb:db:62:a0:a4:6b:98:d8:67:3a:a5:b6:
e4:ba:06:f0:6a:9f:18:fd:8b:e4:f2:0c:70:4d:97:
47:96:26:1a:43:b9:4d:ad:b9:cf:ac:38:df:2e:1c:
57:d5:74:c2:c9:d4:6f:10:b3:a4:85:da:df:7c:67:
13:1d:1b:75:fe:eb:2b:60:21:d6:31:35:15:d9:9a:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:89:C9:D5:3C:40:70:7D:C9:FE:5E:94:27:A8:26:F3:41:9A:80
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/o4qJydU8QHB9yf5elCeoJvNBmoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.182.0/24
45.14.52.0/22
79.160.0.0/15
80.203.0.0/17
81.166.0.0/15
84.234.128.0/17
89.11.128.0/17
92.220.0.0/15
109.247.0.0/16
141.0.64.0/18
213.167.96.0/19
IPv6:
2a01:798::/29
2a11:5100::/29
Signature Algorithm: sha256WithRSAEncryption
aa:e6:3d:82:e4:6c:97:b9:b4:40:e1:08:19:45:c5:96:aa:05:
49:4a:7c:8a:23:ed:fd:0f:91:cb:cf:ec:7e:c7:1b:0d:76:51:
b3:2d:92:8a:c9:1f:f0:a5:de:88:37:d8:cf:6d:14:15:3d:71:
22:cb:81:22:cd:c9:99:49:7f:db:c8:aa:e6:9f:89:fa:33:d3:
0b:9c:08:54:d4:4d:59:82:f7:9c:5c:1a:fd:98:4b:d5:2c:80:
32:4d:f6:9b:0e:ba:8b:3e:e3:fc:c3:d8:ca:86:cf:00:7a:ee:
cd:73:91:2c:21:28:37:25:00:53:bd:91:c9:fa:ce:67:49:66:
31:d1:2b:33:94:d4:de:10:fa:12:38:9b:7b:0e:22:36:c7:a0:
69:c3:29:16:41:76:43:62:dc:08:85:72:5c:de:a9:f8:50:d1:
37:3e:b9:22:97:e5:c2:ff:6e:29:51:c5:1f:e9:e9:1c:51:0c:
65:6e:48:07:5f:62:2a:b1:a3:d9:e3:e5:48:c9:9a:c6:11:ea:
b3:b6:ae:96:26:13:52:1e:05:db:44:02:c6:28:ef:60:ee:04:
18:ba:11:8f:83:1a:39:19:23:87:0f:c4:11:75:98:70:29:23:
48:07:a6:24:24:fe:36:4d:84:ea:21:df:aa:de:50:23:25:87:
92:e6:92:25
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZS79QyljlHlMcfgwZxM4zWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjUwMTMxMTA0MzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzhhODljOWQ1M2M0MDcwN2RjOWZlNWU5NDI3YTgyNmYzNDE5YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g55fapfAyzjvvHFzBPFkt+IHS+A
ROLUwiVuxEyFgqUGJvCM5+OTfLXFhxBobKOOa/PVIZ5MrHyMIIwCkwXi1I7OVErF
uz1w29JRTR53mxDGrDERzvqem/idsxf49v0T5kV755Bvp/7uvmrfcDf2OSFqtQ5X
uvF45KMHdwLWzEyA2oE3Aeg+8asOMxju3uq5mR5UbuyGSKspZ35ZxhhGg7z5kIWv
xSqyMYa4b9ib3RkqdSXxI9K722KgpGuY2Gc6pbbkugbwap8Y/Yvk8gxwTZdHliYa
Q7lNrbnPrDjfLhxX1XTCydRvELOkhdrffGcTHRt1/usrYCHWMTUV2ZolzQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFKOKicnVPEBwfcn+XpQnqCbzQZqAMB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvbzRxSnlkVThRSEI5eWY1ZWxDZW9Kdk5CbW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQABay2AwQC
LQ40AwMBT6ADBAdQywADAwFRpgMEB1TqgAMEB1kLgAMDAVzcAwMAbfcDBAaNAEAD
BAXVp2AwFAQCAAIwDgMFAyoBB5gDBQMqEVEAMA0GCSqGSIb3DQEBCwUAA4IBAQCq
5j2C5GyXubRA4QgZRcWWqgVJSnyKI+39D5HLz+x+xxsNdlGzLZKKyR/wpd6IN9jP
bRQVPXEiy4EizcmZSX/byKrmn4n6M9MLnAhU1E1ZgvecXBr9mEvVLIAyTfabDrqL
PuP8w9jKhs8Aeu7Nc5EsISg3JQBTvZHJ+s5nSWYx0SszlNTeEPoSOJt7DiI2x6Bp
wykWQXZDYtwIhXJc3qn4UNE3Prkil+XC/24pUcUf6ekcUQxlbkgHX2IqsaPZ4+VI
yZrGEeqztq6WJhNSHgXbRALGKO9g7gQYuhGPgxo5GSOHD8QRdZhwKSNIB6YkJP42
TYTqId+q3lAjJYeS5pIl
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:47:56 2025 by rpki-client