Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CSMxyrSjmrdMU8ZRHaAAe_RGymg.roa
File: CSMxyrSjmrdMU8ZRHaAAe_RGymg.roa (raw, json)
Hash identifier: MEIeYefWKt26Dy0ikG8FUGPlcnRTGCkKEF7RZOcgkt8=
Subject key identifier: 09:23:31:CA:B4:A3:9A:B7:4C:53:C6:51:1D:A0:00:7B:F4:46:CA:68
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019473BEB8DD1544036DD76D1E38F35AB743
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CSMxyrSjmrdMU8ZRHaAAe_RGymg.roa
Signing time: Fri 17 Jan 2025 10:11:06 +0000
ROA not before: Fri 17 Jan 2025 10:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 46.247.108.0/24 maxlen: 24
46.247.109.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
194.117.224.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:be:b8:dd:15:44:03:6d:d7:6d:1e:38:f3:5a:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 17 10:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092331cab4a39ab74c53c6511da0007bf446ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:6e:b9:ab:e4:fc:48:44:15:a6:eb:7d:bb:
02:83:60:84:71:31:21:69:05:6f:32:9c:d5:d4:ae:
fb:1b:62:54:e2:81:60:6a:db:74:58:9d:0a:2b:d3:
cc:29:f7:54:97:30:3b:a9:df:31:99:a6:b3:db:6d:
52:ef:f2:b3:28:c4:93:0b:81:24:b5:eb:1a:97:86:
fa:3e:f9:57:08:6a:5b:57:ce:0b:64:d4:1d:a0:ca:
a0:bb:0b:05:da:73:0a:81:db:5f:e6:9b:6a:ed:4f:
dd:2c:df:17:51:4b:87:8d:9f:52:a9:81:4d:84:4c:
85:c6:20:51:35:3f:c9:22:d5:42:96:6c:25:cc:81:
c3:bc:c8:0d:e8:1d:95:c9:8c:b7:9c:53:5b:c4:9f:
72:5a:3a:10:30:5a:64:1f:4e:f9:b9:36:b3:9d:ce:
f2:10:64:51:c9:f0:ba:98:67:68:0a:48:86:40:de:
43:bd:b2:3b:55:7d:7d:d0:ea:58:29:d1:32:b4:28:
88:1d:46:13:20:36:51:1d:97:0e:5c:04:ce:ab:3b:
91:fc:ad:71:e7:4b:67:31:d5:9d:af:3d:09:21:4c:
66:31:aa:a4:0a:5d:b1:3f:9a:e3:8a:c3:d0:c8:dd:
65:a3:59:5e:ec:94:7b:8f:bc:86:8a:80:4d:95:ad:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:31:CA:B4:A3:9A:B7:4C:53:C6:51:1D:A0:00:7B:F4:46:CA:68
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/CSMxyrSjmrdMU8ZRHaAAe_RGymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.108.0/23
86.54.5.0/24
185.144.70.0/23
194.46.60.0/24
194.117.224.0/23
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
09:c0:b9:b5:5b:51:4b:5c:b9:4c:bf:89:fa:69:cd:0b:55:09:
18:4c:ca:4e:3e:66:42:b1:35:35:96:e8:50:c4:9a:c5:59:92:
97:4b:15:0d:a8:78:bb:2c:ef:fe:e7:85:05:1c:cf:02:af:9e:
10:b0:32:a9:bb:af:0a:f1:a8:1c:89:c2:7c:d9:11:75:d6:75:
41:2a:b7:66:24:26:69:e2:76:3c:9d:25:24:1a:20:13:c9:1b:
d2:0d:b6:3b:10:0e:bb:fa:1c:48:2a:9b:4e:30:20:21:cd:92:
0c:53:cf:b7:3b:c3:9c:1d:6a:7a:89:5e:c8:4d:7e:8d:8d:93:
e7:40:8e:6f:d1:bb:1f:3c:4b:2e:4e:88:e7:e4:64:d6:36:c5:
ed:84:00:32:6e:5e:d5:d3:86:99:ec:2e:b2:9a:bf:c1:ac:8b:
41:c4:72:9d:58:be:6e:1c:a6:67:de:10:64:ee:b4:6e:19:3f:
8a:4e:0f:a8:95:9c:f8:df:24:1b:85:93:28:bb:90:fe:b7:ab:
62:33:1b:47:8e:ab:98:ef:7c:81:29:a9:76:67:a3:bb:30:31:
7f:1d:4c:7f:ed:87:cc:91:b8:d7:64:47:97:b9:39:d5:6c:ef:
1b:d0:94:fb:1b:5e:f1:68:6f:b7:05:ae:d2:80:a9:6c:f3:da:
4d:0c:61:b0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZRzvrjdFUQDbddtHjjzWrdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMTE3MTAxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTIzMzFjYWI0YTM5YWI3NGM1M2M2NTExZGEwMDA3YmY0NDZjYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjFuuavk/EhEFabrfbsCg2CEcTEh
aQVvMpzV1K77G2JU4oFgatt0WJ0KK9PMKfdUlzA7qd8xmaaz221S7/KzKMSTC4Ek
tesal4b6PvlXCGpbV84LZNQdoMqguwsF2nMKgdtf5ptq7U/dLN8XUUuHjZ9SqYFN
hEyFxiBRNT/JItVClmwlzIHDvMgN6B2VyYy3nFNbxJ9yWjoQMFpkH075uTaznc7y
EGRRyfC6mGdoCkiGQN5DvbI7VX190OpYKdEytCiIHUYTIDZRHZcOXATOqzuR/K1x
50tnMdWdrz0JIUxmMaqkCl2xP5rjisPQyN1lo1le7JR7j7yGioBNla0z4QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFAkjMcq0o5q3TFPGUR2gAHv0RspoMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvQ1NNeHlyU2ptcmRNVThaUkhhQUFlX1JHeW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQBLvdsAwQA
VjYFAwQBuZBGAwQAwi48AwQBwnXgMA8EAgACMAkDBwAqFGeAAAQwDQYJKoZIhvcN
AQELBQADggEBAAnAubVbUUtcuUy/ifppzQtVCRhMyk4+ZkKxNTWW6FDEmsVZkpdL
FQ2oeLss7/7nhQUczwKvnhCwMqm7rwrxqByJwnzZEXXWdUEqt2YkJmnidjydJSQa
IBPJG9INtjsQDrv6HEgqm04wICHNkgxTz7c7w5wdanqJXshNfo2Nk+dAjm/Rux88
Sy5OiOfkZNY2xe2EADJuXtXThpnsLrKav8Gsi0HEcp1Yvm4cpmfeEGTutG4ZP4pO
D6iVnPjfJBuFkyi7kP63q2IzG0eOq5jvfIEpqXZno7swMX8dTH/th8yRuNdkR5e5
OdVs7xvQlPsbXvFob7cFrtKAqWzz2k0MYbA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:59 2025 by rpki-client