Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/oPQCotSBonBTphEnNzZUC8WTKuA.roa
File: oPQCotSBonBTphEnNzZUC8WTKuA.roa (raw, json)
Hash identifier: /cJ8DFMUKwkX5N8PRfv6spa6h2JElojL6dR/JttjunM=
Subject key identifier: A0:F4:02:A2:D4:81:A2:70:53:A6:11:27:37:36:54:0B:C5:93:2A:E0
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 019420D5BCB1F5E1C0EB49DF5289380F8813
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/oPQCotSBonBTphEnNzZUC8WTKuA.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25459
IP address blocks: 37.247.32.0/20 maxlen: 24
77.243.224.0/20 maxlen: 24
94.103.144.0/20 maxlen: 24
178.18.128.0/20 maxlen: 24
2a02:990::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bc:b1:f5:e1:c0:eb:49:df:52:89:38:0f:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0f402a2d481a27053a611273736540bc5932ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:3f:4e:c5:b4:b4:51:c7:7e:97:67:ad:73:
83:67:61:1c:62:a8:65:2c:a0:86:4e:da:4f:93:f2:
77:5b:93:d7:ec:9a:0e:2a:f5:09:52:a0:68:65:3e:
7f:35:59:8b:ec:10:0f:78:67:e4:71:b7:5d:f9:d3:
3d:4b:60:2f:85:5a:a2:b7:a9:ec:38:1f:f3:d5:27:
38:09:d3:06:4e:85:ab:6b:10:82:d4:df:96:2e:a4:
ee:4a:6e:dc:a3:48:d4:a2:94:2b:dd:64:05:ba:cc:
98:8e:31:1e:b3:5d:d3:27:a0:fc:bb:10:8b:e1:21:
4a:3a:67:be:45:4d:d2:31:7b:f9:2f:df:5d:70:76:
97:fd:9d:2d:e1:29:9e:4f:6b:d4:c0:19:21:7b:ff:
f4:ce:06:90:a1:d8:eb:6b:64:45:99:2d:d6:40:a8:
e6:7a:d7:d5:d8:70:dc:07:f0:6e:0b:c6:8d:80:b3:
ad:ea:19:44:8d:6b:26:e5:7e:2d:98:e7:5b:e9:ad:
f5:5a:f5:55:b3:93:fd:1b:6b:c3:74:37:4e:d0:dd:
84:7e:99:e7:86:1b:04:7f:0a:61:60:5d:33:5d:da:
58:6f:d2:87:ce:e4:70:0b:03:b5:31:96:65:68:6a:
87:ed:4e:f1:8b:05:dc:de:b6:4b:b8:1d:b6:ad:84:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:02:A2:D4:81:A2:70:53:A6:11:27:37:36:54:0B:C5:93:2A:E0
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/oPQCotSBonBTphEnNzZUC8WTKuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
53:60:f1:b0:31:14:d0:72:ad:df:91:51:5b:c9:5e:73:d6:b5:
22:6b:b3:c8:25:31:46:78:75:8a:ab:43:83:7b:ff:c6:dc:4e:
9f:b1:b1:92:3e:cd:5a:98:67:05:c3:d3:37:7e:a0:3d:87:e0:
88:c2:2e:d2:81:62:2b:df:d4:62:8b:03:13:de:3f:34:80:ca:
3b:66:27:27:f3:88:ba:01:23:51:96:10:f5:1e:44:a9:f4:d6:
0f:48:7b:68:7f:9f:49:a8:23:25:45:e2:72:03:13:ca:17:64:
2d:4c:95:bc:03:1a:1b:58:69:62:84:48:ff:50:b9:11:0f:5d:
f3:aa:c0:1a:e3:84:83:e7:aa:a9:33:b7:f6:b9:d1:64:5a:1a:
1f:ea:c0:38:e1:b5:92:b6:24:56:53:72:01:fd:92:ac:22:7e:
3e:66:fa:6a:5c:cd:e5:91:fc:c3:c8:e8:83:62:f8:92:54:2f:
e0:af:23:98:83:a5:ee:ce:22:61:bf:7e:f2:1a:4e:7a:d4:43:
c9:e5:2a:5b:6a:df:45:b7:00:a6:0d:ea:98:7f:af:9e:e1:79:
54:0e:93:c7:7e:6f:78:2a:d5:67:ad:25:20:cb:f5:a7:8f:5c:
c5:93:81:d6:d8:59:bc:3d:d7:ef:59:37:7c:67:5d:ac:8d:9d:
07:ea:72:a0
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQg1byx9eHA60nfUok4D4gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTlmNmFjMTczZjc1ZWQ5ZTU4NWVjN2Q4NzJhNTg2NWNl
ZjI4MzUwHhcNMjUwMTAxMDc0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGY0MDJhMmQ0ODFhMjcwNTNhNjExMjczNzM2NTQwYmM1OTMyYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpY/TsW0tFHHfpdnrXODZ2EcYqhl
LKCGTtpPk/J3W5PX7JoOKvUJUqBoZT5/NVmL7BAPeGfkcbdd+dM9S2AvhVqit6ns
OB/z1Sc4CdMGToWraxCC1N+WLqTuSm7co0jUopQr3WQFusyYjjEes13TJ6D8uxCL
4SFKOme+RU3SMXv5L99dcHaX/Z0t4SmeT2vUwBkhe//0zgaQodjra2RFmS3WQKjm
etfV2HDcB/BuC8aNgLOt6hlEjWsm5X4tmOdb6a31WvVVs5P9G2vDdDdO0N2Efpnn
hhsEfwphYF0zXdpYb9KHzuRwCwO1MZZlaGqH7U7xiwXc3rZLuB22rYQuTQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFKD0AqLUgaJwU6YRJzc2VAvFkyrgMB8GA1UdIwQY
MBaAFAdZ9qwXP3Xtnlhex9hypYZc7yg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUt
N2JlM2JkYTA1OTI3LzEvb1BRQ290U0JvbkJUcGhFbk56WlVDOFdUS3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUtN2JlM2JkYTA1OTI3
LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE
TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB
AQBTYPGwMRTQcq3fkVFbyV5z1rUia7PIJTFGeHWKq0ODe//G3E6fsbGSPs1amGcF
w9M3fqA9h+CIwi7SgWIr39RiiwMT3j80gMo7Zicn84i6ASNRlhD1HkSp9NYPSHto
f59JqCMlReJyAxPKF2QtTJW8AxobWGlihEj/ULkRD13zqsAa44SD56qpM7f2udFk
Whof6sA44bWStiRWU3IB/ZKsIn4+ZvpqXM3lkfzDyOiDYviSVC/gryOYg6XuziJh
v37yGk561EPJ5Spbat9FtwCmDeqYf6+e4XlUDpPHfm94KtVnrSUgy/Wnj1zFk4HW
2Fm8PdfvWTd8Z12sjZ0H6nKg
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:07 2025 by rpki-client