Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa
File: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (raw, json)
Hash identifier: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=
Subject key identifier: D1:13:49:B9:83:D9:88:37:1F:DA:05:14:3A:75:21:BA:10:18:0B:26
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01942368C8E6C51B84F5D0ADE155B2FA9389
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa
Signing time: Wed 01 Jan 2025 19:47:37 +0000
ROA not before: Wed 01 Jan 2025 19:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199046
IP address blocks: 5.133.24.0/21 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.68.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
5.253.70.0/24 maxlen: 24
5.253.71.0/24 maxlen: 24
45.146.12.0/22 maxlen: 22
45.146.12.0/24 maxlen: 24
45.146.13.0/24 maxlen: 24
45.146.14.0/24 maxlen: 24
45.146.15.0/24 maxlen: 24
185.132.248.0/22 maxlen: 22
185.132.248.0/24 maxlen: 24
185.132.249.0/24 maxlen: 24
185.132.250.0/24 maxlen: 24
185.132.251.0/24 maxlen: 24
193.7.220.0/22 maxlen: 22
193.7.220.0/24 maxlen: 24
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c8:e6:c5:1b:84:f5:d0:ad:e1:55:b2:fa:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jan 1 19:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d11349b983d988371fda05143a7521ba10180b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:d5:f7:d6:21:0b:a6:a3:6a:29:18:9f:f9:
e6:79:df:63:e7:48:60:8d:c4:cb:96:ab:63:3c:6e:
41:68:d2:76:9f:fa:06:8f:b9:7f:31:36:a9:de:b8:
01:cb:33:17:8a:cd:fa:52:90:a3:b1:23:91:94:73:
62:64:36:d1:0f:05:22:1e:f9:32:e9:e4:c5:d7:48:
ba:a0:0e:a0:0e:7e:8c:48:a8:42:22:88:f1:e2:4a:
5d:e1:67:cb:da:79:cd:fe:3d:de:e2:88:51:5d:3f:
54:f5:fc:6b:1f:af:98:86:9c:9f:74:15:03:42:0c:
e6:96:f8:6d:f3:82:76:94:d0:09:e3:0d:2a:4b:06:
2d:1d:1c:06:19:81:c2:ba:3b:2e:43:8c:50:2d:bc:
ae:73:40:0d:3c:9f:32:7e:a1:a7:15:ea:7d:8e:72:
10:5a:80:bb:27:3f:a2:dc:d5:94:f4:2e:d2:68:32:
7d:e9:cd:89:25:ca:61:a4:11:b5:c9:8d:ba:6a:aa:
4d:de:3d:cf:cf:c3:6f:8d:49:50:61:39:db:70:05:
28:90:5d:0e:8a:3d:c3:8a:39:83:67:e9:1f:b0:c9:
3b:94:36:7b:0c:8d:20:22:7e:24:2a:05:66:fb:6d:
0b:27:0b:0b:6b:b6:97:6f:12:64:ac:a2:18:02:d6:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:49:B9:83:D9:88:37:1F:DA:05:14:3A:75:21:BA:10:18:0B:26
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
45.146.12.0/22
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
47:6f:8f:9d:4a:af:fe:4a:a3:e2:3e:29:2e:d6:8e:70:6a:50:
23:05:6d:b2:17:fe:87:5d:b6:08:fd:57:a4:1d:5d:88:e0:cb:
31:d9:a9:6a:4f:aa:46:36:7c:f5:83:e1:d8:a0:63:bc:9e:be:
b1:ea:3b:c1:2b:af:e2:8d:5d:52:b8:2e:40:83:d5:ee:64:5a:
82:dd:89:6d:9c:4d:f1:04:42:20:46:15:2f:5a:e7:d0:3f:a9:
5b:d7:eb:38:7d:ab:2f:5d:c7:ba:93:24:53:d3:6d:cc:34:cc:
97:a4:77:74:bc:02:7c:73:bd:fb:53:47:df:a9:ad:ce:db:60:
d4:42:2f:c5:f5:65:5c:f7:16:35:f2:4e:5e:8d:a7:18:51:30:
d1:c1:ea:1b:9f:89:46:f8:ce:b9:11:55:60:25:fe:aa:bd:fb:
30:ce:58:3b:23:0a:c9:1a:39:88:9f:03:c0:8c:19:16:2d:8d:
cb:1c:77:ed:34:76:06:da:cf:23:0b:48:40:fb:96:e1:cb:c8:
5e:ff:00:5e:a8:2c:7c:90:1e:5d:67:e7:5c:be:e5:47:41:25:
09:c1:4c:13:74:5c:a8:20:c7:2d:f8:b1:c5:22:a5:80:99:32:
85:99:4c:2f:8d:a4:f2:6b:79:ad:ef:ea:33:d1:3d:b4:93:59:
fe:c7:11:a6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQjaMjmxRuE9dCt4VWy+pOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw
YjI1OTgwHhcNMjUwMTAxMTk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTEzNDliOTgzZDk4ODM3MWZkYTA1MTQzYTc1MjFiYTEwMTgwYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK/V99YhC6ajaikYn/nmed9j50hg
jcTLlqtjPG5BaNJ2n/oGj7l/MTap3rgByzMXis36UpCjsSORlHNiZDbRDwUiHvky
6eTF10i6oA6gDn6MSKhCIojx4kpd4WfL2nnN/j3e4ohRXT9U9fxrH6+YhpyfdBUD
Qgzmlvht84J2lNAJ4w0qSwYtHRwGGYHCujsuQ4xQLbyuc0ANPJ8yfqGnFep9jnIQ
WoC7Jz+i3NWU9C7SaDJ96c2JJcphpBG1yY26aqpN3j3Pz8NvjUlQYTnbcAUokF0O
ij3DijmDZ+kfsMk7lDZ7DI0gIn4kKgVm+20LJwsLa7aXbxJkrKIYAtZ7vwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFNETSbmD2Yg3H9oFFDp1IboQGAsmMB8GA1UdIwQY
MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt
NzU2ZjNjYzNlYzMzLzEvMFJOSnVZUFppRGNmMmdVVU9uVWh1aEFZQ3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz
LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBYUYAwQC
Bf1EAwQCLZIMAwQCuYT4AwQCwQfcMA0EAgACMAcDBQAqCZkAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHb4+dSq/+SqPiPiku1o5walAjBW2yF/6HXbYI/VekHV2I4Msx2alq
T6pGNnz1g+HYoGO8nr6x6jvBK6/ijV1SuC5Ag9XuZFqC3YltnE3xBEIgRhUvWufQ
P6lb1+s4fasvXce6kyRT023MNMyXpHd0vAJ8c737U0ffqa3O22DUQi/F9WVc9xY1
8k5ejacYUTDRweobn4lG+M65EVVgJf6qvfswzlg7IwrJGjmInwPAjBkWLY3LHHft
NHYG2s8jC0hA+5bhy8he/wBeqCx8kB5dZ+dcvuVHQSUJwUwTdFyoIMct+LHFIqWA
mTKFmUwvjaTya3mt7+oz0T20k1n+xxGm
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:40 2025 by rpki-client