Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/eStVA852783cSRla3cS6Sa73nTo.roa
File: eStVA852783cSRla3cS6Sa73nTo.roa (raw, json)
Hash identifier: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=
Subject key identifier: 79:2B:55:03:CE:76:EF:CD:DC:49:19:5A:DD:C4:BA:49:AE:F7:9D:3A
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 01941FFA85BCDC6E5BAEB99C963DA3CFA0B0
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/eStVA852783cSRla3cS6Sa73nTo.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197453
IP address blocks: 46.183.176.0/21 maxlen: 21
91.200.86.0/23 maxlen: 23
178.57.80.0/21 maxlen: 21
178.57.88.0/22 maxlen: 22
178.57.93.0/24 maxlen: 24
178.57.95.0/24 maxlen: 24
185.9.84.0/22 maxlen: 22
185.162.232.0/24 maxlen: 24
185.195.243.0/24 maxlen: 24
185.196.116.0/24 maxlen: 24
193.47.154.0/24 maxlen: 24
212.74.228.0/24 maxlen: 24
212.74.229.0/24 maxlen: 24
212.74.230.0/24 maxlen: 24
213.5.224.0/23 maxlen: 23
2a01:bc40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:bc:dc:6e:5b:ae:b9:9c:96:3d:a3:cf:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=792b5503ce76efcddc49195addc4ba49aef79d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:54:1b:a3:48:de:20:a0:be:62:7d:47:ec:
16:5a:7f:6f:e7:dc:5d:69:5f:23:26:6e:00:8e:f0:
2b:73:93:be:a4:05:04:ff:bf:1a:52:6a:e4:4f:95:
8e:b9:a4:c2:37:07:1b:ba:9c:78:c5:9d:4b:3c:0d:
43:56:6c:04:5c:c8:d5:94:e8:52:c9:a0:06:62:0e:
96:f5:5f:1a:55:fe:07:79:4b:83:25:b1:fd:1f:d6:
0c:4e:08:8e:db:e5:35:ff:aa:2a:22:c4:4c:a0:0b:
f6:09:8e:7b:23:7d:74:66:65:6d:22:b9:87:50:4c:
a0:b0:c8:dc:d6:a4:20:68:0b:69:01:1e:66:f5:ed:
ad:a7:db:34:eb:73:dc:f5:24:38:5b:b5:84:83:3d:
df:6c:ad:c7:83:90:3a:00:a1:1f:ab:58:f4:ba:7b:
17:0e:21:92:08:39:1a:a1:af:da:96:0c:65:c7:e1:
10:71:f3:f8:a6:db:06:ae:c6:6f:1e:0c:15:2f:86:
02:b3:88:67:ad:50:39:6b:bc:07:15:b9:59:10:e3:
d9:60:14:8f:0e:60:0a:16:78:6c:7e:48:f9:3e:a9:
26:d4:29:73:51:83:b5:70:24:46:f0:44:d2:cc:88:
04:c7:46:a7:05:9d:4f:55:e5:b8:1c:17:1a:b6:9d:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:55:03:CE:76:EF:CD:DC:49:19:5A:DD:C4:BA:49:AE:F7:9D:3A
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/eStVA852783cSRla3cS6Sa73nTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.176.0/21
91.200.86.0/23
178.57.80.0-178.57.91.255
178.57.93.0/24
178.57.95.0/24
185.9.84.0/22
185.162.232.0/24
185.195.243.0/24
185.196.116.0/24
193.47.154.0/24
212.74.228.0-212.74.230.255
213.5.224.0/23
IPv6:
2a01:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
43:63:f4:34:6d:ee:7d:bd:e0:cc:71:8a:bd:96:f8:d1:6b:9c:
29:88:aa:74:23:11:d0:03:a6:af:ae:98:17:1e:ec:52:d9:60:
f1:b8:1b:4b:f8:28:99:ec:5c:31:b9:21:0f:b4:74:d4:e8:5b:
ca:8e:fd:06:9c:b6:18:1e:86:e7:7c:e3:cf:b4:b8:f2:5d:9f:
43:4f:86:10:57:c1:fb:9b:03:49:bd:e5:02:59:e3:68:0b:14:
28:ec:d8:fa:52:ac:fd:d9:8d:ca:e3:d4:bb:28:89:48:e4:35:
2e:ae:a6:90:72:d4:73:2e:e6:43:f0:7b:64:c5:4b:87:94:ee:
c7:21:0d:3f:bb:f6:1d:03:8f:d4:0b:45:13:01:61:dc:14:46:
e2:51:df:94:be:11:03:64:9e:cd:49:54:08:80:d2:75:92:18:
c9:2f:60:48:df:e6:cb:67:d4:33:3a:37:f3:b3:29:d0:28:87:
16:8d:51:6d:5f:d3:53:09:e9:3a:09:3e:e0:20:2c:cc:ea:1d:
2a:d6:eb:89:40:c2:4c:a4:38:6c:9d:83:dc:91:91:09:ac:a2:
a5:fa:30:be:7c:a9:f4:7d:e6:d5:06:a2:10:15:bd:58:a7:1d:
cd:87:80:bc:6f:e4:a5:6f:0d:b5:8a:55:fb:b4:2d:12:e6:62:
7d:c3:93:1e
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAZQf+oW83G5brrmclj2jz6CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjlmZTNkODgyYzkzZTM4ZThiNmEyODZhMzE3N2RjMTdl
OTlhYzcwHhcNMjUwMTAxMDM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTJiNTUwM2NlNzZlZmNkZGM0OTE5NWFkZGM0YmE0OWFlZjc5ZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D5UG6NI3iCgvmJ9R+wWWn9v59xd
aV8jJm4AjvArc5O+pAUE/78aUmrkT5WOuaTCNwcbupx4xZ1LPA1DVmwEXMjVlOhS
yaAGYg6W9V8aVf4HeUuDJbH9H9YMTgiO2+U1/6oqIsRMoAv2CY57I310ZmVtIrmH
UEygsMjc1qQgaAtpAR5m9e2tp9s063Pc9SQ4W7WEgz3fbK3Hg5A6AKEfq1j0unsX
DiGSCDkaoa/algxlx+EQcfP4ptsGrsZvHgwVL4YCs4hnrVA5a7wHFblZEOPZYBSP
DmAKFnhsfkj5Pqkm1ClzUYO1cCRG8ETSzIgEx0anBZ1PVeW4HBcatp1zvwIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFHkrVQPOdu/N3EkZWt3Eukmu9506MB8GA1UdIwQY
MBaAFMRp/j2ILJPjjotqKGoxd9wX6ZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2Et
NjFkOWEyM2YzNDExLzEvZVN0VkE4NTI3ODNjU1JsYTNjUzZTYTczblRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2EtNjFkOWEyM2YzNDEx
LzEveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXgQCAAEwWAMEAy63sAME
AVvIVjAMAwQEsjlQAwQCsjlYAwQAsjldAwQAsjlfAwQCuQlUAwQAuaLoAwQAucPz
AwQAucR0AwQAwS+aMAwDBALUSuQDBADUSuYDBAHVBeAwDQQCAAIwBwMFACoBvEAw
DQYJKoZIhvcNAQELBQADggEBAENj9DRt7n294Mxxir2W+NFrnCmIqnQjEdADpq+u
mBce7FLZYPG4G0v4KJnsXDG5IQ+0dNToW8qO/Qacthgehud848+0uPJdn0NPhhBX
wfubA0m95QJZ42gLFCjs2PpSrP3Zjcrj1LsoiUjkNS6uppBy1HMu5kPwe2TFS4eU
7schDT+79h0Dj9QLRRMBYdwURuJR35S+EQNkns1JVAiA0nWSGMkvYEjf5stn1DM6
N/OzKdAohxaNUW1f01MJ6ToJPuAgLMzqHSrW64lAwkykOGydg9yRkQmsoqX6ML58
qfR95tUGohAVvVinHc2HgLxv5KVvDbWKVfu0LRLmYn3Dkx4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:37 2025 by rpki-client