Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/4mOa1eiOJdcewQ4JsIW-qskCauo.roa
File: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (raw, json)
Hash identifier: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=
Subject key identifier: E2:63:9A:D5:E8:8E:25:D7:1E:C1:0E:09:B0:85:BE:AA:C9:02:6A:EA
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0194228D9DA3AB19DB85472443E0B70C2398
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/4mOa1eiOJdcewQ4JsIW-qskCauo.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28907
IP address blocks: 5.149.120.0/21 maxlen: 21
5.149.124.0/22 maxlen: 24
77.87.192.0/21 maxlen: 21
78.27.192.0/19 maxlen: 24
89.184.64.0/19 maxlen: 24
89.184.64.0/22 maxlen: 24
89.184.65.0/24 maxlen: 24
89.184.66.0/23 maxlen: 23
89.184.72.0/21 maxlen: 21
89.184.80.0/21 maxlen: 24
89.184.88.0/21 maxlen: 21
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 23
195.39.196.0/23 maxlen: 23
195.39.196.0/24 maxlen: 24
195.39.197.0/24 maxlen: 24
2a02:2278::/32 maxlen: 32
2a02:2278::/40 maxlen: 56
2a02:2278:100::/44 maxlen: 56
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2278:220::/48 maxlen: 48
2a02:2278:221::/48 maxlen: 48
2a02:2278:234::/48 maxlen: 48
2a02:2278:235::/48 maxlen: 48
2a02:2278:236::/48 maxlen: 48
2a02:2278:237::/48 maxlen: 48
2a02:2278:800::/40 maxlen: 56
2a02:2278:7000::/40 maxlen: 56
2a02:2278:ff00::/40 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9d:a3:ab:19:db:85:47:24:43:e0:b7:0c:23:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2639ad5e88e25d71ec10e09b085beaac9026aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:ca:35:eb:61:07:a2:60:4a:d6:be:9f:70:
85:2c:04:d0:44:9f:b7:5c:e9:a5:9d:7d:44:d9:13:
7d:97:74:85:f3:b0:51:08:56:25:e5:77:08:f6:d5:
1b:25:46:cc:ec:5d:40:b0:f7:ae:0b:59:92:ca:8a:
ff:59:09:4e:31:62:27:06:51:b2:26:93:8d:df:7d:
82:93:b0:48:24:b5:5c:a3:4c:3b:94:19:30:d0:c6:
da:58:6e:de:cd:7b:e0:c1:31:dd:1f:da:6b:95:87:
3c:83:40:51:f5:ca:ac:6c:14:31:0b:dd:6e:0a:20:
84:24:2f:25:bf:ab:50:90:ac:3b:05:75:73:a3:f7:
dd:1a:2e:a8:90:42:da:b8:a2:72:3e:ab:41:2e:9e:
2c:19:10:35:78:10:bc:d8:eb:02:dd:42:27:dd:50:
80:7b:bc:59:38:30:0f:d8:90:62:db:e5:74:44:fc:
11:db:42:fa:30:3c:b0:3f:c8:3e:cd:c3:0c:f6:08:
90:bb:c0:d4:1c:91:8f:da:72:5d:61:05:ba:b3:2b:
7c:31:43:89:1b:b8:fd:19:d7:7d:76:66:20:ed:d1:
57:14:1e:e0:68:bd:8f:d4:e4:d2:59:40:6e:e2:86:
5a:de:76:e2:0f:b6:a6:9e:0f:72:20:c1:c1:4e:ed:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:9A:D5:E8:8E:25:D7:1E:C1:0E:09:B0:85:BE:AA:C9:02:6A:EA
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/4mOa1eiOJdcewQ4JsIW-qskCauo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/19
89.184.64.0/19
193.178.144.0/22
195.39.196.0/23
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a9:6e:2e:b2:f5:c4:81:20:19:73:b9:a1:0b:50:d9:8b:81:
eb:95:1a:60:5e:bf:7b:a2:b2:7e:d1:65:dd:39:a2:45:be:3f:
c8:52:ac:4c:59:24:0d:04:92:be:e2:27:93:ac:85:c5:86:9a:
da:8f:25:33:31:96:57:28:31:d2:7e:97:c5:76:3b:92:f3:98:
83:f1:a9:47:72:52:b6:b8:1c:c5:9a:1e:ab:17:41:d6:de:ba:
bf:51:b7:c1:2f:53:9e:d2:f9:d2:8b:dd:42:3b:b2:f2:c4:f2:
12:6d:90:4a:9b:c0:63:8a:76:d9:62:44:ee:5c:ee:bb:df:0b:
19:43:61:3b:f7:51:ec:6d:86:5a:e2:d6:61:71:d0:ff:0c:bd:
56:02:eb:e9:bd:e2:c9:61:6c:fa:50:a8:7a:11:ba:2f:6b:31:
07:78:d7:71:35:84:43:5d:09:41:98:36:1a:45:04:03:33:32:
3c:77:ea:ab:bd:2a:7f:a8:65:41:86:c9:1d:31:59:b4:d4:6a:
03:75:11:55:97:fa:83:c4:97:95:09:5a:18:2e:5d:aa:96:8e:
27:07:6c:d5:da:4d:97:4f:46:c2:6a:21:87:f8:a6:c1:cd:c8:
d8:a7:63:b7:d1:46:55:3a:fd:60:0b:b8:fc:6e:c3:f5:0f:dc:
3d:ae:51:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQijZ2jqxnbhUckQ+C3DCOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUwMTAxMTU0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjYzOWFkNWU4OGUyNWQ3MWVjMTBlMDliMDg1YmVhYWM5MDI2YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3KNethB6JgSta+n3CFLATQRJ+3
XOmlnX1E2RN9l3SF87BRCFYl5XcI9tUbJUbM7F1AsPeuC1mSyor/WQlOMWInBlGy
JpON332Ck7BIJLVco0w7lBkw0MbaWG7ezXvgwTHdH9prlYc8g0BR9cqsbBQxC91u
CiCEJC8lv6tQkKw7BXVzo/fdGi6okELauKJyPqtBLp4sGRA1eBC82OsC3UIn3VCA
e7xZODAP2JBi2+V0RPwR20L6MDywP8g+zcMM9giQu8DUHJGP2nJdYQW6syt8MUOJ
G7j9Gdd9dmYg7dFXFB7gaL2P1OTSWUBu4oZa3nbiD7amng9yIMHBTu2eMwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFOJjmtXojiXXHsEOCbCFvqrJAmrqMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvNG1PYTFlaU9KZGNld1E0SnNJVy1xc2tDYXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBZV4AwQD
TVfAAwQFThvAAwQFWbhAAwQCwbKQAwQBwyfEMA0EAgACMAcDBQAqAiJ4MA0GCSqG
SIb3DQEBCwUAA4IBAQCfqW4usvXEgSAZc7mhC1DZi4HrlRpgXr97orJ+0WXdOaJF
vj/IUqxMWSQNBJK+4ieTrIXFhprajyUzMZZXKDHSfpfFdjuS85iD8alHclK2uBzF
mh6rF0HW3rq/UbfBL1Oe0vnSi91CO7LyxPISbZBKm8BjinbZYkTuXO673wsZQ2E7
91HsbYZa4tZhcdD/DL1WAuvpveLJYWz6UKh6EbovazEHeNdxNYRDXQlBmDYaRQQD
MzI8d+qrvSp/qGVBhskdMVm01GoDdRFVl/qDxJeVCVoYLl2qlo4nB2zV2k2XT0bC
aiGH+KbBzcjYp2O30UZVOv1gC7j8bsP1D9w9rlGQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:00 2025 by rpki-client