Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/5Nqf2buyB6kzajvoNrrna9ISs0Y.roa
File: 5Nqf2buyB6kzajvoNrrna9ISs0Y.roa (raw, json)
Hash identifier: S/cpcZ4+vnl40S6S+8IytjmyHnaXRq04EWDHebrTKyM=
Subject key identifier: E4:DA:9F:D9:BB:B2:07:A9:33:6A:3B:E8:36:BA:E7:6B:D2:12:B3:46
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 019427488BDAC800E47A9DE85AF7AF2EDCB0
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/5Nqf2buyB6kzajvoNrrna9ISs0Y.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206260
IP address blocks: 83.223.208.0/20 maxlen: 20
141.0.128.0/20 maxlen: 20
143.110.96.0/19 maxlen: 19
185.13.124.0/22 maxlen: 22
2a02:f300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8b:da:c8:00:e4:7a:9d:e8:5a:f7:af:2e:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4da9fd9bbb207a9336a3be836bae76bd212b346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:2e:70:38:ba:fb:c7:cb:25:d5:d9:53:62:
d5:7e:77:6f:40:30:93:bc:c9:aa:ab:b0:fd:07:59:
23:25:c5:53:1d:af:01:49:14:2a:53:60:9b:22:5e:
67:53:78:b0:64:41:c0:0a:7a:6e:2b:41:40:e2:10:
f0:08:8d:b2:af:4c:1a:83:2f:5e:70:65:46:dd:4e:
35:0c:a0:34:26:f9:bb:11:94:c6:c7:4a:a9:63:95:
f6:ec:34:a7:7c:fd:ff:95:f9:a6:48:c6:1d:a2:c1:
fc:07:eb:62:25:93:bf:ba:4e:27:4a:2d:f4:93:24:
a1:f6:c5:41:4a:d9:e0:bb:56:5c:a8:70:f4:ff:e7:
a9:b8:00:db:47:67:d4:66:6b:4d:3b:c2:aa:24:ea:
92:90:3a:53:09:dc:b0:b4:a5:37:2d:36:2e:11:a0:
d1:33:b1:6a:d7:c8:4d:dd:dc:6b:9d:7b:ce:74:b1:
7f:45:86:a7:e4:93:f4:b2:be:f6:83:7f:54:49:42:
79:69:8e:b5:14:1e:c8:c2:77:9e:b5:5e:7d:c0:20:
9b:90:ff:60:12:66:2c:b8:f8:da:e1:25:e2:0a:41:
0a:1b:64:3d:b1:99:b0:15:38:17:87:b5:76:79:f5:
84:88:13:ee:6f:05:37:f3:f8:59:6f:14:19:94:da:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DA:9F:D9:BB:B2:07:A9:33:6A:3B:E8:36:BA:E7:6B:D2:12:B3:46
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/5Nqf2buyB6kzajvoNrrna9ISs0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.208.0/20
141.0.128.0/20
143.110.96.0/19
185.13.124.0/22
IPv6:
2a02:f300::/29
Signature Algorithm: sha256WithRSAEncryption
8d:06:dc:4a:bc:16:c1:36:ce:e2:dc:26:e6:75:aa:86:06:ee:
92:b7:90:fd:11:6b:84:83:46:15:1b:d3:3c:aa:51:47:6e:f5:
b9:e7:45:4b:98:d1:c5:f5:74:14:71:e2:b6:c0:97:86:6c:14:
16:50:ad:58:ed:90:a6:52:73:60:6d:70:04:dc:73:84:7a:c8:
5a:60:45:c4:04:0c:e3:30:16:ec:29:6f:cc:7b:b7:42:6b:c8:
93:f3:51:cc:77:2d:aa:55:89:3b:4a:70:7e:c3:d4:2d:43:fe:
ec:e7:ce:ea:f3:b1:9a:ab:c7:0b:b1:e7:48:64:e5:b8:99:85:
cb:4e:a2:91:92:54:32:ec:d8:5f:e0:60:6c:15:3a:b0:18:57:
72:b9:04:48:1c:25:df:ba:1f:74:81:db:6c:d3:40:0e:48:fd:
d8:7f:88:59:19:de:42:b2:a7:52:47:ee:01:f4:da:25:48:fb:
6d:38:da:cd:a4:64:25:2f:44:a1:f2:93:56:62:2e:60:bd:07:
4b:1e:88:e7:09:ff:6c:f2:39:c1:80:28:80:35:b1:6d:c1:2b:
fc:d4:d3:a5:8b:81:56:23:4c:47:db:42:52:28:47:e0:0d:7e:
21:52:d3:44:f7:3d:5a:f3:33:6d:8d:c9:e4:0d:ea:9b:4c:db:
41:3d:1f:a7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQnSIvayADkep3oWvevLtywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjlhOTY5NTI3NzdmMTA3NDMzODMwM2VjYjY1MDI1YzRl
MmI4YjUwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGRhOWZkOWJiYjIwN2E5MzM2YTNiZTgzNmJhZTc2YmQyMTJiMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqMucDi6+8fLJdXZU2LVfndvQDCT
vMmqq7D9B1kjJcVTHa8BSRQqU2CbIl5nU3iwZEHACnpuK0FA4hDwCI2yr0wagy9e
cGVG3U41DKA0Jvm7EZTGx0qpY5X27DSnfP3/lfmmSMYdosH8B+tiJZO/uk4nSi30
kySh9sVBStngu1ZcqHD0/+epuADbR2fUZmtNO8KqJOqSkDpTCdywtKU3LTYuEaDR
M7Fq18hN3dxrnXvOdLF/RYan5JP0sr72g39USUJ5aY61FB7IwneetV59wCCbkP9g
EmYsuPja4SXiCkEKG2Q9sZmwFTgXh7V2efWEiBPubwU38/hZbxQZlNpZnQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOTan9m7sgepM2o76Da652vSErNGMB8GA1UdIwQY
MBaAFEL5qWlSd38QdDODA+y2UCXE4ri1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUt
NzdmYTI5MTI5OTRkLzEvNU5xZjJidXlCNmt6YWp2b05ycm5hOUlTczBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUtNzdmYTI5MTI5OTRk
LzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEU9/QAwQE
jQCAAwQFj25gAwQCuQ18MA0EAgACMAcDBQMqAvMAMA0GCSqGSIb3DQEBCwUAA4IB
AQCNBtxKvBbBNs7i3CbmdaqGBu6St5D9EWuEg0YVG9M8qlFHbvW550VLmNHF9XQU
ceK2wJeGbBQWUK1Y7ZCmUnNgbXAE3HOEeshaYEXEBAzjMBbsKW/Me7dCa8iT81HM
dy2qVYk7SnB+w9QtQ/7s587q87Gaq8cLsedIZOW4mYXLTqKRklQy7Nhf4GBsFTqw
GFdyuQRIHCXfuh90gdts00AOSP3Yf4hZGd5CsqdSR+4B9NolSPttONrNpGQlL0Sh
8pNWYi5gvQdLHojnCf9s8jnBgCiANbFtwSv81NOli4FWI0xH20JSKEfgDX4hUtNE
9z1a8zNtjcnkDeqbTNtBPR+n
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:32 2025 by rpki-client