Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/n15MEYNvv2pMvnP0JWDh9ke-rMw.roa
File: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (raw, json)
Hash identifier: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=
Subject key identifier: 9F:5E:4C:11:83:6F:BF:6A:4C:BE:73:F4:25:60:E1:F6:47:BE:AC:CC
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C35C744E507B7EBCC1A629BCC84B2
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/n15MEYNvv2pMvnP0JWDh9ke-rMw.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43870
IP address blocks: 79.140.160.0/20 maxlen: 24
79.140.160.0/21 maxlen: 24
79.140.168.0/22 maxlen: 24
79.140.172.0/24 maxlen: 24
79.140.174.0/23 maxlen: 24
80.245.80.0/20 maxlen: 24
80.245.80.0/22 maxlen: 24
80.245.84.0/23 maxlen: 24
149.3.184.0/21 maxlen: 24
2a00:cce0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:c7:44:e5:07:b7:eb:cc:1a:62:9b:cc:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5e4c11836fbf6a4cbe73f42560e1f647beaccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:cf:a7:01:76:9d:db:ea:29:99:2b:ac:14:
85:33:fa:5b:1a:ab:ed:fa:3f:cd:90:bd:cc:2f:4c:
08:65:59:84:1f:cf:a2:ba:4a:fe:42:94:2d:7d:55:
71:0f:86:1e:1b:0b:00:60:a7:d6:a2:43:c5:85:0a:
67:f7:2f:ca:ac:ec:b7:53:b9:9b:87:16:55:68:cd:
2f:33:ca:1c:93:05:06:4d:8f:17:19:64:81:10:a3:
99:d7:25:06:ea:a6:8d:4e:b4:f8:6e:e5:81:eb:63:
1c:fe:bd:1e:2c:3e:63:84:3a:11:be:22:f0:d8:ab:
ca:20:89:b5:d0:7f:81:5d:f3:a5:9f:00:17:63:f4:
4a:f0:86:0a:f1:df:42:87:fd:ea:75:b3:c8:bd:ae:
b1:ef:e5:bb:f7:98:19:cb:0f:0f:de:81:d2:17:07:
0a:6f:18:95:97:60:ef:e3:36:88:63:67:41:9f:5a:
ce:c4:41:49:2f:0a:ef:aa:99:6f:d3:41:95:39:05:
1c:31:03:62:c3:45:65:51:77:79:3c:d1:d6:b4:0e:
f8:bd:1a:61:44:4f:58:07:57:2f:d3:01:06:fe:a2:
0c:62:b8:90:91:6b:13:c2:6c:79:a2:06:3c:30:97:
82:64:ec:77:f3:ed:23:50:f9:f6:ab:ec:d9:80:17:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:4C:11:83:6F:BF:6A:4C:BE:73:F4:25:60:E1:F6:47:BE:AC:CC
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/n15MEYNvv2pMvnP0JWDh9ke-rMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.160.0/20
80.245.80.0/20
149.3.184.0/21
IPv6:
2a00:cce0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:81:50:67:77:c0:5a:25:59:d8:09:6b:d9:f8:56:ad:d7:c7:
21:73:8c:88:0b:98:14:e3:2e:a4:55:1c:0a:5b:9e:db:b3:fa:
9a:52:e5:c1:98:da:14:a0:1a:68:4c:48:5d:80:cf:63:5f:ba:
81:d8:b2:22:34:42:e9:4c:6d:f9:1a:94:42:c3:c6:e3:b8:d3:
c6:6f:f9:d6:da:47:86:17:ff:f4:ef:09:d4:e4:9d:76:65:fb:
4b:9a:b1:62:e0:e5:5e:5e:54:25:7e:6b:ed:bd:7b:69:4c:7a:
fe:01:bd:93:15:0e:e2:28:ae:3d:fa:b5:f3:d0:9c:c0:51:9f:
c4:2f:43:7a:41:24:b8:d2:7f:9f:d9:69:1a:42:e7:7a:88:0f:
b2:71:e0:2a:3c:63:d9:d5:7c:56:1a:ea:27:4d:d8:07:24:72:
3c:66:16:83:83:5c:95:38:0f:c3:e5:c1:18:6e:e0:37:26:d0:
b4:a9:ac:c2:9f:a1:b4:81:8e:64:0f:54:bb:ab:3e:14:1e:0c:
b9:3b:c1:d1:80:c1:94:6c:55:fe:dc:46:8e:d7:6c:a6:04:66:
83:e9:66:33:0e:56:45:11:9a:3e:13:56:2b:91:1b:b2:31:f7:
62:d5:12:fc:db:d0:ce:55:e0:86:8d:86:24:e5:74:23:80:95:
ae:9c:a4:fa
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQmbDXHROUHt+vMGmKbzISyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh
ODQyMGIwHhcNMjUwMTAyMDk1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjVlNGMxMTgzNmZiZjZhNGNiZTczZjQyNTYwZTFmNjQ3YmVhY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULPpwF2ndvqKZkrrBSFM/pbGqvt
+j/NkL3ML0wIZVmEH8+iukr+QpQtfVVxD4YeGwsAYKfWokPFhQpn9y/KrOy3U7mb
hxZVaM0vM8ockwUGTY8XGWSBEKOZ1yUG6qaNTrT4buWB62Mc/r0eLD5jhDoRviLw
2KvKIIm10H+BXfOlnwAXY/RK8IYK8d9Ch/3qdbPIva6x7+W795gZyw8P3oHSFwcK
bxiVl2Dv4zaIY2dBn1rOxEFJLwrvqplv00GVOQUcMQNiw0VlUXd5PNHWtA74vRph
RE9YB1cv0wEG/qIMYriQkWsTwmx5ogY8MJeCZOx38+0jUPn2q+zZgBeVGQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJ9eTBGDb79qTL5z9CVg4fZHvqzMMB8GA1UdIwQY
MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt
OTJlYzUxNWM1OTVhLzEvbjE1TUVZTnZ2MnBNdm5QMEpXRGg5a2Utck13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh
LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQET4ygAwQE
UPVQAwQDlQO4MA0EAgACMAcDBQAqAMzgMA0GCSqGSIb3DQEBCwUAA4IBAQCugVBn
d8BaJVnYCWvZ+Fat18chc4yIC5gU4y6kVRwKW57bs/qaUuXBmNoUoBpoTEhdgM9j
X7qB2LIiNELpTG35GpRCw8bjuNPGb/nW2keGF//07wnU5J12ZftLmrFi4OVeXlQl
fmvtvXtpTHr+Ab2TFQ7iKK49+rXz0JzAUZ/EL0N6QSS40n+f2WkaQud6iA+yceAq
PGPZ1XxWGuonTdgHJHI8ZhaDg1yVOA/D5cEYbuA3JtC0qazCn6G0gY5kD1S7qz4U
Hgy5O8HRgMGUbFX+3EaO12ymBGaD6WYzDlZFEZo+E1YrkRuyMfdi1RL829DOVeCG
jYYk5XQjgJWunKT6
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:44 2025 by rpki-client