Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/h9QHPHPgriAH9IrwluwQdT3LGdE.roa
File: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (raw, json)
Hash identifier: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=
Subject key identifier: 87:D4:07:3C:73:E0:AE:20:07:F4:8A:F0:96:EC:10:75:3D:CB:19:D1
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019421B1D31E969B9AF2F473E160040B13FE
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/h9QHPHPgriAH9IrwluwQdT3LGdE.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42000
IP address blocks: 91.103.160.0/21 maxlen: 21
91.103.164.0/24 maxlen: 24
91.103.165.0/24 maxlen: 24
91.103.166.0/24 maxlen: 24
91.103.167.0/24 maxlen: 24
94.124.104.0/21 maxlen: 21
185.160.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d3:1e:96:9b:9a:f2:f4:73:e1:60:04:0b:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87d4073c73e0ae2007f48af096ec10753dcb19d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:ba:cd:63:a3:ab:f8:b8:00:28:f4:bb:d1:
32:34:be:d6:2d:b7:d0:e6:1c:98:c8:58:c1:8b:5e:
47:ce:01:08:18:fa:65:23:26:6d:1e:72:58:fd:12:
05:26:4c:10:cd:4f:9c:f3:d2:a4:5c:a6:27:f1:b9:
db:87:be:88:42:cf:24:6f:4d:9e:34:5a:39:b2:99:
03:42:40:e5:c1:d5:0d:b7:28:c1:f6:b8:aa:b8:ae:
c1:6a:9b:d2:71:09:fb:2c:73:e7:4e:ed:f7:95:2d:
76:30:4b:3a:8c:b9:ae:ab:33:be:9a:84:ad:49:fb:
4e:24:3f:2e:0c:27:78:91:56:6c:f3:67:7c:10:9d:
67:31:cb:92:a9:dc:11:00:b2:74:bc:cb:0f:e7:bf:
16:09:c1:a8:eb:19:36:46:84:da:ee:ff:9b:22:e1:
67:9d:7a:73:eb:49:06:d8:56:af:03:60:3b:29:73:
67:c5:f4:32:a7:17:b1:0a:1f:a0:05:03:12:65:b7:
10:0f:f4:a8:bd:d8:3c:c3:53:29:5d:d0:fd:0a:49:
83:cc:04:a4:61:04:5a:e6:fa:00:2e:86:c8:2c:8b:
df:b6:01:3e:c1:d6:91:28:e9:00:56:8d:bf:55:d6:
9a:97:6b:37:95:71:3f:37:c6:83:22:f9:72:44:43:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:07:3C:73:E0:AE:20:07:F4:8A:F0:96:EC:10:75:3D:CB:19:D1
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/h9QHPHPgriAH9IrwluwQdT3LGdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.160.0/21
94.124.104.0/21
185.160.20.0/22
Signature Algorithm: sha256WithRSAEncryption
81:b2:8d:9c:4d:b1:62:70:90:c1:3b:74:e6:2f:3f:09:4c:ed:
9a:ee:4b:78:37:be:aa:72:e6:70:9f:1b:ea:2b:30:6f:8a:e1:
ed:a9:24:45:3c:45:82:22:72:6d:46:22:74:b9:d8:76:09:53:
5a:80:2a:52:c6:9c:a5:a6:f6:69:ad:a5:70:83:77:6f:0a:f3:
7d:cd:b5:97:ff:b3:ee:24:de:cc:55:95:e9:ac:63:4d:e9:82:
2a:57:49:6a:ca:23:69:43:57:88:7b:10:51:80:9d:82:c5:31:
89:d1:4d:b9:92:36:71:ec:51:4a:b7:be:14:3a:23:fc:c3:0e:
da:bb:c3:5a:8c:16:ad:eb:04:e3:7d:d6:af:80:ba:8d:8b:49:
3e:d6:c2:3b:5d:b6:37:33:3d:d0:4f:42:74:f6:bb:f8:86:f7:
6a:15:26:eb:0b:04:85:86:16:ab:a1:87:4d:9c:37:3f:de:7c:
db:98:43:8d:2e:ab:2a:37:75:a6:49:d6:b3:6a:55:37:2e:e9:
f3:d3:a9:da:4c:7f:2f:9d:63:24:62:37:73:96:a0:9b:9d:2e:
b5:11:cd:d1:b9:99:f2:95:c1:2a:e2:57:ca:47:01:c6:9e:5c:
aa:6a:db:3f:cc:2c:ab:a4:39:b7:5f:0f:00:0e:ff:8a:18:33:
fe:6a:c1:6d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhsdMelpua8vRz4WAECxP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjUwMTAxMTE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Q0MDczYzczZTBhZTIwMDdmNDhhZjA5NmVjMTA3NTNkY2IxOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH26zWOjq/i4ACj0u9EyNL7WLbfQ
5hyYyFjBi15HzgEIGPplIyZtHnJY/RIFJkwQzU+c89KkXKYn8bnbh76IQs8kb02e
NFo5spkDQkDlwdUNtyjB9riquK7BapvScQn7LHPnTu33lS12MEs6jLmuqzO+moSt
SftOJD8uDCd4kVZs82d8EJ1nMcuSqdwRALJ0vMsP578WCcGo6xk2RoTa7v+bIuFn
nXpz60kG2FavA2A7KXNnxfQypxexCh+gBQMSZbcQD/Sovdg8w1MpXdD9CkmDzASk
YQRa5voALobILIvftgE+wdaRKOkAVo2/Vdaal2s3lXE/N8aDIvlyREPFrQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIfUBzxz4K4gB/SK8JbsEHU9yxnRMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEvaDlRSFBIUGdyaUFIOUlyd2x1d1FkVDNMR2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDW2egAwQD
XnxoAwQCuaAUMA0GCSqGSIb3DQEBCwUAA4IBAQCBso2cTbFicJDBO3TmLz8JTO2a
7kt4N76qcuZwnxvqKzBviuHtqSRFPEWCInJtRiJ0udh2CVNagCpSxpylpvZpraVw
g3dvCvN9zbWX/7PuJN7MVZXprGNN6YIqV0lqyiNpQ1eIexBRgJ2CxTGJ0U25kjZx
7FFKt74UOiP8ww7au8NajBat6wTjfdavgLqNi0k+1sI7XbY3Mz3QT0J09rv4hvdq
FSbrCwSFhharoYdNnDc/3nzbmEONLqsqN3WmSdazalU3Lunz06naTH8vnWMkYjdz
lqCbnS61Ec3RuZnylcEq4lfKRwHGnlyqats/zCyrpDm3Xw8ADv+KGDP+asFt
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:00:58 2025 by rpki-client