Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/m-IIE152ao_pZE4Wt42YO_x1XlM.roa
File: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (raw, json)
Hash identifier: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=
Subject key identifier: 9B:E2:08:13:5E:76:6A:8F:E9:64:4E:16:B7:8D:98:3B:FC:75:5E:53
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8CC95B85322A113DFF6A1540648A
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/m-IIE152ao_pZE4Wt42YO_x1XlM.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2470
IP address blocks: 193.50.206.0/24 maxlen: 24
193.51.11.0/24 maxlen: 24
193.51.113.0/24 maxlen: 24
193.51.115.0/24 maxlen: 24
194.167.103.0/24 maxlen: 24
194.167.142.0/24 maxlen: 24
194.199.66.0/24 maxlen: 24
194.199.67.0/24 maxlen: 24
194.199.68.0/24 maxlen: 24
194.199.69.0/24 maxlen: 24
194.199.70.0/24 maxlen: 24
194.199.71.0/24 maxlen: 24
194.199.72.0/24 maxlen: 24
194.199.73.0/24 maxlen: 24
194.199.78.0/24 maxlen: 24
195.83.188.0/24 maxlen: 24
195.98.231.0/24 maxlen: 24
195.98.232.0/24 maxlen: 24
195.220.149.0/24 maxlen: 24
195.220.150.0/24 maxlen: 24
195.220.151.0/24 maxlen: 24
2001:660:8018::/48 maxlen: 48
2001:660:8019::/48 maxlen: 48
2001:660:801a::/48 maxlen: 48
2001:661:8000::/35 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:c9:5b:85:32:2a:11:3d:ff:6a:15:40:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be208135e766a8fe9644e16b78d983bfc755e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:89:94:c4:e5:d5:18:26:9f:23:79:59:7f:
e7:7f:29:4a:34:3a:ef:cf:3d:36:1f:5d:22:6b:b2:
3d:37:d7:06:0b:52:80:e7:10:70:46:b3:aa:b7:80:
9a:ee:18:cf:15:6c:f5:7d:47:29:48:0f:b9:da:d1:
50:be:b1:8e:62:7b:72:78:e4:7d:b1:84:55:ac:59:
a7:5c:13:25:7a:54:3a:f8:9f:6b:76:3f:c2:0f:03:
0b:cb:d9:b4:c7:14:6c:d5:78:6f:1f:82:cb:62:3a:
43:c1:60:7d:98:35:6d:c3:57:7c:6b:40:a5:4a:00:
d5:90:45:d5:c7:f9:f0:09:1d:52:4a:3d:42:ca:e7:
c2:56:d3:e8:e8:05:92:1c:52:2e:1a:4f:0c:34:f5:
06:6a:1f:8d:29:76:3a:c6:87:c2:45:de:d1:20:45:
06:00:50:6d:12:da:b1:dc:40:4f:39:c7:8e:9e:e6:
b2:5f:8f:7a:31:aa:d5:ad:ec:f7:c4:23:bb:4c:42:
7d:60:12:de:d0:4a:ab:f1:2d:98:05:ab:a9:20:4a:
e2:91:ea:65:32:71:09:65:4f:3f:ab:61:74:c2:0c:
01:04:45:e5:05:ba:d9:e2:a6:0f:92:07:7a:02:03:
67:af:01:c7:9d:a2:ff:a7:2a:84:1a:6e:b0:fe:fa:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:08:13:5E:76:6A:8F:E9:64:4E:16:B7:8D:98:3B:FC:75:5E:53
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/m-IIE152ao_pZE4Wt42YO_x1XlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.50.206.0/24
193.51.11.0/24
193.51.113.0/24
193.51.115.0/24
194.167.103.0/24
194.167.142.0/24
194.199.66.0-194.199.73.255
194.199.78.0/24
195.83.188.0/24
195.98.231.0-195.98.232.255
195.220.149.0-195.220.151.255
IPv6:
2001:660:8018::-2001:660:801a:ffff:ffff:ffff:ffff:ffff
2001:661:8000::/35
Signature Algorithm: sha256WithRSAEncryption
07:c6:e6:aa:de:f5:d6:a8:f3:08:d4:1f:45:43:9f:8b:e7:34:
70:3e:3b:0e:63:3d:46:d9:3e:df:7c:ad:eb:95:af:d7:fc:7f:
e9:6a:cf:59:73:82:5a:5d:a9:d4:94:d3:e9:78:04:e3:c8:7b:
64:9b:74:36:e7:71:ec:b8:27:9c:f6:77:a5:8a:4f:5c:71:36:
8e:d3:a7:26:18:4d:88:d0:b9:75:0b:91:53:9f:2a:4b:56:25:
79:bd:62:94:60:06:4f:e4:c4:83:b4:b4:63:33:50:e5:23:b9:
7d:8d:b3:2d:a0:93:59:69:68:cd:dd:e3:1b:b1:f9:9d:7c:6b:
b3:cf:7c:93:39:88:92:37:b0:ea:cc:a8:d5:d9:a6:3f:20:e8:
82:c5:6a:4d:b9:c7:fb:0d:3e:f0:3f:64:4d:6b:71:11:c2:64:
22:dc:ef:96:c2:80:df:40:15:7f:70:a8:04:b3:c0:b3:fe:19:
21:fc:32:22:7f:08:51:f1:68:5d:31:9e:45:d1:9d:8e:bb:79:
e8:f1:5c:05:61:15:ea:58:86:5e:47:fb:6d:60:87:51:bc:24:
97:08:37:d6:a8:3d:e2:2c:9f:bc:ab:cd:f6:53:88:99:bb:a7:
f5:5f:dd:0c:ab:f9:c0:3c:30:3b:b6:7e:9a:8c:c8:61:61:38:
10:5a:67:28
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlj4zJW4UyKhE9/2oVQGSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmUyMDgxMzVlNzY2YThmZTk2NDRlMTZiNzhkOTgzYmZjNzU1ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjWJlMTl1RgmnyN5WX/nfylKNDrv
zz02H10ia7I9N9cGC1KA5xBwRrOqt4Ca7hjPFWz1fUcpSA+52tFQvrGOYntyeOR9
sYRVrFmnXBMlelQ6+J9rdj/CDwMLy9m0xxRs1XhvH4LLYjpDwWB9mDVtw1d8a0Cl
SgDVkEXVx/nwCR1SSj1CyufCVtPo6AWSHFIuGk8MNPUGah+NKXY6xofCRd7RIEUG
AFBtEtqx3EBPOceOnuayX496MarVrez3xCO7TEJ9YBLe0Eqr8S2YBaupIErikepl
MnEJZU8/q2F0wgwBBEXlBbrZ4qYPkgd6AgNnrwHHnaL/pyqEGm6w/voCBQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJviCBNedmqP6WROFreNmDv8dV5TMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvbS1JSUUxNTJhb19wWkU0V3Q0MllPX3gxWGxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBgBAIAATBaAwQAwTLO
AwQAwTMLAwQAwTNxAwQAwTNzAwQAwqdnAwQAwqeOMAwDBAHCx0IDBAHCx0gDBADC
x04DBADDU7wwDAMEAMNi5wMEAMNi6DAMAwQAw9yVAwQDw9yQMCIEAgACMBwwEgMH
AyABBmCAGAMHACABBmCAGgMGBSABBmGAMA0GCSqGSIb3DQEBCwUAA4IBAQAHxuaq
3vXWqPMI1B9FQ5+L5zRwPjsOYz1G2T7ffK3rla/X/H/pas9Zc4JaXanUlNPpeATj
yHtkm3Q253HsuCec9nelik9ccTaO06cmGE2I0Ll1C5FTnypLViV5vWKUYAZP5MSD
tLRjM1DlI7l9jbMtoJNZaWjN3eMbsfmdfGuzz3yTOYiSN7DqzKjV2aY/IOiCxWpN
ucf7DT7wP2RNa3ERwmQi3O+WwoDfQBV/cKgEs8Cz/hkh/DIifwhR8WhdMZ5F0Z2O
u3no8VwFYRXqWIZeR/ttYIdRvCSXCDfWqD3iLJ+8q832U4iZu6f1X90Mq/nAPDA7
tn6ajMhhYTgQWmco
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:52 2025 by rpki-client