Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/xovZOIhlPZ45N9oOxx7_NSJCrEw.roa
File: xovZOIhlPZ45N9oOxx7_NSJCrEw.roa (raw, json)
Hash identifier: JeeMpjw12qOmA0b+WEGyWZXkSEOnUNh26ITmvmBxXbk=
Subject key identifier: C6:8B:D9:38:88:65:3D:9E:39:37:DA:0E:C7:1E:FF:35:22:42:AC:4C
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D81FD44E2DC7D0AAC524CC8F9E92
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/xovZOIhlPZ45N9oOxx7_NSJCrEw.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35237
IP address blocks: 84.252.144.0/23 maxlen: 24
84.252.144.0/24 maxlen: 24
84.252.145.0/24 maxlen: 24
84.252.146.0/24 maxlen: 24
84.252.147.0/24 maxlen: 24
84.252.149.0/24 maxlen: 24
84.252.150.0/24 maxlen: 24
84.252.151.0/24 maxlen: 24
91.217.194.0/24 maxlen: 24
185.157.96.0/23 maxlen: 23
185.157.96.0/24 maxlen: 24
185.157.97.0/24 maxlen: 24
185.157.99.0/24 maxlen: 24
194.54.14.0/24 maxlen: 24
194.54.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d8:1f:d4:4e:2d:c7:d0:aa:c5:24:cc:8f:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c68bd93888653d9e3937da0ec71eff352242ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:9d:2f:57:4c:fa:72:a4:67:14:76:ca:64:
15:b9:d5:7f:c8:86:b6:ff:0c:ca:6c:3b:bb:c6:81:
65:6d:74:22:73:f9:8c:fd:ee:05:b2:29:fa:c2:b5:
de:8c:29:66:af:aa:bc:5a:7c:6c:7b:54:bc:e8:31:
1e:9e:3b:3e:86:23:d5:aa:0a:c5:62:66:b3:90:ca:
5e:4e:64:dc:3c:a9:e8:5f:af:ed:9d:8a:1d:0d:16:
86:5e:2e:ef:4d:6a:29:11:a9:9c:87:59:e7:e7:14:
88:d3:c5:d2:f1:86:b1:18:8b:0e:1a:42:94:c9:eb:
f5:8b:91:cf:f7:f5:d9:d5:70:4a:da:47:b5:30:89:
c2:1d:b5:a9:69:36:5f:3d:42:9d:92:fb:48:2c:37:
22:8b:2a:02:64:11:3d:58:f7:fb:23:7d:a2:9a:ed:
57:ab:47:b6:9a:ff:41:3c:f2:b6:b2:5a:31:78:a7:
94:a2:93:27:32:36:b3:e3:f9:4c:2b:12:f5:79:ab:
9a:97:f8:7f:aa:d3:d6:af:5c:a7:13:0a:bb:a0:7c:
b1:e9:81:2f:e2:1e:8c:1f:ab:49:48:11:37:70:1b:
d8:f0:bd:bf:7b:3c:69:f8:8e:07:17:c1:cc:be:57:
59:b8:5a:ae:c7:da:6e:67:eb:c8:31:91:7c:3b:72:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:D9:38:88:65:3D:9E:39:37:DA:0E:C7:1E:FF:35:22:42:AC:4C
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/xovZOIhlPZ45N9oOxx7_NSJCrEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.144.0/22
84.252.149.0-84.252.151.255
91.217.194.0/24
185.157.96.0/23
185.157.99.0/24
194.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
47:3a:14:13:4e:84:2e:de:a8:df:79:60:fd:07:a8:d4:45:e6:
df:51:e1:94:02:0f:0d:70:14:89:b5:8f:b8:17:04:bb:55:bb:
b1:91:ee:81:6f:8e:21:8c:36:65:6c:9a:2a:78:02:3b:26:ab:
42:89:70:0c:76:b8:60:22:72:2a:b7:b0:63:76:cf:2c:39:65:
c7:00:f8:df:de:df:a3:40:83:0f:34:7e:7e:bb:44:41:e9:bc:
32:14:97:3c:72:74:b9:88:a4:f2:b4:20:6b:0a:d9:07:bc:a8:
cc:8c:17:d3:f0:67:e1:06:43:cf:db:73:ef:0b:fb:b0:d2:88:
b8:b7:da:d0:f7:ca:d4:be:d2:97:47:d0:41:6d:23:5a:2a:c8:
d2:aa:fa:b3:65:3a:29:c6:00:45:b0:47:8d:b1:18:91:b2:04:
88:c2:52:d7:b5:6f:16:e6:8b:b6:77:30:27:c5:53:73:a0:f2:
b6:14:77:c8:43:20:3d:6d:e6:7d:00:af:c7:16:e7:dd:ca:63:
1d:7a:71:71:6d:80:05:88:f9:34:4f:2e:7a:77:65:28:bf:e1:
a0:6e:19:1d:70:4b:c7:16:6b:1d:1e:f3:c2:0f:73:bf:9a:cb:
91:9c:9b:4e:a9:21:7b:b7:07:ae:08:dc:38:b2:d9:62:ea:5f:
43:a4:94:ae
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQgZ9gf1E4tx9CqxSTMj56SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjhiZDkzODg4NjUzZDllMzkzN2RhMGVjNzFlZmYzNTIyNDJhYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9adL1dM+nKkZxR2ymQVudV/yIa2
/wzKbDu7xoFlbXQic/mM/e4Fsin6wrXejClmr6q8Wnxse1S86DEenjs+hiPVqgrF
YmazkMpeTmTcPKnoX6/tnYodDRaGXi7vTWopEamch1nn5xSI08XS8YaxGIsOGkKU
yev1i5HP9/XZ1XBK2ke1MInCHbWpaTZfPUKdkvtILDciiyoCZBE9WPf7I32imu1X
q0e2mv9BPPK2sloxeKeUopMnMjaz4/lMKxL1eaual/h/qtPWr1ynEwq7oHyx6YEv
4h6MH6tJSBE3cBvY8L2/ezxp+I4HF8HMvldZuFqux9puZ+vIMZF8O3ITKQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFMaL2TiIZT2eOTfaDsce/zUiQqxMMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEveG92Wk9JaGxQWjQ1TjlvT3h4N19OU0pDckV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCVPyQMAwD
BABU/JUDBANU/JADBABb2cIDBAG5nWADBAC5nWMDBAHCNg4wDQYJKoZIhvcNAQEL
BQADggEBAEc6FBNOhC7eqN95YP0HqNRF5t9R4ZQCDw1wFIm1j7gXBLtVu7GR7oFv
jiGMNmVsmip4Ajsmq0KJcAx2uGAiciq3sGN2zyw5ZccA+N/e36NAgw80fn67REHp
vDIUlzxydLmIpPK0IGsK2Qe8qMyMF9PwZ+EGQ8/bc+8L+7DSiLi32tD3ytS+0pdH
0EFtI1oqyNKq+rNlOinGAEWwR42xGJGyBIjCUte1bxbmi7Z3MCfFU3Og8rYUd8hD
ID1t5n0Ar8cW593KYx16cXFtgAWI+TRPLnp3ZSi/4aBuGR1wS8cWax0e88IPc7+a
y5Gcm06pIXu3B64I3Diy2WLqX0OklK4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:58 2025 by rpki-client