Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa
File: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (raw, json)
Hash identifier: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=
Subject key identifier: 97:A2:18:BE:1D:42:28:B3:12:AC:C1:2B:F9:33:3B:AB:77:21:2B:D6
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 01942747D03D104E71786AE46EF4D0FF12FA
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50290
IP address blocks: 31.15.124.0/22 maxlen: 22
46.30.130.0/23 maxlen: 23
46.30.132.0/22 maxlen: 22
109.69.32.0/22 maxlen: 22
185.74.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d0:3d:10:4e:71:78:6a:e4:6e:f4:d0:ff:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a218be1d4228b312acc12bf9333bab77212bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:45:38:9e:96:c1:82:f6:8b:48:0c:ea:4b:
b4:5b:48:f5:78:eb:ce:24:23:6e:f9:47:c5:42:4a:
6d:60:72:b1:96:b0:68:5e:2d:59:7f:35:1d:52:e8:
1d:3f:14:18:4b:5e:27:3d:bb:c7:2b:98:4a:f6:72:
99:c7:fb:e8:80:c3:2b:01:c0:c3:a3:60:fc:23:be:
9a:38:5d:b5:a3:b9:b8:6e:f0:fc:b8:dd:5d:36:b2:
99:78:5e:35:c4:2e:ff:78:9c:f7:0f:1e:7f:12:73:
ec:4f:92:44:2e:a7:34:59:77:e8:26:c4:63:37:68:
23:0a:6f:c8:e5:71:c6:b7:e5:a5:c1:e3:24:26:10:
7a:02:48:13:65:51:65:c3:e1:1a:04:32:87:96:fa:
ac:c3:06:1a:a8:38:7a:da:10:23:24:42:06:74:7c:
96:df:4c:4b:72:9d:b3:2e:c2:71:bb:ab:b2:40:dd:
7c:df:3c:59:89:ad:1b:28:41:ca:0d:6d:4a:55:0b:
60:15:ae:47:6b:b1:4e:6d:8b:c2:8a:17:a6:2c:b6:
ea:d7:4a:25:8f:d6:d7:6a:06:ac:5a:f9:05:38:c2:
c1:51:93:8b:d1:0c:fa:1f:22:af:fe:89:0d:9a:0d:
cd:1d:af:61:64:e5:8a:c3:0a:34:da:8d:fd:10:82:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:18:BE:1D:42:28:B3:12:AC:C1:2B:F9:33:3B:AB:77:21:2B:D6
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.124.0/22
46.30.130.0-46.30.135.255
109.69.32.0/22
185.74.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:d0:8c:c7:d1:7a:20:85:01:e1:94:7b:48:96:e0:45:58:
e9:f1:83:e8:3d:6e:93:fc:02:45:4e:ce:6f:0f:c5:e1:a1:17:
f5:ef:7a:d6:6a:da:ff:20:79:a6:8f:18:51:e8:d0:a8:2c:a3:
ef:53:c1:77:85:2c:a4:53:41:2d:29:9f:0f:3c:8d:62:1b:26:
96:b1:49:74:49:29:b8:92:49:f2:0f:87:23:dd:1d:aa:d5:51:
65:23:b9:38:73:8f:09:91:0b:76:06:ca:6c:48:54:be:21:09:
c1:59:b1:bd:0d:2a:8b:22:c8:fd:d9:07:e2:a5:c3:8e:85:06:
f4:d4:a9:1b:18:21:ed:d7:02:c3:ab:bc:8b:61:74:5a:bc:52:
db:53:c0:ed:44:98:6d:87:69:23:6e:91:0e:96:da:b3:ec:1a:
cf:c5:df:a2:28:42:d2:07:1d:b9:3c:46:72:73:be:9b:df:47:
ee:3e:bb:ee:a7:a0:68:3a:0f:d4:df:8d:1b:b2:0b:6a:8e:1c:
c2:8c:15:d7:d1:8c:15:18:8c:0e:a3:55:26:b2:6b:8a:ea:b6:
cb:d4:6c:9e:cf:da:c7:52:88:f3:e3:72:11:78:5d:7b:38:d3:
18:80:50:e0:c7:91:ba:92:a7:68:fd:95:99:1e:7b:b4:ab:eb:
2c:31:0a:b5
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQnR9A9EE5xeGrkbvTQ/xL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy
ZmVmMDgwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2EyMThiZTFkNDIyOGIzMTJhY2MxMmJmOTMzM2JhYjc3MjEyYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRtFOJ6WwYL2i0gM6ku0W0j1eOvO
JCNu+UfFQkptYHKxlrBoXi1ZfzUdUugdPxQYS14nPbvHK5hK9nKZx/vogMMrAcDD
o2D8I76aOF21o7m4bvD8uN1dNrKZeF41xC7/eJz3Dx5/EnPsT5JELqc0WXfoJsRj
N2gjCm/I5XHGt+WlweMkJhB6AkgTZVFlw+EaBDKHlvqswwYaqDh62hAjJEIGdHyW
30xLcp2zLsJxu6uyQN183zxZia0bKEHKDW1KVQtgFa5Ha7FObYvCihemLLbq10ol
j9bXagasWvkFOMLBUZOL0Qz6HyKv/okNmg3NHa9hZOWKwwo02o39EIKk0QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJeiGL4dQiizEqzBK/kzO6t3ISvWMB8GA1UdIwQY
MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt
NjM5ZTE0ZDA0ZGU2LzEvbDZJWXZoMUNLTE1Tck1Fci1UTTdxM2NoSzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2
LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCHw98MAwD
BAEuHoIDBAMuHoADBAJtRSADBAC5Sq4wDQYJKoZIhvcNAQELBQADggEBABxV0IzH
0XoghQHhlHtIluBFWOnxg+g9bpP8AkVOzm8PxeGhF/XvetZq2v8geaaPGFHo0Kgs
o+9TwXeFLKRTQS0pnw88jWIbJpaxSXRJKbiSSfIPhyPdHarVUWUjuThzjwmRC3YG
ymxIVL4hCcFZsb0NKosiyP3ZB+Klw46FBvTUqRsYIe3XAsOrvIthdFq8UttTwO1E
mG2HaSNukQ6W2rPsGs/F36IoQtIHHbk8RnJzvpvfR+4+u+6noGg6D9TfjRuyC2qO
HMKMFdfRjBUYjA6jVSaya4rqtsvUbJ7P2sdSiPPjchF4XXs40xiAUODHkbqSp2j9
lZkee7Sr6ywxCrU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:41 2025 by rpki-client