Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/z4737EJ_3ChDTvC0f3ZWE0bflis.roa
File: z4737EJ_3ChDTvC0f3ZWE0bflis.roa (raw, json)
Hash identifier: b8FARaIW24zG8VRRXjW12ArVyNrviLVmKsPNNCxuSlI=
Subject key identifier: CF:8E:F7:EC:42:7F:DC:28:43:4E:F0:B4:7F:76:56:13:46:DF:96:2B
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019421B2329C626641A9B8863AC43A5D66E5
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/z4737EJ_3ChDTvC0f3ZWE0bflis.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48847
IP address blocks: 109.233.16.0/21 maxlen: 21
109.233.16.0/24 maxlen: 24
109.233.17.0/24 maxlen: 24
109.233.18.0/24 maxlen: 24
109.233.19.0/24 maxlen: 24
109.233.19.128/25 maxlen: 25
109.233.19.128/30 maxlen: 30
109.233.20.0/24 maxlen: 24
109.233.20.196/30 maxlen: 30
109.233.21.0/24 maxlen: 24
109.233.21.92/30 maxlen: 30
109.233.21.100/30 maxlen: 30
109.233.22.0/24 maxlen: 24
109.233.23.0/24 maxlen: 24
109.233.23.0/30 maxlen: 30
109.233.23.152/29 maxlen: 29
185.12.220.0/22 maxlen: 22
185.12.221.0/24 maxlen: 24
185.12.221.152/29 maxlen: 29
185.12.222.0/24 maxlen: 24
185.12.223.0/24 maxlen: 24
2a03:6900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:9c:62:66:41:a9:b8:86:3a:c4:3a:5d:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8ef7ec427fdc28434ef0b47f76561346df962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:5f:00:07:fb:d7:36:4c:60:82:f6:ec:47:
86:83:0a:9a:4c:05:2c:69:c2:8d:81:2c:c4:90:6b:
21:25:89:bc:96:21:bd:f9:8c:e3:82:02:76:d2:5a:
aa:25:96:e6:ba:df:8e:6c:38:4c:22:96:13:85:ab:
12:c3:08:f1:f6:85:36:8d:56:ac:12:dd:fb:9d:12:
13:f7:95:10:6b:56:6a:b9:ca:fc:47:bc:44:c4:1b:
32:2b:88:3f:e6:4f:05:b3:6b:08:a0:e7:b0:56:d6:
e3:54:3f:cb:c4:56:87:c4:e2:7f:f6:9d:40:8f:a1:
6c:fc:ea:81:6c:a0:92:a9:98:00:47:41:1d:db:6f:
da:d2:92:f7:e7:9e:97:88:2c:8b:df:cb:c6:50:81:
18:8f:89:44:d5:96:3c:47:6e:8e:3a:99:50:b8:ac:
05:b1:53:ec:39:5a:65:25:32:a2:36:f8:15:c8:4c:
79:a7:2c:ed:db:c9:6c:6b:8c:d6:99:65:30:15:fa:
ee:b8:d5:c2:d0:dc:a3:61:95:1e:44:60:93:ea:21:
71:b5:9e:71:50:de:f7:87:21:4d:42:86:91:74:dd:
ea:14:43:c4:34:89:06:2e:b4:32:e5:0d:0d:00:6e:
74:5d:0e:c4:4f:c0:47:70:09:ac:19:27:d6:4f:80:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:F7:EC:42:7F:DC:28:43:4E:F0:B4:7F:76:56:13:46:DF:96:2B
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/z4737EJ_3ChDTvC0f3ZWE0bflis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.16.0/21
185.12.220.0/22
IPv6:
2a03:6900::/32
Signature Algorithm: sha256WithRSAEncryption
9d:de:62:e5:d3:4a:23:5e:c1:5e:bf:03:06:3e:9f:b6:0c:a8:
c4:8f:35:5d:0e:03:86:80:ca:ba:ae:16:07:9c:95:75:ce:26:
8f:3d:d1:fd:86:22:95:90:43:3f:d8:46:22:cf:79:5f:69:12:
76:99:1e:63:86:7b:6a:a7:2c:b5:ad:61:28:05:b9:eb:47:75:
4f:c4:4d:39:60:17:10:09:07:25:6c:c8:6d:b7:14:e0:10:94:
a7:cd:9c:2b:fc:71:00:4f:b9:5b:9a:08:29:80:3e:b4:31:61:
39:6f:20:81:c9:60:04:95:63:04:63:d6:1b:47:e1:6d:f3:86:
71:f8:60:d9:13:fe:3c:27:46:27:3c:17:87:ca:24:92:2f:37:
20:cc:95:3b:1e:d1:15:af:79:35:a4:18:24:f1:0f:bc:8a:1e:
d5:59:06:58:e2:04:a9:7e:34:ac:ce:9a:20:6b:48:ac:87:88:
af:50:c2:7f:63:c7:c6:a7:b6:74:1c:39:68:2d:b9:79:95:a7:
c4:18:08:63:fd:51:51:c2:a7:25:47:6c:2d:6c:9b:4b:10:13:
67:05:36:d5:6e:a6:12:ef:1a:44:e7:3a:da:d0:6c:5c:b0:56:
c3:74:ed:47:69:a8:26:11:8a:6e:44:0a:ab:a7:bf:cd:84:27:
7f:0f:62:86
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhsjKcYmZBqbiGOsQ6XWblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjUwMTAxMTE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjhlZjdlYzQyN2ZkYzI4NDM0ZWYwYjQ3Zjc2NTYxMzQ2ZGY5NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVZfAAf71zZMYIL27EeGgwqaTAUs
acKNgSzEkGshJYm8liG9+YzjggJ20lqqJZbmut+ObDhMIpYThasSwwjx9oU2jVas
Et37nRIT95UQa1Zqucr8R7xExBsyK4g/5k8Fs2sIoOewVtbjVD/LxFaHxOJ/9p1A
j6Fs/OqBbKCSqZgAR0Ed22/a0pL3556XiCyL38vGUIEYj4lE1ZY8R26OOplQuKwF
sVPsOVplJTKiNvgVyEx5pyzt28lsa4zWmWUwFfruuNXC0NyjYZUeRGCT6iFxtZ5x
UN73hyFNQoaRdN3qFEPENIkGLrQy5Q0NAG50XQ7ET8BHcAmsGSfWT4DLUQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFM+O9+xCf9woQ07wtH92VhNG35YrMB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvejQ3MzdFSl8zQ2hEVHZDMGYzWldFMGJmbGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbekQAwQC
uQzcMA0EAgACMAcDBQAqA2kAMA0GCSqGSIb3DQEBCwUAA4IBAQCd3mLl00ojXsFe
vwMGPp+2DKjEjzVdDgOGgMq6rhYHnJV1ziaPPdH9hiKVkEM/2EYiz3lfaRJ2mR5j
hntqpyy1rWEoBbnrR3VPxE05YBcQCQclbMhttxTgEJSnzZwr/HEAT7lbmggpgD60
MWE5byCByWAElWMEY9YbR+Ft84Zx+GDZE/48J0YnPBeHyiSSLzcgzJU7HtEVr3k1
pBgk8Q+8ih7VWQZY4gSpfjSszpoga0ish4ivUMJ/Y8fGp7Z0HDloLbl5lafEGAhj
/VFRwqclR2wtbJtLEBNnBTbVbqYS7xpE5zra0GxcsFbDdO1HaagmEYpuRAqrp7/N
hCd/D2KG
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:09 2025 by rpki-client