Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa
File: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (raw, json)
Hash identifier: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=
Subject key identifier: 94:EF:72:83:31:44:87:AB:E5:CC:5C:1A:E4:8B:DF:DA:D7:00:BA:D7
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019421442C4BC9294E85798EC20EC8DF83AC
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216451
IP address blocks: 37.230.40.0/21 maxlen: 21
89.107.160.0/21 maxlen: 21
185.188.200.0/22 maxlen: 22
2a0b:2400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:4b:c9:29:4e:85:79:8e:c2:0e:c8:df:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94ef7283314487abe5cc5c1ae48bdfdad700bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:d6:06:ae:1b:d8:ee:15:b0:91:1a:ce:3d:
28:71:97:76:d1:0f:d1:e7:1c:f3:6b:74:fc:a4:7d:
c5:0d:cc:4b:57:71:81:38:cb:6f:b0:cd:68:e9:72:
be:68:b6:d6:74:e1:9e:33:ad:7c:c9:9f:1d:5a:38:
77:47:2b:a3:72:ee:5f:ee:03:c5:ba:9a:3b:11:76:
de:a2:0e:22:94:f1:74:00:3b:78:0e:93:1e:8f:e2:
db:be:99:37:fa:94:18:7e:f4:3a:87:62:80:54:1d:
3a:f4:88:0c:30:d3:27:b9:7d:88:74:a8:5f:bf:75:
d0:b5:24:ae:e6:e9:72:29:34:44:60:87:51:30:54:
bc:b8:63:42:56:d5:6c:fa:45:6b:f5:f9:a8:05:4a:
01:46:2d:dc:f2:0d:1e:d7:e8:e0:c6:67:7f:f4:4c:
e1:b3:8a:a2:df:19:6a:29:d4:24:f6:49:1c:1c:f2:
d2:58:84:6d:02:3e:ac:1e:bf:55:0d:bc:8f:d7:d0:
73:c4:d2:fd:a6:e3:43:b0:d0:14:5b:41:b8:fd:dc:
8c:f1:93:5e:e2:40:f6:e7:07:40:31:f4:99:04:23:
9a:63:c5:f6:5f:06:46:4f:ef:b2:c9:eb:ee:80:48:
9b:f1:cb:c7:28:6a:5d:a9:02:2e:fc:ef:75:bd:59:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:72:83:31:44:87:AB:E5:CC:5C:1A:E4:8B:DF:DA:D7:00:BA:D7
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.40.0/21
89.107.160.0/21
185.188.200.0/22
IPv6:
2a0b:2400::/32
Signature Algorithm: sha256WithRSAEncryption
9f:14:a5:15:d8:81:14:c4:03:c6:fe:91:e4:e3:25:d5:7c:8d:
25:30:d5:ac:dd:aa:3b:03:5a:fe:5d:c2:3e:7a:93:22:f3:fe:
b8:72:6b:2a:9e:df:9d:41:76:9b:4a:dd:6a:24:8a:21:64:c6:
ea:d2:8e:5b:3d:db:cb:d7:3c:19:2a:06:9c:73:92:05:22:d7:
b9:0e:95:b7:b8:90:57:67:c4:4f:4a:bf:74:f7:66:4d:0a:38:
67:24:ac:d0:79:17:58:1d:22:c8:c3:cd:fb:a7:6f:4b:bd:9f:
37:c3:70:fd:9c:27:7c:24:2a:5a:15:46:c6:07:87:5c:15:bf:
15:91:1e:ef:b7:d5:54:f5:ff:92:cd:06:7a:ea:c9:63:1c:03:
7d:d8:cf:fd:1b:ab:87:de:d9:cc:2b:49:5c:69:a3:09:3c:50:
e9:a9:b8:94:bb:ad:d3:36:de:d1:9a:14:d7:dd:ef:b0:b0:d3:
89:dc:f4:36:5d:6b:87:3c:a4:cb:91:2d:89:6a:06:63:9c:1b:
f2:e2:e4:f0:55:0a:21:72:a8:57:fa:29:fb:a9:bb:01:65:a9:
2c:c6:ff:f0:69:51:6a:50:ac:97:9a:53:2d:97:f0:78:99:53:
6f:44:ba:9a:12:ce:7b:7a:e8:78:18:cf:cf:30:b6:fb:e8:70:
84:be:02:bc
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQhRCxLySlOhXmOwg7I34OsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw
MWU3MzYwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGVmNzI4MzMxNDQ4N2FiZTVjYzVjMWFlNDhiZGZkYWQ3MDBiYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTWBq4b2O4VsJEazj0ocZd20Q/R
5xzza3T8pH3FDcxLV3GBOMtvsM1o6XK+aLbWdOGeM618yZ8dWjh3Ryujcu5f7gPF
upo7EXbeog4ilPF0ADt4DpMej+Lbvpk3+pQYfvQ6h2KAVB069IgMMNMnuX2IdKhf
v3XQtSSu5ulyKTREYIdRMFS8uGNCVtVs+kVr9fmoBUoBRi3c8g0e1+jgxmd/9Ezh
s4qi3xlqKdQk9kkcHPLSWIRtAj6sHr9VDbyP19BzxNL9puNDsNAUW0G4/dyM8ZNe
4kD25wdAMfSZBCOaY8X2XwZGT++yyevugEib8cvHKGpdqQIu/O91vVlEaQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJTvcoMxRIer5cxcGuSL39rXALrXMB8GA1UdIwQY
MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt
NWQzYTg2NDk0Nzc1LzEvbE85eWd6RkVoNnZsekZ3YTVJdmYydGNBdXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1
LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJeYoAwQD
WWugAwQCubzIMA0EAgACMAcDBQAqCyQAMA0GCSqGSIb3DQEBCwUAA4IBAQCfFKUV
2IEUxAPG/pHk4yXVfI0lMNWs3ao7A1r+XcI+epMi8/64cmsqnt+dQXabSt1qJIoh
ZMbq0o5bPdvL1zwZKgacc5IFIte5DpW3uJBXZ8RPSr9092ZNCjhnJKzQeRdYHSLI
w837p29LvZ83w3D9nCd8JCpaFUbGB4dcFb8VkR7vt9VU9f+SzQZ66sljHAN92M/9
G6uH3tnMK0lcaaMJPFDpqbiUu63TNt7RmhTX3e+wsNOJ3PQ2XWuHPKTLkS2JagZj
nBvy4uTwVQohcqhX+in7qbsBZaksxv/waVFqUKyXmlMtl/B4mVNvRLqaEs57euh4
GM/PMLb76HCEvgK8
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:01 2025 by rpki-client