Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa
File: rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa (raw, json)
Hash identifier: fOnAbwYbkSj5pWsL7oCaEBc8d/CJJxJmdgkbmFTZcpQ=
Subject key identifier: AD:75:33:E0:28:DA:ED:19:F9:7F:62:BE:35:E9:30:7E:07:3B:78:3C
Certificate issuer: /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial: 0194214391C596998C896B319C51E5796891
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42387
IP address blocks: 94.143.240.0/21 maxlen: 21
185.9.80.0/22 maxlen: 22
212.109.0.0/20 maxlen: 20
212.109.16.0/20 maxlen: 20
212.109.28.0/24 maxlen: 24
212.109.29.0/24 maxlen: 24
212.109.30.0/24 maxlen: 24
217.77.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:91:c5:96:99:8c:89:6b:31:9c:51:e5:79:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad7533e028daed19f97f62be35e9307e073b783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:d6:a9:7c:04:ca:1a:93:e2:8b:a1:6e:6c:
2f:ef:8f:3f:76:c9:bb:33:46:8e:1e:d1:4b:01:83:
fd:e3:23:26:e6:6f:48:c6:02:4e:07:24:5c:2f:75:
02:86:64:b4:b8:6f:9f:e6:75:91:be:a1:9a:e0:76:
92:41:d5:d7:f1:e1:3c:8d:b4:00:5d:72:3c:f1:f3:
60:c3:4a:d9:b9:da:ee:22:bb:06:f3:1c:82:1b:cd:
01:67:79:ff:bd:7e:62:a3:8a:5c:81:90:07:07:a2:
4b:b9:57:2e:02:8e:61:aa:87:d4:78:70:4d:90:e9:
f5:29:2c:f0:6a:9c:71:47:8a:44:d1:7a:15:4c:6a:
88:b5:eb:9a:9f:a6:0d:cd:b2:8c:f4:61:82:d5:d8:
8b:87:92:fd:15:41:61:64:2f:36:6a:db:cd:24:34:
30:02:19:41:dd:80:d2:46:a0:01:08:dc:1a:6e:2d:
1b:82:5d:1e:16:71:ef:53:2d:15:1d:5a:ca:c0:2f:
8d:fa:d9:04:8a:fb:39:b5:67:e6:29:15:09:c1:45:
bc:bf:25:30:0f:83:d8:26:87:94:cb:af:ab:ab:c9:
58:f3:26:0b:a8:95:fb:cb:94:8f:b1:04:90:cc:99:
eb:bc:ca:70:35:a4:b2:0c:b0:7b:33:17:57:87:1e:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:33:E0:28:DA:ED:19:F9:7F:62:BE:35:E9:30:7E:07:3B:78:3C
X509v3 Authority Key Identifier:
keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.240.0/21
185.9.80.0/22
212.109.0.0/19
217.77.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:1a:fd:f8:55:f1:bf:d9:45:d3:12:54:d4:18:f5:cf:eb:3c:
bb:73:71:ec:44:27:bd:20:20:c4:4b:52:4f:75:63:c6:b9:7d:
a8:aa:48:96:b5:f7:eb:a0:dc:eb:99:6d:0c:ad:94:1a:a0:a0:
82:dd:c7:95:9a:a8:75:83:54:81:70:5a:18:38:fd:b6:80:cc:
ae:7e:c7:02:ba:b5:11:48:26:78:a2:8c:19:63:c9:2f:9a:b4:
4b:9e:60:90:b8:69:11:3a:46:b7:29:9c:69:ab:36:c6:8b:e1:
57:9d:aa:c6:d6:62:6f:35:2d:89:fb:3b:f4:56:c8:55:23:08:
1a:c9:7a:ec:7b:31:28:f7:97:82:30:31:cf:c3:43:fc:8c:f9:
96:ec:ae:e6:e2:26:35:2e:23:f9:f3:01:ff:ec:b9:7b:53:ef:
25:0c:b4:a2:ba:cc:db:24:a6:6f:77:80:15:e6:6a:97:7b:2b:
78:eb:ed:03:f8:1b:84:25:55:5c:1f:29:e5:7e:35:bd:f0:7b:
64:62:2d:f3:b2:04:c3:7b:fb:f7:b4:ac:9e:24:1f:5e:51:44:
5a:97:01:6e:b1:bb:50:f8:02:22:28:9b:93:44:e0:7d:1d:2e:
32:7e:bc:55:55:93:37:e5:75:a7:e9:3b:85:f9:17:85:ba:2a:
ba:b2:02:46
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhQ5HFlpmMiWsxnFHleWiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWJlMTU1MDM3ZWI3ZTY1YzEyYWM5YWEyYTJjMzI1MDM4
YzNhOWIwHhcNMjUwMTAxMDk0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDc1MzNlMDI4ZGFlZDE5Zjk3ZjYyYmUzNWU5MzA3ZTA3M2I3ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruvWqXwEyhqT4ouhbmwv748/dsm7
M0aOHtFLAYP94yMm5m9IxgJOByRcL3UChmS0uG+f5nWRvqGa4HaSQdXX8eE8jbQA
XXI88fNgw0rZudruIrsG8xyCG80BZ3n/vX5io4pcgZAHB6JLuVcuAo5hqofUeHBN
kOn1KSzwapxxR4pE0XoVTGqIteuan6YNzbKM9GGC1diLh5L9FUFhZC82atvNJDQw
AhlB3YDSRqABCNwabi0bgl0eFnHvUy0VHVrKwC+N+tkEivs5tWfmKRUJwUW8vyUw
D4PYJoeUy6+rq8lY8yYLqJX7y5SPsQSQzJnrvMpwNaSyDLB7MxdXhx6pUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK11M+Ao2u0Z+X9ivjXpMH4HO3g8MB8GA1UdIwQY
MBaAFBpb4VUDfrfmXBKsmqKiwyUDjDqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTkt
MmVjODcxN2VlMzBhLzEvclhVejRDamE3Um41ZjJLLU5la3dmZ2M3ZUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTktMmVjODcxN2VlMzBh
LzEvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDXo/wAwQC
uQlQAwQF1G0AAwQE2U0wMA0GCSqGSIb3DQEBCwUAA4IBAQA9Gv34VfG/2UXTElTU
GPXP6zy7c3HsRCe9ICDES1JPdWPGuX2oqkiWtffroNzrmW0MrZQaoKCC3ceVmqh1
g1SBcFoYOP22gMyufscCurURSCZ4oowZY8kvmrRLnmCQuGkROka3KZxpqzbGi+FX
narG1mJvNS2J+zv0VshVIwgayXrsezEo95eCMDHPw0P8jPmW7K7m4iY1LiP58wH/
7Ll7U+8lDLSiuszbJKZvd4AV5mqXeyt46+0D+BuEJVVcHynlfjW98HtkYi3zsgTD
e/v3tKyeJB9eUURalwFusbtQ+AIiKJuTROB9HS4yfrxVVZM35XWn6TuF+ReFuiq6
sgJG
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:49 2025 by rpki-client