Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dPgV8tSkmLir1XnJiBTJRVDgGKI.roa
File: dPgV8tSkmLir1XnJiBTJRVDgGKI.roa (raw, json)
Hash identifier: Vko43voPVvQSxsdEtD5SYY2W4tU6hs7Jv1ED6wficXc=
Subject key identifier: 74:F8:15:F2:D4:A4:98:B8:AB:D5:79:C9:88:14:C9:45:50:E0:18:A2
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0194529F2F15B098D3237998F24877C9E3BF
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dPgV8tSkmLir1XnJiBTJRVDgGKI.roa
Signing time: Fri 10 Jan 2025 23:49:11 +0000
ROA not before: Fri 10 Jan 2025 23:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.181.20.0/24 maxlen: 32
5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.14.244.0/24 maxlen: 24
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.91.52.0/22 maxlen: 32
45.140.146.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.166.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.30.0/24 maxlen: 32
45.144.31.0/24 maxlen: 32
45.150.64.0/24 maxlen: 32
45.150.65.0/24 maxlen: 32
45.150.67.0/24 maxlen: 32
45.155.52.0/22 maxlen: 32
91.194.11.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
146.19.230.0/24 maxlen: 24
185.33.24.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
185.234.247.0/24 maxlen: 32
195.16.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:52:9f:2f:15:b0:98:d3:23:79:98:f2:48:77:c9:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 10 23:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f815f2d4a498b8abd579c98814c94550e018a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:a2:8b:28:53:59:31:14:95:50:7a:95:41:
db:7d:08:dc:43:31:b2:f0:31:6a:3c:55:29:6a:04:
18:bb:02:7b:ab:9c:a1:c8:20:7c:4f:24:47:81:10:
bb:1b:5c:a8:be:c3:a0:6f:fa:9e:bf:54:fc:6f:9f:
3d:66:13:15:3e:e8:9c:e4:cd:0d:cd:77:9e:68:2c:
fa:2e:f7:e1:e9:e0:54:5d:75:c3:2f:56:5f:fe:3e:
ef:ad:85:d9:18:08:60:49:da:aa:d8:eb:7e:c1:66:
da:da:b0:84:02:c0:c3:60:bc:8f:cd:67:ed:41:4f:
8a:fd:fc:f7:f3:15:1b:36:e5:e0:f3:62:6f:77:c9:
00:a8:7a:fa:94:b0:6c:34:d8:72:08:da:5f:08:4f:
22:25:cb:3d:f3:ca:f3:32:3e:75:46:3e:4c:68:bb:
15:9c:86:df:24:2c:0d:36:97:6c:b6:c1:25:73:66:
f4:f4:eb:00:a8:5b:5b:e9:df:59:cc:5b:76:7e:a6:
d7:ae:28:28:8f:63:ac:32:da:77:82:ea:af:ad:f7:
da:6e:91:b3:a5:ae:21:2a:88:e7:8c:d2:3a:fc:51:
b9:4b:14:67:3b:d1:05:96:a8:0b:b1:d0:49:3d:83:
09:00:8b:9e:9b:d1:0a:2a:b7:bd:27:9f:2e:01:b8:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:15:F2:D4:A4:98:B8:AB:D5:79:C9:88:14:C9:45:50:E0:18:A2
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dPgV8tSkmLir1XnJiBTJRVDgGKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/22
45.14.244.0/22
45.91.52.0/22
45.140.146.0/23
45.140.166.0/23
45.144.28.0/22
45.150.64.0/23
45.150.67.0/24
45.155.52.0/22
91.194.11.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
146.19.230.0/24
185.33.24.0/24
185.74.222.0/24
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:fe:bb:04:e4:92:15:f7:14:6f:3b:03:57:aa:45:f6:e0:44:
00:34:1e:12:7a:0b:0c:98:6b:60:04:0d:61:fc:08:1e:e8:63:
5d:cb:95:d6:c6:4b:0f:bc:e4:d3:04:12:73:fb:bb:0d:a0:a5:
72:b6:ce:de:f2:ff:45:60:bc:57:8e:c5:04:aa:7e:a1:7f:62:
1b:23:3c:30:87:05:26:a6:a7:64:7d:43:95:2e:fb:6d:ec:23:
e9:f9:87:c9:1c:55:29:a4:bf:b0:0d:70:57:d7:50:4e:ba:52:
d2:98:4e:9a:4c:93:bd:e4:26:e0:ff:f8:ab:7a:1c:2a:ef:ef:
dd:93:a2:ba:4d:31:02:15:d1:64:1b:27:3d:74:c8:19:d3:3a:
d9:db:28:7d:7d:05:43:7d:ef:ca:bf:de:e4:53:2b:d0:8a:ea:
32:44:e8:df:f4:5e:c2:84:5a:01:8a:31:a3:ff:c6:97:24:93:
7d:f3:bf:0c:95:63:b5:3f:9e:4a:a9:e0:c7:bc:28:67:cf:f1:
9d:60:72:38:d6:fc:6e:d6:d7:0b:79:ac:da:e5:f8:f4:cc:b5:
07:1b:4f:44:f5:3d:7f:c9:51:cc:f4:35:1a:4c:0f:f9:d6:93:
76:9c:14:fd:fb:f6:bb:f2:d3:a0:c3:a8:1a:7f:7c:9c:65:cf:
31:b3:de:b4
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZRSny8VsJjTI3mY8kh3yeO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjUwMTEwMjM0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGY4MTVmMmQ0YTQ5OGI4YWJkNTc5Yzk4ODE0Yzk0NTUwZTAxOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyiiyhTWTEUlVB6lUHbfQjcQzGy
8DFqPFUpagQYuwJ7q5yhyCB8TyRHgRC7G1yovsOgb/qev1T8b589ZhMVPuic5M0N
zXeeaCz6Lvfh6eBUXXXDL1Zf/j7vrYXZGAhgSdqq2Ot+wWba2rCEAsDDYLyPzWft
QU+K/fz38xUbNuXg82Jvd8kAqHr6lLBsNNhyCNpfCE8iJcs988rzMj51Rj5MaLsV
nIbfJCwNNpdstsElc2b09OsAqFtb6d9ZzFt2fqbXrigoj2OsMtp3guqvrffabpGz
pa4hKojnjNI6/FG5SxRnO9EFlqgLsdBJPYMJAIuem9EKKre9J58uAbivLwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFHT4FfLUpJi4q9V5yYgUyUVQ4BiiMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvZFBnVjh0U2ttTGlyMVhuSmlCVEpSVkRnR0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAgW1FAME
Ai0O9AMEAi1bNAMEAS2MkgMEAS2MpgMEAi2QHAMEAS2WQAMEAC2WQwMEAi2bNAME
AFvCCwMEAIp8tDAMAwQAiny3AwQAiny4AwQAkhPmAwQAuSEYAwQAuUreAwQAuer3
AwQAwxBKMA0GCSqGSIb3DQEBCwUAA4IBAQDo/rsE5JIV9xRvOwNXqkX24EQANB4S
egsMmGtgBA1h/Age6GNdy5XWxksPvOTTBBJz+7sNoKVyts7e8v9FYLxXjsUEqn6h
f2IbIzwwhwUmpqdkfUOVLvtt7CPp+YfJHFUppL+wDXBX11BOulLSmE6aTJO95Cbg
//irehwq7+/dk6K6TTECFdFkGyc9dMgZ0zrZ2yh9fQVDfe/Kv97kUyvQiuoyROjf
9F7ChFoBijGj/8aXJJN9878MlWO1P55KqeDHvChnz/GdYHI41vxu1tcLeaza5fj0
zLUHG09E9T1/yVHM9DUaTA/51pN2nBT9+/a78tOgw6gaf3ycZc8xs960
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:15 2025 by rpki-client