Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa
File: mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa (raw, json)
Hash identifier: 9X0dNAuuQyEHvxBMN4gp2QewnB9NGpB0KtQCW0IE4VU=
Subject key identifier: 99:2B:03:FF:D1:4C:7C:DD:8B:3F:B3:3F:33:0B:1A:DA:E7:BC:7F:9E
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 019428255B56B73635B3ACAB33850E883C19
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa
Signing time: Thu 02 Jan 2025 17:52:04 +0000
ROA not before: Thu 02 Jan 2025 17:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201917
IP address blocks: 37.25.128.0/17 maxlen: 24
45.144.96.0/22 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
139.47.192.0/18 maxlen: 24
195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5b:56:b7:36:35:b3:ac:ab:33:85:0e:88:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992b03ffd14c7cdd8b3fb33f330b1adae7bc7f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:74:bf:af:02:b4:c9:1e:c9:cf:e3:37:42:
84:b8:f6:9c:0e:8c:d1:74:c5:f6:c7:2c:90:8f:9c:
bc:18:a5:11:da:5d:ca:cd:15:1f:a0:78:8a:d2:53:
31:d5:8a:e9:49:e6:44:97:34:6a:58:1d:82:e8:b6:
6c:5f:0a:84:6b:39:d8:cd:c7:b5:9a:3c:fb:0f:32:
51:ec:d4:6b:45:1e:c6:dd:4d:c9:02:a2:2d:73:7d:
8c:8e:01:ad:a6:6f:f4:6c:b3:42:45:92:6b:02:ba:
56:b2:0b:47:81:c5:92:b7:45:c7:ca:53:92:7d:45:
4d:45:3c:10:5f:57:ab:3c:0b:da:f5:5f:e7:8a:62:
10:3d:a9:0a:94:53:66:1c:56:2f:0f:15:a6:2d:7f:
92:59:96:13:1c:9a:38:fa:5c:9a:c0:27:39:69:f5:
ee:52:4d:7d:40:59:ee:ff:9e:fe:51:11:28:28:1b:
97:57:2d:b2:37:d1:53:bb:40:d2:72:32:f5:47:26:
38:be:36:9b:4e:a7:61:32:33:fc:8a:87:5a:c2:a2:
33:40:45:86:4e:d2:2f:a1:30:ef:e2:08:66:85:bb:
04:b6:15:39:aa:2c:e0:da:72:8c:42:a9:66:2f:28:
b1:43:96:99:ba:bb:97:45:82:80:df:59:5e:26:67:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:03:FF:D1:4C:7C:DD:8B:3F:B3:3F:33:0B:1A:DA:E7:BC:7F:9E
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
45.144.96.0/22
46.108.0.0/16
46.190.128.0/17
139.47.192.0/18
195.232.128.0-195.233.255.255
Signature Algorithm: sha256WithRSAEncryption
aa:ad:ab:be:e8:ad:bd:d2:de:1f:69:cd:4f:f7:01:60:0d:35:
be:10:d3:8e:ac:a5:8f:e0:eb:6d:79:0c:21:fc:11:f7:52:3a:
9d:2f:25:c8:39:2e:dd:88:0d:8a:35:3e:b9:73:91:c3:d9:f2:
d8:3b:7f:cf:a6:f1:9b:c3:bd:23:ac:75:b3:7e:b0:c3:b1:2f:
57:62:84:b1:94:43:b7:bd:e1:0b:0a:2f:68:45:f1:6d:40:1d:
fb:a9:0a:95:ac:1a:fe:77:99:07:72:45:c8:36:af:af:9e:32:
2d:25:93:63:42:bd:2c:1b:3c:96:9b:b7:52:7e:af:fa:ea:c4:
6d:31:5b:d8:8f:4f:4d:bd:6c:9c:b6:f7:42:38:10:3a:e9:6d:
e6:76:a6:d4:28:b7:6d:a0:54:27:41:73:0e:94:5a:04:0d:82:
7d:ca:e6:1a:2a:f9:85:bd:f7:95:8f:f3:50:bc:41:c4:11:2c:
5e:fe:14:00:1c:d0:5b:d1:88:a0:90:52:0e:93:1e:0e:f8:10:
3f:9a:c6:a0:2e:e8:c4:10:ce:dc:bd:9d:98:b6:2e:8b:13:ac:
55:5f:5f:dc:cf:d9:5c:fd:33:1e:77:08:ee:5d:c0:01:3e:8b:
0c:23:48:bc:4c:07:ee:9b:72:a8:e0:bf:0d:49:8b:ec:25:19:
76:80:f3:c2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQoJVtWtzY1s6yrM4UOiDwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3
NTE1ZDIwHhcNMjUwMTAyMTc1MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTJiMDNmZmQxNGM3Y2RkOGIzZmIzM2YzMzBiMWFkYWU3YmM3ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl50v68CtMkeyc/jN0KEuPacDozR
dMX2xyyQj5y8GKUR2l3KzRUfoHiK0lMx1YrpSeZElzRqWB2C6LZsXwqEaznYzce1
mjz7DzJR7NRrRR7G3U3JAqItc32MjgGtpm/0bLNCRZJrArpWsgtHgcWSt0XHylOS
fUVNRTwQX1erPAva9V/nimIQPakKlFNmHFYvDxWmLX+SWZYTHJo4+lyawCc5afXu
Uk19QFnu/57+UREoKBuXVy2yN9FTu0DScjL1RyY4vjabTqdhMjP8iodawqIzQEWG
TtIvoTDv4ghmhbsEthU5qizg2nKMQqlmLyixQ5aZuruXRYKA31leJmdaAwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJkrA//RTHzdiz+zPzMLGtrnvH+eMB8GA1UdIwQY
MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEvbVNzRF85Rk1mTjJMUDdNX013c2EydWU4ZjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0
LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQHJRmAAwQC
LZBgAwMALmwDBAcuvoADBAaLL8AwCwMEB8PogAMDAcPoMA0GCSqGSIb3DQEBCwUA
A4IBAQCqrau+6K290t4fac1P9wFgDTW+ENOOrKWP4OtteQwh/BH3UjqdLyXIOS7d
iA2KNT65c5HD2fLYO3/PpvGbw70jrHWzfrDDsS9XYoSxlEO3veELCi9oRfFtQB37
qQqVrBr+d5kHckXINq+vnjItJZNjQr0sGzyWm7dSfq/66sRtMVvYj09NvWyctvdC
OBA66W3mdqbUKLdtoFQnQXMOlFoEDYJ9yuYaKvmFvfeVj/NQvEHEESxe/hQAHNBb
0YigkFIOkx4O+BA/msagLujEEM7cvZ2Yti6LE6xVX1/cz9lc/TMedwjuXcABPosM
I0i8TAfum3Ko4L8NSYvsJRl2gPPC
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:32 2025 by rpki-client