Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa
File: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (raw, json)
Hash identifier: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=
Subject key identifier: 77:11:68:D8:93:52:2C:DC:85:8C:ED:3E:5A:C0:AC:D0:2E:87:A1:FD
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0194244578451B381C7075D4FECFC193B956
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.86.84.0/24 maxlen: 24
45.132.112.0/24 maxlen: 24
45.152.34.0/23 maxlen: 24
62.68.81.0/24 maxlen: 24
79.143.128.0/24 maxlen: 24
79.143.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:78:45:1b:38:1c:70:75:d4:fe:cf:c1:93:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=771168d893522cdc858ced3e5ac0acd02e87a1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:bc:42:27:60:cb:97:bb:91:f4:b7:89:03:
b5:5c:3d:1a:d1:04:00:9f:3e:f7:f7:4b:40:20:a0:
d8:aa:29:a9:cb:b0:74:6e:9d:f0:92:08:f1:8b:a2:
c6:cd:c9:f5:05:5c:be:4e:fd:fc:f8:09:03:ff:92:
d6:a6:ee:4a:74:85:73:15:b6:6e:a4:a4:15:b5:63:
ac:2c:8f:5f:f4:30:be:d1:dd:dd:fe:d3:02:f1:e8:
13:26:da:bc:13:94:c1:c5:5a:59:e0:64:0d:dc:b5:
cf:ac:d1:d7:64:09:6d:5a:97:91:fb:63:ec:ee:e6:
98:8d:14:c6:94:0e:4e:08:57:52:b4:82:82:b5:a9:
88:45:ad:6c:15:07:65:02:dc:e7:15:a9:1c:e0:45:
cf:b8:82:94:49:50:3a:7a:57:5b:45:86:e1:a6:cd:
d0:85:9e:bf:78:fc:bf:8d:b2:44:0a:98:f3:03:ca:
7c:4f:71:1d:52:eb:ce:6b:19:09:26:14:4a:6d:8d:
1d:d7:0b:a8:c5:81:69:e9:9a:7a:b7:a6:6c:71:b5:
ff:ed:58:cb:57:0e:b6:91:49:f4:86:72:c7:f7:10:
40:ad:13:58:fe:e9:81:14:2f:d9:14:7a:c9:18:46:
9d:f5:28:ae:f0:6c:1e:44:db:cd:2d:6e:cf:f5:12:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:68:D8:93:52:2C:DC:85:8C:ED:3E:5A:C0:AC:D0:2E:87:A1:FD
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.84.0/24
45.132.112.0/24
45.152.34.0/23
62.68.81.0/24
79.143.128.0/24
79.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:f0:6a:0d:eb:ed:de:a4:d9:d0:89:da:fc:c7:0c:f8:c6:
ba:a0:39:17:70:82:1d:a6:ef:7b:54:68:be:2d:6a:41:d5:9b:
36:a0:f7:ee:a7:67:12:88:57:9b:f3:07:a6:a8:d8:36:48:2c:
d0:78:84:fc:13:ca:29:98:c8:e2:bc:91:be:3a:3c:14:5a:df:
3e:28:6e:0b:9c:58:b4:e2:25:b2:02:9b:82:5e:38:84:4d:fe:
7e:c6:b9:f1:be:41:30:19:43:bb:e7:41:37:15:9c:64:55:aa:
5d:6a:45:c2:f5:44:e6:36:6b:0c:f9:88:30:20:03:3c:4f:9a:
f1:04:cf:f9:27:32:e5:a3:56:43:6d:cb:f2:0b:04:9d:07:eb:
e6:09:54:cc:9a:3d:ff:88:0d:ac:a3:ba:bb:3c:a2:70:e9:fb:
8b:74:08:57:64:94:ee:a9:f0:16:e0:be:4f:77:51:1a:07:a7:
90:83:99:52:30:5c:c5:5a:27:68:02:b9:bf:77:99:06:bb:37:
ec:ff:9f:3d:2d:42:94:28:ea:41:12:9d:91:99:4f:ee:8f:0b:
e6:d0:e5:e0:14:9b:fb:1e:56:81:36:97:04:94:ed:0e:30:23:
ab:41:c3:a7:71:65:9a:f2:02:64:38:c7:11:06:1f:70:58:86:
52:2e:64:42
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQkRXhFGzgccHXU/s/Bk7lWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzExNjhkODkzNTIyY2RjODU4Y2VkM2U1YWMwYWNkMDJlODdhMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR+8Qidgy5e7kfS3iQO1XD0a0QQA
nz7390tAIKDYqimpy7B0bp3wkgjxi6LGzcn1BVy+Tv38+AkD/5LWpu5KdIVzFbZu
pKQVtWOsLI9f9DC+0d3d/tMC8egTJtq8E5TBxVpZ4GQN3LXPrNHXZAltWpeR+2Ps
7uaYjRTGlA5OCFdStIKCtamIRa1sFQdlAtznFakc4EXPuIKUSVA6eldbRYbhps3Q
hZ6/ePy/jbJECpjzA8p8T3EdUuvOaxkJJhRKbY0d1wuoxYFp6Zp6t6ZscbX/7VjL
Vw62kUn0hnLH9xBArRNY/umBFC/ZFHrJGEad9Siu8GweRNvNLW7P9RKXfwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHcRaNiTUizchYztPlrArNAuh6H9MB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvZHhGbzJKTlNMTnlGak8wLVdzQ3MwQzZIb2YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVZUAwQA
LYRwAwQBLZgiAwQAPkRRAwQAT4+AAwQAT4+CMA0GCSqGSIb3DQEBCwUAA4IBAQAB
UPBqDevt3qTZ0Ina/McM+Ma6oDkXcIIdpu97VGi+LWpB1Zs2oPfup2cSiFeb8wem
qNg2SCzQeIT8E8opmMjivJG+OjwUWt8+KG4LnFi04iWyApuCXjiETf5+xrnxvkEw
GUO750E3FZxkVapdakXC9UTmNmsM+YgwIAM8T5rxBM/5JzLlo1ZDbcvyCwSdB+vm
CVTMmj3/iA2so7q7PKJw6fuLdAhXZJTuqfAW4L5Pd1EaB6eQg5lSMFzFWidoArm/
d5kGuzfs/589LUKUKOpBEp2RmU/ujwvm0OXgFJv7HlaBNpcElO0OMCOrQcOncWWa
8gJkOMcRBh9wWIZSLmRC
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:10 2025 by rpki-client