Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9aRuIoOzyPOE6vExlWKi0aHsT30.roa
File: 9aRuIoOzyPOE6vExlWKi0aHsT30.roa (raw, json)
Hash identifier: Pt0VZy+zR99SJ51EZ4iBAbapyGCjZyJN1tpfQFL+i1Q=
Subject key identifier: F5:A4:6E:22:83:B3:C8:F3:84:EA:F1:31:95:62:A2:D1:A1:EC:4F:7D
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 0194DAF8817C879187EA527653C79D249145
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9aRuIoOzyPOE6vExlWKi0aHsT30.roa
Signing time: Thu 06 Feb 2025 11:15:06 +0000
ROA not before: Thu 06 Feb 2025 11:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
77.83.132.0/22 maxlen: 22
178.210.240.0/21 maxlen: 21
185.122.44.0/24 maxlen: 24
185.122.45.0/24 maxlen: 24
185.122.46.0/24 maxlen: 24
185.122.47.0/24 maxlen: 24
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
2a01:57e0:600::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f8:81:7c:87:91:87:ea:52:76:53:c7:9d:24:91:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Feb 6 11:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a46e2283b3c8f384eaf1319562a2d1a1ec4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:d0:22:36:c9:0f:20:78:f6:1b:2d:b4:a8:
c9:9f:03:5a:ff:18:c6:90:03:49:cf:3e:f1:61:a0:
4e:9a:f5:5a:03:92:df:82:a7:c0:89:24:36:ac:27:
63:22:de:b3:d3:4f:61:4a:f6:a6:0c:81:94:07:7b:
9c:9d:94:84:30:c3:16:63:a8:86:5b:97:37:8e:cb:
21:62:c2:8e:50:89:cf:1a:a2:4c:3c:ea:08:16:c0:
0e:d6:0a:8a:04:6d:24:d6:c0:b8:18:06:f4:79:ed:
1c:33:60:1e:92:7f:67:ee:b9:bb:e9:47:9e:29:9c:
cc:65:9f:d0:01:a9:15:4e:45:71:59:a5:94:9c:34:
cd:09:45:1c:09:4d:c3:52:a7:a0:21:4b:53:c9:d5:
3b:29:f7:c0:96:61:41:57:93:ab:21:8c:3b:3a:45:
d0:bd:a9:d0:dc:bc:51:78:07:fb:64:9b:58:5c:da:
cf:6a:9e:9b:a7:04:e0:b5:05:f9:99:61:3f:41:d6:
7f:94:18:73:0d:a6:f0:36:2a:d6:4f:a4:4e:99:43:
46:88:b5:e1:4b:97:ae:eb:de:41:0e:b0:28:cf:e6:
74:ce:f2:01:01:3a:63:d4:65:a8:a4:2c:49:48:a6:
dc:7e:e5:95:58:a6:68:da:4e:85:cd:2b:d6:03:7a:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:6E:22:83:B3:C8:F3:84:EA:F1:31:95:62:A2:D1:A1:EC:4F:7D
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9aRuIoOzyPOE6vExlWKi0aHsT30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
77.83.132.0/22
178.210.240.0/21
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:7ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:b2:09:c7:46:a4:f6:69:48:25:9a:1f:c3:04:d1:93:4e:08:
b9:17:f7:2c:d1:33:ce:41:0f:17:71:1a:a7:f2:34:bb:45:94:
38:45:c7:fe:72:c1:db:37:30:93:2c:84:10:a3:f6:ff:14:52:
66:5b:cc:97:a2:8a:9d:52:b1:4e:a1:c0:5c:df:9e:57:f8:51:
b7:21:bb:ef:9a:e1:ef:72:b4:f8:97:3a:ee:52:f2:ce:36:05:
c1:e1:ff:8e:06:dd:5a:e6:39:42:0f:a1:95:1f:e9:7b:e6:b9:
4f:02:64:b7:de:cd:f9:14:9e:57:ba:eb:6d:e5:6d:ce:06:cf:
08:4b:03:b0:74:16:96:0b:f1:9f:c5:ef:d7:7a:87:fc:02:49:
6f:c7:95:7e:a3:eb:2a:78:06:4a:cc:8d:d7:fa:55:ae:f3:48:
ee:0c:71:0b:9a:34:86:82:45:e5:75:1b:68:66:cb:1d:22:c0:
87:eb:9d:a6:ef:6e:73:54:40:64:dd:f8:75:00:2b:67:83:51:
04:87:93:fe:61:d7:08:1d:04:5b:b2:33:ee:41:10:c7:5d:92:
b9:d8:a8:5c:3a:94:6b:3d:30:13:1e:58:93:f3:f2:1c:45:2e:
40:4d:3d:67:42:a9:85:3c:18:d8:14:aa:85:54:8e:63:a3:87:
94:50:1a:ac
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAZTa+IF8h5GH6lJ2U8edJJFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjUwMjA2MTExNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWE0NmUyMjgzYjNjOGYzODRlYWYxMzE5NTYyYTJkMWExZWM0ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gzQIjbJDyB49hsttKjJnwNa/xjG
kANJzz7xYaBOmvVaA5LfgqfAiSQ2rCdjIt6z009hSvamDIGUB3ucnZSEMMMWY6iG
W5c3jsshYsKOUInPGqJMPOoIFsAO1gqKBG0k1sC4GAb0ee0cM2Aekn9n7rm76Uee
KZzMZZ/QAakVTkVxWaWUnDTNCUUcCU3DUqegIUtTydU7KffAlmFBV5OrIYw7OkXQ
vanQ3LxReAf7ZJtYXNrPap6bpwTgtQX5mWE/QdZ/lBhzDabwNirWT6ROmUNGiLXh
S5eu695BDrAoz+Z0zvIBATpj1GWopCxJSKbcfuWVWKZo2k6FzSvWA3o38QIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFPWkbiKDs8jzhOrxMZViotGh7E99MB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvOWFSdUlvT3p5UE9FNnZFeGxXS2kwYUhzVDMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAwBAIAATAqAwQALY4PAwQC
PnDIAwQCTVOEAwQDstLwAwQCuXosAwQBuc40AwQAwaKAMCEEAgACMBsDBwAqAVfg
AAEwEAMGASoBV+ACAwYDKgFX4AAwDQYJKoZIhvcNAQELBQADggEBAImyCcdGpPZp
SCWaH8ME0ZNOCLkX9yzRM85BDxdxGqfyNLtFlDhFx/5ywds3MJMshBCj9v8UUmZb
zJeiip1SsU6hwFzfnlf4Ubchu++a4e9ytPiXOu5S8s42BcHh/44G3VrmOUIPoZUf
6XvmuU8CZLfezfkUnle6623lbc4GzwhLA7B0FpYL8Z/F79d6h/wCSW/HlX6j6yp4
BkrMjdf6Va7zSO4McQuaNIaCReV1G2hmyx0iwIfrnabvbnNUQGTd+HUAK2eDUQSH
k/5h1wgdBFuyM+5BEMddkrnYqFw6lGs9MBMeWJPz8hxFLkBNPWdCqYU8GNgUqoVU
jmOjh5RQGqw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:55:00 2025 by rpki-client