Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/oPR5HHElA3HcPG22svDl2gOWHV0.roa
File: oPR5HHElA3HcPG22svDl2gOWHV0.roa (raw, json)
Hash identifier: y+JgRYx3oNMn9nunYJc9ghmTOqihPgkiWQ+95aZq0Ho=
Subject key identifier: A0:F4:79:1C:71:25:03:71:DC:3C:6D:B6:B2:F0:E5:DA:03:96:1D:5D
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B267E38AEF9BD6E80DA49727CEEE0E
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/oPR5HHElA3HcPG22svDl2gOWHV0.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:67:e3:8a:ef:9b:d6:e8:0d:a4:97:27:ce:ee:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0f4791c71250371dc3c6db6b2f0e5da03961d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:dd:83:68:b4:52:a9:a9:c6:5f:64:1a:a0:
b2:9f:53:bc:79:dd:5b:c3:6e:2e:8c:26:e4:66:71:
b4:c6:ff:f7:ad:82:37:17:f4:af:35:1f:a8:fc:9d:
a0:4f:9f:30:a7:66:bc:15:d0:92:98:33:8b:87:dd:
0b:e2:9d:2f:6f:6a:4e:6f:80:be:36:67:a6:18:20:
2a:2e:1b:3d:ee:98:c5:bd:db:8d:20:e3:14:7b:03:
88:ac:cd:a0:f2:92:8e:b0:ae:a8:49:16:89:ef:65:
f5:6b:48:05:02:02:1a:63:ff:3f:a6:89:e4:05:b9:
cb:75:da:64:2e:94:25:67:81:85:fa:b2:fc:0e:10:
64:8f:ad:87:6f:15:92:55:29:3b:e9:35:b1:e7:d6:
2b:40:de:2a:bb:a2:60:78:dd:02:66:84:e4:20:34:
cf:bb:58:ec:d6:49:b8:91:a2:11:06:bc:56:47:88:
f8:f9:96:0e:51:d0:60:e7:fb:2c:78:ae:fa:70:2f:
30:43:f1:cf:39:d7:25:b3:83:ac:8f:d6:81:a4:f4:
ec:48:10:91:1b:35:62:76:e4:89:d1:29:2b:58:d9:
c8:f3:63:77:df:30:80:93:61:f1:ec:7e:ff:94:75:
68:8b:3e:62:84:4b:fb:db:19:88:f1:a8:e9:67:32:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:79:1C:71:25:03:71:DC:3C:6D:B6:B2:F0:E5:DA:03:96:1D:5D
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/oPR5HHElA3HcPG22svDl2gOWHV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.237.0-185.126.239.255
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:6::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::/47
Signature Algorithm: sha256WithRSAEncryption
1c:5b:3d:eb:c2:15:60:2f:4c:ba:46:ff:c5:e0:fd:b0:b7:6a:
50:b6:66:d2:e9:b5:63:09:5c:68:90:73:94:4d:ed:d8:b2:1a:
20:25:68:6f:f9:e9:3a:3a:2f:d2:51:fb:7b:61:21:95:7f:42:
d1:17:e7:2d:59:48:a3:a9:bd:9d:6e:a1:0a:f1:79:fb:67:e3:
3a:82:40:0c:63:8c:20:8c:4a:61:64:e6:8d:65:84:17:7d:04:
04:ad:29:69:ef:1f:8f:05:51:8d:3a:61:98:37:1d:85:57:bf:
ed:52:0e:fa:af:3b:cb:aa:22:ed:69:5d:61:12:3f:69:84:f2:
1b:89:8d:0a:6f:a1:14:b4:e2:3a:dc:b6:90:3e:47:b5:37:51:
3b:9d:49:41:f2:23:c8:68:30:f6:fc:cb:ff:1e:4c:0d:79:1e:
1f:be:d0:0a:26:fb:ff:38:b9:30:df:9e:e9:88:90:80:11:05:
da:f9:7a:0c:a6:94:b1:79:02:67:9f:37:36:cc:11:d6:e2:62:
30:c5:62:bc:af:a8:36:08:e0:c0:06:f8:8a:ac:89:42:0d:4d:
9a:c6:82:8a:9d:d6:73:1f:46:36:c9:ca:0e:48:62:45:cd:72:
98:c0:ed:bc:34:c9:f4:c8:ab:1e:93:c8:19:3c:37:89:ec:86:
6e:fb:d6:5f
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgISAZQksmfjiu+b1ugNpJcnzu4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjUwMTAyMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGY0NzkxYzcxMjUwMzcxZGMzYzZkYjZiMmYwZTVkYTAzOTYxZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvdg2i0Uqmpxl9kGqCyn1O8ed1b
w24ujCbkZnG0xv/3rYI3F/SvNR+o/J2gT58wp2a8FdCSmDOLh90L4p0vb2pOb4C+
NmemGCAqLhs97pjFvduNIOMUewOIrM2g8pKOsK6oSRaJ72X1a0gFAgIaY/8/ponk
BbnLddpkLpQlZ4GF+rL8DhBkj62HbxWSVSk76TWx59YrQN4qu6JgeN0CZoTkIDTP
u1js1km4kaIRBrxWR4j4+ZYOUdBg5/sseK76cC8wQ/HPOdcls4Osj9aBpPTsSBCR
GzViduSJ0SkrWNnI82N33zCAk2Hx7H7/lHVoiz5ihEv72xmI8ajpZzI6SQIDAQAB
o4IDDjCCAwowHQYDVR0OBBYEFKD0eRxxJQNx3DxttrLw5doDlh1dMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvb1BSNUhIRWxBM0hjUEcyMnN2RGwyZ09XSFYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTA4BAIAATAyAwQC
LhCAAwQBbWiYAwQAbWibAwQCk04AMAwDBAC5fu0DBAS5fuADBAG51RQDBAC51Rcw
gdAEAgACMIHJAwcAKhEIQAABAwcAKhEIQAADMBIDBwEqEQhAAAYDBwAqEQhAAAgw
EgMHBCoRCEAAEAMHACoRCEAAFDASAwcAKhEIQAAXAwcBKhEIQAAYMBIDBwUqEQhA
ACADBwAqEQhAACYDBwAqEQhAACgDBwAqEQhAADADBwAqEQhAADMDBwEqEQhAAEAw
EgMHACoRCEAARwMHACoRCEAASAMHACoRCEAAVAMHACoRCEAAVzASAwcFKhEIQABg
AwcBKhEIQABoAwcBKhEIQABwMA0GCSqGSIb3DQEBCwUAA4IBAQAcWz3rwhVgL0y6
Rv/F4P2wt2pQtmbS6bVjCVxokHOUTe3YshogJWhv+ek6Oi/SUft7YSGVf0LRF+ct
WUijqb2dbqEK8Xn7Z+M6gkAMY4wgjEphZOaNZYQXfQQErSlp7x+PBVGNOmGYNx2F
V7/tUg76rzvLqiLtaV1hEj9phPIbiY0Kb6EUtOI63LaQPke1N1E7nUlB8iPIaDD2
/Mv/HkwNeR4fvtAKJvv/OLkw357piJCAEQXa+XoMppSxeQJnnzc2zBHW4mIwxWK8
r6g2CODABviKrIlCDU2axoKKndZzH0Y2ycoOSGJFzXKYwO28NMn0yKsek8gZPDeJ
7IZu+9Zf
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:43:16 2025 by rpki-client