Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/A1_1QyYo4OPLF2mM8vnft8JtLtc.roa
File: A1_1QyYo4OPLF2mM8vnft8JtLtc.roa (raw, json)
Hash identifier: V+vSd3BIXji33dDHZEVBEX+kUtQlwfYNKdKcgYKBnqk=
Subject key identifier: 03:5F:F5:43:26:28:E0:E3:CB:17:69:8C:F2:F9:DF:B7:C2:6D:2E:D7
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0194D7B6761C39192F22E15F593DC1CF8AD0
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/A1_1QyYo4OPLF2mM8vnft8JtLtc.roa
Signing time: Wed 05 Feb 2025 20:04:06 +0000
ROA not before: Wed 05 Feb 2025 20:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 43.239.88.0/22 maxlen: 22
45.43.88.0/22 maxlen: 22
91.210.64.0/22 maxlen: 22
103.206.232.0/22 maxlen: 22
107.181.156.0/22 maxlen: 22
155.254.40.0/22 maxlen: 22
155.254.44.0/22 maxlen: 22
155.254.50.0/23 maxlen: 23
155.254.52.0/22 maxlen: 22
155.254.56.0/22 maxlen: 22
185.135.212.0/22 maxlen: 22
198.105.96.0/22 maxlen: 22
198.105.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:b6:76:1c:39:19:2f:22:e1:5f:59:3d:c1:cf:8a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 5 20:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=035ff5432628e0e3cb17698cf2f9dfb7c26d2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:95:83:86:0f:5c:5e:11:63:5b:13:e9:7b:
ed:e2:0a:d6:17:57:3d:89:76:c2:e9:9a:51:59:5a:
de:3b:5b:1a:04:e7:93:55:d3:12:b1:17:1c:7e:02:
91:7e:5b:f1:61:8e:97:e5:2d:a7:5f:91:36:f0:56:
ef:13:46:4c:e5:7a:20:97:09:2a:2b:14:42:4c:94:
48:17:9a:ad:0d:22:8f:ea:75:3c:55:64:8f:c8:cb:
28:e6:03:6b:2c:62:9f:9f:25:e4:d8:9a:1f:58:cf:
c0:51:21:e7:36:f3:49:ce:b4:fd:a6:7e:a3:f3:5a:
01:50:64:98:14:02:8b:e8:af:a8:00:0d:d1:fd:0c:
11:5c:93:19:07:e6:46:40:57:7e:5b:79:33:2f:09:
64:1d:4d:1b:ef:42:8b:00:96:1e:28:86:0e:c3:2e:
15:1c:92:29:4b:44:95:85:55:b7:03:07:f3:d0:7f:
15:9c:c0:0f:a1:57:76:37:85:2a:04:de:a9:88:72:
08:c9:a0:7d:4f:b3:53:ca:a7:30:c5:e5:a9:99:b6:
c3:3d:32:a9:ee:d0:81:7d:61:75:c7:12:31:fd:62:
5c:28:4b:f7:42:38:d3:9d:52:2f:9c:88:cd:10:41:
0b:81:ae:67:2a:b6:34:59:dc:f2:45:86:f6:07:c0:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:F5:43:26:28:E0:E3:CB:17:69:8C:F2:F9:DF:B7:C2:6D:2E:D7
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/A1_1QyYo4OPLF2mM8vnft8JtLtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.239.88.0/22
45.43.88.0/22
91.210.64.0/22
103.206.232.0/22
107.181.156.0/22
155.254.40.0/21
155.254.50.0-155.254.59.255
185.135.212.0/22
198.105.96.0/22
198.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
14:9d:fe:9b:f6:7b:0d:5f:53:2c:0a:a5:8d:ea:f7:a5:e7:b4:
e1:0a:12:d6:e0:fc:87:67:38:4c:d5:7b:3f:5b:cd:c2:7b:0b:
b4:76:2a:27:ff:cb:5a:5a:03:5b:dc:75:1a:79:dd:3d:01:04:
64:ce:ec:b4:6f:90:6a:e6:06:9c:ae:a1:93:f0:47:9c:57:b9:
25:81:ed:d8:b4:f5:45:bd:b2:9b:a4:b0:ff:95:d3:7c:23:39:
20:ed:08:71:b4:c6:32:e2:fa:a9:51:32:73:85:7d:de:4d:22:
fa:a0:94:74:b1:f8:74:8c:b2:6d:7d:3e:38:77:1a:0e:bb:12:
fa:61:2a:09:7c:77:5e:55:aa:de:d7:e3:d0:05:c1:43:24:18:
6c:ce:ce:1b:99:0b:7d:61:af:f1:55:36:9d:8a:9d:0f:dd:bf:
82:a0:54:c8:9e:64:f5:e5:66:86:98:92:09:ba:25:55:c8:0a:
9f:4b:24:a7:e6:de:18:ff:a6:91:49:90:ef:7b:9b:0f:29:37:
a7:e2:a1:ac:1e:4b:00:df:39:48:b9:3c:d4:f9:2a:e0:72:eb:
be:4c:ef:cf:0f:d5:b2:88:f8:dd:1d:fd:c2:a8:45:28:19:5d:
8d:44:df:de:7c:0b:58:f9:f1:90:8d:ee:bd:84:c2:b8:a1:61:
fa:63:ea:a9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZTXtnYcORkvIuFfWT3Bz4rQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjUwMjA1MjAwNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzVmZjU0MzI2MjhlMGUzY2IxNzY5OGNmMmY5ZGZiN2MyNmQyZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0baVg4YPXF4RY1sT6Xvt4grWF1c9
iXbC6ZpRWVreO1saBOeTVdMSsRccfgKRflvxYY6X5S2nX5E28FbvE0ZM5Xoglwkq
KxRCTJRIF5qtDSKP6nU8VWSPyMso5gNrLGKfnyXk2JofWM/AUSHnNvNJzrT9pn6j
81oBUGSYFAKL6K+oAA3R/QwRXJMZB+ZGQFd+W3kzLwlkHU0b70KLAJYeKIYOwy4V
HJIpS0SVhVW3Awfz0H8VnMAPoVd2N4UqBN6piHIIyaB9T7NTyqcwxeWpmbbDPTKp
7tCBfWF1xxIx/WJcKEv3QjjTnVIvnIjNEEELga5nKrY0WdzyRYb2B8Dg3wIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFANf9UMmKODjyxdpjPL537fCbS7XMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvQTFfMVF5WW80T1BMRjJtTTh2bmZ0OEp0THRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCK+9YAwQC
LStYAwQCW9JAAwQCZ87oAwQCa7WcAwQDm/4oMAwDBAGb/jIDBAKb/jgDBAK5h9QD
BALGaWADBALGaWgwDQYJKoZIhvcNAQELBQADggEBABSd/pv2ew1fUywKpY3q96Xn
tOEKEtbg/IdnOEzVez9bzcJ7C7R2Kif/y1paA1vcdRp53T0BBGTO7LRvkGrmBpyu
oZPwR5xXuSWB7di09UW9spuksP+V03wjOSDtCHG0xjLi+qlRMnOFfd5NIvqglHSx
+HSMsm19Pjh3Gg67EvphKgl8d15Vqt7X49AFwUMkGGzOzhuZC31hr/FVNp2KnQ/d
v4KgVMieZPXlZoaYkgm6JVXICp9LJKfm3hj/ppFJkO97mw8pN6fioaweSwDfOUi5
PNT5KuBy675M788P1bKI+N0d/cKoRSgZXY1E3958C1j58ZCN7r2EwrihYfpj6qk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:37 2025 by rpki-client