Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/f-DcQLb0PDtaym_KjuQwlP00X-s.roa
File: f-DcQLb0PDtaym_KjuQwlP00X-s.roa (raw, json)
Hash identifier: hDlDwKpaOez2hA8C+Hya4wz3vr/e5SM/iBiUxhtuCeE=
Subject key identifier: 7F:E0:DC:40:B6:F4:3C:3B:5A:CA:6F:CA:8E:E4:30:94:FD:34:5F:EB
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191EC4324947ED8DF27106349B05FCBCC96
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/f-DcQLb0PDtaym_KjuQwlP00X-s.roa
Signing time: Fri 13 Sep 2024 16:41:48 +0000
ROA not before: Fri 13 Sep 2024 16:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.164.224.0/20 maxlen: 20
62.164.240.0/20 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
88.135.96.0/20 maxlen: 24
89.34.171.0/24 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/21 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 24
195.133.202.0/23 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
212.32.96.0/20 maxlen: 24
212.32.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:43:24:94:7e:d8:df:27:10:63:49:b0:5f:cb:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 13 16:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe0dc40b6f43c3b5aca6fca8ee43094fd345feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:f5:98:fb:55:16:d3:2f:ca:21:f3:a9:17:
70:29:a1:70:5a:74:c9:3a:e8:75:28:21:17:98:ba:
21:88:d5:0a:ac:64:76:98:f1:9d:a1:4c:d9:6d:59:
3e:86:af:58:ef:c4:23:bd:58:38:71:8a:b2:e5:19:
b1:5f:e6:a4:29:fe:34:06:d6:7b:6a:7b:51:8b:c8:
cb:61:f6:7b:4c:42:91:ab:13:4e:c8:92:29:10:1e:
47:b4:46:f8:ef:12:dc:2e:46:f3:60:79:af:02:7b:
35:43:5d:50:d0:90:cf:9c:b7:c6:fc:52:1e:ad:74:
44:23:2e:14:b0:cb:75:77:a7:43:88:35:b3:36:2d:
b8:63:0f:af:25:5f:cf:5a:1e:f3:1f:cb:80:a1:10:
d6:5d:b1:fb:bf:27:9e:a7:d5:61:a7:4b:28:0c:be:
93:84:5f:f6:08:80:69:c8:9d:e2:f1:f6:72:40:56:
f0:e3:8f:12:d9:aa:0e:8b:4a:c7:0a:13:bb:a3:bd:
c0:50:15:1d:b1:65:d6:0c:36:31:c7:24:81:ab:de:
7d:fc:00:53:70:84:91:f1:69:5c:2c:fb:70:cc:2d:
0a:d2:33:4c:1c:70:4d:cb:72:d9:44:ff:ad:81:4d:
74:c5:1f:a4:49:a1:08:70:d5:c4:f8:f1:1c:6c:fd:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:DC:40:B6:F4:3C:3B:5A:CA:6F:CA:8E:E4:30:94:FD:34:5F:EB
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/f-DcQLb0PDtaym_KjuQwlP00X-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/19
66.9.96.0/20
66.117.8.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
88.135.96.0/20
89.34.171.0/24
93.119.184.0/21
94.26.110.0/23
94.101.103.0/24
95.178.8.0/21
116.50.16.0/21
121.127.56.0/21
176.222.48.0/22
192.200.192.0/19
195.133.202.0/23
198.145.112.0/22
205.134.244.0/22
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
53:5e:61:fc:6d:5d:cb:bb:ba:d2:49:d3:b6:dd:15:a5:02:55:
5d:ef:b5:c5:f0:a7:73:77:9a:aa:0f:a4:06:f8:32:04:8d:67:
33:7f:09:ce:83:ce:58:fe:d7:71:59:67:1b:b1:31:9b:f6:8c:
98:f7:cc:80:b6:2d:d5:98:f4:9b:a0:ec:b9:92:3d:5c:02:5d:
de:de:03:74:cc:c1:a0:fc:aa:64:e2:9e:9c:18:1f:26:87:25:
b4:1c:53:c1:70:37:4b:45:7f:bb:e2:96:d3:71:a3:0d:76:16:
ae:13:5e:68:ee:db:bc:be:23:2e:5e:c2:d0:67:50:4b:ab:8a:
78:aa:b6:a6:c2:cc:3a:3b:6e:3d:43:c2:5b:c2:a0:15:26:fd:
57:3f:42:af:75:78:a7:33:62:de:7c:13:20:12:26:f2:65:1e:
1d:83:65:06:15:07:85:ed:68:2a:73:b7:e8:17:9f:08:2b:28:
60:67:2e:a9:c5:1a:3b:f2:bd:ce:03:62:17:ad:00:c6:40:ff:
e3:97:80:fa:68:dc:48:de:39:3e:ed:c6:b9:10:71:65:e0:ab:
08:a2:7c:b3:e9:94:ff:7f:54:9e:15:89:86:86:f5:02:14:a0:
7f:e2:91:c8:2a:2e:10:e5:c8:60:1f:26:14:20:74:c1:ea:77:
ae:2e:60:7e
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZHsQySUftjfJxBjSbBfy8yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjQwOTEzMTY0MTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmUwZGM0MGI2ZjQzYzNiNWFjYTZmY2E4ZWU0MzA5NGZkMzQ1ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV71mPtVFtMvyiHzqRdwKaFwWnTJ
Ouh1KCEXmLohiNUKrGR2mPGdoUzZbVk+hq9Y78QjvVg4cYqy5RmxX+akKf40BtZ7
antRi8jLYfZ7TEKRqxNOyJIpEB5HtEb47xLcLkbzYHmvAns1Q11Q0JDPnLfG/FIe
rXREIy4UsMt1d6dDiDWzNi24Yw+vJV/PWh7zH8uAoRDWXbH7vyeep9Vhp0soDL6T
hF/2CIBpyJ3i8fZyQFbw448S2aoOi0rHChO7o73AUBUdsWXWDDYxxySBq959/ABT
cISR8WlcLPtwzC0K0jNMHHBNy3LZRP+tgU10xR+kSaEIcNXE+PEcbP1tzQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFH/g3EC29Dw7Wspvyo7kMJT9NF/rMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvZi1EY1FMYjBQRHRheW1fS2p1UXdsUDAwWC1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAU+
pOADBARCCWADBAJCdQgwDAMEBk3fwAMEAU3fyAMEAU+LQAMEA1OOyAMEBFiHYAME
AFkiqwMEA113uAMEAV4abgMEAF5lZwMEA1+yCAMEA3QyEAMEA3l/OAMEArDeMAME
BcDIwAMEAcOFygMEAsaRcAMEAs2G9AMEBdQgYDANBgkqhkiG9w0BAQsFAAOCAQEA
U15h/G1dy7u60knTtt0VpQJVXe+1xfCnc3eaqg+kBvgyBI1nM38JzoPOWP7XcVln
G7Exm/aMmPfMgLYt1Zj0m6DsuZI9XAJd3t4DdMzBoPyqZOKenBgfJocltBxTwXA3
S0V/u+KW03GjDXYWrhNeaO7bvL4jLl7C0GdQS6uKeKq2psLMOjtuPUPCW8KgFSb9
Vz9Cr3V4pzNi3nwTIBIm8mUeHYNlBhUHhe1oKnO36BefCCsoYGcuqcUaO/K9zgNi
F60AxkD/45eA+mjcSN45Pu3GuRBxZeCrCKJ8s+mU/39UnhWJhob1AhSgf+KRyCou
EOXIYB8mFCB0wep3ri5gfg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:34 2025 by rpki-client