Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4o5mbRLHOggiKBZ_G7MGFMdiWsA.roa
File: 4o5mbRLHOggiKBZ_G7MGFMdiWsA.roa (raw, json)
Hash identifier: Zgi9JNXqe2g5XErHztIJk2QNtRBeJh0LrhEGoKKTmzQ=
Subject key identifier: E2:8E:66:6D:12:C7:3A:08:22:28:16:7F:1B:B3:06:14:C7:62:5A:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428250A2BF5D380C34E1BC78B45EA08E7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4o5mbRLHOggiKBZ_G7MGFMdiWsA.roa
Signing time: Thu 02 Jan 2025 17:51:43 +0000
ROA not before: Thu 02 Jan 2025 17:51:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 62.76.229.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:0a:2b:f5:d3:80:c3:4e:1b:c7:8b:45:ea:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28e666d12c73a082228167f1bb30614c7625ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:7a:2a:32:c6:f9:16:f6:79:ee:85:5c:37:
e7:77:3f:11:11:3b:d8:3f:71:3d:19:6d:c1:93:c0:
69:bd:18:36:7c:9e:09:b6:01:1e:a0:b9:5a:70:08:
86:da:6b:95:76:da:15:d7:03:4f:c5:9f:12:10:18:
ae:94:15:ce:80:da:bf:68:b5:90:61:2f:59:1b:af:
30:62:23:6f:26:fa:8d:a3:ba:3b:c9:20:10:55:af:
00:27:27:aa:34:e6:80:6c:ef:4a:a9:f8:20:6a:3d:
09:e0:49:75:b4:e9:89:ca:d8:9c:b4:ea:45:0e:a1:
18:5d:b4:9c:2b:9a:37:b4:31:91:1d:83:c1:15:bc:
11:25:51:ea:d4:ab:25:50:0a:3a:fe:3f:e5:bf:22:
13:44:5d:fd:37:b7:00:a7:be:a0:5a:c4:0d:f9:f3:
1a:f2:98:08:78:27:ba:33:71:8f:06:eb:9c:6f:27:
6b:04:c1:a7:3b:3b:d4:42:5c:5c:f2:f9:e6:c6:4b:
ce:73:5e:23:99:18:cb:e8:7e:17:9b:7e:3e:e6:28:
1b:73:7f:24:e3:12:0d:44:20:e1:65:04:a9:36:e9:
cd:ac:e1:3d:66:fc:66:e2:17:d0:c8:a6:c0:b5:b4:
01:85:a6:da:44:28:1b:6e:85:d3:3d:a1:50:e7:aa:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:66:6D:12:C7:3A:08:22:28:16:7F:1B:B3:06:14:C7:62:5A:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4o5mbRLHOggiKBZ_G7MGFMdiWsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
194.87.137.0/24
194.87.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ff:ed:41:2d:d5:f6:4a:54:c3:3f:99:87:6e:34:c0:26:27:
8b:ab:1e:ea:86:27:f2:aa:36:75:2a:99:bc:53:20:93:bd:4c:
52:e0:2d:cf:70:a4:76:6c:02:65:f1:90:e9:0a:1c:83:ba:a5:
c7:1f:19:97:60:d3:14:db:b4:a9:43:78:22:42:3b:a1:f9:7c:
5a:0c:c2:b1:18:c6:d3:b0:35:dc:7b:43:1c:e1:eb:75:d2:6b:
28:de:f3:cd:83:86:ae:19:1d:29:1a:c5:85:bf:73:1c:12:5f:
a7:07:16:bb:72:23:23:68:d7:57:5b:ee:8a:bc:11:63:e4:2b:
eb:63:95:ef:a6:94:7f:dd:fe:2b:bb:b4:6a:f4:fa:7b:04:f7:
b7:3b:69:26:b4:ba:b9:43:0d:f3:b1:87:c4:8d:31:7b:f9:a0:
64:4c:eb:70:70:27:81:22:8e:22:31:62:8d:35:8e:8a:19:cc:
4b:7f:7b:f7:e5:30:d8:8e:8e:6b:7e:8b:1b:ee:1e:27:46:cc:
3b:3a:ae:58:4d:52:3c:78:aa:f3:ab:63:d5:22:59:83:96:20:
54:54:ca:3a:8e:86:4a:ad:d1:91:75:7b:24:55:21:5b:ea:d3:
d8:21:08:f9:b8:32:cb:30:cf:87:c8:9c:1e:0f:dd:0a:e2:cb:
50:31:a2:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJQor9dOAw04bx4tF6gjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjhlNjY2ZDEyYzczYTA4MjIyODE2N2YxYmIzMDYxNGM3NjI1YWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniZ6KjLG+Rb2ee6FXDfndz8RETvY
P3E9GW3Bk8BpvRg2fJ4JtgEeoLlacAiG2muVdtoV1wNPxZ8SEBiulBXOgNq/aLWQ
YS9ZG68wYiNvJvqNo7o7ySAQVa8AJyeqNOaAbO9Kqfggaj0J4El1tOmJytictOpF
DqEYXbScK5o3tDGRHYPBFbwRJVHq1KslUAo6/j/lvyITRF39N7cAp76gWsQN+fMa
8pgIeCe6M3GPBuucbydrBMGnOzvUQlxc8vnmxkvOc14jmRjL6H4Xm34+5igbc38k
4xINRCDhZQSpNunNrOE9Zvxm4hfQyKbAtbQBhabaRCgbboXTPaFQ56p5yQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOKOZm0SxzoIIigWfxuzBhTHYlrAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNG81bWJSTEhPZ2dpS0JaX0c3TUdGTWRpV3NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkzlAwQA
wleJAwQAwlfUMA0GCSqGSIb3DQEBCwUAA4IBAQA6/+1BLdX2SlTDP5mHbjTAJieL
qx7qhifyqjZ1Kpm8UyCTvUxS4C3PcKR2bAJl8ZDpChyDuqXHHxmXYNMU27SpQ3gi
Qjuh+XxaDMKxGMbTsDXce0Mc4et10mso3vPNg4auGR0pGsWFv3McEl+nBxa7ciMj
aNdXW+6KvBFj5CvrY5XvppR/3f4ru7Rq9Pp7BPe3O2kmtLq5Qw3zsYfEjTF7+aBk
TOtwcCeBIo4iMWKNNY6KGcxLf3v35TDYjo5rfosb7h4nRsw7Oq5YTVI8eKrzq2PV
IlmDliBUVMo6joZKrdGRdXskVSFb6tPYIQj5uDLLMM+HyJweD90K4stQMaI4
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:12:27 2025 by rpki-client