Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_lrew05emUY90pkqqFNXlG7EjnU.roa
File: _lrew05emUY90pkqqFNXlG7EjnU.roa (raw, json)
Hash identifier: yNGDsYSOJyPjdIxjlePfKINErIrkvytxeS9EVT4zvM4=
Subject key identifier: FE:5A:DE:C3:4E:5E:99:46:3D:D2:99:2A:A8:53:57:94:6E:C4:8E:75
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 01845250AEF236CEA582B2228647F22CD8B6
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_lrew05emUY90pkqqFNXlG7EjnU.roa
Signing time: Mon 07 Nov 2022 13:38:50 +0000
ROA not before: Mon 07 Nov 2022 13:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15517
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.134.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.144.0/20 maxlen: 20
80.238.140.0/22 maxlen: 22
80.238.160.0/20 maxlen: 20
45.85.92.0/22 maxlen: 22
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.128.0/17 maxlen: 17
80.238.130.0/24 maxlen: 24
62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.143.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.158.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
94.78.2.0/24 maxlen: 24
2a01:330::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:50:ae:f2:36:ce:a5:82:b2:22:86:47:f2:2c:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Nov 7 13:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe5adec34e5e99463dd2992aa85357946ec48e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:23:22:87:53:61:6f:ed:23:15:7a:a5:3b:
f5:dc:ab:67:34:75:74:71:eb:03:7b:bb:00:26:0d:
cf:6c:2f:ce:99:fc:22:5c:11:cb:41:90:ba:8c:85:
86:40:b5:6d:5a:b9:cc:b5:3f:bc:2f:e4:18:31:6c:
7c:47:98:fa:f3:1a:ec:67:53:f8:f0:07:33:e8:04:
c0:ad:be:9a:dc:fc:5e:a0:95:f9:30:9b:8e:c6:7f:
5a:a4:d5:fa:cd:d7:83:e3:5b:cf:7d:43:9e:e8:d4:
e2:57:a0:2c:c5:ad:f1:11:3d:a4:f6:f9:ee:4f:1a:
07:9c:b3:29:87:b7:2c:81:64:18:46:56:78:98:87:
9f:01:4e:4c:98:aa:64:c2:cf:c7:e1:9a:0f:e6:e8:
eb:a1:8b:2c:1e:53:c5:ee:67:73:70:2d:ef:e1:18:
9a:58:e2:29:22:63:22:73:dd:49:26:a0:1a:b8:4c:
29:f7:d4:5d:38:a6:6a:5f:4a:af:f9:c3:8f:dd:c9:
af:5c:24:97:d5:e4:e2:a8:c9:f1:74:7a:7f:5b:56:
0f:36:a7:01:8f:70:10:b5:87:7b:bc:99:5c:ab:57:
6c:9a:f7:40:d1:dc:45:91:37:0c:bb:3f:b4:2c:cd:
53:ef:a2:ae:f2:4e:a7:d3:37:88:4f:09:7f:be:20:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:DE:C3:4E:5E:99:46:3D:D2:99:2A:A8:53:57:94:6E:C4:8E:75
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_lrew05emUY90pkqqFNXlG7EjnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/22
62.65.128.0/19
80.238.128.0/17
94.78.0.0/18
IPv6:
2a01:330::/32
Signature Algorithm: sha256WithRSAEncryption
4a:ea:af:60:41:2e:69:69:f9:5f:0b:be:41:92:4c:df:d3:84:
98:ea:f6:57:41:7d:18:a4:d7:54:59:67:ec:2f:f7:78:dc:65:
95:b3:6a:23:86:3c:65:4e:3b:c4:e2:bd:86:e1:43:5d:7a:4b:
15:2c:8b:c6:b8:de:e2:40:38:17:b6:23:46:21:a7:ff:e4:ba:
b4:04:6e:3e:ea:d8:a6:7a:ad:a9:5f:4f:4b:c2:49:75:b5:39:
87:77:a1:2e:01:48:69:99:bd:ba:45:de:21:53:9f:1b:8e:85:
8d:95:5d:da:13:02:82:a4:24:c9:8f:bf:e9:a9:df:c4:35:b0:
8a:4a:59:b3:c6:52:3f:33:9e:f5:cf:55:8c:7a:d4:e4:f0:b5:
70:4c:33:41:31:12:18:26:a4:2f:a1:d5:a7:d6:a5:d2:b5:60:
24:af:41:ac:c0:ca:dd:9f:e7:5b:a8:53:81:9a:85:f6:41:89:
05:69:22:6b:2c:1c:98:a9:4a:36:08:32:5d:0e:56:62:bc:ad:
ab:5d:c2:ce:f0:29:29:ec:e5:cb:fb:59:57:67:10:8c:18:85:
22:a8:9a:25:60:59:64:4d:4c:6f:e8:01:27:d0:e9:51:c1:23:
59:09:b1:a3:18:27:b4:62:e5:98:8f:98:60:e5:72:fb:cf:94:
3f:c0:99:49
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYRSUK7yNs6lgrIihkfyLNi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjYyYjNjZmE4YjkwNTkwNjhjMjlkNDZiOTkyNjNiYTJk
ZTUwYzEwHhcNMjIxMTA3MTMzODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTVhZGVjMzRlNWU5OTQ2M2RkMjk5MmFhODUzNTc5NDZlYzQ4ZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv8jIodTYW/tIxV6pTv13KtnNHV0
cesDe7sAJg3PbC/OmfwiXBHLQZC6jIWGQLVtWrnMtT+8L+QYMWx8R5j68xrsZ1P4
8Acz6ATArb6a3PxeoJX5MJuOxn9apNX6zdeD41vPfUOe6NTiV6Asxa3xET2k9vnu
TxoHnLMph7csgWQYRlZ4mIefAU5MmKpkws/H4ZoP5ujroYssHlPF7mdzcC3v4Ria
WOIpImMic91JJqAauEwp99RdOKZqX0qv+cOP3cmvXCSX1eTiqMnxdHp/W1YPNqcB
j3AQtYd7vJlcq1dsmvdA0dxFkTcMuz+0LM1T76Ku8k6n0zeITwl/viD5+QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFP5a3sNOXplGPdKZKqhTV5RuxI51MB8GA1UdIwQY
MBaAFJ9mKzz6i5BZBowp1GuZJjui3lDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTct
NmExZjk3ZmY4ZDM0LzEvX2xyZXcwNWVtVVk5MHBrcXFGTlhsRzdFam5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTctNmExZjk3ZmY4ZDM0
LzEvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVVcAwQF
PkGAAwQHUO6AAwQGXk4AMA0EAgACMAcDBQAqAQMwMA0GCSqGSIb3DQEBCwUAA4IB
AQBK6q9gQS5paflfC75Bkkzf04SY6vZXQX0YpNdUWWfsL/d43GWVs2ojhjxlTjvE
4r2G4UNdeksVLIvGuN7iQDgXtiNGIaf/5Lq0BG4+6timeq2pX09Lwkl1tTmHd6Eu
AUhpmb26Rd4hU58bjoWNlV3aEwKCpCTJj7/pqd/ENbCKSlmzxlI/M571z1WMetTk
8LVwTDNBMRIYJqQvodWn1qXStWAkr0GswMrdn+dbqFOBmoX2QYkFaSJrLByYqUo2
CDJdDlZivK2rXcLO8Ckp7OXL+1lXZxCMGIUiqJolYFlkTUxv6AEn0OlRwSNZCbGj
GCe0YuWYj5hg5XL7z5Q/wJlJ
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:43 2025 by rpki-client