Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETGjl40wEw44Pq5u8fbSgTZ6lSE.roa
File: ETGjl40wEw44Pq5u8fbSgTZ6lSE.roa (raw, json)
Hash identifier: NlxkODS0HB5OlFntzNJBOQMudGmrCISvksPGjHu6muY=
Subject key identifier: 11:31:A3:97:8D:30:13:0E:38:3E:AE:6E:F1:F6:D2:81:36:7A:95:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AB22D1FCE465B69E4EC59D5468AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETGjl40wEw44Pq5u8fbSgTZ6lSE.roa
Signing time: Thu 02 Jan 2025 17:51:19 +0000
ROA not before: Thu 02 Jan 2025 17:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201749
IP address blocks: 45.139.105.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
83.171.204.0/24 maxlen: 24
83.171.205.0/24 maxlen: 24
83.171.206.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ab:22:d1:fc:e4:65:b6:9e:4e:c5:9d:54:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1131a3978d30130e383eae6ef1f6d281367a9521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:c8:e6:ce:a6:95:39:aa:e7:b7:de:fd:b0:
dd:5f:1f:9a:55:8a:f1:ea:df:b4:e2:9b:26:4d:49:
03:0c:c8:44:04:97:20:98:df:bf:6b:22:a2:54:c3:
8f:fa:31:80:6a:f2:30:54:e7:5c:92:2a:c0:7f:54:
1b:55:96:ba:6d:70:10:43:dc:a9:89:53:b7:76:fc:
ca:09:8a:56:99:15:e0:4f:a6:55:d0:ca:cc:d9:24:
ca:c5:5b:db:2a:9f:09:a3:2a:5b:86:b5:1e:3b:f6:
ca:81:9b:3b:d5:f8:de:46:95:a7:57:8d:5f:07:75:
88:29:34:71:de:2e:8b:89:08:9c:20:2c:35:26:04:
06:6d:61:3f:30:57:8d:69:47:90:46:03:81:3f:d9:
ec:2f:d8:5b:8c:11:07:63:f9:df:48:56:88:da:33:
cf:e3:32:b2:7f:38:44:04:e9:e4:63:e3:b2:e6:33:
5f:9c:cf:5c:25:3a:29:96:46:2a:8c:cf:7a:13:61:
fe:b4:2e:23:77:b5:8f:53:59:6c:4f:21:82:42:66:
d1:b5:a2:e4:4e:86:c9:29:96:5e:da:36:db:72:78:
b8:79:a4:8d:fb:50:0e:7a:aa:64:77:44:84:9f:d3:
62:2c:08:1a:bd:d1:4b:55:cb:3c:5a:d9:ac:a8:10:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:A3:97:8D:30:13:0E:38:3E:AE:6E:F1:F6:D2:81:36:7A:95:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETGjl40wEw44Pq5u8fbSgTZ6lSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.105.0/24
80.76.50.0/24
83.171.204.0/22
87.120.87.0/24
176.125.255.0/24
194.49.87.0/24
194.55.226.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fa:0e:77:83:ae:5b:6b:11:e4:2f:b0:cf:f2:45:cb:64:03:
29:29:ee:d8:98:00:40:ee:3c:3c:4d:df:53:32:b9:c0:c4:d9:
66:ff:cb:23:9c:ec:58:1f:5e:5f:bc:1c:9e:3e:15:0b:5d:61:
5e:e2:3d:2b:ff:4c:50:8a:d9:85:f7:e4:cb:3a:bb:e2:90:3f:
b1:8e:67:bd:3f:eb:ea:07:83:80:d2:51:d4:9f:90:77:1b:2b:
db:ee:41:78:24:fa:17:0a:68:33:71:e3:80:f5:78:b3:14:02:
57:08:20:4b:b1:cc:a5:83:60:a6:b2:1b:35:84:ad:03:db:ea:
bd:30:a3:cd:e8:82:ac:a8:cc:21:79:8a:9b:15:dc:9d:c3:f3:
4c:53:26:0f:dc:27:07:07:09:b3:6a:2d:ae:43:02:40:d7:22:
4d:28:01:c7:90:ad:f0:06:70:74:50:63:20:f4:34:41:f0:a8:
ea:62:4c:40:66:2d:b6:e5:53:03:cc:9d:c1:21:3e:84:e5:8a:
54:6e:58:99:4e:86:0b:4a:4d:01:32:7e:5a:8f:58:ab:f2:58:
ef:21:46:15:1e:aa:bc:f7:f8:6a:f0:30:37:09:2a:3f:85:33:
34:e2:74:e1:96:17:8a:77:79:f5:1c:11:d4:5f:a9:09:5e:16:
db:fc:9b:b7
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQoJKsi0fzkZbaeTsWdVGirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTMxYTM5NzhkMzAxMzBlMzgzZWFlNmVmMWY2ZDI4MTM2N2E5NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyazI5s6mlTmq57fe/bDdXx+aVYrx
6t+04psmTUkDDMhEBJcgmN+/ayKiVMOP+jGAavIwVOdckirAf1QbVZa6bXAQQ9yp
iVO3dvzKCYpWmRXgT6ZV0MrM2STKxVvbKp8JoypbhrUeO/bKgZs71fjeRpWnV41f
B3WIKTRx3i6LiQicICw1JgQGbWE/MFeNaUeQRgOBP9nsL9hbjBEHY/nfSFaI2jPP
4zKyfzhEBOnkY+Oy5jNfnM9cJToplkYqjM96E2H+tC4jd7WPU1lsTyGCQmbRtaLk
TobJKZZe2jbbcni4eaSN+1AOeqpkd0SEn9NiLAgavdFLVcs8WtmsqBBsRwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBExo5eNMBMOOD6ubvH20oE2epUhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRVRHamw0MHdFdzQ0UHE1dThmYlNnVFo2bFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALYtpAwQA
UEwyAwQCU6vMAwQAV3hXAwQAsH3/AwQAwjFXAwQAwjfiMA0GCSqGSIb3DQEBCwUA
A4IBAQCd+g53g65baxHkL7DP8kXLZAMpKe7YmABA7jw8Td9TMrnAxNlm/8sjnOxY
H15fvByePhULXWFe4j0r/0xQitmF9+TLOrvikD+xjme9P+vqB4OA0lHUn5B3Gyvb
7kF4JPoXCmgzceOA9XizFAJXCCBLscylg2Cmshs1hK0D2+q9MKPN6IKsqMwheYqb
Fdydw/NMUyYP3CcHBwmzai2uQwJA1yJNKAHHkK3wBnB0UGMg9DRB8KjqYkxAZi22
5VMDzJ3BIT6E5YpUbliZToYLSk0BMn5aj1ir8ljvIUYVHqq89/hq8DA3CSo/hTM0
4nThlheKd3n1HBHUX6kJXhbb/Ju3
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:18 2025 by rpki-client