Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/aHlGWauXADsFIjPBDWSnc29nHv8.roa
File: aHlGWauXADsFIjPBDWSnc29nHv8.roa (raw, json)
Hash identifier: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=
Subject key identifier: 68:79:46:59:AB:97:00:3B:05:22:33:C1:0D:64:A7:73:6F:67:1E:FF
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 0194DB93B4D2A4742863AA3A457712945E36
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/aHlGWauXADsFIjPBDWSnc29nHv8.roa
Signing time: Thu 06 Feb 2025 14:04:37 +0000
ROA not before: Thu 06 Feb 2025 14:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 31.200.248.0/21 maxlen: 24
46.21.252.0/22 maxlen: 24
62.76.24.0/22 maxlen: 24
62.76.88.0/22 maxlen: 24
62.76.100.0/22 maxlen: 24
62.76.112.0/22 maxlen: 24
89.248.236.0/24 maxlen: 24
91.107.84.0/24 maxlen: 24
91.107.85.0/24 maxlen: 24
91.107.86.0/23 maxlen: 24
91.107.86.0/24 maxlen: 24
185.40.28.0/22 maxlen: 24
185.62.103.0/24 maxlen: 24
185.111.216.0/23 maxlen: 24
185.111.218.0/24 maxlen: 24
185.111.219.0/24 maxlen: 24
185.126.92.0/22 maxlen: 24
212.8.232.0/22 maxlen: 24
217.199.209.0/24 maxlen: 24
2a03:220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:93:b4:d2:a4:74:28:63:aa:3a:45:77:12:94:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Feb 6 14:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68794659ab97003b052233c10d64a7736f671eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:ca:3c:8e:12:d8:2d:f0:75:45:6f:e2:b1:
1f:55:61:9a:3f:e3:93:9d:08:19:d9:b9:1f:cf:a3:
19:78:1d:5e:d0:46:60:69:3c:5c:38:66:e3:d6:7d:
1d:e3:fe:9c:53:b7:e0:51:ec:3c:d0:79:78:6c:e7:
7a:77:1b:da:d4:b2:47:78:4c:68:9d:57:5a:cb:10:
95:0b:c3:fc:cb:f4:e7:dc:94:60:a1:66:5a:a7:d3:
06:b2:b0:9b:02:b2:28:84:d7:01:56:8f:cf:5d:21:
08:bf:bb:93:6d:08:91:60:f6:4d:6a:af:91:6a:0a:
75:84:8a:ef:41:c4:92:a5:fe:3e:00:32:05:a8:0e:
d7:3d:3a:cd:eb:fb:3e:3b:9e:f4:dd:9b:f7:7b:83:
1e:fb:58:ff:2f:f0:09:a4:b4:f6:ce:1d:87:e0:76:
aa:45:0f:60:70:45:1d:91:d0:35:55:3d:79:b3:6c:
f5:e4:95:2f:d5:62:c4:aa:4f:30:90:86:82:09:ca:
4c:24:44:eb:03:16:e7:b1:b6:28:1d:8d:bb:dc:ef:
66:4d:88:72:ce:49:7d:4c:df:59:f4:bc:b8:4c:e6:
8c:08:37:27:65:5d:78:53:6d:09:b1:2d:ea:f9:fe:
41:88:34:3e:44:bf:3d:51:bf:b7:52:fa:48:e0:47:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:46:59:AB:97:00:3B:05:22:33:C1:0D:64:A7:73:6F:67:1E:FF
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/aHlGWauXADsFIjPBDWSnc29nHv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.248.0/21
46.21.252.0/22
62.76.24.0/22
62.76.88.0/22
62.76.100.0/22
62.76.112.0/22
89.248.236.0/24
91.107.84.0/22
185.40.28.0/22
185.62.103.0/24
185.111.216.0/22
185.126.92.0/22
212.8.232.0/22
217.199.209.0/24
IPv6:
2a03:220::/32
Signature Algorithm: sha256WithRSAEncryption
54:87:f5:67:a1:3b:8d:16:0a:f9:74:c4:3d:f4:9c:34:03:ba:
45:1b:3d:7f:85:d9:92:26:c5:ad:d4:67:f0:59:77:c3:e2:f6:
d9:95:ae:16:73:63:43:40:59:0e:ba:d0:79:7d:94:be:fb:73:
ce:cf:43:4c:62:fd:b1:07:d4:34:c4:fb:73:28:f1:fa:6c:a9:
4c:ed:5a:fc:b7:8e:62:77:c9:29:33:30:94:17:3f:62:bc:0d:
d2:90:b4:c8:28:ba:c9:4a:93:24:56:82:85:19:56:6f:89:2c:
91:78:3a:94:09:54:92:7a:9a:19:7d:f8:28:90:b5:da:34:03:
f9:98:e1:3c:68:88:b4:47:16:2f:a2:da:d0:13:74:ba:e1:3b:
f5:cb:a6:18:ca:25:57:15:cf:11:ac:8e:8d:9b:1f:31:d8:f9:
83:5a:38:0f:1f:be:b4:17:93:7f:88:83:4f:e8:96:bc:5c:50:
44:8a:08:80:8b:ad:c2:01:9f:16:87:93:5f:70:1f:2a:26:f5:
3c:4c:d9:1d:cc:22:90:79:29:52:58:91:a1:24:fd:fb:06:df:
2a:22:c4:e2:5f:2f:3f:a8:13:5d:d4:ac:f8:1a:b5:63:c9:84:
ef:47:e1:96:54:32:92:0b:bd:a0:63:13:6c:fa:f3:fa:12:6f:
4d:d3:a9:c9
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAZTbk7TSpHQoY6o6RXcSlF42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0
OTdhZjAwHhcNMjUwMjA2MTQwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODc5NDY1OWFiOTcwMDNiMDUyMjMzYzEwZDY0YTc3MzZmNjcxZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/HKPI4S2C3wdUVv4rEfVWGaP+OT
nQgZ2bkfz6MZeB1e0EZgaTxcOGbj1n0d4/6cU7fgUew80Hl4bOd6dxva1LJHeExo
nVdayxCVC8P8y/Tn3JRgoWZap9MGsrCbArIohNcBVo/PXSEIv7uTbQiRYPZNaq+R
agp1hIrvQcSSpf4+ADIFqA7XPTrN6/s+O5703Zv3e4Me+1j/L/AJpLT2zh2H4Haq
RQ9gcEUdkdA1VT15s2z15JUv1WLEqk8wkIaCCcpMJETrAxbnsbYoHY273O9mTYhy
zkl9TN9Z9Ly4TOaMCDcnZV14U20JsS3q+f5BiDQ+RL89Ub+3UvpI4Eeu5QIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFGh5RlmrlwA7BSIzwQ1kp3NvZx7/MB8GA1UdIwQY
MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut
MWJhNTQzZWVhZWQ3LzEvYUhsR1dhdVhBRHNGSWpQQkRXU25jMjluSHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3
LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQDH8j4AwQC
LhX8AwQCPkwYAwQCPkxYAwQCPkxkAwQCPkxwAwQAWfjsAwQCW2tUAwQCuSgcAwQA
uT5nAwQCuW/YAwQCuX5cAwQC1AjoAwQA2cfRMA0EAgACMAcDBQAqAwIgMA0GCSqG
SIb3DQEBCwUAA4IBAQBUh/VnoTuNFgr5dMQ99Jw0A7pFGz1/hdmSJsWt1GfwWXfD
4vbZla4Wc2NDQFkOutB5fZS++3POz0NMYv2xB9Q0xPtzKPH6bKlM7Vr8t45id8kp
MzCUFz9ivA3SkLTIKLrJSpMkVoKFGVZviSyReDqUCVSSepoZffgokLXaNAP5mOE8
aIi0RxYvotrQE3S64Tv1y6YYyiVXFc8RrI6Nmx8x2PmDWjgPH760F5N/iINP6Ja8
XFBEigiAi63CAZ8Wh5NfcB8qJvU8TNkdzCKQeSlSWJGhJP37Bt8qIsTiXy8/qBNd
1Kz4GrVjyYTvR+GWVDKSC72gYxNs+vP6Em9N06nJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:28 2025 by rpki-client