Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/FrLoQw9Tk2q53G3qePuE3CPqiJw.roa
File: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (raw, json)
Hash identifier: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=
Subject key identifier: 16:B2:E8:43:0F:53:93:6A:B9:DC:6D:EA:78:FB:84:DC:23:EA:88:9C
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019424B2C363619461CF86135A1F814D655F
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/FrLoQw9Tk2q53G3qePuE3CPqiJw.roa
Signing time: Thu 02 Jan 2025 01:48:02 +0000
ROA not before: Thu 02 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47674
IP address blocks: 5.206.224.0/21 maxlen: 24
185.38.140.0/22 maxlen: 24
185.236.228.0/24 maxlen: 24
185.236.229.0/24 maxlen: 24
185.236.230.0/24 maxlen: 24
185.236.231.0/24 maxlen: 24
188.93.232.0/21 maxlen: 24
2a00:1c60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c3:63:61:94:61:cf:86:13:5a:1f:81:4d:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Jan 2 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b2e8430f53936ab9dc6dea78fb84dc23ea889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:58:fd:70:4f:cc:81:ad:7e:fc:d0:1b:9a:
82:bf:9d:4d:4a:ed:77:df:99:7f:50:14:9f:5a:bb:
7a:d8:3c:12:3a:f7:33:99:0f:f5:09:07:a6:36:39:
38:9e:6a:4a:0e:27:49:93:a1:62:b5:16:77:ee:64:
91:d1:66:cc:ee:f7:d3:d9:5c:d1:2d:3a:9f:48:12:
92:64:a0:ec:9f:ee:70:16:02:76:ac:cd:7c:df:61:
55:25:04:e9:29:42:85:9b:52:5f:01:f4:e7:ce:2e:
07:92:39:e5:dd:b5:57:b7:15:b0:63:e6:56:ab:23:
9b:50:02:e6:1a:53:0b:47:c2:3b:42:56:bd:64:48:
62:eb:bf:a6:d4:f9:31:f3:c2:8c:68:55:57:db:dc:
60:75:48:6a:36:45:83:23:6c:d4:4b:52:8c:54:75:
ff:94:70:45:80:81:8b:e6:bb:eb:b0:8b:de:e0:cc:
ee:57:2a:f8:0f:5f:5a:a0:c2:d8:1f:78:14:44:2b:
50:06:b7:f2:4c:8f:c6:91:0f:06:21:e5:fa:20:96:
3f:fb:de:ba:78:5c:6e:ba:a0:8b:5d:fd:23:cc:7e:
e4:b4:1b:fa:64:e1:7b:f2:f1:1f:db:9e:79:9c:40:
fe:33:b7:61:7d:01:e8:4f:73:df:60:92:48:e8:c4:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:E8:43:0F:53:93:6A:B9:DC:6D:EA:78:FB:84:DC:23:EA:88:9C
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/FrLoQw9Tk2q53G3qePuE3CPqiJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.224.0/21
185.38.140.0/22
185.236.228.0/22
188.93.232.0/21
IPv6:
2a00:1c60::/32
Signature Algorithm: sha256WithRSAEncryption
b2:c8:d6:ff:19:fd:6b:61:ca:d0:a5:f8:cb:a8:4c:3e:b5:ca:
8d:1f:b0:33:20:04:53:eb:b1:d8:88:ac:89:9c:41:e5:df:dc:
89:04:42:50:cb:73:22:33:a3:e3:d7:27:04:7b:ab:6f:eb:c0:
d5:6a:3d:ba:24:c4:db:89:7a:30:fe:44:e0:90:68:34:7a:65:
35:cf:31:1e:62:46:fd:42:3e:5d:70:65:1b:24:71:5d:18:d5:
8d:8d:df:b6:7e:9f:be:70:2e:e7:fd:7b:7d:87:19:6f:87:74:
ef:1a:a9:c6:6b:00:a9:b6:98:b5:52:fa:b7:a5:2d:e1:9a:d7:
d6:2b:e5:e1:cb:95:5d:07:14:67:8e:5c:97:a0:1a:6c:56:c3:
bd:8f:06:5c:11:64:89:89:87:11:19:c6:ff:5d:3a:44:24:e1:
05:0e:18:7f:25:06:4d:05:af:f4:2c:a8:aa:78:56:ff:65:b1:
3b:33:39:55:c1:84:69:97:f9:47:49:9d:c7:ce:19:69:8b:ca:
e9:3f:2c:94:a4:0a:60:a5:38:90:d2:b7:2e:ee:79:12:ee:42:
ae:6c:4b:26:06:04:12:ab:6f:a8:9c:82:e1:83:3a:b4:b5:7f:
f2:74:6f:42:f2:7d:d5:1b:37:f6:e3:cb:54:7d:2d:91:07:23:
09:5e:99:5a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQkssNjYZRhz4YTWh+BTWVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5
NjQ3ZGYwHhcNMjUwMTAyMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIyZTg0MzBmNTM5MzZhYjlkYzZkZWE3OGZiODRkYzIzZWE4ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBY/XBPzIGtfvzQG5qCv51NSu13
35l/UBSfWrt62DwSOvczmQ/1CQemNjk4nmpKDidJk6FitRZ37mSR0WbM7vfT2VzR
LTqfSBKSZKDsn+5wFgJ2rM1832FVJQTpKUKFm1JfAfTnzi4Hkjnl3bVXtxWwY+ZW
qyObUALmGlMLR8I7Qla9ZEhi67+m1Pkx88KMaFVX29xgdUhqNkWDI2zUS1KMVHX/
lHBFgIGL5rvrsIve4MzuVyr4D19aoMLYH3gURCtQBrfyTI/GkQ8GIeX6IJY/+966
eFxuuqCLXf0jzH7ktBv6ZOF78vEf2555nED+M7dhfQHoT3PfYJJI6MSJmwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBay6EMPU5Nqudxt6nj7hNwj6oicMB8GA1UdIwQY
MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut
OTVjODk0MmRmNzI0LzEvRnJMb1F3OVRrMnE1M0czcWVQdUUzQ1BxaUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0
LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBc7gAwQC
uSaMAwQCuezkAwQDvF3oMA0EAgACMAcDBQAqABxgMA0GCSqGSIb3DQEBCwUAA4IB
AQCyyNb/Gf1rYcrQpfjLqEw+tcqNH7AzIART67HYiKyJnEHl39yJBEJQy3MiM6Pj
1ycEe6tv68DVaj26JMTbiXow/kTgkGg0emU1zzEeYkb9Qj5dcGUbJHFdGNWNjd+2
fp++cC7n/Xt9hxlvh3TvGqnGawCptpi1Uvq3pS3hmtfWK+Xhy5VdBxRnjlyXoBps
VsO9jwZcEWSJiYcRGcb/XTpEJOEFDhh/JQZNBa/0LKiqeFb/ZbE7MzlVwYRpl/lH
SZ3Hzhlpi8rpPyyUpApgpTiQ0rcu7nkS7kKubEsmBgQSq2+onILhgzq0tX/ydG9C
8n3VGzf248tUfS2RByMJXpla
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:51 2025 by rpki-client