Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/lEn451-XXHlherUNQr8Rc0JmU5c.roa
File: lEn451-XXHlherUNQr8Rc0JmU5c.roa (raw, json)
Hash identifier: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=
Subject key identifier: 94:49:F8:E7:5F:97:5C:79:61:7A:B5:0D:42:BF:11:73:42:66:53:97
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019424B3BA053551F4819508E0CFE96FF68E
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/lEn451-XXHlherUNQr8Rc0JmU5c.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61207
IP address blocks: 87.237.208.0/21 maxlen: 21
89.221.240.0/23 maxlen: 23
89.221.243.0/24 maxlen: 24
89.221.247.0/24 maxlen: 24
89.221.248.0/21 maxlen: 21
185.15.120.0/22 maxlen: 22
185.215.196.0/22 maxlen: 22
185.215.196.0/24 maxlen: 24
195.35.82.0/23 maxlen: 23
2a02:fc00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ba:05:35:51:f4:81:95:08:e0:cf:e9:6f:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9449f8e75f975c79617ab50d42bf117342665397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:26:4f:09:70:90:ea:91:b0:42:df:bf:c5:
6f:9b:bd:c4:05:ed:86:d7:10:a8:a8:c1:35:4b:8e:
95:97:a6:5e:93:0c:b5:d9:b1:61:e3:d5:99:46:08:
bf:1c:80:f7:5e:36:03:f4:e7:d3:18:08:c7:f9:a6:
99:0f:aa:b5:bf:e2:be:d5:dc:63:e6:5c:50:12:3f:
07:70:e7:dc:a9:8b:24:ae:56:24:cb:05:7a:8d:c4:
0c:aa:a5:45:9b:16:4e:52:01:1f:98:c2:c6:00:11:
8b:a8:94:4d:d9:32:aa:83:d5:f5:40:09:6b:03:52:
bd:46:52:4d:85:ba:92:8b:14:93:d7:97:12:c6:c5:
f5:f9:08:4b:cb:66:2d:f8:04:f3:32:64:ee:7b:92:
51:ff:fb:b8:cc:ed:4d:29:d4:6c:c4:1b:fe:9b:48:
0e:ac:1a:2e:d0:bc:7d:8a:84:46:af:23:03:e0:28:
52:d8:07:fb:39:e0:1b:7a:f7:7a:82:c9:fc:41:54:
24:ff:e2:dd:5c:3d:f9:99:5d:58:93:a9:bf:97:12:
98:50:89:05:2e:7b:77:d6:7e:a2:99:ba:84:21:f4:
d2:bd:15:22:dd:74:2f:c0:e9:91:53:1e:cc:2b:ef:
6e:3f:38:0a:6a:2f:aa:bc:ce:6a:98:c2:c6:ef:69:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:49:F8:E7:5F:97:5C:79:61:7A:B5:0D:42:BF:11:73:42:66:53:97
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/lEn451-XXHlherUNQr8Rc0JmU5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.208.0/21
89.221.240.0/23
89.221.243.0/24
89.221.247.0-89.221.255.255
185.15.120.0/22
185.215.196.0/22
195.35.82.0/23
IPv6:
2a02:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:2a:b8:5d:a8:fd:ee:ee:a3:be:12:c6:00:f6:e6:63:ff:0c:
54:9f:e2:61:0c:84:69:9d:73:52:9c:6c:6d:db:e4:c5:44:21:
19:4b:ed:d8:5f:0a:df:05:df:4b:c7:22:de:9b:73:1b:81:9a:
4c:f5:3d:37:2f:5f:08:ce:2b:08:dd:8f:a0:b7:0d:47:de:d6:
ca:30:6d:f9:65:f1:d9:98:93:60:d9:d8:3a:39:ff:2b:b9:08:
8a:4b:03:32:83:cf:17:ab:da:fb:de:1f:89:36:16:d9:b5:d5:
73:e5:54:82:73:07:c1:ac:8d:04:7a:52:d2:ef:54:9b:f6:28:
27:0c:10:a4:c5:68:59:7c:1a:0d:46:f2:c0:c8:40:a9:f0:be:
81:e9:6f:0e:82:f0:8e:51:84:ac:ef:ee:ff:65:b1:2d:f1:37:
c0:e6:ea:85:e5:05:b5:fe:e7:f0:7e:da:37:77:a0:22:35:49:
32:b4:33:12:53:7d:e1:a1:89:ae:e2:be:d8:12:cf:1f:d6:9f:
6b:ce:e6:f8:39:31:18:c3:ae:09:f3:05:73:92:8d:ad:0a:be:
d4:2a:ed:7e:57:50:45:73:69:1f:2f:3b:81:f8:aa:3a:09:61:
0d:a2:a1:d8:53:2f:37:d0:cb:89:9a:5b:55:96:92:12:6e:ab:
39:84:98:b3
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZQks7oFNVH0gZUI4M/pb/aOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjUwMTAyMDE0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQ5ZjhlNzVmOTc1Yzc5NjE3YWI1MGQ0MmJmMTE3MzQyNjY1Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDQmTwlwkOqRsELfv8Vvm73EBe2G
1xCoqME1S46Vl6Zekwy12bFh49WZRgi/HID3XjYD9OfTGAjH+aaZD6q1v+K+1dxj
5lxQEj8HcOfcqYskrlYkywV6jcQMqqVFmxZOUgEfmMLGABGLqJRN2TKqg9X1QAlr
A1K9RlJNhbqSixST15cSxsX1+QhLy2Yt+ATzMmTue5JR//u4zO1NKdRsxBv+m0gO
rBou0Lx9ioRGryMD4ChS2Af7OeAbevd6gsn8QVQk/+LdXD35mV1Yk6m/lxKYUIkF
Lnt31n6imbqEIfTSvRUi3XQvwOmRUx7MK+9uPzgKai+qvM5qmMLG72k49QIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFJRJ+Odfl1x5YXq1DUK/EXNCZlOXMB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvbEVuNDUxLVhYSGxoZXJVTlFyOFJjMEptVTVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQDV+3QAwQB
Wd3wAwQAWd3zMAsDBABZ3fcDAwFZ3AMEArkPeAMEArnXxAMEAcMjUjANBAIAAjAH
AwUDKgL8ADANBgkqhkiG9w0BAQsFAAOCAQEAjyq4Xaj97u6jvhLGAPbmY/8MVJ/i
YQyEaZ1zUpxsbdvkxUQhGUvt2F8K3wXfS8ci3ptzG4GaTPU9Ny9fCM4rCN2PoLcN
R97WyjBt+WXx2ZiTYNnYOjn/K7kIiksDMoPPF6va+94fiTYW2bXVc+VUgnMHwayN
BHpS0u9Um/YoJwwQpMVoWXwaDUbywMhAqfC+gelvDoLwjlGErO/u/2WxLfE3wObq
heUFtf7n8H7aN3egIjVJMrQzElN94aGJruK+2BLPH9afa87m+DkxGMOuCfMFc5KN
rQq+1CrtfldQRXNpHy87gfiqOglhDaKh2FMvN9DLiZpbVZaSEm6rOYSYsw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:20 2025 by rpki-client