Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KoBHYXUdIdtHokL7aN7OkIYbSvo.roa
File: KoBHYXUdIdtHokL7aN7OkIYbSvo.roa (raw, json)
Hash identifier: BSfh8Juxet8WupYZIUHm7hfaZsfnRIDggC2hnyubU00=
Subject key identifier: 2A:80:47:61:75:1D:21:DB:47:A2:42:FB:68:DE:CE:90:86:1B:4A:FA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019527B141A3F8EFFB93299272BF4C428E24
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KoBHYXUdIdtHokL7aN7OkIYbSvo.roa
Signing time: Fri 21 Feb 2025 08:48:02 +0000
ROA not before: Fri 21 Feb 2025 08:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.38.0/24 maxlen: 24
147.45.39.0/24 maxlen: 24
147.45.61.0/24 maxlen: 24
147.45.62.0/24 maxlen: 24
147.45.63.0/24 maxlen: 24
147.45.88.0/21 maxlen: 21
147.45.117.0/24 maxlen: 24
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 22
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:b1:41:a3:f8:ef:fb:93:29:92:72:bf:4c:42:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 21 08:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a804761751d21db47a242fb68dece90861b4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:74:34:26:16:cf:89:78:ee:26:b7:03:73:
f9:37:24:5c:30:45:8d:97:cf:9a:e1:1c:31:3f:b6:
d0:85:99:73:83:34:50:21:bb:3c:97:4e:6d:51:26:
00:e2:a2:ab:2e:e7:cf:7c:f3:f6:b7:a6:17:f6:77:
c0:51:fc:f2:74:bd:f2:4d:46:2f:54:46:88:36:87:
2d:c3:4a:40:e5:0b:b0:69:35:4e:f1:f3:04:3e:cf:
7d:d2:32:41:a8:0e:61:0b:46:e0:c7:c2:1b:fa:c0:
d0:6d:47:d6:52:16:8f:c3:f8:d4:90:0a:e2:3b:42:
f7:23:c5:5b:ac:11:3c:67:65:6d:32:84:e0:e7:0e:
af:9a:bb:69:7b:9a:a3:64:c6:26:c3:42:82:de:7e:
ad:5e:39:b3:34:85:d1:bf:b8:89:b5:e7:4d:83:81:
f8:e7:a1:69:9a:2d:72:ae:a3:d1:b5:76:b5:c9:d3:
26:d6:d9:6a:de:16:61:c1:e9:b6:ff:a9:a1:21:35:
bb:1a:8c:1d:95:68:a1:a8:ab:4b:8e:1b:8d:98:2c:
c3:7c:8f:75:d0:b9:e3:39:f8:67:bd:d5:17:4f:f0:
43:51:a2:ea:f9:5b:62:51:0f:48:c1:64:ac:ae:3b:
24:e2:b3:4f:02:2c:f6:2d:dd:cc:57:3a:ce:47:51:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:47:61:75:1D:21:DB:47:A2:42:FB:68:DE:CE:90:86:1B:4A:FA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KoBHYXUdIdtHokL7aN7OkIYbSvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.38.0/23
147.45.61.0-147.45.63.255
147.45.88.0/21
147.45.117.0/24
147.45.120.0/22
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/24
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:02:25:e3:81:7b:13:80:fd:dd:ee:3f:44:15:25:e4:0b:
2e:47:79:e6:5a:c5:12:46:ef:1a:7f:c8:d9:f1:ea:00:9f:a8:
1b:f0:2e:24:bd:af:b4:88:f0:29:0a:75:c2:90:db:23:d9:ec:
64:6b:38:50:c1:35:ce:98:a4:53:72:5d:a7:fa:50:59:22:0b:
c3:9b:58:ec:10:f1:c8:ab:12:f7:35:41:f0:9a:5a:01:ae:73:
f3:24:89:6b:7c:9d:59:15:00:2d:c3:eb:bf:1b:2e:60:55:a5:
81:16:97:9b:e1:e5:1f:ce:49:02:a2:d3:38:01:10:8a:14:02:
47:83:cf:61:1f:2e:be:e4:58:25:40:1c:ab:bc:91:0b:2c:bf:
f6:08:e3:24:fd:f3:0d:ec:71:29:d3:0f:0e:e5:ad:29:d1:76:
0c:72:33:28:9c:43:03:2b:0d:de:08:9d:93:f1:c2:ea:45:33:
16:de:b7:f2:72:b1:75:92:eb:cd:a8:d9:6a:63:73:63:0a:2a:
c1:8c:c5:f2:72:0e:ec:77:9d:b8:0d:1c:d0:c1:36:10:20:67:
d3:cd:7b:1f:f3:51:e3:dd:eb:72:8b:77:07:f7:84:68:9b:4b:
65:5e:8c:b8:a7:7b:2b:20:eb:08:63:20:e8:64:f8:c4:54:92:
70:16:27:c1
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZUnsUGj+O/7kymScr9MQo4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMjIxMDg0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTgwNDc2MTc1MWQyMWRiNDdhMjQyZmI2OGRlY2U5MDg2MWI0YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3N0NCYWz4l47ia3A3P5NyRcMEWN
l8+a4RwxP7bQhZlzgzRQIbs8l05tUSYA4qKrLufPfPP2t6YX9nfAUfzydL3yTUYv
VEaINoctw0pA5QuwaTVO8fMEPs990jJBqA5hC0bgx8Ib+sDQbUfWUhaPw/jUkAri
O0L3I8VbrBE8Z2VtMoTg5w6vmrtpe5qjZMYmw0KC3n6tXjmzNIXRv7iJtedNg4H4
56Fpmi1yrqPRtXa1ydMm1tlq3hZhwem2/6mhITW7GowdlWihqKtLjhuNmCzDfI91
0LnjOfhnvdUXT/BDUaLq+VtiUQ9IwWSsrjsk4rNPAiz2Ld3MVzrOR1E24wIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFCqAR2F1HSHbR6JC+2jezpCGG0r6MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvS29CSFlYVWRJZHRIb2tMN2FON09rSVliU3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQBky0mMAwD
BACTLT0DBAaTLQADBAOTLVgDBACTLXUDBAKTLXgDBACTLX8DBACTLc0DBADB6TwD
BADB6T4DBALB6XwDBADB6aoDBADB6ewDBADB6e8wDQYJKoZIhvcNAQELBQADggEB
AFSxAiXjgXsTgP3d7j9EFSXkCy5HeeZaxRJG7xp/yNnx6gCfqBvwLiS9r7SI8CkK
dcKQ2yPZ7GRrOFDBNc6YpFNyXaf6UFkiC8ObWOwQ8cirEvc1QfCaWgGuc/MkiWt8
nVkVAC3D678bLmBVpYEWl5vh5R/OSQKi0zgBEIoUAkeDz2EfLr7kWCVAHKu8kQss
v/YI4yT98w3scSnTDw7lrSnRdgxyMyicQwMrDd4InZPxwupFMxbet/JysXWS682o
2Wpjc2MKKsGMxfJyDux3nbgNHNDBNhAgZ9PNex/zUePd63KLdwf3hGibS2VejLin
eysg6whjIOhk+MRUknAWJ8E=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:51 2025 by rpki-client