Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/SEy_q8yasarL4vhAyv6DcTF7WB8.roa
File: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (raw, json)
Hash identifier: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=
Subject key identifier: 48:4C:BF:AB:CC:9A:B1:AA:CB:E2:F8:40:CA:FE:83:71:31:7B:58:1F
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01942067ED6AD7E9DB4B093BB59B299E25F6
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/SEy_q8yasarL4vhAyv6DcTF7WB8.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 31.150.0.0/16 maxlen: 24
31.184.0.0/18 maxlen: 24
31.187.112.0/20 maxlen: 24
37.138.0.0/16 maxlen: 24
62.89.160.0/19 maxlen: 24
80.66.0.0/19 maxlen: 24
80.228.0.0/16 maxlen: 24
82.149.160.0/19 maxlen: 24
85.8.64.0/18 maxlen: 24
85.16.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 24
89.166.128.0/17 maxlen: 24
89.233.64.0/19 maxlen: 24
90.153.0.0/17 maxlen: 24
91.96.0.0/15 maxlen: 24
91.248.0.0/15 maxlen: 24
92.252.0.0/17 maxlen: 24
95.33.0.0/16 maxlen: 24
178.142.0.0/16 maxlen: 24
188.118.128.0/18 maxlen: 24
212.6.64.0/18 maxlen: 24
212.95.96.0/19 maxlen: 24
213.168.192.0/19 maxlen: 24
213.170.160.0/19 maxlen: 24
213.182.96.0/19 maxlen: 24
213.183.160.0/19 maxlen: 24
213.252.128.0/18 maxlen: 24
2a00:1470::/32 maxlen: 48
2a02:8020::/30 maxlen: 48
2a02:8200::/27 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:6a:d7:e9:db:4b:09:3b:b5:9b:29:9e:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484cbfabcc9ab1aacbe2f840cafe8371317b581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:8b:5d:70:47:fb:7b:b1:d2:fd:be:76:95:
ce:84:be:62:25:9e:b5:cd:43:45:3c:51:e0:ba:f0:
d0:31:4f:73:84:c4:cf:b3:df:c0:ae:76:0f:47:4c:
31:c6:e2:63:c3:e1:d3:48:01:b0:f9:7d:4c:0b:2b:
c8:6b:5a:a7:b9:ae:de:5e:87:93:de:37:76:2d:df:
1f:04:a7:60:ef:00:a2:5f:37:cb:54:7e:c7:51:75:
3b:2b:95:a4:08:f3:c8:76:92:37:fa:bc:c7:9d:71:
54:c4:c3:b9:25:5d:65:b6:a7:21:96:81:d9:c1:64:
55:1f:c0:58:1c:2f:fa:6e:49:02:9e:2a:cd:69:e0:
51:a8:05:4f:bf:09:a0:d2:c3:ca:7c:47:1b:80:97:
65:66:ac:37:73:50:5f:eb:b5:61:23:45:e2:96:78:
7b:e7:68:3f:eb:46:46:fc:41:4e:05:b1:52:73:ac:
3a:56:6d:5a:a1:3e:09:1e:89:ee:34:d1:f5:8a:62:
a3:73:56:48:c1:5f:d5:0a:67:f2:bf:5d:14:c9:e4:
18:38:28:e7:40:9e:b3:95:d4:38:e9:aa:6e:96:bf:
a9:55:94:01:07:53:70:61:1f:bd:99:62:9a:3c:ec:
f4:ae:f4:d9:4d:25:ff:42:32:71:55:84:c7:b0:a8:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:BF:AB:CC:9A:B1:AA:CB:E2:F8:40:CA:FE:83:71:31:7B:58:1F
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/SEy_q8yasarL4vhAyv6DcTF7WB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
62.89.160.0/19
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
213.252.128.0/18
IPv6:
2a00:1470::/32
2a02:8020::/30
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
2f:c1:c5:38:84:37:cf:3d:22:96:f4:df:49:d5:f8:3e:9b:63:
ff:c4:e0:55:90:de:65:99:43:84:4a:18:c2:a8:db:56:bf:45:
23:e1:da:cb:70:f7:3f:13:16:12:6f:9b:82:cd:ff:3b:60:a8:
f0:c6:ae:33:d2:ec:0e:41:16:ba:2a:59:de:43:24:b8:af:36:
57:18:bc:63:4d:52:58:b7:c7:58:85:93:75:b6:11:4a:6b:88:
7f:b0:71:f1:ec:3b:e8:0d:fe:3b:2b:86:9c:e8:d0:8f:f4:a2:
33:1f:5c:8f:1c:39:6b:28:8e:45:9a:8a:6a:f0:51:eb:e3:8f:
94:50:72:48:3f:62:dd:74:0b:5a:68:1a:2a:8b:e7:1b:f1:af:
34:25:c4:8a:ba:10:58:a4:4f:8d:3b:3a:7f:48:06:cc:39:ab:
c1:fa:5b:c0:15:78:9e:92:bc:9f:78:7e:92:12:48:91:00:9d:
15:23:dd:6e:6c:85:37:5b:81:19:ef:d8:70:96:bb:c1:de:71:
81:73:fd:f9:3f:8c:20:01:12:c2:59:b1:94:b8:a6:c8:dd:be:
1c:b0:58:1e:ef:99:51:d4:3f:a9:09:4b:96:0d:5c:d5:a9:18:
d5:47:53:d5:a4:38:63:00:a0:dc:0c:e3:53:54:54:b5:44:f9:
ff:e6:65:7c
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZQgZ+1q1+nbSwk7tZspniX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjUwMTAxMDU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODRjYmZhYmNjOWFiMWFhY2JlMmY4NDBjYWZlODM3MTMxN2I1ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGOLXXBH+3ux0v2+dpXOhL5iJZ61
zUNFPFHguvDQMU9zhMTPs9/ArnYPR0wxxuJjw+HTSAGw+X1MCyvIa1qnua7eXoeT
3jd2Ld8fBKdg7wCiXzfLVH7HUXU7K5WkCPPIdpI3+rzHnXFUxMO5JV1ltqchloHZ
wWRVH8BYHC/6bkkCnirNaeBRqAVPvwmg0sPKfEcbgJdlZqw3c1Bf67VhI0Xilnh7
52g/60ZG/EFOBbFSc6w6Vm1aoT4JHonuNNH1imKjc1ZIwV/VCmfyv10UyeQYOCjn
QJ6zldQ46apulr+pVZQBB1NwYR+9mWKaPOz0rvTZTSX/QjJxVYTHsKgjWwIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFEhMv6vMmrGqy+L4QMr+g3Exe1gfMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvU0V5X3E4eWFzYXJMNHZoQXl2NkRjVEY3V0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBoQQCAAEwgZoDAwAf
lgMEBh+4AAMEBB+7cAMDACWKAwQFPlmgAwQFUEIAAwMAUOQDBAVSlaADBAZVCEAD
AwBVEAMEBlf1AAMEB1mmgAMEBVnpQAMEB1qZAAMDAVtgAwMBW/gDBAdc/AADAwBf
IQMDALKOAwQGvHaAAwQG1AZAAwQF1F9gAwQF1ajAAwQF1aqgAwQF1bZgAwQF1beg
AwQG1fyAMBsEAgACMBUDBQAqABRwAwUCKgKAIAMFBSoCggAwDQYJKoZIhvcNAQEL
BQADggEBAC/BxTiEN889Ipb030nV+D6bY//E4FWQ3mWZQ4RKGMKo21a/RSPh2stw
9z8TFhJvm4LN/ztgqPDGrjPS7A5BFroqWd5DJLivNlcYvGNNUli3x1iFk3W2EUpr
iH+wcfHsO+gN/jsrhpzo0I/0ojMfXI8cOWsojkWaimrwUevjj5RQckg/Yt10C1po
GiqL5xvxrzQlxIq6EFikT407On9IBsw5q8H6W8AVeJ6SvJ94fpISSJEAnRUj3W5s
hTdbgRnv2HCWu8HecYFz/fk/jCABEsJZsZS4psjdvhywWB7vmVHUP6kJS5YNXNWp
GNVHU9WkOGMAoNwM41NUVLVE+f/mZXw=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:19 2025 by rpki-client