Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IoPJr9tKuJZGOXZhmwioWiooZ6g.roa
File: IoPJr9tKuJZGOXZhmwioWiooZ6g.roa (raw, json)
Hash identifier: 3DO4LjyNOrVtvfvBrITisaGEW//eAfeHJUOtX/o0zB4=
Subject key identifier: 22:83:C9:AF:DB:4A:B8:96:46:39:76:61:9B:08:A8:5A:2A:28:67:A8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01957089E3C17576BB33B6A20AB65F5DFBFC
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IoPJr9tKuJZGOXZhmwioWiooZ6g.roa
Signing time: Fri 07 Mar 2025 12:17:19 +0000
ROA not before: Fri 07 Mar 2025 12:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16321
IP address blocks: 5.8.56.0/23 maxlen: 24
37.139.48.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
45.156.212.0/22 maxlen: 22
46.161.12.0/23 maxlen: 24
46.161.24.0/24 maxlen: 24
46.161.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:89:e3:c1:75:76:bb:33:b6:a2:0a:b6:5f:5d:fb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 7 12:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2283c9afdb4ab896463976619b08a85a2a2867a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:c1:01:cc:6a:b0:f7:b3:ad:1c:d7:0c:49:
6d:e5:cd:12:65:ba:4b:13:59:0c:d2:cd:30:29:0e:
ab:05:87:36:81:ad:11:b3:ef:4f:27:24:64:2c:b8:
c5:a7:ea:15:af:19:4d:6a:b3:ca:29:e8:4d:79:0e:
ad:fd:73:dd:59:77:e0:2a:28:83:98:0c:f0:6c:82:
0d:10:d7:70:e6:cb:00:5f:41:2e:c3:22:b7:e3:fd:
0c:bb:94:72:07:d1:1d:3d:09:db:a1:af:98:5e:3f:
17:f5:82:50:8e:be:16:e5:48:19:07:67:52:1f:13:
00:4a:63:1a:cf:d9:3f:11:64:ce:e2:a0:83:58:11:
4d:ec:fa:63:e7:58:f1:41:37:74:0c:e1:5a:9d:62:
98:fb:5a:8f:c6:51:1a:dd:b5:bc:8d:42:fa:fe:57:
b7:8c:be:9c:5b:59:e4:05:25:c6:d2:a5:00:a0:41:
2f:22:40:32:a6:17:a4:1c:0d:2a:62:85:e0:45:fd:
06:ea:af:8a:5c:78:af:38:3b:ac:ea:a2:2c:74:a6:
35:b0:49:fa:32:02:28:83:e3:7c:e2:f6:6c:99:8b:
5c:f1:43:4c:dc:48:63:24:1b:ba:98:36:3e:b9:a8:
06:54:0b:74:4f:78:55:5e:d9:52:8b:13:22:2e:5b:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:C9:AF:DB:4A:B8:96:46:39:76:61:9B:08:A8:5A:2A:28:67:A8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IoPJr9tKuJZGOXZhmwioWiooZ6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.56.0/23
37.139.48.0/23
45.156.212.0/22
46.161.12.0/23
46.161.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:d8:09:4d:13:5d:3c:d7:ef:f1:f3:eb:4c:8c:5d:12:a0:65:
1d:0b:71:07:e1:ad:b4:d6:22:da:0b:ce:58:83:0a:2f:14:ff:
42:ef:0b:fc:bb:c2:a0:d5:0f:b1:57:b4:a7:81:33:85:76:d2:
d0:3b:25:32:11:07:0b:60:3a:2a:38:19:3a:68:eb:ef:44:e1:
ef:84:1a:96:9d:d6:2e:43:5f:5d:f4:c5:de:8c:bf:3c:30:80:
a1:40:7a:57:4d:b9:70:19:9c:f1:9d:8e:d3:82:d1:43:f0:97:
57:6b:49:1b:4e:1f:84:bc:05:b4:51:cc:e5:ed:6e:1d:45:f0:
36:3e:40:2b:15:d1:f9:08:8d:f3:67:82:9a:0e:99:ed:0b:b7:
e3:5d:2a:42:d5:82:3c:f0:11:e6:1f:35:36:bb:46:f7:98:90:
9c:50:4a:fa:a9:66:b4:70:38:d0:06:7f:01:32:2a:59:03:63:
05:71:74:32:6c:db:05:9d:87:5d:49:da:fb:d9:8a:00:26:a3:
f9:ac:4e:e5:cc:6c:fd:7d:bc:7e:ed:56:d0:43:cb:b3:38:ae:
6a:fe:e5:f6:be:e3:f9:5c:06:4c:6f:b3:5c:b3:c9:24:88:ff:
4a:8c:85:b6:5a:ca:dd:10:3f:fb:24:bb:b6:63:1f:66:2c:9e:
ae:8d:9a:90
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZVwiePBdXa7M7aiCrZfXfv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMzA3MTIxNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjgzYzlhZmRiNGFiODk2NDYzOTc2NjE5YjA4YTg1YTJhMjg2N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6/BAcxqsPezrRzXDElt5c0SZbpL
E1kM0s0wKQ6rBYc2ga0Rs+9PJyRkLLjFp+oVrxlNarPKKehNeQ6t/XPdWXfgKiiD
mAzwbIINENdw5ssAX0EuwyK34/0Mu5RyB9EdPQnboa+YXj8X9YJQjr4W5UgZB2dS
HxMASmMaz9k/EWTO4qCDWBFN7Ppj51jxQTd0DOFanWKY+1qPxlEa3bW8jUL6/le3
jL6cW1nkBSXG0qUAoEEvIkAyphekHA0qYoXgRf0G6q+KXHivODus6qIsdKY1sEn6
MgIog+N84vZsmYtc8UNM3EhjJBu6mDY+uagGVAt0T3hVXtlSixMiLlvV8QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCKDya/bSriWRjl2YZsIqFoqKGeoMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSW9QSnI5dEt1SlpHT1haaG13aW9XaW9vWjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBQg4AwQB
JYswAwQCLZzUAwQBLqEMAwQBLqEYMA0GCSqGSIb3DQEBCwUAA4IBAQBc2AlNE108
1+/x8+tMjF0SoGUdC3EH4a201iLaC85YgwovFP9C7wv8u8Kg1Q+xV7SngTOFdtLQ
OyUyEQcLYDoqOBk6aOvvROHvhBqWndYuQ19d9MXejL88MIChQHpXTblwGZzxnY7T
gtFD8JdXa0kbTh+EvAW0Uczl7W4dRfA2PkArFdH5CI3zZ4KaDpntC7fjXSpC1YI8
8BHmHzU2u0b3mJCcUEr6qWa0cDjQBn8BMipZA2MFcXQybNsFnYddSdr72YoAJqP5
rE7lzGz9fbx+7VbQQ8uzOK5q/uX2vuP5XAZMb7Ncs8kkiP9KjIW2WsrdED/7JLu2
Yx9mLJ6ujZqQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:05 2025 by rpki-client