Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/pi020TsW0QReka4EU_X98LZY30k.roa
File: pi020TsW0QReka4EU_X98LZY30k.roa (raw, json)
Hash identifier: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=
Subject key identifier: A6:2D:36:D1:3B:16:D1:04:5E:91:AE:04:53:F5:FD:F0:B6:58:DF:49
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0195D1D5BB2126795570F4546CD24D75BB80
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/pi020TsW0QReka4EU_X98LZY30k.roa
Signing time: Wed 26 Mar 2025 09:43:20 +0000
ROA not before: Wed 26 Mar 2025 09:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206576
IP address blocks: 5.181.72.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
83.150.252.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
2a0d:7680::/29 maxlen: 48
2a0e:a1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:d5:bb:21:26:79:55:70:f4:54:6c:d2:4d:75:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 26 09:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a62d36d13b16d1045e91ae0453f5fdf0b658df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:52:26:d0:4b:96:a4:b6:a0:d0:78:45:ad:
3d:89:2c:6a:48:93:e8:91:55:06:ab:34:b3:2d:e5:
d0:9b:d0:07:61:61:4e:36:29:24:bf:a1:9b:74:89:
74:95:be:d0:a3:d1:61:30:97:93:40:5d:da:75:74:
29:94:94:80:87:9b:38:8a:38:a1:ce:9b:9b:41:6a:
f1:8f:ff:07:9a:61:20:00:fb:be:61:f7:50:fc:46:
88:08:96:61:6a:53:40:11:93:99:83:f8:a8:a2:74:
53:57:ae:24:a6:dc:0c:4a:e4:45:fb:5a:f1:fb:b4:
1a:21:37:79:a4:4b:17:73:7b:86:2b:ab:7b:be:dc:
c0:f6:a7:a8:46:31:18:dd:2e:5f:97:f3:d1:e7:65:
2e:38:3d:8f:8a:3c:9e:b1:2e:61:84:be:c0:31:03:
f2:9f:21:3d:33:8f:66:8e:da:b1:d6:a4:f4:ed:29:
5d:ab:47:26:0f:19:23:f1:e4:a8:dd:54:37:cb:d7:
51:d9:37:45:49:ab:9d:79:67:71:1c:1d:de:1d:e5:
0e:6e:3f:1b:19:fe:2a:79:b1:06:b5:0e:b5:10:e6:
97:2b:8c:56:26:6d:ae:8c:bb:eb:96:ab:16:2d:d3:
1b:be:02:d0:6b:06:68:8a:d9:ad:b0:1d:6e:53:77:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:36:D1:3B:16:D1:04:5E:91:AE:04:53:F5:FD:F0:B6:58:DF:49
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/pi020TsW0QReka4EU_X98LZY30k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.72.0/22
45.137.44.0/22
83.150.252.0/22
185.90.0.0/22
185.182.200.0/23
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/24
185.248.254.0/24
IPv6:
2a0d:7680::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
03:ce:7f:6d:3b:af:df:68:17:f2:ac:75:2b:3b:45:83:da:1b:
ce:f0:b1:15:0c:d2:f8:30:9a:5d:8b:10:1e:c7:be:3d:5d:95:
78:cb:ec:2b:c9:b2:f5:7e:3c:15:1f:8e:0a:2a:c8:c6:2e:fd:
7b:7b:1e:8d:0d:6e:35:cb:6b:47:77:40:50:ab:3b:00:91:34:
44:e4:56:21:2f:b0:ed:58:3a:9a:0a:55:88:9d:a7:ee:2a:93:
cf:51:a7:37:ac:b5:f5:d0:18:13:c5:ac:bf:b5:f5:cd:46:f5:
3c:4f:d1:8c:85:dd:9d:23:24:ee:7e:42:cd:27:9c:84:db:28:
be:d8:f8:5c:6a:85:99:b4:a3:ca:dc:67:7f:2c:1d:1d:79:30:
62:d5:94:4e:0e:f6:86:e7:14:7b:22:8f:ab:62:9e:de:b0:c6:
dc:0a:75:67:06:3b:ee:92:b6:d9:de:98:b6:0c:de:69:26:9a:
83:25:75:d4:11:c1:c1:ef:fe:5f:1d:7e:e4:66:c2:34:56:0e:
2f:8d:36:3e:61:59:ff:6b:51:2b:5e:6b:64:f0:10:4e:ba:ba:
ab:92:37:cd:e5:51:a0:04:f2:60:ef:0a:eb:c8:88:45:66:1a:
bf:e7:80:6c:2a:e0:88:82:f9:33:2c:bb:14:ba:df:7b:89:b7:
b4:d8:0d:e0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZXR1bshJnlVcPRUbNJNdbuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwMzI2MDk0MzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjJkMzZkMTNiMTZkMTA0NWU5MWFlMDQ1M2Y1ZmRmMGI2NThkZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqURSJtBLlqS2oNB4Ra09iSxqSJPo
kVUGqzSzLeXQm9AHYWFONikkv6GbdIl0lb7Qo9FhMJeTQF3adXQplJSAh5s4ijih
zpubQWrxj/8HmmEgAPu+YfdQ/EaICJZhalNAEZOZg/ioonRTV64kptwMSuRF+1rx
+7QaITd5pEsXc3uGK6t7vtzA9qeoRjEY3S5fl/PR52UuOD2PijyesS5hhL7AMQPy
nyE9M49mjtqx1qT07Sldq0cmDxkj8eSo3VQ3y9dR2TdFSaudeWdxHB3eHeUObj8b
Gf4qebEGtQ61EOaXK4xWJm2ujLvrlqsWLdMbvgLQawZoitmtsB1uU3er+QIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFKYtNtE7FtEEXpGuBFP1/fC2WN9JMB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvcGkwMjBUc1cwUVJla2E0RVVfWDk4TFpZMzBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCBbVIAwQC
LYksAwQCU5b8AwQCuVoAAwQBubbIAwQCueUEAwQCufaEAwQCuffIAwQAufj8AwQA
ufj+MBQEAgACMA4DBQMqDXaAAwUDKg6hwDANBgkqhkiG9w0BAQsFAAOCAQEAA85/
bTuv32gX8qx1KztFg9obzvCxFQzS+DCaXYsQHse+PV2VeMvsK8my9X48FR+OCirI
xi79e3sejQ1uNctrR3dAUKs7AJE0RORWIS+w7Vg6mgpViJ2n7iqTz1GnN6y19dAY
E8Wsv7X1zUb1PE/RjIXdnSMk7n5CzSechNsovtj4XGqFmbSjytxnfywdHXkwYtWU
Tg72hucUeyKPq2Ke3rDG3Ap1ZwY77pK22d6YtgzeaSaagyV11BHBwe/+Xx1+5GbC
NFYOL402PmFZ/2tRK15rZPAQTrq6q5I3zeVRoATyYO8K68iIRWYav+eAbCrgiIL5
Myy7FLrfe4m3tNgN4A==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:31:11 2025 by rpki-client