Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3FNaPmoqLKIxrNoVrVaH24x-E1A.roa
File: 3FNaPmoqLKIxrNoVrVaH24x-E1A.roa (raw, json)
Hash identifier: XIWz7kQNkQS3AAhZX2wkan+hQwoAWaxsNvz3Zga4yLw=
Subject key identifier: DC:53:5A:3E:6A:2A:2C:A2:31:AC:DA:15:AD:56:87:DB:8C:7E:13:50
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018245606C14C15EADEA15FAF1C00C1A01D9
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3FNaPmoqLKIxrNoVrVaH24x-E1A.roa
Signing time: Thu 28 Jul 2022 15:15:23 +0000
ROA not before: Thu 28 Jul 2022 15:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49468
IP address blocks: 193.32.161.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.13.214.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
45.13.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:60:6c:14:c1:5e:ad:ea:15:fa:f1:c0:0c:1a:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jul 28 15:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc535a3e6a2a2ca231acda15ad5687db8c7e1350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:a3:e0:d6:29:f2:a5:99:6c:2d:f8:5d:09:
bc:01:c7:8e:12:05:13:da:c1:7e:66:c4:e2:d8:ed:
47:06:2f:5f:80:e5:0c:39:25:b6:55:b8:32:36:ab:
65:86:cb:71:25:ea:1d:52:1f:88:c5:d5:48:9e:aa:
51:30:9f:fd:3c:2e:5b:44:c2:28:7c:4d:e8:bf:43:
00:de:a2:f0:65:99:16:99:cc:88:19:7c:0b:93:8b:
12:d2:f1:bf:f2:f1:3b:f8:28:5f:eb:01:1e:e1:2b:
b6:0e:1c:5b:55:d9:2a:13:c0:ad:38:53:51:12:b0:
ed:86:49:6b:f9:41:a0:67:db:0b:1e:ac:61:c3:7d:
ba:f4:a6:0b:66:9a:b9:36:96:9e:f0:02:8c:b9:05:
55:1a:f2:3a:02:83:cb:8b:b5:91:d0:11:fc:ef:24:
68:bf:6b:bb:89:45:a5:ba:a1:1a:77:05:4e:12:cf:
3a:c3:5b:c3:3a:1c:93:2f:2f:e9:a6:b8:1c:3b:35:
59:91:21:35:aa:ed:4d:2a:37:a9:08:4d:bb:a4:46:
41:8e:f8:cc:68:e7:14:de:aa:ac:1a:2c:a9:9e:0a:
1f:46:f4:ba:3f:05:fe:0e:62:ba:7d:f1:98:c2:6b:
75:ad:fd:34:f1:7c:19:0d:77:5a:5e:fa:99:2f:d9:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:5A:3E:6A:2A:2C:A2:31:AC:DA:15:AD:56:87:DB:8C:7E:13:50
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3FNaPmoqLKIxrNoVrVaH24x-E1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.36.0/24
45.13.214.0/23
45.129.12.0/24
193.29.12.0/24
193.32.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:72:62:e1:aa:8c:64:e7:c3:3c:cb:55:df:eb:ae:ad:48:1e:
fc:db:a0:ef:d6:ea:18:bc:70:0d:8b:de:92:b4:3c:64:01:3d:
ed:67:78:f5:f4:d4:5f:b9:ad:b9:02:92:e0:a2:ec:a6:52:f9:
4f:68:fc:77:d1:12:81:d6:fd:85:13:3f:19:a3:b6:bc:34:bb:
0f:16:81:ab:0a:7d:ef:db:2b:d9:3f:f5:36:0d:61:e5:f8:f3:
b1:ff:7b:a5:6f:42:94:98:20:87:b4:5b:7d:db:8c:5d:2f:15:
86:df:45:3f:89:b9:64:bb:68:ba:c6:e9:86:c6:b1:48:3a:61:
78:74:54:b7:61:91:45:ef:32:2c:ba:f7:4d:63:85:16:7c:e8:
b1:03:06:2b:73:f1:5a:75:94:88:86:28:30:82:66:27:f2:b9:
fa:9b:a6:66:1b:9d:c6:69:59:ad:d1:a0:88:6e:a0:58:47:a3:
fd:ff:6a:72:9d:a5:f4:ac:f0:02:23:cf:32:d9:69:69:0f:28:
05:ac:84:b1:1a:01:3e:8c:c2:7b:45:42:49:94:77:3d:e0:da:
7f:2a:98:7f:62:f2:a5:65:8e:ca:09:b3:d0:af:aa:bb:b9:38:
17:e3:b4:98:77:88:9f:43:79:4e:6c:fe:e1:7f:20:b4:fb:4c:
ee:84:fa:a5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYJFYGwUwV6t6hX68cAMGgHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjIwNzI4MTUxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzUzNWEzZTZhMmEyY2EyMzFhY2RhMTVhZDU2ODdkYjhjN2UxMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRyj4NYp8qWZbC34XQm8AceOEgUT
2sF+ZsTi2O1HBi9fgOUMOSW2VbgyNqtlhstxJeodUh+IxdVInqpRMJ/9PC5bRMIo
fE3ov0MA3qLwZZkWmcyIGXwLk4sS0vG/8vE7+Chf6wEe4Su2DhxbVdkqE8CtOFNR
ErDthklr+UGgZ9sLHqxhw3269KYLZpq5Npae8AKMuQVVGvI6AoPLi7WR0BH87yRo
v2u7iUWluqEadwVOEs86w1vDOhyTLy/pprgcOzVZkSE1qu1NKjepCE27pEZBjvjM
aOcU3qqsGiypngofRvS6PwX+DmK6ffGYwmt1rf008XwZDXdaXvqZL9lKGQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNxTWj5qKiyiMazaFa1Wh9uMfhNQMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvM0ZOYVBtb3FMS0l4ck5vVnJWYUgyNHgtRTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQ0kAwQB
LQ3WAwQALYEMAwQAwR0MAwQAwSChMA0GCSqGSIb3DQEBCwUAA4IBAQBscmLhqoxk
58M8y1Xf666tSB7826Dv1uoYvHANi96StDxkAT3tZ3j19NRfua25ApLgouymUvlP
aPx30RKB1v2FEz8Zo7a8NLsPFoGrCn3v2yvZP/U2DWHl+POx/3ulb0KUmCCHtFt9
24xdLxWG30U/iblku2i6xumGxrFIOmF4dFS3YZFF7zIsuvdNY4UWfOixAwYrc/Fa
dZSIhigwgmYn8rn6m6ZmG53GaVmt0aCIbqBYR6P9/2pynaX0rPACI88y2WlpDygF
rISxGgE+jMJ7RUJJlHc94Np/Kph/YvKlZY7KCbPQr6q7uTgX47SYd4ifQ3lObP7h
fyC0+0zuhPql
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:25 2025 by rpki-client