Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/O5GnksaRAfpjOk5OBct7XmNv9hk.roa
File: O5GnksaRAfpjOk5OBct7XmNv9hk.roa (raw, json)
Hash identifier: fa+dkVV1DJjEQUauv7sIvLCkPu2XVKvV028/G6lfJuI=
Subject key identifier: 3B:91:A7:92:C6:91:01:FA:63:3A:4E:4E:05:CB:7B:5E:63:6F:F6:19
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 0183D620CB8220C20DCF9D6F65457CD7612F
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/O5GnksaRAfpjOk5OBct7XmNv9hk.roa
Signing time: Fri 14 Oct 2022 10:53:36 +0000
ROA not before: Fri 14 Oct 2022 10:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
45.85.132.0/22 maxlen: 22
185.144.24.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
45.155.228.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
45.9.104.0/22 maxlen: 22
91.227.36.0/22 maxlen: 22
2a05:46c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:20:cb:82:20:c2:0d:cf:9d:6f:65:45:7c:d7:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Oct 14 10:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b91a792c69101fa633a4e4e05cb7b5e636ff619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:72:6e:f3:68:f7:51:4a:7e:5d:96:10:85:
b3:cf:61:ad:73:a8:50:8c:cc:a7:b4:63:ae:18:d5:
fe:55:5f:0d:45:59:eb:eb:bf:10:1a:b3:20:74:d1:
44:49:1d:e0:7a:6a:fa:89:f6:f8:af:a7:ea:38:b4:
54:88:5d:2f:9b:25:46:8b:67:3e:7d:b2:4c:fe:5b:
c6:99:5c:cc:ef:1d:7a:0d:22:a6:b1:51:f6:8b:f7:
6b:22:b6:8c:cd:57:10:ec:9f:af:00:a0:61:81:7a:
7c:c8:ad:49:58:1a:44:7e:40:a8:12:17:c4:e2:a2:
83:0c:0c:de:23:5a:6d:d2:f7:77:6e:cb:1c:0e:6d:
10:2d:88:51:86:a8:78:62:fc:aa:dd:33:96:71:54:
ba:f2:02:e8:ea:3e:30:cc:d3:0c:eb:ee:6d:2b:54:
2f:50:2b:da:c7:67:2b:23:fb:09:e1:d7:ad:b4:a0:
e0:a1:b6:34:c7:43:09:2a:ca:36:1a:74:16:13:f6:
f5:41:2f:39:d5:3f:a2:12:9c:90:01:a4:df:9c:55:
b9:4b:67:38:40:2f:3f:d0:16:89:c6:f3:96:55:17:
37:dd:78:ca:66:f2:85:d2:3f:95:37:3f:d7:0a:ee:
ae:df:cb:62:f1:85:a1:fc:59:0d:2f:46:45:d7:29:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:A7:92:C6:91:01:FA:63:3A:4E:4E:05:CB:7B:5E:63:6F:F6:19
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/O5GnksaRAfpjOk5OBct7XmNv9hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
91.227.36.0/22
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:9c:43:7a:6d:13:68:5b:65:7b:47:ad:0a:75:f6:51:02:20:
ad:bd:d7:c9:6e:33:b1:46:25:3f:20:5e:e9:6b:35:af:64:b6:
d9:da:e1:30:e3:8f:5d:f4:11:01:17:eb:ea:4f:32:a3:b1:8b:
4c:0f:68:09:6d:5f:bb:31:64:87:d6:bd:98:61:72:28:4c:96:
d6:ed:7f:e8:6f:f6:66:9d:75:0f:39:a1:69:92:68:bd:7d:b0:
74:87:c0:20:39:f9:24:fe:99:33:25:c7:16:99:c3:f1:3d:63:
c4:c4:bd:57:8f:51:2b:53:3a:a3:0c:a6:81:14:91:e0:aa:0f:
a6:39:7d:52:ec:60:72:a9:20:07:fc:0c:80:6e:66:53:45:ac:
65:f3:d4:de:66:4a:d6:18:96:f1:08:33:ad:dc:f9:9d:76:c2:
1a:0e:ba:5c:14:b6:df:11:71:04:dd:50:9d:18:a1:be:e1:6c:
ff:4b:c0:28:b2:fc:70:53:32:a4:ed:87:bd:43:b8:7a:5b:28:
fd:06:32:21:5b:26:4d:dc:01:0f:bf:2b:1e:d4:fb:75:c9:86:
d0:a5:09:68:e0:af:63:4c:a9:37:33:1d:4d:76:02:88:b3:dd:
aa:e7:54:a8:03:86:02:d6:3b:e9:67:f6:a2:61:10:b8:5e:a5:
80:5f:ff:d0
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAYPWIMuCIMINz51vZUV812EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjQ3OWJkZjdlZGI5MGI1MWFhNzI5NjM0MTA0YzBkMjgw
MmFjOWYwHhcNMjIxMDE0MTA1MzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjkxYTc5MmM2OTEwMWZhNjMzYTRlNGUwNWNiN2I1ZTYzNmZmNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXpybvNo91FKfl2WEIWzz2Gtc6hQ
jMyntGOuGNX+VV8NRVnr678QGrMgdNFESR3gemr6ifb4r6fqOLRUiF0vmyVGi2c+
fbJM/lvGmVzM7x16DSKmsVH2i/drIraMzVcQ7J+vAKBhgXp8yK1JWBpEfkCoEhfE
4qKDDAzeI1pt0vd3bsscDm0QLYhRhqh4Yvyq3TOWcVS68gLo6j4wzNMM6+5tK1Qv
UCvax2crI/sJ4dettKDgobY0x0MJKso2GnQWE/b1QS851T+iEpyQAaTfnFW5S2c4
QC8/0BaJxvOWVRc33XjKZvKF0j+VNz/XCu6u38ti8YWh/FkNL0ZF1yns5QIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFDuRp5LGkQH6YzpOTgXLe15jb/YZMB8GA1UdIwQY
MBaAFMZkeb337bkLUapyljQQTA0oAqyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1SNXZmZnR1UXRScW5LV05CQk1EU2dDcko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zOTUyMjQtOGNhMi00NDRmLTk4NWIt
NWYwYjRjZTY0ODY3LzEvTzVHbmtzYVJBZnBqT2s1T0JjdDdYbU52OWhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zOTUyMjQtOGNhMi00NDRmLTk4NWItNWYwYjRjZTY0ODY3
LzEveG1SNXZmZnR1UXRScW5LV05CQk1EU2dDcko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQCLQloAwQC
LVWEAwQCLZvkAwQCW+MkMAwDBABdsUUDBANdsUADBAK5ScwDBAK5kBgwDQQCAAIw
BwMFAyoFRsAwDQYJKoZIhvcNAQELBQADggEBABacQ3ptE2hbZXtHrQp19lECIK29
18luM7FGJT8gXulrNa9kttna4TDjj130EQEX6+pPMqOxi0wPaAltX7sxZIfWvZhh
cihMltbtf+hv9maddQ85oWmSaL19sHSHwCA5+ST+mTMlxxaZw/E9Y8TEvVePUStT
OqMMpoEUkeCqD6Y5fVLsYHKpIAf8DIBuZlNFrGXz1N5mStYYlvEIM63c+Z12whoO
ulwUtt8RcQTdUJ0Yob7hbP9LwCiy/HBTMqTth71DuHpbKP0GMiFbJk3cAQ+/Kx7U
+3XJhtClCWjgr2NMqTczHU12Aoiz3arnVKgDhgLWO+ln9qJhELhepYBf/9A=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:31 2025 by rpki-client