Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M2_ELE6fQDHNjR6g7YKSf1N07oE.roa
File: M2_ELE6fQDHNjR6g7YKSf1N07oE.roa (raw, json)
Hash identifier: mXWMiNnEgOH30N8K0DlQBhLeouqBKiFoMv1Qjy208c4=
Subject key identifier: 33:6F:C4:2C:4E:9F:40:31:CD:8D:1E:A0:ED:82:92:7F:53:74:EE:81
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3AFFF3C531B9A45684B490CA13D1C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M2_ELE6fQDHNjR6g7YKSf1N07oE.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 94.131.101.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
95.164.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:af:ff:3c:53:1b:9a:45:68:4b:49:0c:a1:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336fc42c4e9f4031cd8d1ea0ed82927f5374ee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:da:8a:7c:ae:e2:ed:b8:bc:b7:f9:55:58:
6a:db:01:9a:0e:69:60:db:22:85:43:bc:7d:0a:65:
ab:e7:cf:9c:94:e1:e5:89:10:8a:d0:c7:f7:83:8f:
b1:63:1b:a3:7c:9b:e9:22:93:7c:50:35:c9:d8:f8:
58:b1:82:73:18:bd:e7:7c:2a:5f:c2:1e:0d:83:51:
38:61:52:7f:9d:e4:ea:bb:cb:7a:27:1c:39:0e:ab:
29:b9:3d:95:2f:fa:86:c0:7d:a7:db:ff:70:fd:eb:
4a:c6:78:82:ab:cb:06:a3:07:40:bc:68:a0:64:f9:
59:b2:00:26:61:01:a5:c8:d7:cc:5d:64:5f:22:71:
11:c1:95:3e:60:01:4c:fc:27:50:6c:e3:14:00:2a:
72:56:1e:21:36:63:1b:a4:31:50:92:b3:f9:52:3b:
79:ed:75:b1:d7:b0:4e:6f:5f:fa:b1:17:64:99:ae:
08:07:8e:1a:ba:52:9a:20:45:73:e5:38:62:d5:96:
20:a9:46:7f:83:4e:58:4e:e7:c0:28:8f:05:f3:73:
5b:d9:30:89:28:b8:1e:78:e8:f6:0c:fd:18:4a:57:
5b:b8:cc:8c:92:b6:9c:de:ff:cc:8b:db:48:35:9e:
53:22:f8:18:b6:f9:ec:48:6b:38:d4:b3:ae:84:08:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:C4:2C:4E:9F:40:31:CD:8D:1E:A0:ED:82:92:7F:53:74:EE:81
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M2_ELE6fQDHNjR6g7YKSf1N07oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.101.0/24
94.131.109.0-94.131.111.255
95.164.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3d:4c:02:9a:3c:40:f2:04:4d:fb:97:dd:4d:7d:1d:a3:aa:
1e:7e:0f:71:fe:ed:17:18:b6:7b:f4:22:d5:00:58:0b:6c:c1:
a3:03:c3:da:8a:76:4d:0b:f4:07:53:c7:51:b9:00:bc:c4:06:
04:db:79:5e:c1:08:4b:58:74:67:42:21:6a:99:0a:3c:97:6f:
03:cd:39:f8:6f:cb:97:b0:76:62:40:a3:a6:70:30:2e:e9:bf:
9c:5a:a3:17:7d:b8:4c:86:5f:db:59:44:26:bc:ae:96:29:1b:
90:a4:ac:97:a6:81:f4:a8:66:29:69:aa:d9:55:bf:8e:d0:ad:
7a:2d:b3:0e:38:39:64:47:f1:41:c1:ae:9f:dd:31:ba:ad:07:
8e:82:e5:97:e3:95:dd:bb:54:b2:78:0d:ae:8f:b4:72:10:55:
ac:5f:bd:1e:a0:6c:99:73:8c:6d:4c:18:e7:32:28:82:cf:d2:
90:f3:89:8a:78:37:b5:44:28:52:b6:d9:8e:34:a7:17:85:5f:
d4:90:f0:3e:44:8f:6e:03:70:3d:23:9e:87:87:6e:be:c2:5e:
34:71:29:51:e8:92:1d:6e:40:b6:bc:a8:42:0e:c9:b0:52:15:
9f:4a:0b:88:af:0e:42:df:ad:de:7c:b7:89:b1:0f:88:b8:f4:
9a:b4:01:1c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQks6//PFMbmkVoS0kMoT0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzZmYzQyYzRlOWY0MDMxY2Q4ZDFlYTBlZDgyOTI3ZjUzNzRlZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hrainyu4u24vLf5VVhq2wGaDmlg
2yKFQ7x9CmWr58+clOHliRCK0Mf3g4+xYxujfJvpIpN8UDXJ2PhYsYJzGL3nfCpf
wh4Ng1E4YVJ/neTqu8t6Jxw5DqspuT2VL/qGwH2n2/9w/etKxniCq8sGowdAvGig
ZPlZsgAmYQGlyNfMXWRfInERwZU+YAFM/CdQbOMUACpyVh4hNmMbpDFQkrP5Ujt5
7XWx17BOb1/6sRdkma4IB44aulKaIEVz5Thi1ZYgqUZ/g05YTufAKI8F83Nb2TCJ
KLgeeOj2DP0YSldbuMyMkrac3v/Mi9tINZ5TIvgYtvnsSGs41LOuhAgQQQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDNvxCxOn0AxzY0eoO2Ckn9TdO6BMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvTTJfRUxFNmZRREhOalI2ZzdZS1NmMU4wN29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXoNlMAwD
BABeg20DBAReg2ADBABfpBAwDQYJKoZIhvcNAQELBQADggEBAIw9TAKaPEDyBE37
l91NfR2jqh5+D3H+7RcYtnv0ItUAWAtswaMDw9qKdk0L9AdTx1G5ALzEBgTbeV7B
CEtYdGdCIWqZCjyXbwPNOfhvy5ewdmJAo6ZwMC7pv5xaoxd9uEyGX9tZRCa8rpYp
G5CkrJemgfSoZilpqtlVv47QrXotsw44OWRH8UHBrp/dMbqtB46C5Zfjld27VLJ4
Da6PtHIQVaxfvR6gbJlzjG1MGOcyKILP0pDziYp4N7VEKFK22Y40pxeFX9SQ8D5E
j24DcD0jnoeHbr7CXjRxKVHokh1uQLa8qEIOybBSFZ9KC4ivDkLfrd58t4mxD4i4
9Jq0ARw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:43 2025 by rpki-client