Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ST7TK6Sxybv-m4-08vXb-PGSmWY.roa
File: ST7TK6Sxybv-m4-08vXb-PGSmWY.roa (raw, json)
Hash identifier: kq46jPc45blWDYqchrrOCmXDE4yaH6PcgWLab4+/190=
Subject key identifier: 49:3E:D3:2B:A4:B1:C9:BB:FE:9B:8F:B4:F2:F5:DB:F8:F1:92:99:66
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01948AE8991C5F1D002E4A0000AD6694DD26
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ST7TK6Sxybv-m4-08vXb-PGSmWY.roa
Signing time: Tue 21 Jan 2025 22:08:06 +0000
ROA not before: Tue 21 Jan 2025 22:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.2.0/32 maxlen: 32
94.131.3.0/24 maxlen: 24
94.131.3.0/32 maxlen: 32
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.99.0/32 maxlen: 32
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.19.0/32 maxlen: 32
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/21 maxlen: 24
95.164.114.0/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:e8:99:1c:5f:1d:00:2e:4a:00:00:ad:66:94:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 21 22:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=493ed32ba4b1c9bbfe9b8fb4f2f5dbf8f1929966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:a6:01:13:00:7d:a2:da:ff:f1:b2:26:94:
5e:86:46:38:32:6a:7c:16:ee:34:6a:d5:1d:ca:0c:
ae:f6:71:65:d7:91:e9:c7:91:a4:6b:0e:78:92:56:
65:0c:06:3f:f5:83:19:4d:66:0f:f6:04:3e:ae:7f:
e4:0e:db:36:5a:55:d0:0d:3c:4a:cb:a7:7e:e4:7a:
c0:42:f9:78:69:e5:97:61:4c:45:35:52:c7:ea:8b:
50:fc:85:48:0e:89:c2:a7:12:58:ca:28:39:96:9f:
fe:e9:8b:aa:b5:7a:9b:95:e8:ea:d6:e2:a3:42:be:
8d:fc:71:a3:13:25:59:09:21:46:36:d5:ae:37:95:
f1:99:d5:3d:8e:2e:10:38:30:a6:8e:70:9e:64:6a:
08:fc:ff:ac:40:4c:a8:1e:45:c0:14:ec:f8:e7:d9:
1e:57:c7:e8:b2:61:5d:31:9f:9d:7c:f2:6b:a7:ce:
ea:b4:48:05:7b:c9:71:63:22:fb:a7:f5:83:1e:23:
85:8b:7f:14:90:61:7b:a5:25:ac:d6:c0:6c:5c:a1:
28:ef:a7:b1:e1:41:e5:e7:d9:e8:78:d8:a6:7b:b0:
7f:d7:c2:c6:b4:33:7e:f0:59:e4:56:ad:cb:e1:73:
d6:ef:eb:3f:3f:b0:bf:b3:1a:2a:02:a0:f8:7c:06:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:D3:2B:A4:B1:C9:BB:FE:9B:8F:B4:F2:F5:DB:F8:F1:92:99:66
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ST7TK6Sxybv-m4-08vXb-PGSmWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.96.0/20
94.131.116.0-94.131.123.255
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
95.164.112.0/21
Signature Algorithm: sha256WithRSAEncryption
86:7e:11:36:dc:d4:ec:f4:90:5f:24:51:7b:ca:eb:0c:ee:10:
72:76:63:25:9d:69:54:6b:cf:e7:ec:e6:ce:89:b7:ba:5c:45:
43:82:8d:6e:a3:5f:83:20:2e:9b:6c:2d:ab:00:ca:4f:cb:ed:
c0:89:76:63:18:44:71:4b:dd:d0:9b:b9:ab:cc:aa:65:ae:cc:
94:03:37:48:77:48:98:4b:d5:27:c6:0a:99:eb:7a:3a:25:d5:
88:c3:2e:e3:71:f0:7e:69:5d:f2:94:af:65:d5:16:ae:74:fd:
02:a6:68:93:8f:9d:89:36:29:c6:67:32:15:e2:f2:9e:a2:5d:
6b:ba:92:04:4d:47:03:ef:53:21:5e:26:e4:80:ed:ef:12:a8:
a8:e3:03:1b:e1:6a:f9:82:61:03:a2:66:36:a9:7d:5e:44:12:
6b:f4:27:43:e6:c2:2f:ef:b6:3e:0c:18:74:20:df:2e:5c:08:
ce:23:e4:4f:96:64:1d:21:4b:76:fd:cd:56:8b:bc:8e:b7:b8:
55:3d:df:4f:b7:d0:f1:9a:c2:44:ca:8f:f0:ce:d6:83:cb:fb:
0f:22:37:f3:28:ea:82:81:4b:ab:43:46:f8:7f:2e:7b:a6:a0:
fd:8a:09:f7:64:70:4e:e4:db:31:65:c5:cc:dc:06:46:7a:e1:
12:ca:2c:d2
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAZSK6JkcXx0ALkoAAK1mlN0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTIxMjIwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTNlZDMyYmE0YjFjOWJiZmU5YjhmYjRmMmY1ZGJmOGYxOTI5OTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jOmARMAfaLa//GyJpRehkY4Mmp8
Fu40atUdygyu9nFl15Hpx5Gkaw54klZlDAY/9YMZTWYP9gQ+rn/kDts2WlXQDTxK
y6d+5HrAQvl4aeWXYUxFNVLH6otQ/IVIDonCpxJYyig5lp/+6YuqtXqblejq1uKj
Qr6N/HGjEyVZCSFGNtWuN5XxmdU9ji4QODCmjnCeZGoI/P+sQEyoHkXAFOz459ke
V8fosmFdMZ+dfPJrp87qtEgFe8lxYyL7p/WDHiOFi38UkGF7pSWs1sBsXKEo76ex
4UHl59noeNime7B/18LGtDN+8FnkVq3L4XPW7+s/P7C/sxoqAqD4fAZHpQIDAQAB
o4ICcTCCAm0wHQYDVR0OBBYEFEk+0yukscm7/puPtPL12/jxkplmMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvU1Q3VEs2U3h5YnYtbTQtMDh2WGItUEdTbVdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMEAV6DAgME
BF6DYDAMAwQCXoN0AwQCXoN4MAsDAwJfpAMEAl+kCAMEAl+kEDAMAwQAX6QVAwQD
X6QQAwQDX6QgAwQCX6QsAwQAX6QzAwQCX6Q8AwQBX6REMAwDBAJfpFQDBAFfpFgD
BANfpHAwDQYJKoZIhvcNAQELBQADggEBAIZ+ETbc1Oz0kF8kUXvK6wzuEHJ2YyWd
aVRrz+fs5s6Jt7pcRUOCjW6jX4MgLptsLasAyk/L7cCJdmMYRHFL3dCbuavMqmWu
zJQDN0h3SJhL1SfGCpnrejol1YjDLuNx8H5pXfKUr2XVFq50/QKmaJOPnYk2KcZn
MhXi8p6iXWu6kgRNRwPvUyFeJuSA7e8SqKjjAxvhavmCYQOiZjapfV5EEmv0J0Pm
wi/vtj4MGHQg3y5cCM4j5E+WZB0hS3b9zVaLvI63uFU930+30PGawkTKj/DO1oPL
+w8iN/Mo6oKBS6tDRvh/LnumoP2KCfdkcE7k2zFlxczcBkZ64RLKLNI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:47 2025 by rpki-client