Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/vpLxf1q5-MVmiV39db_Ph6LQBPY.roa
File: vpLxf1q5-MVmiV39db_Ph6LQBPY.roa (raw, json)
Hash identifier: OaQZhrU/Tck25ToiF/+vtK3pQYkkYAQV8AUucgwKr8I=
Subject key identifier: BE:92:F1:7F:5A:B9:F8:C5:66:89:5D:FD:75:BF:CF:87:A2:D0:04:F6
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3A7E52BFABEBCF3C4F45FCBB3938D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/vpLxf1q5-MVmiV39db_Ph6LQBPY.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 94.131.24.0/22 maxlen: 24
94.131.48.0/20 maxlen: 24
94.131.64.0/20 maxlen: 24
95.164.44.0/22 maxlen: 22
95.164.70.0/24 maxlen: 24
95.164.128.0/20 maxlen: 24
95.164.168.0/23 maxlen: 24
95.164.192.0/22 maxlen: 24
95.164.200.0/21 maxlen: 21
95.164.240.0/21 maxlen: 21
95.164.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:e5:2b:fa:be:bc:f3:c4:f4:5f:cb:b3:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be92f17f5ab9f8c566895dfd75bfcf87a2d004f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:02:69:53:fa:e1:24:0a:c7:fb:97:af:78:
a5:17:92:19:ad:19:85:fd:af:5f:0f:71:de:9a:9a:
4c:53:f1:34:47:37:33:1c:1d:47:09:74:ba:6c:4c:
9c:f5:aa:4d:c9:07:8f:e6:29:64:b7:49:fa:b5:18:
5b:de:8a:f5:ec:de:ae:97:1e:b1:c7:67:a3:1f:81:
19:eb:ca:62:76:bc:d7:5f:7a:d4:b8:fe:f6:33:9c:
0e:9f:da:c9:b4:19:6d:fb:57:bd:63:e8:27:fd:ec:
2d:ec:13:49:3f:55:b4:cd:40:41:81:34:df:b5:e0:
6c:6b:f1:1b:20:34:9d:0a:9f:b9:76:9d:3a:f0:c6:
d2:e1:6b:82:1e:70:e3:79:c0:c5:2a:8b:bf:42:26:
d0:9e:b9:b9:98:e5:0b:73:bd:89:af:2d:08:ad:e6:
43:dd:08:09:7e:5b:b6:e1:a5:0c:c8:0b:8d:9d:67:
43:70:69:53:bd:fb:46:c2:d9:fe:87:62:6d:85:3b:
7e:c6:d4:e3:e9:c6:0d:ff:9c:a4:d3:17:1f:da:0a:
3d:b0:c1:c1:cc:1c:cf:5c:e8:7c:97:89:e8:8a:84:
36:41:f3:fb:0d:04:0f:61:61:50:9f:4a:50:08:70:
8c:ee:94:4f:20:69:46:22:be:56:3d:cc:b1:2a:99:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:F1:7F:5A:B9:F8:C5:66:89:5D:FD:75:BF:CF:87:A2:D0:04:F6
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/vpLxf1q5-MVmiV39db_Ph6LQBPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.24.0/22
94.131.48.0-94.131.79.255
95.164.44.0/22
95.164.70.0/24
95.164.128.0/20
95.164.168.0/23
95.164.192.0/22
95.164.200.0/21
95.164.240.0/21
95.164.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:85:12:e7:44:c3:f6:48:b8:ad:5b:36:28:6f:5f:36:5a:61:
0b:f1:9d:65:ee:75:05:40:64:94:0e:35:f2:df:09:2a:6c:ba:
fb:e0:11:c0:1e:dc:ba:d3:2b:d8:8f:c5:de:33:5c:e3:3a:5b:
56:86:58:0d:19:9e:df:31:d1:71:ac:36:1d:80:16:f6:4f:88:
6c:c5:1b:08:a5:72:d9:20:89:28:fe:9c:87:d3:4a:f5:9d:9a:
67:58:ce:d4:21:8b:65:79:a2:c7:be:24:51:2e:d8:12:48:fa:
44:5f:63:04:03:b9:57:c4:6d:81:f1:82:9d:ce:a0:17:e0:e8:
3b:ea:54:df:22:d1:c1:95:27:de:4c:1b:a2:89:1b:38:74:ff:
49:3f:56:92:e6:0e:a4:7c:c3:32:bf:94:db:48:26:08:27:c8:
ef:f7:e8:33:f3:7d:0b:91:1c:10:97:95:15:19:21:71:27:7b:
95:27:6d:36:70:27:5c:81:05:40:20:fb:c7:ef:ef:b2:17:69:
4b:4a:ea:a2:f1:f9:12:d5:aa:31:04:18:05:a6:e1:58:bf:9d:
4c:9e:cd:8f:bc:cf:f7:30:ae:57:d6:92:b8:b8:32:ba:f9:9e:
5f:e2:0f:f6:a4:42:98:5d:c8:70:79:b5:f9:22:2a:7c:ad:e3:
24:1d:54:d3
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZQks6flK/q+vPPE9F/Ls5ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTkyZjE3ZjVhYjlmOGM1NjY4OTVkZmQ3NWJmY2Y4N2EyZDAwNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZECaVP64SQKx/uXr3ilF5IZrRmF
/a9fD3HemppMU/E0RzczHB1HCXS6bEyc9apNyQeP5ilkt0n6tRhb3or17N6ulx6x
x2ejH4EZ68pidrzXX3rUuP72M5wOn9rJtBlt+1e9Y+gn/ewt7BNJP1W0zUBBgTTf
teBsa/EbIDSdCp+5dp068MbS4WuCHnDjecDFKou/QibQnrm5mOULc72Jry0IreZD
3QgJflu24aUMyAuNnWdDcGlTvftGwtn+h2JthTt+xtTj6cYN/5yk0xcf2go9sMHB
zBzPXOh8l4noioQ2QfP7DQQPYWFQn0pQCHCM7pRPIGlGIr5WPcyxKpnj+wIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFL6S8X9aufjFZold/XW/z4ei0AT2MB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvdnBMeGYxcTUtTVZtaVYzOWRiX1BoNkxRQlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCXoMYMAwD
BARegzADBAReg0ADBAJfpCwDBABfpEYDBARfpIADBAFfpKgDBAJfpMADBANfpMgD
BANfpPADBAJfpPwwDQYJKoZIhvcNAQELBQADggEBAHWFEudEw/ZIuK1bNihvXzZa
YQvxnWXudQVAZJQONfLfCSpsuvvgEcAe3LrTK9iPxd4zXOM6W1aGWA0Znt8x0XGs
Nh2AFvZPiGzFGwilctkgiSj+nIfTSvWdmmdYztQhi2V5ose+JFEu2BJI+kRfYwQD
uVfEbYHxgp3OoBfg6DvqVN8i0cGVJ95MG6KJGzh0/0k/VpLmDqR8wzK/lNtIJggn
yO/36DPzfQuRHBCXlRUZIXEne5UnbTZwJ1yBBUAg+8fv77IXaUtK6qLx+RLVqjEE
GAWm4Vi/nUyezY+8z/cwrlfWkri4Mrr5nl/iD/akQphdyHB5tfkiKnyt4yQdVNM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:45 2025 by rpki-client