Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/lG9M0ytelOsltsM45OHzpDj8VA0.roa
File: lG9M0ytelOsltsM45OHzpDj8VA0.roa (raw, json)
Hash identifier: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=
Subject key identifier: 94:6F:4C:D3:2B:5E:94:EB:25:B6:C3:38:E4:E1:F3:A4:38:FC:54:0D
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 0194258FCA09A10B13AABF056D03D04A6BC8
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/lG9M0ytelOsltsM45OHzpDj8VA0.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62352
IP address blocks: 86.105.199.0/24 maxlen: 24
93.117.174.0/24 maxlen: 24
109.205.140.0/23 maxlen: 23
109.205.140.0/24 maxlen: 24
109.205.141.0/24 maxlen: 24
109.205.142.0/23 maxlen: 23
109.205.142.0/24 maxlen: 24
109.205.143.0/24 maxlen: 24
176.126.173.0/24 maxlen: 24
185.39.40.0/22 maxlen: 22
185.39.40.0/24 maxlen: 24
185.39.41.0/24 maxlen: 24
185.39.42.0/24 maxlen: 24
185.39.43.0/24 maxlen: 24
188.241.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ca:09:a1:0b:13:aa:bf:05:6d:03:d0:4a:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946f4cd32b5e94eb25b6c338e4e1f3a438fc540d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:dd:f3:89:2f:d0:c3:5f:54:b1:5a:8b:25:
3d:85:2d:a6:db:2f:19:e8:24:d4:e2:0f:bb:99:58:
a4:a4:a6:3b:be:bc:1c:86:b1:e6:b0:08:0c:e9:fb:
ec:06:92:ed:d5:aa:ae:86:ba:18:2f:64:8b:30:14:
b2:4b:2b:e6:d8:aa:bb:be:e0:d4:a8:a0:0d:84:9e:
80:6c:10:4c:af:14:7f:9f:b8:af:78:0f:21:1a:33:
d3:da:bd:fe:f7:fd:0d:29:00:48:df:02:b8:77:db:
2b:b7:ae:ea:bc:01:e7:73:89:65:63:f0:96:2d:49:
01:66:e5:1f:29:01:dd:6b:fa:a2:a6:3d:ff:71:31:
31:3d:56:41:11:ea:5b:e0:3f:c5:53:dc:f3:b7:e9:
30:e7:b5:fa:16:44:3d:ef:06:3a:42:14:1a:71:bd:
72:b6:88:5b:6a:58:a5:52:bf:4a:12:f6:b5:b4:7a:
1d:1a:ec:56:3e:6c:a5:f0:eb:4f:58:53:0b:77:76:
ba:a9:ff:59:ed:27:6b:d1:87:1f:22:26:c9:25:ae:
bd:f3:38:03:b8:f1:7c:af:87:a1:07:2e:77:b3:ca:
3e:0d:13:d6:2d:76:75:23:fa:cc:e4:51:09:2a:7f:
18:89:8d:bd:bd:38:05:54:81:c3:22:65:38:80:94:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:4C:D3:2B:5E:94:EB:25:B6:C3:38:E4:E1:F3:A4:38:FC:54:0D
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/lG9M0ytelOsltsM45OHzpDj8VA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.199.0/24
93.117.174.0/24
109.205.140.0/22
176.126.173.0/24
185.39.40.0/22
188.241.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bc:33:be:e1:ac:b5:b9:f4:f6:7b:a3:2e:a7:0b:2d:41:e7:
4a:cb:d8:9c:f8:80:ef:ab:9f:67:36:91:4c:cc:f0:d3:14:9f:
7e:41:43:cf:ed:55:9d:55:1b:e0:b9:40:35:be:8c:3e:31:9a:
1c:89:5f:a1:14:63:18:b1:89:9b:83:9f:fc:9c:80:d0:b6:e4:
54:63:bd:f1:54:bd:4f:bd:1c:cd:77:6f:23:dc:05:f7:17:1e:
bc:27:d5:32:98:58:10:7d:8b:c2:b0:d8:e2:e6:1d:9a:b5:e2:
1a:92:5e:1a:a9:18:6e:16:f0:60:28:ac:2f:e5:41:a6:a7:5e:
83:29:61:3d:6d:2b:3b:c3:1e:da:ae:71:eb:5d:9a:6c:cc:9d:
c9:6b:d0:81:02:11:9e:4e:46:8c:d4:32:41:ce:92:74:ff:85:
4a:bb:78:e3:11:ac:4a:d8:65:3b:c2:d2:1f:53:08:22:f9:e3:
a2:d5:0d:f2:23:92:11:14:89:df:7c:c2:e0:37:e8:9c:97:59:
66:01:74:2e:1a:cd:37:a7:0d:ee:c1:36:ae:18:a6:78:77:0e:
ef:be:4a:f4:92:15:d9:31:1b:d5:4c:49:97:4b:81:af:11:f0:
ca:7e:54:fc:c4:ae:c1:c4:e1:19:f1:17:26:8c:d3:79:e5:4c:
c1:7a:25:ce
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQlj8oJoQsTqr8FbQPQSmvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDBmOTY4ZmE1MmU2Y2IyZmU2NTcxMDk3MDBmYTA3NGMx
OTBiODUwHhcNMjUwMTAyMDU0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDZmNGNkMzJiNWU5NGViMjViNmMzMzhlNGUxZjNhNDM4ZmM1NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBTd84kv0MNfVLFaiyU9hS2m2y8Z
6CTU4g+7mVikpKY7vrwchrHmsAgM6fvsBpLt1aquhroYL2SLMBSySyvm2Kq7vuDU
qKANhJ6AbBBMrxR/n7iveA8hGjPT2r3+9/0NKQBI3wK4d9srt67qvAHnc4llY/CW
LUkBZuUfKQHda/qipj3/cTExPVZBEepb4D/FU9zzt+kw57X6FkQ97wY6QhQacb1y
tohbalilUr9KEva1tHodGuxWPmyl8OtPWFMLd3a6qf9Z7Sdr0YcfIibJJa698zgD
uPF8r4ehBy53s8o+DRPWLXZ1I/rM5FEJKn8YiY29vTgFVIHDImU4gJQg0QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJRvTNMrXpTrJbbDOOTh86Q4/FQNMB8GA1UdIwQY
MBaAFKBA+Wj6UubLL+ZXEJcA+gdMGQuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUt
M2I2YjBhNTU1NWVmLzEvbEc5TTB5dGVsT3NsdHNNNDVPSHpwRGo4VkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUtM2I2YjBhNTU1NWVm
LzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVmnHAwQA
XXWuAwQCbc2MAwQAsH6tAwQCuScoAwQAvPFBMA0GCSqGSIb3DQEBCwUAA4IBAQBs
vDO+4ay1ufT2e6MupwstQedKy9ic+IDvq59nNpFMzPDTFJ9+QUPP7VWdVRvguUA1
vow+MZociV+hFGMYsYmbg5/8nIDQtuRUY73xVL1PvRzNd28j3AX3Fx68J9UymFgQ
fYvCsNji5h2ateIakl4aqRhuFvBgKKwv5UGmp16DKWE9bSs7wx7arnHrXZpszJ3J
a9CBAhGeTkaM1DJBzpJ0/4VKu3jjEaxK2GU7wtIfUwgi+eOi1Q3yI5IRFInffMLg
N+icl1lmAXQuGs03pw3uwTauGKZ4dw7vvkr0khXZMRvVTEmXS4GvEfDKflT8xK7B
xOEZ8RcmjNN55UzBeiXO
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:56 2025 by rpki-client