Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/Fb4Aih2t-3x0svMSkoJF-OT975k.roa
File: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (raw, json)
Hash identifier: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=
Subject key identifier: 15:BE:00:8A:1D:AD:FB:7C:74:B2:F3:12:92:82:45:F8:E4:FD:EF:99
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019420D63593B82F5C31B9AD1EE7011F6FC4
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/Fb4Aih2t-3x0svMSkoJF-OT975k.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.196.0/22 maxlen: 22
66.22.200.0/22 maxlen: 22
66.22.204.0/22 maxlen: 22
66.22.208.0/22 maxlen: 22
66.22.212.0/22 maxlen: 22
66.22.216.0/23 maxlen: 23
66.22.218.0/23 maxlen: 23
66.22.220.0/23 maxlen: 23
66.22.222.0/23 maxlen: 23
66.22.224.0/23 maxlen: 23
66.22.226.0/23 maxlen: 23
66.22.230.0/24 maxlen: 24
66.22.231.0/24 maxlen: 24
66.22.232.0/24 maxlen: 24
66.22.233.0/24 maxlen: 24
66.22.234.0/24 maxlen: 24
66.22.235.0/24 maxlen: 24
66.22.236.0/24 maxlen: 24
66.22.237.0/24 maxlen: 24
66.22.238.0/24 maxlen: 24
66.22.239.0/24 maxlen: 24
66.22.240.0/24 maxlen: 24
66.22.241.0/24 maxlen: 24
66.22.242.0/24 maxlen: 24
66.22.243.0/24 maxlen: 24
66.22.244.0/24 maxlen: 24
66.22.245.0/24 maxlen: 24
66.22.246.0/24 maxlen: 24
66.22.247.0/24 maxlen: 24
66.22.248.0/24 maxlen: 24
2a0e:5940::/44 maxlen: 44
2a0e:5940:10::/44 maxlen: 44
2a0e:5940:20::/44 maxlen: 44
2a0e:5940:30::/44 maxlen: 44
2a0e:5940:40::/44 maxlen: 44
2a0e:5940:50::/44 maxlen: 44
2a0e:5940:60::/44 maxlen: 44
2a0e:5940:70::/44 maxlen: 44
2a0e:5940:80::/44 maxlen: 44
2a0e:5940:90::/44 maxlen: 44
2a0e:5940:a0::/44 maxlen: 44
2a0e:5940:b0::/44 maxlen: 44
2a0e:5940:c0::/44 maxlen: 44
2a0e:5940:d0::/44 maxlen: 44
2a0e:5940:e0::/44 maxlen: 44
2a0e:5940:f0::/44 maxlen: 44
2a0e:5940:100::/44 maxlen: 44
2a0e:5940:110::/44 maxlen: 44
2a0e:5940:120::/44 maxlen: 44
2a0e:5940:130::/44 maxlen: 44
2a0e:5940:140::/44 maxlen: 44
2a0e:5940:150::/44 maxlen: 44
2a0e:5940:160::/44 maxlen: 44
2a0e:5940:170::/44 maxlen: 44
2a0e:5940:180::/44 maxlen: 44
2a0e:5940:190::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:93:b8:2f:5c:31:b9:ad:1e:e7:01:1f:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15be008a1dadfb7c74b2f312928245f8e4fdef99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:fd:0d:b4:ae:b3:66:0f:a1:8e:67:99:ac:
d9:8e:88:d4:d4:b6:e7:4a:a5:52:f2:22:32:f1:9e:
09:9f:77:35:f9:2b:72:03:d8:ec:07:30:2b:10:14:
c4:57:9b:8e:ea:a2:b5:3c:4f:8d:8e:dd:90:d5:3d:
15:91:c4:d0:91:2d:6e:c5:8a:08:da:4c:2b:07:c7:
48:d5:63:fb:a2:98:5c:dd:6c:cd:e1:ca:06:ed:36:
fd:42:d3:2e:12:0c:e9:1b:e6:4f:77:7c:c4:06:c6:
40:45:fc:e7:cb:89:27:f7:59:c8:de:2b:d4:f4:a8:
ca:15:62:4e:bf:b1:a9:12:66:3f:b3:a1:ba:79:a8:
48:51:d0:10:00:00:78:ce:2f:18:ab:7b:d3:2a:91:
dc:32:18:42:e7:e1:14:29:11:8f:80:4d:91:d6:e6:
f5:d6:e3:d2:a5:4d:67:90:e0:78:b1:11:33:2e:35:
29:50:b1:b9:e5:c9:ab:0d:9f:eb:f6:63:76:b0:a0:
39:29:5b:7e:8b:d7:4a:c2:89:96:e9:5b:e8:5e:20:
e1:d4:8b:6e:78:e3:b8:16:8a:9b:7c:fe:15:1b:55:
a7:e2:c9:fa:42:82:f3:c5:c9:20:07:b0:de:e5:5c:
07:7e:ea:ec:a7:ba:eb:c4:48:e5:4c:bf:31:0e:97:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:00:8A:1D:AD:FB:7C:74:B2:F3:12:92:82:45:F8:E4:FD:EF:99
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/Fb4Aih2t-3x0svMSkoJF-OT975k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.196.0-66.22.227.255
66.22.230.0-66.22.248.255
IPv6:
2a0e:5940::-2a0e:5940:19f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:ec:c3:4a:1b:09:95:d0:ae:fc:1b:04:79:db:78:bc:a8:8a:
ac:7d:44:e2:86:ee:a9:36:56:bd:73:44:e2:ce:56:02:fe:31:
78:04:4b:be:73:42:db:35:dc:f9:a4:20:c4:94:49:b2:c8:4f:
3f:cf:90:f4:cf:59:26:b6:9b:34:53:53:87:c1:37:fa:78:29:
38:d2:2f:a1:1f:94:7a:6e:9f:51:cf:53:53:1d:7e:96:1c:d9:
b2:c8:8f:27:30:4b:4f:17:fc:b4:00:82:15:20:ae:05:49:77:
57:39:3c:cc:af:55:10:da:5e:30:70:b3:a8:9d:76:e4:12:99:
6b:21:a6:84:3e:5a:7f:1c:95:fc:29:e0:8f:74:fc:4b:c9:80:
60:ea:61:de:cc:17:a1:a0:77:ca:bc:61:35:04:5d:77:88:3e:
d9:7c:95:06:73:92:93:00:57:06:e0:f0:af:ad:af:30:53:88:
87:c5:3b:d8:cc:22:23:db:0a:be:e2:d3:a9:2b:22:02:9f:da:
2e:34:f6:9a:f5:82:3a:91:b4:1d:9e:47:6d:4b:66:d1:9d:79:
07:5f:90:fd:9d:ba:79:a7:a6:c8:77:a4:eb:49:09:1b:ea:71:
91:32:83:5a:0b:37:15:e3:67:4f:2d:4c:46:81:f5:56:e3:fd:
21:cb:df:2a
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQg1jWTuC9cMbmtHucBH2/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjUwMTAxMDc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWJlMDA4YTFkYWRmYjdjNzRiMmYzMTI5MjgyNDVmOGU0ZmRlZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkr9DbSus2YPoY5nmazZjojU1Lbn
SqVS8iIy8Z4Jn3c1+StyA9jsBzArEBTEV5uO6qK1PE+Njt2Q1T0VkcTQkS1uxYoI
2kwrB8dI1WP7ophc3WzN4coG7Tb9QtMuEgzpG+ZPd3zEBsZARfzny4kn91nI3ivU
9KjKFWJOv7GpEmY/s6G6eahIUdAQAAB4zi8Yq3vTKpHcMhhC5+EUKRGPgE2R1ub1
1uPSpU1nkOB4sREzLjUpULG55cmrDZ/r9mN2sKA5KVt+i9dKwomW6VvoXiDh1Itu
eOO4FoqbfP4VG1Wn4sn6QoLzxckgB7De5VwHfursp7rrxEjlTL8xDpdB6wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFBW+AIodrft8dLLzEpKCRfjk/e+ZMB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvRmI0QWloMnQtM3gwc3ZNU2tvSkYtT1Q5NzVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAiBAIAATAcMAwDBAJCFsQD
BAJCFuAwDAMEAUIW5gMEAEIW+DAYBAIAAjASMBADBQYqDllAAwcFKg5ZQAGAMA0G
CSqGSIb3DQEBCwUAA4IBAQBe7MNKGwmV0K78GwR523i8qIqsfUTihu6pNla9c0Ti
zlYC/jF4BEu+c0LbNdz5pCDElEmyyE8/z5D0z1kmtps0U1OHwTf6eCk40i+hH5R6
bp9Rz1NTHX6WHNmyyI8nMEtPF/y0AIIVIK4FSXdXOTzMr1UQ2l4wcLOonXbkEplr
IaaEPlp/HJX8KeCPdPxLyYBg6mHezBehoHfKvGE1BF13iD7ZfJUGc5KTAFcG4PCv
ra8wU4iHxTvYzCIj2wq+4tOpKyICn9ouNPaa9YI6kbQdnkdtS2bRnXkHX5D9nbp5
p6bId6TrSQkb6nGRMoNaCzcV42dPLUxGgfVW4/0hy98q
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:36 2025 by rpki-client