Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/M3KG1um2N4_xFKROyspLpoUR3iI.roa
File: M3KG1um2N4_xFKROyspLpoUR3iI.roa (raw, json)
Hash identifier: wjL45NvKbgxzshtwWCyCcqEZ0mJEA41B4JxiJxEpv1o=
Subject key identifier: 33:72:86:D6:E9:B6:37:8F:F1:14:A4:4E:CA:CA:4B:A6:85:11:DE:22
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0194707F6C654071F8848EC1B64614B9DB9E
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/M3KG1um2N4_xFKROyspLpoUR3iI.roa
Signing time: Thu 16 Jan 2025 19:03:06 +0000
ROA not before: Thu 16 Jan 2025 19:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29436
IP address blocks: 94.240.132.0/22 maxlen: 22
94.240.136.0/21 maxlen: 21
94.240.144.0/20 maxlen: 20
94.240.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:7f:6c:65:40:71:f8:84:8e:c1:b6:46:14:b9:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 16 19:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=337286d6e9b6378ff114a44ecaca4ba68511de22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:ff:7d:9f:08:dd:a1:05:b6:1f:d1:a8:62:
2b:4e:8c:42:67:cf:dd:cb:9a:7f:c7:b7:00:96:21:
ea:6a:6a:25:a4:cf:a7:d4:4b:d0:20:dd:65:ef:7d:
af:7c:e5:24:34:df:e1:ee:b7:92:75:bb:91:a3:fc:
32:a0:59:a6:40:a9:63:87:8e:8b:73:eb:76:07:c0:
6c:1d:e0:91:40:5b:81:df:e7:cc:f5:ff:62:8e:b4:
cd:24:6b:a2:3b:de:17:8b:cf:ed:e6:46:8b:b1:68:
e1:ba:93:c4:53:26:70:16:41:85:65:7b:49:11:21:
17:68:ea:c5:63:cb:d9:2a:d3:cf:22:aa:31:e7:6b:
ac:3d:31:cf:0c:aa:53:07:11:52:fd:d8:56:77:9d:
7a:44:c8:43:99:b5:58:9d:a0:87:b6:18:21:3a:2d:
d4:39:b0:d6:9f:ac:1c:fe:26:89:21:5f:b0:7f:ef:
98:1b:18:2d:49:da:90:01:36:e6:de:9f:1d:9d:0a:
75:aa:e6:82:fe:84:8f:ae:83:98:40:72:b9:c4:54:
0c:31:df:52:df:66:7c:6f:d7:a0:6f:97:67:e7:a5:
9f:ca:3b:93:6d:0e:69:1a:e7:53:a6:95:06:9d:38:
23:a1:7b:ff:e6:2b:3b:1c:95:8e:00:3c:4a:ea:05:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:86:D6:E9:B6:37:8F:F1:14:A4:4E:CA:CA:4B:A6:85:11:DE:22
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/M3KG1um2N4_xFKROyspLpoUR3iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.132.0-94.240.191.255
Signature Algorithm: sha256WithRSAEncryption
7a:e7:8e:54:a3:c0:d2:fb:5b:8c:1e:80:8f:ed:40:16:fd:57:
96:83:4c:9f:23:4d:c1:83:9f:6b:19:10:cf:f4:46:40:cb:9b:
c4:32:fd:b0:88:4b:a1:fa:70:16:ed:8e:48:af:f0:fe:55:81:
5a:05:c8:f4:ba:6f:b6:f9:30:ef:76:96:10:6d:56:48:46:ea:
d3:f7:39:03:24:b8:f5:a1:d3:4f:6c:da:ec:8b:72:6e:9f:6d:
20:13:43:2f:f2:b9:5f:03:98:06:b7:55:d1:08:5c:3f:e2:ad:
ac:81:d0:ec:aa:f7:20:b6:a5:a9:34:33:ef:19:93:cf:64:9c:
21:10:ab:76:81:fd:96:5f:c2:b6:90:b6:a7:5a:32:2a:e4:88:
e6:66:4b:db:fe:6a:02:a5:3c:86:d4:1f:a1:61:1b:46:75:a2:
a8:8e:93:04:8b:80:ee:d0:f6:5b:0f:1e:81:da:a5:6e:ba:c4:
fd:8e:a1:fb:82:f2:5f:49:b1:d0:57:dd:1e:24:e0:b3:71:14:
1a:0e:d7:e5:29:e8:c3:73:cb:e6:18:84:86:1a:88:e6:c1:09:
df:2b:69:a6:d1:a5:ad:60:c0:4d:c4:ff:c1:d6:fa:9f:13:0d:
b1:95:04:f1:76:61:c2:ff:77:59:32:98:7d:04:e6:ed:b2:17:
9c:75:d2:23
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZRwf2xlQHH4hI7BtkYUudueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUwMTE2MTkwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzcyODZkNmU5YjYzNzhmZjExNGE0NGVjYWNhNGJhNjg1MTFkZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgP/fZ8I3aEFth/RqGIrToxCZ8/d
y5p/x7cAliHqamolpM+n1EvQIN1l732vfOUkNN/h7reSdbuRo/wyoFmmQKljh46L
c+t2B8BsHeCRQFuB3+fM9f9ijrTNJGuiO94Xi8/t5kaLsWjhupPEUyZwFkGFZXtJ
ESEXaOrFY8vZKtPPIqox52usPTHPDKpTBxFS/dhWd516RMhDmbVYnaCHthghOi3U
ObDWn6wc/iaJIV+wf++YGxgtSdqQATbm3p8dnQp1quaC/oSProOYQHK5xFQMMd9S
32Z8b9egb5dn56WfyjuTbQ5pGudTppUGnTgjoXv/5is7HJWOADxK6gU8FwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDNyhtbptjeP8RSkTsrKS6aFEd4iMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvTTNLRzF1bTJONF94RktST3lzcExwb1VSM2lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJe8IQD
BAZe8IAwDQYJKoZIhvcNAQELBQADggEBAHrnjlSjwNL7W4wegI/tQBb9V5aDTJ8j
TcGDn2sZEM/0RkDLm8Qy/bCIS6H6cBbtjkiv8P5VgVoFyPS6b7b5MO92lhBtVkhG
6tP3OQMkuPWh009s2uyLcm6fbSATQy/yuV8DmAa3VdEIXD/irayB0Oyq9yC2pak0
M+8Zk89knCEQq3aB/ZZfwraQtqdaMirkiOZmS9v+agKlPIbUH6FhG0Z1oqiOkwSL
gO7Q9lsPHoHapW66xP2OofuC8l9JsdBX3R4k4LNxFBoO1+Up6MNzy+YYhIYaiObB
Cd8raabRpa1gwE3E/8HW+p8TDbGVBPF2YcL/d1kymH0E5u2yF5x10iM=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:21 2025 by rpki-client