Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E8doTcDMyu1T3Y0aNQZWl_0EYzw.roa
File: E8doTcDMyu1T3Y0aNQZWl_0EYzw.roa (raw, json)
Hash identifier: s+2l3VKoSd+zKX/gOgNYAPbtR/914H8wqUp8CTDpaAc=
Subject key identifier: 13:C7:68:4D:C0:CC:CA:ED:53:DD:8D:1A:35:06:56:97:FD:04:63:3C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B35648B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E8doTcDMyu1T3Y0aNQZWl_0EYzw.roa
Signing time: Wed 22 Jun 2022 16:33:32 +0000
ROA not before: Wed 22 Jun 2022 16:33:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133448
IP address blocks: 5.253.85.0/24 maxlen: 24
185.121.162.0/24 maxlen: 24
185.121.163.0/24 maxlen: 24
185.121.169.0/24 maxlen: 24
185.90.62.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456483979 (0x1b35648b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 22 16:33:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c7684dc0cccaed53dd8d1a35065697fd04633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:be:42:51:df:f1:6a:9b:2e:fb:c1:d3:1e:
2e:b0:68:ee:56:29:eb:df:9b:a8:d2:87:4d:d4:39:
02:2c:c8:51:a4:9e:05:e4:e3:dd:c9:8a:ed:9e:fb:
4d:82:b8:8a:c7:0f:01:05:fd:04:8c:d4:79:54:b5:
47:8c:d1:80:d4:28:5a:91:d1:65:72:2d:4d:8c:a3:
8c:c6:d9:b8:86:2c:eb:5a:79:00:be:99:4c:63:e6:
5e:8c:82:0d:d2:1b:f7:15:7d:c5:ad:60:bb:ea:97:
a2:af:c0:22:d3:0d:2a:9a:05:0b:50:27:0d:14:b7:
4b:07:65:5d:11:8f:ac:27:7d:c5:b5:0c:c0:0e:12:
16:81:cc:e6:77:ec:3a:3e:94:1e:e6:48:25:fd:76:
13:16:01:4f:ed:b6:55:40:1e:7d:77:4c:01:15:5f:
18:11:9b:62:29:de:b3:1c:b5:b2:1c:b5:9c:eb:b1:
df:d7:8e:9a:07:f3:b8:6f:42:1b:40:42:33:61:3b:
c1:b1:eb:77:bf:68:9e:c2:0b:98:e0:84:19:64:6c:
5b:df:d4:5b:1d:6e:10:9e:73:de:1c:df:07:fd:68:
4e:74:64:66:80:37:b6:55:70:02:16:ab:69:ba:78:
3f:ff:d8:6e:cc:44:27:f5:36:df:3e:96:82:01:88:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:68:4D:C0:CC:CA:ED:53:DD:8D:1A:35:06:56:97:FD:04:63:3C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E8doTcDMyu1T3Y0aNQZWl_0EYzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
185.90.62.0/24
185.99.134.0/24
185.121.162.0/23
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1b:49:f8:3c:c7:0b:9a:cc:67:23:7c:fb:17:3a:03:5f:c9:
0b:2b:6d:09:6f:4e:3c:ce:60:0e:3d:c1:da:e9:9b:f0:60:32:
87:20:70:50:7a:be:e6:61:5d:ec:7e:34:b4:fb:9d:84:bd:81:
68:15:81:d0:55:0e:e3:98:a4:18:e0:fa:1f:df:ed:96:22:1d:
9b:38:71:c1:c2:05:8a:aa:0a:6b:6a:cb:18:85:73:98:24:e6:
48:57:1a:1d:24:b3:7d:4c:aa:c9:0a:37:21:e5:90:2c:d8:67:
ba:2f:76:07:58:e8:bd:af:9a:5e:6d:5f:3d:73:00:4d:35:91:
1b:8c:35:9f:8a:ab:72:9f:09:b1:7c:b5:e6:d7:ce:68:3d:bf:
ac:cd:3f:c3:c1:19:da:83:6a:43:94:54:17:41:16:c6:41:10:
b9:f3:82:57:e3:e7:c8:df:94:f3:03:83:e2:ab:31:28:6b:9b:
f6:5a:44:51:e9:34:c8:44:46:67:57:3d:09:ae:9c:b7:99:e1:
3b:39:c1:57:85:d9:02:dd:0d:7f:c0:46:d2:42:94:0d:d0:3c:
a3:49:d2:22:46:8b:6c:7c:a7:39:50:4c:ea:f1:e4:69:20:00:
26:40:db:c4:98:e4:db:88:b3:7f:62:a2:8c:cf:81:f3:f8:9e:
29:f9:f3:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEGzVkizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
MjE2MzMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNjNzY4NGRjMGNj
Y2FlZDUzZGQ4ZDFhMzUwNjU2OTdmZDA0NjMzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHwvkJR3/Fqmy77wdMeLrBo7lYp69+bqNKHTdQ5AizIUaSe
BeTj3cmK7Z77TYK4iscPAQX9BIzUeVS1R4zRgNQoWpHRZXItTYyjjMbZuIYs61p5
AL6ZTGPmXoyCDdIb9xV9xa1gu+qXoq/AItMNKpoFC1AnDRS3SwdlXRGPrCd9xbUM
wA4SFoHM5nfsOj6UHuZIJf12ExYBT+22VUAefXdMARVfGBGbYinesxy1shy1nOux
39eOmgfzuG9CG0BCM2E7wbHrd79onsILmOCEGWRsW9/UWx1uEJ5z3hzfB/1oTnRk
ZoA3tlVwAharabp4P//YbsxEJ/U23z6WggGI570CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQTx2hNwMzK7VPdjRo1BlaX/QRjPDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0U4ZG9UY0RNeXUxVDNZMGFOUVpXbF8wRVl6dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAAX9VQMEALlaPgMEALljhgMEAbl5
ogMEALl5qTANBgkqhkiG9w0BAQsFAAOCAQEAcBtJ+DzHC5rMZyN8+xc6A1/JCytt
CW9OPM5gDj3B2umb8GAyhyBwUHq+5mFd7H40tPudhL2BaBWB0FUO45ikGOD6H9/t
liIdmzhxwcIFiqoKa2rLGIVzmCTmSFcaHSSzfUyqyQo3IeWQLNhnui92B1jova+a
Xm1fPXMATTWRG4w1n4qrcp8JsXy15tfOaD2/rM0/w8EZ2oNqQ5RUF0EWxkEQufOC
V+PnyN+U8wOD4qsxKGub9lpEUek0yERGZ1c9Ca6ct5nhOznBV4XZAt0Nf8BG0kKU
DdA8o0nSIkaLbHynOVBM6vHkaSAAJkDbxJjk24izf2KijM+B8/ieKfnz0g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:40:23 2025 by rpki-client