Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehqHfJcSd9wlSOxyOA_PYi7S-Lg.roa
File: ehqHfJcSd9wlSOxyOA_PYi7S-Lg.roa (raw, json)
Hash identifier: mEbL8S+oUY7UZMAWP+cM6gB83rK/mSOcQ5w62hNdFqM=
Subject key identifier: 7A:1A:87:7C:97:12:77:DC:25:48:EC:72:38:0F:CF:62:2E:D2:F8:B8
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195241A101C454509ABB38DD290AD456450
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehqHfJcSd9wlSOxyOA_PYi7S-Lg.roa
Signing time: Thu 20 Feb 2025 16:04:02 +0000
ROA not before: Thu 20 Feb 2025 16:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:1a:10:1c:45:45:09:ab:b3:8d:d2:90:ad:45:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 20 16:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1a877c971277dc2548ec72380fcf622ed2f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:21:51:b1:e4:1b:49:f0:cd:bd:7e:7f:89:
08:39:29:eb:14:42:ac:32:b7:a6:1e:04:0d:61:a8:
dc:72:1a:18:89:23:a8:46:1b:36:6f:fa:2a:6f:af:
18:31:e5:93:c5:11:9a:0c:f4:fe:d9:e6:70:a9:e5:
23:d3:29:59:62:6e:fe:56:27:0b:66:88:bb:ff:11:
3d:87:30:19:b9:a0:cf:8f:e5:ff:9f:49:e9:6b:be:
d9:27:29:af:8c:10:a1:c8:d6:e9:78:1a:ca:9b:c4:
e5:bd:70:cb:00:c0:92:52:4e:26:40:87:96:ae:ae:
5c:0f:2d:29:18:b7:1d:3f:25:c9:b5:a0:98:6d:85:
e0:3a:f4:2b:18:97:65:f5:74:9f:fb:a3:c4:c3:b4:
41:d2:13:80:da:b7:c1:84:2f:42:1f:3a:5d:2b:bc:
c7:18:60:1c:0b:74:1b:b5:a1:d0:dd:52:8a:d5:43:
45:f0:f0:b1:33:a0:bf:5f:c7:ff:62:5f:9d:61:7e:
9a:c2:12:0d:0f:4d:66:c1:4b:65:83:4f:98:35:9e:
34:86:66:71:a7:05:04:48:15:49:38:e8:00:da:fd:
27:09:3e:dd:5f:6f:67:a6:5d:40:2d:7e:c1:ba:c9:
eb:13:c6:0c:17:b2:60:ad:f4:52:c3:5a:68:d4:e2:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:87:7C:97:12:77:DC:25:48:EC:72:38:0F:CF:62:2E:D2:F8:B8
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehqHfJcSd9wlSOxyOA_PYi7S-Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d5:2e:58:78:11:49:e6:ff:e1:81:c7:f5:9f:d5:3e:e4:82:
86:b8:10:ea:51:16:09:f8:d4:16:b2:f0:ec:66:50:75:d4:31:
a4:b9:92:7b:41:f9:5f:f9:53:a9:db:90:e7:95:54:ad:4c:74:
6e:58:83:9c:af:3d:79:8f:09:53:3e:8d:7c:2f:1f:81:99:f4:
b8:64:71:f6:0e:d8:81:d3:94:39:39:4c:5a:f9:b9:c0:14:22:
ab:60:cd:6e:77:27:01:f9:a7:3d:75:bc:e3:6a:2d:46:aa:db:
de:27:4c:72:92:5e:c8:76:18:17:cc:8d:5d:04:c8:f4:49:d9:
88:8f:23:9e:5f:e8:88:18:e5:db:50:3d:60:46:5b:ef:95:e0:
f0:cd:e5:fb:66:f9:39:43:c2:03:24:26:61:0b:2b:93:61:4a:
a8:0b:fc:f6:e4:9a:cd:47:3b:25:c9:88:ed:a9:a9:f7:10:cc:
2b:f8:fa:ec:b1:b8:46:ed:94:73:ad:ec:91:26:46:9a:c0:7e:
92:07:d7:2a:ce:da:2b:eb:34:e5:b0:27:b2:0f:7d:25:fc:ba:
c7:a4:12:87:e1:32:b2:fe:d4:4f:c5:7f:f6:f3:0f:33:e9:d5:
0a:12:7a:1a:d0:f4:ae:d7:82:48:e5:a3:8c:b5:8e:73:ff:82:
27:07:58:76
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZUkGhAcRUUJq7ON0pCtRWRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwMjIwMTYwNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFhODc3Yzk3MTI3N2RjMjU0OGVjNzIzODBmY2Y2MjJlZDJmOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzukhUbHkG0nwzb1+f4kIOSnrFEKs
MremHgQNYajcchoYiSOoRhs2b/oqb68YMeWTxRGaDPT+2eZwqeUj0ylZYm7+VicL
Zoi7/xE9hzAZuaDPj+X/n0npa77ZJymvjBChyNbpeBrKm8TlvXDLAMCSUk4mQIeW
rq5cDy0pGLcdPyXJtaCYbYXgOvQrGJdl9XSf+6PEw7RB0hOA2rfBhC9CHzpdK7zH
GGAcC3QbtaHQ3VKK1UNF8PCxM6C/X8f/Yl+dYX6awhIND01mwUtlg0+YNZ40hmZx
pwUESBVJOOgA2v0nCT7dX29npl1ALX7BusnrE8YMF7JgrfRSw1po1OKnjwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHoah3yXEnfcJUjscjgPz2Iu0vi4MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvZWhxSGZKY1NkOXdsU094eU9BX1BZaTdTLUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCuY84AwQC
w7KEAwQBw7KQAwQAw7KTAwQCw7KYMA0GCSqGSIb3DQEBCwUAA4IBAQB01S5YeBFJ
5v/hgcf1n9U+5IKGuBDqURYJ+NQWsvDsZlB11DGkuZJ7Qflf+VOp25DnlVStTHRu
WIOcrz15jwlTPo18Lx+BmfS4ZHH2DtiB05Q5OUxa+bnAFCKrYM1udycB+ac9dbzj
ai1GqtveJ0xykl7IdhgXzI1dBMj0SdmIjyOeX+iIGOXbUD1gRlvvleDwzeX7Zvk5
Q8IDJCZhCyuTYUqoC/z25JrNRzslyYjtqan3EMwr+PrssbhG7ZRzreyRJkaawH6S
B9cqztor6zTlsCeyD30l/LrHpBKH4TKy/tRPxX/28w8z6dUKEnoa0PSu14JI5aOM
tY5z/4InB1h2
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:53 2025 by rpki-client