Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v6XLIeKZScSwIi6dNQdOVHQ-qj4.roa
File: v6XLIeKZScSwIi6dNQdOVHQ-qj4.roa (raw, json)
Hash identifier: 7OMuR6fhsms8QfHt9y5086Ow7S9StBMGVTrScr2YfKs=
Subject key identifier: BF:A5:CB:21:E2:99:49:C4:B0:22:2E:9D:35:07:4E:54:74:3E:AA:3E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD23F0E4F8CA71CBBF8C319D72F771
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v6XLIeKZScSwIi6dNQdOVHQ-qj4.roa
Signing time: Thu 02 Jan 2025 07:48:54 +0000
ROA not before: Thu 02 Jan 2025 07:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 64.137.17.0/24 maxlen: 24
64.137.38.0/24 maxlen: 24
64.137.66.0/24 maxlen: 24
64.137.86.0/24 maxlen: 24
64.137.88.0/24 maxlen: 24
64.137.91.0/24 maxlen: 24
64.137.103.0/24 maxlen: 24
64.137.104.0/24 maxlen: 24
64.137.106.0/24 maxlen: 24
64.137.108.0/24 maxlen: 24
64.137.112.0/24 maxlen: 24
64.137.118.0/24 maxlen: 24
64.137.124.0/24 maxlen: 24
104.143.229.0/24 maxlen: 24
104.239.86.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
138.128.145.0/24 maxlen: 24
216.173.84.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:23:f0:e4:f8:ca:71:cb:bf:8c:31:9d:72:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa5cb21e29949c4b0222e9d35074e54743eaa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:a1:24:90:c9:d3:d0:4d:7d:e2:f9:fa:8e:
f7:9f:d3:5d:8a:12:88:87:28:99:03:b9:7e:e1:e8:
3f:f2:e1:81:07:b2:ff:63:f3:2e:ea:09:69:00:c0:
dd:15:e8:dc:d7:c3:71:a5:cb:65:7d:0f:71:3a:60:
ce:68:bd:be:62:81:c3:cf:86:86:18:e7:08:73:fd:
8e:8b:3b:bf:a9:7a:ea:16:2f:9b:17:6d:07:65:4d:
91:38:67:f7:32:62:9d:99:52:f7:27:17:f8:e3:5d:
eb:e1:94:2c:d5:2d:a8:49:7a:2f:c3:d3:9e:e1:b1:
10:c7:06:9e:65:cf:af:9e:b3:70:32:1a:56:30:d8:
6c:f8:94:6b:cf:3e:5d:2f:1e:ad:df:e2:5c:0e:0d:
9d:ae:66:df:fa:86:3c:d4:92:3d:21:fd:75:39:2d:
ca:72:48:18:eb:53:c3:f9:05:b4:0b:f4:10:82:97:
e7:e0:75:e5:84:90:a2:44:8f:f9:e2:c4:b6:57:24:
92:f0:49:d9:a0:54:30:71:2c:a0:1b:ba:37:b5:14:
d1:15:38:04:77:c3:90:9a:c5:08:1b:81:a7:60:ba:
7e:4e:ea:92:28:c3:00:f8:95:4e:6d:8e:2e:f7:de:
15:49:72:89:49:b9:f1:82:f3:03:70:35:97:83:c4:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A5:CB:21:E2:99:49:C4:B0:22:2E:9D:35:07:4E:54:74:3E:AA:3E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v6XLIeKZScSwIi6dNQdOVHQ-qj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.17.0/24
64.137.38.0/24
64.137.66.0/24
64.137.86.0/24
64.137.88.0/24
64.137.91.0/24
64.137.103.0-64.137.104.255
64.137.106.0/24
64.137.108.0/24
64.137.112.0/24
64.137.118.0/24
64.137.124.0/24
104.143.229.0/24
104.239.86.0/24
104.239.101.0/24
104.239.108.0/24
138.128.145.0/24
216.173.84.0/24
216.173.103.0/24
216.173.109.0/24
Signature Algorithm: sha256WithRSAEncryption
30:78:bc:72:dc:86:20:17:82:c7:0d:84:b1:8b:72:a4:97:ec:
30:73:c8:4d:96:b1:88:af:32:29:b0:81:d5:ee:18:c5:ec:66:
cc:ae:a6:a3:b1:6a:5b:b0:a5:68:f6:cb:ea:f1:7c:15:76:42:
4b:de:8a:9d:53:cb:95:40:a1:87:2c:9c:46:b7:e5:7c:e1:e1:
59:7d:63:b7:d0:89:a2:2d:00:26:6f:c7:23:de:01:3d:ac:36:
6c:6e:11:9b:73:96:87:76:e8:43:25:c8:a9:2f:29:0f:17:5e:
2c:e7:07:29:97:a2:72:4b:42:19:dc:f0:13:b7:8b:f1:17:39:
12:be:6b:93:d6:f6:e7:46:17:70:c5:bd:f6:f5:f6:8b:67:4e:
f8:29:18:bc:2b:68:cc:34:ed:12:e7:4d:e9:bc:87:9f:69:9a:
fd:8f:45:c8:e5:11:31:7a:02:00:4f:2b:c2:92:d7:66:bf:11:
71:25:c7:02:2b:31:92:93:c3:0f:86:20:45:e5:63:c2:22:b9:
d7:24:c3:1c:34:e5:bb:80:e1:9c:f6:21:a4:ff:5c:2d:d5:f9:
ea:a0:cb:18:d0:1a:2d:ea:e6:01:01:bd:4e:15:28:0a:40:ef:
af:65:fd:b3:c7:f7:77:51:a5:5a:d4:81:c0:d0:e1:6a:88:cb:
30:0d:73:86
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZQl/SPw5PjKccu/jDGdcvdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmE1Y2IyMWUyOTk0OWM0YjAyMjJlOWQzNTA3NGU1NDc0M2VhYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ShJJDJ09BNfeL5+o73n9NdihKI
hyiZA7l+4eg/8uGBB7L/Y/Mu6glpAMDdFejc18NxpctlfQ9xOmDOaL2+YoHDz4aG
GOcIc/2Oizu/qXrqFi+bF20HZU2ROGf3MmKdmVL3Jxf4413r4ZQs1S2oSXovw9Oe
4bEQxwaeZc+vnrNwMhpWMNhs+JRrzz5dLx6t3+JcDg2drmbf+oY81JI9If11OS3K
ckgY61PD+QW0C/QQgpfn4HXlhJCiRI/54sS2VySS8EnZoFQwcSygG7o3tRTRFTgE
d8OQmsUIG4GnYLp+TuqSKMMA+JVObY4u994VSXKJSbnxgvMDcDWXg8REOwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFL+lyyHimUnEsCIunTUHTlR0Pqo+MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvdjZYTEllS1pTY1N3SWk2ZE5RZE9WSFEtcWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBABA
iREDBABAiSYDBABAiUIDBABAiVYDBABAiVgDBABAiVswDAMEAECJZwMEAECJaAME
AECJagMEAECJbAMEAECJcAMEAECJdgMEAECJfAMEAGiP5QMEAGjvVgMEAGjvZQME
AGjvbAMEAIqAkQMEANitVAMEANitZwMEANitbTANBgkqhkiG9w0BAQsFAAOCAQEA
MHi8ctyGIBeCxw2EsYtypJfsMHPITZaxiK8yKbCB1e4YxexmzK6mo7FqW7ClaPbL
6vF8FXZCS96KnVPLlUChhyycRrflfOHhWX1jt9CJoi0AJm/HI94BPaw2bG4Rm3OW
h3boQyXIqS8pDxdeLOcHKZeicktCGdzwE7eL8Rc5Er5rk9b250YXcMW99vX2i2dO
+CkYvCtozDTtEudN6byHn2ma/Y9FyOURMXoCAE8rwpLXZr8RcSXHAisxkpPDD4Yg
ReVjwiK51yTDHDTlu4DhnPYhpP9cLdX56qDLGNAaLermAQG9ThUoCkDvr2X9s8f3
d1GlWtSBwNDhaojLMA1zhg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:25 2025 by rpki-client