Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Pg2gOuPKcxedaD2sl59MmthUm3Y.roa
File: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (raw, json)
Hash identifier: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=
Subject key identifier: 3E:0D:A0:3A:E3:CA:73:17:9D:68:3D:AC:97:9F:4C:9A:D8:54:9B:76
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01941FFA63B3A944FA8EB57B6D25351B65A4
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Pg2gOuPKcxedaD2sl59MmthUm3Y.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49293
IP address blocks: 95.170.112.0/21 maxlen: 21
95.170.112.0/24 maxlen: 24
95.170.113.0/24 maxlen: 24
95.170.114.0/24 maxlen: 24
95.170.115.0/24 maxlen: 24
95.170.116.0/24 maxlen: 24
95.170.117.0/24 maxlen: 24
95.170.118.0/24 maxlen: 24
95.170.119.0/24 maxlen: 24
212.107.224.0/20 maxlen: 20
212.107.224.0/24 maxlen: 24
212.107.225.0/24 maxlen: 24
212.107.226.0/24 maxlen: 24
212.107.227.0/24 maxlen: 24
212.107.228.0/24 maxlen: 24
212.107.229.0/24 maxlen: 24
212.107.230.0/24 maxlen: 24
212.107.231.0/24 maxlen: 24
212.107.232.0/24 maxlen: 24
212.107.233.0/24 maxlen: 24
212.107.234.0/24 maxlen: 24
212.107.235.0/24 maxlen: 24
212.107.236.0/24 maxlen: 24
212.107.237.0/24 maxlen: 24
212.107.238.0/24 maxlen: 24
212.107.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:b3:a9:44:fa:8e:b5:7b:6d:25:35:1b:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0da03ae3ca73179d683dac979f4c9ad8549b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:09:0c:8c:45:96:38:77:7a:d8:79:d9:30:
f7:41:67:d0:7e:a6:85:bf:13:14:d8:14:c6:f3:a2:
05:aa:29:5f:77:17:ab:26:64:65:a9:d7:be:d2:5d:
05:ac:90:02:05:ae:ac:d4:49:10:d2:f9:1d:8a:21:
fa:ba:85:76:bb:4d:17:48:05:5f:c2:d5:07:e5:55:
b3:25:44:05:93:a6:43:cf:5d:61:fc:11:77:71:ba:
e1:8b:88:00:4b:8f:b6:b2:5f:12:30:27:37:79:f1:
b4:93:10:0c:07:1b:a8:d3:cd:bd:a4:4c:12:41:ef:
de:20:be:45:a3:e9:f5:36:6e:27:ad:10:66:47:3b:
6c:cc:bf:3e:45:f4:76:06:47:1a:12:c7:05:e6:fa:
24:38:89:c0:b3:4e:94:1e:9b:34:87:05:15:08:c1:
5a:0a:18:74:52:cd:6d:1e:d4:06:da:3c:d2:ce:1e:
1f:55:84:79:ee:a2:aa:56:4b:67:1e:a5:6a:2d:97:
3a:5d:b2:13:a9:37:6c:97:79:4d:17:f3:ff:c3:46:
6b:df:e6:64:6e:d8:d5:0e:b2:6c:0a:8f:d8:2b:67:
68:e5:4e:55:11:5a:a2:01:20:10:d5:90:07:13:a3:
72:3e:42:25:29:5c:da:96:77:a2:8b:e7:de:4b:4e:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:A0:3A:E3:CA:73:17:9D:68:3D:AC:97:9F:4C:9A:D8:54:9B:76
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Pg2gOuPKcxedaD2sl59MmthUm3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.112.0/21
212.107.224.0/20
Signature Algorithm: sha256WithRSAEncryption
08:86:ef:ea:54:1d:6f:65:65:f0:a1:69:15:70:0b:f3:4a:ce:
a7:fd:9a:7b:00:80:2f:1a:e6:c4:c7:ab:ed:f6:7b:82:77:b0:
be:a6:be:13:c7:4d:bb:61:e5:28:61:1b:47:81:29:f3:bf:0c:
cf:b7:be:b0:59:f6:ec:7b:3f:22:e8:22:ba:c6:04:b9:27:bb:
79:3a:5d:69:24:b3:a0:2e:ca:eb:b8:c4:f8:1a:ca:6e:e2:f4:
99:80:a7:6a:2c:0b:60:bd:4a:1b:3d:17:59:67:be:05:9b:bc:
be:7e:7a:a8:17:b7:62:fa:01:24:2d:24:47:96:99:4b:80:a9:
48:48:de:c3:dd:82:05:1f:7f:c6:0c:c5:81:b4:d2:aa:8a:35:
4c:a7:97:11:f0:01:81:55:a8:9a:87:0f:1c:96:22:a1:28:0a:
07:da:00:a3:28:fe:30:bc:ce:17:e4:0e:4c:4a:70:6d:b9:bf:
00:64:4f:9b:c1:86:37:9b:57:a8:64:0c:94:f5:5d:8c:0e:a5:
04:3b:03:21:52:77:b6:b4:96:db:8c:ca:c7:9c:69:9b:ae:a7:
eb:35:47:f1:fb:11:1b:3d:6c:eb:aa:9d:26:e2:c0:b8:fd:82:
3e:c0:e8:b0:36:92:06:54:a9:11:e4:d4:41:3e:3f:a4:89:ff:
1b:b1:43:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+mOzqUT6jrV7bSU1G2WkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTBkYTAzYWUzY2E3MzE3OWQ2ODNkYWM5NzlmNGM5YWQ4NTQ5Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+0JDIxFljh3eth52TD3QWfQfqaF
vxMU2BTG86IFqilfdxerJmRlqde+0l0FrJACBa6s1EkQ0vkdiiH6uoV2u00XSAVf
wtUH5VWzJUQFk6ZDz11h/BF3cbrhi4gAS4+2sl8SMCc3efG0kxAMBxuo0829pEwS
Qe/eIL5Fo+n1Nm4nrRBmRztszL8+RfR2BkcaEscF5vokOInAs06UHps0hwUVCMFa
Chh0Us1tHtQG2jzSzh4fVYR57qKqVktnHqVqLZc6XbITqTdsl3lNF/P/w0Zr3+Zk
btjVDrJsCo/YK2do5U5VEVqiASAQ1ZAHE6NyPkIlKVzalneii+feS07q3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD4NoDrjynMXnWg9rJefTJrYVJt2MB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvUGcyZ091UEtjeGVkYUQyc2w1OU1tdGhVbTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX6pwAwQE
1GvgMA0GCSqGSIb3DQEBCwUAA4IBAQAIhu/qVB1vZWXwoWkVcAvzSs6n/Zp7AIAv
GubEx6vt9nuCd7C+pr4Tx027YeUoYRtHgSnzvwzPt76wWfbsez8i6CK6xgS5J7t5
Ol1pJLOgLsrruMT4Gspu4vSZgKdqLAtgvUobPRdZZ74Fm7y+fnqoF7di+gEkLSRH
lplLgKlISN7D3YIFH3/GDMWBtNKqijVMp5cR8AGBVaiahw8cliKhKAoH2gCjKP4w
vM4X5A5MSnBtub8AZE+bwYY3m1eoZAyU9V2MDqUEOwMhUne2tJbbjMrHnGmbrqfr
NUfx+xEbPWzrqp0m4sC4/YI+wOiwNpIGVKkR5NRBPj+kif8bsUMU
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:38 2025 by rpki-client