Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1f2tT71vV1MiLQenFigoQuxRwqM.roa
File: 1f2tT71vV1MiLQenFigoQuxRwqM.roa (raw, json)
Hash identifier: wpjdNTt4b7V2ll6KY5o5hcvRIp5mFl1TvHli6R2tBq8=
Subject key identifier: D5:FD:AD:4F:BD:6F:57:53:22:2D:07:A7:16:28:28:42:EC:51:C2:A3
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0194741FC46F8B3F4B6FF1EFD6AB9A74CD24
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1f2tT71vV1MiLQenFigoQuxRwqM.roa
Signing time: Fri 17 Jan 2025 11:57:06 +0000
ROA not before: Fri 17 Jan 2025 11:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49332
IP address blocks: 5.57.64.0/21 maxlen: 22
80.243.144.0/20 maxlen: 21
86.111.64.0/20 maxlen: 21
86.111.84.0/23 maxlen: 24
91.212.203.0/24 maxlen: 24
176.32.0.0/21 maxlen: 22
176.39.64.0/19 maxlen: 20
176.39.64.0/20 maxlen: 21
188.190.32.0/19 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:1f:c4:6f:8b:3f:4b:6f:f1:ef:d6:ab:9a:74:cd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 17 11:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fdad4fbd6f5753222d07a716282842ec51c2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:8f:44:c5:db:17:8e:f2:b3:42:ad:d5:57:
15:70:82:e4:71:b0:13:db:3a:12:73:1b:3e:6b:f5:
af:3a:5c:c2:c5:b2:98:2f:6d:ba:26:52:0c:62:b8:
c2:cf:d2:86:a5:db:8e:58:e8:6d:8e:5d:32:3d:06:
46:86:cc:ed:9b:7b:aa:61:ed:03:3f:b7:69:6e:96:
dd:15:f6:6d:cd:83:96:38:c7:f3:1c:50:6d:69:16:
42:60:48:44:8d:d4:42:c2:2c:ad:22:8d:74:c9:6e:
e6:6f:90:57:58:9a:03:23:87:b6:1f:3f:37:5b:00:
6e:91:b2:fb:81:bd:bb:b0:d7:89:42:75:9d:39:80:
c7:ac:a9:74:2b:88:1f:09:15:d4:38:56:4e:a3:ce:
e3:a3:97:6b:76:ea:28:b9:17:ec:5e:0f:26:77:aa:
04:bc:35:36:a2:84:dd:69:ad:27:8e:d1:3c:60:1e:
b9:e9:9e:3d:ef:2f:43:12:d7:3b:68:60:0e:ff:b3:
c7:cd:9b:9e:54:0c:6e:34:c0:51:52:c8:54:6e:07:
c9:ee:2f:0c:34:62:60:3d:53:4a:74:f1:3a:11:be:
98:ff:1c:b4:92:bd:74:0a:96:df:61:6e:cf:82:72:
7d:7c:db:17:ea:c5:54:0a:87:f3:49:9e:a2:97:13:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:AD:4F:BD:6F:57:53:22:2D:07:A7:16:28:28:42:EC:51:C2:A3
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1f2tT71vV1MiLQenFigoQuxRwqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
176.39.64.0/19
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
94:80:ed:47:0e:db:92:ae:83:77:cf:4f:d8:69:ef:29:be:0a:
a6:93:eb:18:a7:29:d6:ae:f9:78:d6:2e:a9:30:a1:48:78:f4:
f4:c6:c9:0a:ec:b3:bd:9b:a8:43:4b:5a:cb:83:d1:6d:00:35:
b5:83:49:16:94:b4:71:cf:71:71:4c:bd:46:d5:33:76:92:14:
09:ee:42:f8:eb:fa:bc:b3:06:c4:3d:37:f7:f6:87:11:9f:83:
d5:12:ad:5e:3b:2d:0b:90:83:31:2a:7b:b7:01:35:25:2b:d8:
26:4b:6a:c0:64:5e:62:f2:d4:c9:27:11:c9:66:43:d5:8a:68:
01:92:73:6e:f1:9b:5d:d6:67:26:0c:a3:f6:09:f3:cb:c5:8f:
1d:24:f6:ea:e1:e7:43:80:e7:f1:ea:06:32:8a:1d:ab:a1:0e:
fc:79:b3:17:85:7c:f8:49:89:00:b6:ac:5b:2a:62:72:fd:d2:
78:8d:d9:ac:03:3c:38:bc:f9:af:7e:9a:8c:74:73:fe:74:58:
b4:87:d6:17:71:d6:9c:76:e9:93:c4:df:91:b7:52:ec:c8:f5:
5e:2a:99:fc:22:03:18:92:da:74:bb:39:b8:9a:9c:78:b4:52:
86:3b:a7:84:a1:d2:9c:28:e1:6b:8b:25:9a:df:9c:91:fa:34:
1c:20:87:53
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZR0H8Rviz9Lb/Hv1quadM0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjUwMTE3MTE1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWZkYWQ0ZmJkNmY1NzUzMjIyZDA3YTcxNjI4Mjg0MmVjNTFjMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+mPRMXbF47ys0Kt1VcVcILkcbAT
2zoScxs+a/WvOlzCxbKYL226JlIMYrjCz9KGpduOWOhtjl0yPQZGhsztm3uqYe0D
P7dpbpbdFfZtzYOWOMfzHFBtaRZCYEhEjdRCwiytIo10yW7mb5BXWJoDI4e2Hz83
WwBukbL7gb27sNeJQnWdOYDHrKl0K4gfCRXUOFZOo87jo5drduoouRfsXg8md6oE
vDU2ooTdaa0njtE8YB656Z497y9DEtc7aGAO/7PHzZueVAxuNMBRUshUbgfJ7i8M
NGJgPVNKdPE6Eb6Y/xy0kr10CpbfYW7PgnJ9fNsX6sVUCofzSZ6ilxP9OwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFNX9rU+9b1dTIi0HpxYoKELsUcKjMB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xLzFmMnRUNzF2VjFNaUxRZW5GaWdvUXV4UndxTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw
NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAMFOUAD
BARQ85ADBARWb0ADBAFWb1QDBABb1MsDBAOwIAADBAWwJ0ADBAW8viAwDQYJKoZI
hvcNAQELBQADggEBAJSA7UcO25Kug3fPT9hp7ym+CqaT6xinKdau+XjWLqkwoUh4
9PTGyQrss72bqENLWsuD0W0ANbWDSRaUtHHPcXFMvUbVM3aSFAnuQvjr+ryzBsQ9
N/f2hxGfg9USrV47LQuQgzEqe7cBNSUr2CZLasBkXmLy1MknEclmQ9WKaAGSc27x
m13WZyYMo/YJ88vFjx0k9urh50OA5/HqBjKKHauhDvx5sxeFfPhJiQC2rFsqYnL9
0niN2awDPDi8+a9+mox0c/50WLSH1hdx1px26ZPE35G3UuzI9V4qmfwiAxiS2nS7
ObianHi0UoY7p4Sh0pwo4WuLJZrfnJH6NBwgh1M=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:49 2025 by rpki-client