Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yqNA4sQkAKjEtwmoaK1OrkTFTrE.roa
File: yqNA4sQkAKjEtwmoaK1OrkTFTrE.roa (raw, json)
Hash identifier: O2EJnDu2+0JeHIrvLZzQ/vilp1X5+N3opHlclf1kJg8=
Subject key identifier: CA:A3:40:E2:C4:24:00:A8:C4:B7:09:A8:68:AD:4E:AE:44:C5:4E:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01953DB53E1F3B403FCB6A2CC117C08B2EB0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yqNA4sQkAKjEtwmoaK1OrkTFTrE.roa
Signing time: Tue 25 Feb 2025 15:24:02 +0000
ROA not before: Tue 25 Feb 2025 15:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:b5:3e:1f:3b:40:3f:cb:6a:2c:c1:17:c0:8b:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 25 15:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa340e2c42400a8c4b709a868ad4eae44c54eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:bd:c8:d3:f5:ef:c9:dc:88:72:9f:ad:9a:
2c:9c:c4:05:6d:64:a9:39:02:72:af:a1:de:4f:8f:
73:32:02:25:86:e6:03:4d:bb:41:3e:89:d7:72:8a:
8c:33:a5:72:3f:a9:58:5f:52:3f:ca:d0:e6:a4:7d:
ad:87:60:2a:df:45:6d:4e:64:28:19:34:94:a1:c4:
77:f5:ff:81:ee:ab:3c:fc:75:f3:c5:32:eb:4c:b0:
3a:1d:28:51:0f:03:46:4f:31:84:12:fc:07:f0:29:
08:12:58:a9:c2:ae:c2:33:c1:94:6d:d7:6d:0b:bb:
65:21:4e:54:77:d2:e5:3c:6d:4b:1e:72:32:6a:47:
05:02:44:8c:98:cd:37:d8:45:32:93:c7:14:45:3a:
ac:79:58:83:74:72:1a:9c:3e:f2:ba:37:0f:bd:33:
4c:2b:8e:74:15:ea:49:9c:60:27:e6:d4:16:5b:23:
b6:38:3c:1a:f4:b3:eb:28:88:fc:45:3d:35:d0:5c:
a5:01:22:7f:fc:3b:64:23:0c:de:a6:e4:42:e5:ca:
1e:96:db:c6:0b:cb:2d:b2:1d:f8:b2:c5:d4:a3:b9:
6e:33:90:b7:04:e9:b1:8f:c6:9b:b8:4e:44:c3:ea:
a9:fd:01:11:c0:75:bf:05:d8:d5:f4:71:18:4b:19:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:40:E2:C4:24:00:A8:C4:B7:09:A8:68:AD:4E:AE:44:C5:4E:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yqNA4sQkAKjEtwmoaK1OrkTFTrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.193.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:3f:58:4c:b9:58:09:50:26:cd:76:f7:7f:9d:35:49:4b:57:
59:a0:e2:f8:5d:26:8d:99:38:79:37:03:0b:2f:52:22:d9:f0:
8e:28:86:09:e8:ff:af:00:d1:2b:3b:ad:8a:e6:b1:88:6b:d0:
03:65:6f:83:f6:3f:72:4a:ef:39:3b:7b:5c:d5:21:22:ba:17:
73:f5:f4:56:c8:70:43:b2:45:25:8c:09:3e:3b:f5:aa:4b:bd:
19:5e:a0:9e:59:9f:af:51:b3:8f:50:69:74:f1:57:cd:b2:41:
bf:3a:10:bd:5f:64:d3:f9:9e:ed:25:40:2f:f9:bd:21:d5:1c:
a1:d3:dc:16:15:e4:a8:ca:63:8a:72:88:d2:b0:d3:4f:4b:d1:
23:2e:9c:d3:16:6c:32:3e:4c:10:90:c4:18:04:81:04:f4:2f:
75:e8:54:2d:3d:c3:06:e4:f3:18:ec:74:b2:f6:39:3b:00:38:
e7:98:db:88:50:27:22:23:89:95:10:9e:d6:7b:1e:8e:7d:07:
e4:30:e1:86:39:05:f9:3d:aa:9a:62:b3:bf:d1:97:14:2a:af:
22:31:0f:d7:94:b5:22:5d:3a:1c:5c:8b:9b:29:83:f8:9d:88:
9f:47:ec:86:04:36:0f:3a:28:a4:b4:7b:47:7b:db:ce:64:26:
34:44:09:a7
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZU9tT4fO0A/y2oswRfAiy6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMjI1MTUyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWEzNDBlMmM0MjQwMGE4YzRiNzA5YTg2OGFkNGVhZTQ0YzU0ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW29yNP178nciHKfrZosnMQFbWSp
OQJyr6HeT49zMgIlhuYDTbtBPonXcoqMM6VyP6lYX1I/ytDmpH2th2Aq30VtTmQo
GTSUocR39f+B7qs8/HXzxTLrTLA6HShRDwNGTzGEEvwH8CkIElipwq7CM8GUbddt
C7tlIU5Ud9LlPG1LHnIyakcFAkSMmM032EUyk8cURTqseViDdHIanD7yujcPvTNM
K450FepJnGAn5tQWWyO2ODwa9LPrKIj8RT010FylASJ//DtkIwzepuRC5coeltvG
C8stsh34ssXUo7luM5C3BOmxj8abuE5Ew+qp/QERwHW/BdjV9HEYSxknuwIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFMqjQOLEJACoxLcJqGitTq5ExU6xMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveXFOQTRzUWtBS2pFdHdtb2FLMU9ya1RGVHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAt
kKwDBAAtkK4DBABWazIDBABWa2QDBABccjYDBABdcasDBAC5SAgDBAC5jdsDBAC5
wWYDBAC5xusDBAC8QI4DBAC81HkDBADBfDEDBADCOiIwDAMEAsI6LAMEAMI6LgME
AMNYWQMEAMOFwQMEAdTADAMEANTADwMEAdTAFAMEANTAFwMEAdTA1jANBgkqhkiG
9w0BAQsFAAOCAQEACj9YTLlYCVAmzXb3f501SUtXWaDi+F0mjZk4eTcDCy9SItnw
jiiGCej/rwDRKzutiuaxiGvQA2Vvg/Y/ckrvOTt7XNUhIroXc/X0VshwQ7JFJYwJ
Pjv1qku9GV6gnlmfr1Gzj1BpdPFXzbJBvzoQvV9k0/me7SVAL/m9IdUcodPcFhXk
qMpjinKI0rDTT0vRIy6c0xZsMj5MEJDEGASBBPQvdehULT3DBuTzGOx0svY5OwA4
55jbiFAnIiOJlRCe1nsejn0H5DDhhjkF+T2qmmKzv9GXFCqvIjEP15S1Il06HFyL
mymD+J2In0fshgQ2DzoopLR7R3vbzmQmNEQJpw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:00 2025 by rpki-client