Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/dmJcTW1ngHYfKraVmvtGEjPnBJ0.roa
File: dmJcTW1ngHYfKraVmvtGEjPnBJ0.roa (raw, json)
Hash identifier: WMvehvE84GhyNBrX6aAszxAkdG3gaqOvmahT0MUpr4Q=
Subject key identifier: 76:62:5C:4D:6D:67:80:76:1F:2A:B6:95:9A:FB:46:12:33:E7:04:9D
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01856EC1FEE7CD6D10E3318A9AA1BD862935
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/dmJcTW1ngHYfKraVmvtGEjPnBJ0.roa
Signing time: Sun 01 Jan 2023 19:14:45 +0000
ROA not before: Sun 01 Jan 2023 19:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 109.198.32.0/20 maxlen: 32
109.198.48.0/20 maxlen: 32
43.252.28.0/22 maxlen: 32
89.184.192.0/19 maxlen: 32
103.211.184.0/23 maxlen: 32
37.61.226.0/24 maxlen: 32
103.225.128.0/22 maxlen: 32
185.10.7.0/24 maxlen: 32
37.200.104.0/21 maxlen: 32
37.61.227.0/24 maxlen: 32
193.151.52.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
85.208.148.0/22 maxlen: 32
206.204.0.0/18 maxlen: 32
194.32.88.0/22 maxlen: 32
139.5.104.0/22 maxlen: 32
45.114.240.0/22 maxlen: 32
78.156.160.0/20 maxlen: 32
89.104.110.0/23 maxlen: 32
78.156.176.0/20 maxlen: 32
216.194.80.0/20 maxlen: 32
94.46.32.0/21 maxlen: 32
89.223.14.0/23 maxlen: 32
46.182.168.0/22 maxlen: 32
45.130.120.0/22 maxlen: 32
45.12.56.0/22 maxlen: 32
94.46.2.0/23 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
94.46.0.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fe:e7:cd:6d:10:e3:31:8a:9a:a1:bd:86:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jan 1 19:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76625c4d6d6780761f2ab6959afb461233e7049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:e9:57:d5:25:e5:e0:be:b5:bf:5a:ca:e8:
56:86:32:9c:89:e3:67:7a:b3:4b:30:4c:45:06:8b:
89:33:ca:06:ab:c1:cf:06:6c:91:e4:aa:bd:43:19:
2d:42:b3:d2:07:ed:7b:0f:99:d2:41:a6:09:2d:4f:
cb:6d:cf:65:90:bd:67:7d:d1:76:70:d9:d4:bc:44:
b0:1f:59:12:c7:53:73:a6:c6:e0:d9:23:26:de:1b:
e9:c8:c9:16:1d:ff:20:91:cf:13:1f:3e:0c:9d:28:
89:4a:e7:9d:83:93:79:33:57:22:2d:a1:23:b2:53:
79:eb:d1:d0:8c:3e:87:35:0f:33:67:5a:3b:54:6f:
f8:2e:53:0a:ec:11:8d:f9:92:96:86:cf:ea:69:fc:
27:1e:43:55:b5:19:81:b8:3e:b2:1e:fd:b8:18:67:
6d:c1:96:4e:ea:c8:50:8b:51:c9:52:e1:a8:68:c0:
c2:9f:40:f5:f3:8c:09:be:e2:f6:88:98:08:31:5e:
44:43:29:36:81:fd:92:69:64:f5:13:64:97:d4:fd:
44:cd:cb:a5:39:9b:b4:68:d6:52:1e:2d:c6:fb:96:
be:de:16:7b:96:71:ac:f5:29:c2:4e:02:86:36:d7:
ad:5a:6f:ae:70:a4:9c:9c:e6:74:8a:25:48:fa:ef:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:5C:4D:6D:67:80:76:1F:2A:B6:95:9A:FB:46:12:33:E7:04:9D
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/dmJcTW1ngHYfKraVmvtGEjPnBJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/23
37.200.104.0/21
43.252.28.0/22
45.12.56.0/22
45.114.240.0/22
45.130.120.0/22
46.182.168.0/22
78.156.160.0/19
85.208.148.0/22
89.104.110.0/23
89.184.192.0/19
89.223.14.0/23
94.46.0.0/21
94.46.32.0/21
103.30.12.0/22
103.211.184.0/23
103.225.128.0/22
109.198.32.0/19
116.212.188.0/22
139.5.104.0/22
180.94.216.0/22
185.10.7.0/24
193.151.52.0/22
194.32.88.0/22
206.204.0.0/18
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
72:21:49:d5:31:6b:97:47:1c:65:4a:ac:36:7c:8f:88:cc:ec:
ce:8b:9e:5a:26:96:f8:b0:ba:f5:4a:62:dc:1f:e6:07:7c:e7:
a0:59:0e:82:fa:69:39:3a:e1:d6:87:03:1b:8a:aa:8c:ff:d2:
b5:91:1d:65:ce:91:16:51:f4:8b:3c:48:58:da:16:67:f7:ed:
8c:17:86:f4:45:91:86:0d:ad:d4:eb:49:1b:ef:47:ed:73:f0:
26:67:7f:2a:1c:5f:a2:5c:c4:5d:4a:96:0e:e3:1a:2c:71:4d:
72:7d:c5:02:d8:5b:d5:60:e9:bc:57:41:a6:02:2f:ac:8b:11:
ce:59:e0:a2:2f:b5:ac:48:82:3f:78:a8:93:48:32:f3:10:e0:
c8:81:e7:d5:46:04:50:76:b9:30:bf:ce:19:19:8c:b9:ae:4b:
2f:64:99:7b:e8:10:de:67:5b:13:d8:a4:1e:e1:c9:4b:31:87:
7d:67:51:da:5e:04:76:d8:19:d8:43:29:c1:e3:08:91:43:fe:
3f:56:87:e8:4a:0c:35:96:f0:10:85:f1:29:1c:13:1d:5e:26:
8f:d0:1a:ca:98:21:5a:7e:13:08:9e:2f:b7:69:e0:e0:cf:f4:
cc:5b:4f:ab:82:b9:b0:a1:3d:45:48:46:29:b1:14:e5:d0:0b:
cb:d4:fa:d9
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYVuwf7nzW0Q4zGKmqG9hik1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjMwMTAxMTkxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjYyNWM0ZDZkNjc4MDc2MWYyYWI2OTU5YWZiNDYxMjMzZTcwNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7npV9Ul5eC+tb9ayuhWhjKcieNn
erNLMExFBouJM8oGq8HPBmyR5Kq9QxktQrPSB+17D5nSQaYJLU/Lbc9lkL1nfdF2
cNnUvESwH1kSx1Nzpsbg2SMm3hvpyMkWHf8gkc8THz4MnSiJSuedg5N5M1ciLaEj
slN569HQjD6HNQ8zZ1o7VG/4LlMK7BGN+ZKWhs/qafwnHkNVtRmBuD6yHv24GGdt
wZZO6shQi1HJUuGoaMDCn0D184wJvuL2iJgIMV5EQyk2gf2SaWT1E2SX1P1Ezcul
OZu0aNZSHi3G+5a+3hZ7lnGs9SnCTgKGNtetWm+ucKScnOZ0iiVI+u8ivQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFHZiXE1tZ4B2Hyq2lZr7RhIz5wSdMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEvZG1KY1RXMW5nSFlmS3JhVm12dEdFalBuQkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAEl
PeIDBAMlyGgDBAIr/BwDBAItDDgDBAItcvADBAItgngDBAIutqgDBAVOnKADBAJV
0JQDBAFZaG4DBAVZuMADBAFZ3w4DBANeLgADBANeLiADBAJnHgwDBAFn07gDBAJn
4YADBAVtxiADBAJ01LwDBAKLBWgDBAK0XtgDBAC5CgcDBALBlzQDBALCIFgDBAbO
zAADBATYwlAwDQYJKoZIhvcNAQELBQADggEBAHIhSdUxa5dHHGVKrDZ8j4jM7M6L
nlomlviwuvVKYtwf5gd856BZDoL6aTk64daHAxuKqoz/0rWRHWXOkRZR9Is8SFja
Fmf37YwXhvRFkYYNrdTrSRvvR+1z8CZnfyocX6JcxF1Klg7jGixxTXJ9xQLYW9Vg
6bxXQaYCL6yLEc5Z4KIvtaxIgj94qJNIMvMQ4MiB59VGBFB2uTC/zhkZjLmuSy9k
mXvoEN5nWxPYpB7hyUsxh31nUdpeBHbYGdhDKcHjCJFD/j9Wh+hKDDWW8BCF8Skc
Ex1eJo/QGsqYIVp+EwieL7dp4ODP9MxbT6uCubChPUVIRimxFOXQC8vU+tk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:59 2025 by rpki-client