Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/T6DsNBZ0c_3JovpVfq6rAM8G1i8.roa
File: T6DsNBZ0c_3JovpVfq6rAM8G1i8.roa (raw, json)
Hash identifier: d4E52jx9sefrCo5h9h4+ReN3n0PDKF7RX/XMoJNZmr8=
Subject key identifier: 4F:A0:EC:34:16:74:73:FD:C9:A2:FA:55:7E:AE:AB:00:CF:06:D6:2F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC6BC0F8B29FAC65B5618191CAB6BB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/T6DsNBZ0c_3JovpVfq6rAM8G1i8.roa
Signing time: Thu 02 Jan 2025 07:48:07 +0000
ROA not before: Thu 02 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 931
IP address blocks: 45.139.6.0/23 maxlen: 24
178.173.236.0/22 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6b:c0:f8:b2:9f:ac:65:b5:61:81:91:ca:b6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa0ec34167473fdc9a2fa557eaeab00cf06d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:cd:7a:79:5c:b3:c6:10:9b:78:77:18:b8:
f2:2c:70:77:74:6d:ec:3f:3a:46:f8:56:68:07:96:
a8:2f:3a:74:91:42:e8:58:d6:d1:18:fd:59:76:3a:
1e:68:c6:a1:6f:8a:a4:7f:bb:f6:ec:a8:aa:56:cd:
26:75:bd:3e:b3:4a:a3:a5:fa:47:92:f7:e8:61:9f:
a3:ed:86:a0:7b:3f:ca:6d:ed:0e:7e:d7:5f:2b:aa:
d9:07:88:63:a1:16:4c:60:14:14:7c:2e:47:fe:9e:
03:cf:dc:41:03:09:1f:0b:a9:36:d1:8d:00:5f:82:
82:64:a9:86:c1:07:50:0b:cc:f8:2c:f4:5e:d0:e0:
50:6c:af:c1:ca:53:ff:32:42:39:f3:71:73:ad:01:
5b:f7:73:64:b2:ab:f1:33:c0:5b:7a:dd:7b:ec:e9:
91:52:f1:d8:3e:ad:9b:03:10:fe:86:32:90:51:c6:
68:23:74:45:77:56:0a:4a:4d:10:88:4a:76:a8:00:
c2:92:ef:4f:69:a3:39:be:a9:5e:fb:3b:92:82:5f:
bb:c6:29:d7:a5:5e:be:03:9b:5b:82:d9:82:99:7a:
69:24:5c:15:59:a8:e8:32:12:75:cd:d1:39:76:8f:
67:b2:92:4c:f9:7c:d8:a3:08:50:25:e9:75:0f:66:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:EC:34:16:74:73:FD:C9:A2:FA:55:7E:AE:AB:00:CF:06:D6:2F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/T6DsNBZ0c_3JovpVfq6rAM8G1i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
178.173.236.0/22
178.173.242.0-178.173.247.255
188.253.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:fb:44:2d:d2:25:e7:da:c2:f0:f5:60:4b:6f:26:2e:d3:21:
52:d6:4f:80:98:8f:12:9a:75:45:6b:2e:72:d3:3d:df:95:b2:
fc:50:51:4f:bc:83:27:85:d9:28:e3:b6:00:58:55:97:3b:d9:
49:a4:b1:cd:b0:ec:6d:bd:ab:f9:4d:27:fd:87:3d:5a:f8:01:
cc:0a:ed:72:c8:e0:dd:d3:ac:b9:39:5b:2c:52:52:0d:4d:a2:
2c:84:c6:7e:58:20:81:57:cf:08:6c:8f:23:f8:fd:61:6a:10:
f0:de:31:df:6f:e6:48:ef:2e:c9:f7:cf:55:f6:22:57:fa:04:
cd:81:e4:40:b5:b5:cb:d0:c6:a0:ee:64:85:6c:2d:4a:61:60:
14:a1:b8:e3:44:7e:02:d1:44:0a:91:d9:f7:3f:98:c0:3c:6c:
df:12:83:a3:e4:f0:2e:56:73:ab:16:67:51:b5:8f:8d:21:7f:
57:12:42:74:fb:38:2c:b7:82:2a:16:33:ea:ae:8a:21:aa:3e:
5d:ec:82:68:c2:82:fe:55:10:36:a7:4c:f0:e3:03:21:cb:72:
7f:24:95:eb:59:7e:37:20:68:8d:bd:c6:12:19:e4:3f:6f:5a:
0e:91:73:b1:fc:a1:5b:d1:81:e8:ec:56:af:1b:21:a2:d8:e9:
98:5e:ab:ae
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQl/GvA+LKfrGW1YYGRyra7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmEwZWMzNDE2NzQ3M2ZkYzlhMmZhNTU3ZWFlYWIwMGNmMDZkNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUrNenlcs8YQm3h3GLjyLHB3dG3s
PzpG+FZoB5aoLzp0kULoWNbRGP1ZdjoeaMahb4qkf7v27KiqVs0mdb0+s0qjpfpH
kvfoYZ+j7Yagez/Kbe0OftdfK6rZB4hjoRZMYBQUfC5H/p4Dz9xBAwkfC6k20Y0A
X4KCZKmGwQdQC8z4LPRe0OBQbK/BylP/MkI583FzrQFb93NksqvxM8Bbet177OmR
UvHYPq2bAxD+hjKQUcZoI3RFd1YKSk0QiEp2qADCku9PaaM5vqle+zuSgl+7xinX
pV6+A5tbgtmCmXppJFwVWajoMhJ1zdE5do9nspJM+XzYowhQJel1D2a/6wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFE+g7DQWdHP9yaL6VX6uqwDPBtYvMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVDZEc05CWjBjXzNKb3ZwVmZxNnJBTThHMWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLYsGAwQC
sq3sMAwDBAGyrfIDBAOyrfADBAK8/RwwDQYJKoZIhvcNAQELBQADggEBABD7RC3S
JefawvD1YEtvJi7TIVLWT4CYjxKadUVrLnLTPd+VsvxQUU+8gyeF2SjjtgBYVZc7
2Umksc2w7G29q/lNJ/2HPVr4AcwK7XLI4N3TrLk5WyxSUg1NoiyExn5YIIFXzwhs
jyP4/WFqEPDeMd9v5kjvLsn3z1X2Ilf6BM2B5EC1tcvQxqDuZIVsLUphYBShuONE
fgLRRAqR2fc/mMA8bN8Sg6Pk8C5Wc6sWZ1G1j40hf1cSQnT7OCy3gioWM+quiiGq
Pl3sgmjCgv5VEDanTPDjAyHLcn8kletZfjcgaI29xhIZ5D9vWg6Rc7H8oVvRgejs
Vq8bIaLY6Zheq64=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:50:53 2025 by rpki-client