Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rtz3qC9idXx0_hTVcLvfRzUUQ90.roa
File: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (raw, json)
Hash identifier: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=
Subject key identifier: AE:DC:F7:A8:2F:62:75:7C:74:FE:14:D5:70:BB:DF:47:35:14:43:DD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D4B10A697D65D27861E5869D58EA
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rtz3qC9idXx0_hTVcLvfRzUUQ90.roa
Signing time: Thu 02 Jan 2025 17:50:24 +0000
ROA not before: Thu 02 Jan 2025 17:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49112
IP address blocks: 95.157.128.0/18 maxlen: 18
130.0.96.0/19 maxlen: 19
176.52.224.0/20 maxlen: 20
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d4:b1:0a:69:7d:65:d2:78:61:e5:86:9d:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aedcf7a82f62757c74fe14d570bbdf47351443dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:a1:96:9b:7d:f5:72:79:68:b5:cb:04:ac:
df:26:32:9b:73:a8:92:01:11:52:4f:c0:63:55:24:
9b:ac:d4:2e:38:2d:05:33:ba:c6:96:45:ed:02:9a:
fd:4e:9c:65:8a:e0:55:d9:6c:66:c2:f2:5f:c1:27:
63:31:ed:e0:5e:db:5e:1e:6b:a2:1e:57:42:bf:e6:
66:ef:40:3a:e4:d4:a0:74:64:18:8c:dc:19:8c:a2:
b7:78:80:da:d7:81:f5:f2:18:28:69:5a:b5:6b:a4:
e6:f3:f6:4e:b7:8c:ce:c0:80:d8:1a:cd:79:55:70:
32:07:6b:4c:93:37:22:bc:bf:b8:82:54:19:35:c1:
e3:58:97:a0:69:a4:a8:d4:81:01:2e:87:bd:e1:60:
98:7a:7f:09:31:bd:3b:b8:54:74:b9:a3:47:20:c3:
85:33:e6:57:01:63:de:0a:9f:e2:5f:eb:51:55:db:
8c:26:ce:25:a9:14:b2:6e:38:33:c0:06:ad:e1:d7:
0d:58:0b:56:5e:d5:3d:3c:49:ff:56:32:f4:ae:2d:
65:e3:3f:e0:9d:1f:65:1b:e3:58:ff:da:0b:23:49:
c0:2b:1e:a2:80:45:a2:bc:af:65:30:5a:59:0e:21:
80:79:36:e8:d9:aa:33:36:b9:13:51:4b:dd:02:e3:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:F7:A8:2F:62:75:7C:74:FE:14:D5:70:BB:DF:47:35:14:43:DD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rtz3qC9idXx0_hTVcLvfRzUUQ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
0f:5a:66:77:61:19:c0:de:49:22:df:4c:fc:5a:6c:68:4b:56:
ca:6c:d5:de:ab:7f:6e:3b:37:3e:5a:2f:38:aa:a4:96:91:56:
17:54:65:e6:57:0f:3b:96:39:aa:54:4c:7e:68:db:32:66:88:
6f:d9:06:1d:28:8c:24:c7:31:16:26:5b:7e:8a:a4:e7:b0:85:
1e:e8:63:bb:6e:af:94:e1:6c:aa:d9:98:08:8a:41:84:f9:05:
27:d4:e4:1e:ef:cf:ce:c6:a4:6a:d6:2e:2c:15:2b:2f:74:4f:
d4:8d:f2:ba:a0:a7:f1:3c:7e:3b:df:9b:68:6d:aa:0f:26:4d:
b7:40:46:cc:12:d3:2f:90:0e:ec:e3:dc:7e:5d:2e:b4:a0:1f:
2e:ac:be:2d:17:d0:61:36:5b:92:7f:20:f1:63:8a:36:88:0b:
82:49:6f:ec:07:38:67:63:51:6e:0f:8a:fd:41:47:3b:65:c1:
70:4e:14:af:11:e3:ac:40:75:32:2e:c3:cc:b2:2d:15:34:ee:
7c:63:ea:98:23:9c:b3:fb:02:29:3c:48:9f:bc:01:4d:3e:40:
a2:74:0b:c4:7b:6e:62:8a:e0:08:37:07:e4:9c:a1:ae:12:35:
fc:0b:22:35:6f:b1:34:a1:14:c9:07:d2:99:58:7d:70:5f:e7:
62:43:25:10
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQoI9SxCml9ZdJ4YeWGnVjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMTAyMTc1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWRjZjdhODJmNjI3NTdjNzRmZTE0ZDU3MGJiZGY0NzM1MTQ0M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzauhlpt99XJ5aLXLBKzfJjKbc6iS
ARFST8BjVSSbrNQuOC0FM7rGlkXtApr9TpxliuBV2WxmwvJfwSdjMe3gXtteHmui
HldCv+Zm70A65NSgdGQYjNwZjKK3eIDa14H18hgoaVq1a6Tm8/ZOt4zOwIDYGs15
VXAyB2tMkzcivL+4glQZNcHjWJegaaSo1IEBLoe94WCYen8JMb07uFR0uaNHIMOF
M+ZXAWPeCp/iX+tRVduMJs4lqRSybjgzwAat4dcNWAtWXtU9PEn/VjL0ri1l4z/g
nR9lG+NY/9oLI0nAKx6igEWivK9lMFpZDiGAeTbo2aozNrkTUUvdAuP+XQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFK7c96gvYnV8dP4U1XC730c1FEPdMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvcnR6M3FDOWlkWHgwX2hUVmNMdmZSelVVUTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGX52AAwQF
ggBgAwQEsDTgAwQCuZPoMA0EAgACMAcDBQAqAJOAMA0GCSqGSIb3DQEBCwUAA4IB
AQAPWmZ3YRnA3kki30z8WmxoS1bKbNXeq39uOzc+Wi84qqSWkVYXVGXmVw87ljmq
VEx+aNsyZohv2QYdKIwkxzEWJlt+iqTnsIUe6GO7bq+U4Wyq2ZgIikGE+QUn1OQe
78/OxqRq1i4sFSsvdE/UjfK6oKfxPH4735tobaoPJk23QEbMEtMvkA7s49x+XS60
oB8urL4tF9BhNluSfyDxY4o2iAuCSW/sBzhnY1FuD4r9QUc7ZcFwThSvEeOsQHUy
LsPMsi0VNO58Y+qYI5yz+wIpPEifvAFNPkCidAvEe25iiuAINwfknKGuEjX8CyI1
b7E0oRTJB9KZWH1wX+diQyUQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:29 2025 by rpki-client