Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozIfPEtgAprPc7-aEqYjEng3F6w.roa
File: ozIfPEtgAprPc7-aEqYjEng3F6w.roa (raw, json)
Hash identifier: FnndqHxexU9S+51go8AA0T83gvUGUFbC4hVbQXLSLG0=
Subject key identifier: A3:32:1F:3C:4B:60:02:9A:CF:73:BF:9A:12:A6:23:12:78:37:17:AC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194D6CD59145888871CE10A66019CDEDDA5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozIfPEtgAprPc7-aEqYjEng3F6w.roa
Signing time: Wed 05 Feb 2025 15:49:29 +0000
ROA not before: Wed 05 Feb 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
85.204.241.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.39.214.0/24 maxlen: 24
89.39.245.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.204.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
89.44.237.0/24 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.115.56.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
176.223.168.0/22 maxlen: 24
188.212.131.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.68.0/23 maxlen: 24
188.241.66.0/23 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.128.0/22 maxlen: 24
188.241.132.0/23 maxlen: 24
188.241.138.0/23 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:cd:59:14:58:88:87:1c:e1:0a:66:01:9c:de:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 5 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3321f3c4b60029acf73bf9a12a62312783717ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:a4:31:27:20:64:70:d4:b1:63:ee:0b:14:
e9:c0:25:74:2f:c3:30:5a:da:59:6c:37:2e:55:28:
83:ef:2c:50:b0:22:0c:5b:af:c8:59:ce:6f:e2:34:
91:f9:f8:a9:9e:07:6a:99:b8:1f:5b:67:b4:8a:35:
c3:32:fc:18:84:6a:47:67:89:8a:99:20:18:38:b2:
27:91:e4:7f:9b:e1:a7:d3:10:8b:68:fd:fd:f4:d1:
84:99:a6:23:cd:47:e3:67:d6:ac:d8:45:98:09:68:
e9:0e:ef:7b:5e:f2:a2:f6:d3:b0:c3:09:14:8f:3b:
02:c6:91:b2:47:e5:65:0c:92:1a:19:4f:61:98:1b:
fd:1b:4f:6a:cd:30:90:b0:87:4e:ae:45:c7:61:92:
76:0e:6a:34:46:5a:cb:b5:e1:fc:d2:d8:85:fe:45:
22:60:5c:3e:0c:bd:2c:e2:d2:0d:01:14:6c:ac:d5:
e2:4d:b0:78:8b:ba:ba:c5:97:d8:a7:d9:cc:49:66:
e2:d7:33:4d:ce:77:67:f0:cd:ce:a0:78:f7:93:f1:
56:bb:11:37:2a:dc:f0:8a:40:4b:cb:bd:ef:88:5a:
ed:6c:c9:0b:8e:64:3c:50:e2:df:fd:0e:1b:23:1e:
5e:4c:a0:3c:4e:a0:b6:59:d3:dc:75:d0:d2:ba:16:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:32:1F:3C:4B:60:02:9A:CF:73:BF:9A:12:A6:23:12:78:37:17:AC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ozIfPEtgAprPc7-aEqYjEng3F6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
84.247.36.0/22
85.204.241.0/24
86.105.151.0/24
86.105.224.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.80.0/24
89.39.90.0/24
89.39.214.0/24
89.39.245.0/24
89.40.69.0/24
89.40.204.0/24
89.42.158.0/23
89.44.237.0/24
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.115.56.0/23
93.117.175.0/24
94.176.3.0/24
94.176.108.0/24
176.223.168.0/22
188.212.131.0/24
188.214.199.0/24
188.215.68.0/23
188.241.66.0/23
188.241.126.0-188.241.133.255
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f2:06:e5:59:e2:1d:26:a4:99:00:db:7f:c3:56:99:ce:af:
60:31:35:03:18:bb:6e:66:c2:fe:93:39:a2:b7:cf:f5:cb:5e:
6b:a6:4e:56:73:a3:8b:dd:91:78:9d:fd:d6:70:c4:66:25:0d:
44:d7:8e:1e:7e:00:bb:4e:74:d3:84:e6:c6:ee:14:dd:fe:39:
1c:fc:28:46:7a:84:ae:17:33:f8:82:c2:f9:b4:f7:2c:e8:78:
ed:37:82:d7:2b:bd:a6:9c:b2:a7:3c:73:6f:69:86:80:ed:fc:
e9:57:15:d1:4c:a7:d4:44:6f:0d:29:be:22:a6:b9:dc:83:b8:
d5:02:58:90:32:3f:4a:3f:e8:5c:02:64:ed:24:dd:db:fd:dc:
2a:e4:97:5e:9f:59:ad:03:62:90:0c:3a:7b:2c:75:a5:18:ff:
0a:63:8e:95:fd:e8:da:e1:ba:1d:4d:f4:b0:91:b5:4a:49:61:
8e:83:ba:33:b5:16:dd:3c:6c:a6:63:cd:28:93:94:14:0b:97:
22:b7:83:fa:0a:48:2f:b2:44:9b:97:6c:61:86:b6:2d:44:88:
05:d6:29:64:b4:1f:85:95:55:4a:12:3a:85:b9:b1:a6:93:c9:
e1:ac:c6:5b:ee:8d:59:14:d2:20:3f:63:6a:bf:9d:b7:d0:45:
49:b8:93:44
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISAZTWzVkUWIiHHOEKZgGc3t2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMjA1MTU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzMyMWYzYzRiNjAwMjlhY2Y3M2JmOWExMmE2MjMxMjc4MzcxN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ykMScgZHDUsWPuCxTpwCV0L8Mw
WtpZbDcuVSiD7yxQsCIMW6/IWc5v4jSR+fipngdqmbgfW2e0ijXDMvwYhGpHZ4mK
mSAYOLInkeR/m+Gn0xCLaP399NGEmaYjzUfjZ9as2EWYCWjpDu97XvKi9tOwwwkU
jzsCxpGyR+VlDJIaGU9hmBv9G09qzTCQsIdOrkXHYZJ2Dmo0RlrLteH80tiF/kUi
YFw+DL0s4tINARRsrNXiTbB4i7q6xZfYp9nMSWbi1zNNzndn8M3OoHj3k/FWuxE3
KtzwikBLy73viFrtbMkLjmQ8UOLf/Q4bIx5eTKA8TqC2WdPcddDSuhZ1pwIDAQAB
o4IDBTCCAwEwHQYDVR0OBBYEFKMyHzxLYAKaz3O/mhKmIxJ4NxesMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL296SWZQRXRnQXByUGM3LWFFcVlqRW5nM0Y2dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggEXBggrBgEFBQcBBwEB/wSCAQYwggECMIH/BAIAATCB
+AMEACWcIwMEAlT3JAMEAFXM8QMEAFZplwMEAFZp4AMEAFZrTQMEAFZruAMEAVZr
9AMEAFkhUQMEAFkhVwMEAFkiWgMEAFkirgMEAFkjGgMEAFkjMwMEAFkjrAMEAFkl
jgMEAFknUAMEAFknWgMEAFkn1gMEAFkn9QMEAFkoRQMEAFkozAMEAVkqngMEAFks
7QMEAVxyaAMEAV1xYgMEAV1x1gMEAV1zOAMEAF11rwMEAF6wAwMEAF6wbAMEArDf
qAMEALzUgwMEALzWxwMEAbzXRAMEAbzxQjAMAwQBvPF+AwQBvPGEAwQBvPGKAwQA
vPGPAwQAvPHVMA0GCSqGSIb3DQEBCwUAA4IBAQBX8gblWeIdJqSZANt/w1aZzq9g
MTUDGLtuZsL+kzmit8/1y15rpk5Wc6OL3ZF4nf3WcMRmJQ1E144efgC7TnTThObG
7hTd/jkc/ChGeoSuFzP4gsL5tPcs6HjtN4LXK72mnLKnPHNvaYaA7fzpVxXRTKfU
RG8NKb4iprncg7jVAliQMj9KP+hcAmTtJN3b/dwq5Jden1mtA2KQDDp7LHWlGP8K
Y46V/eja4bodTfSwkbVKSWGOg7oztRbdPGymY80ok5QUC5cit4P6CkgvskSbl2xh
hrYtRIgF1ilktB+FlVVKEjqFubGmk8nhrMZb7o1ZFNIgP2Nqv5230EVJuJNE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client