Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2h1b6ne_KkDYtq9UreMjjC9CAM0.roa
File: 2h1b6ne_KkDYtq9UreMjjC9CAM0.roa (raw, json)
Hash identifier: //fgr3+eXP4c0HCDT5PTnPNo0leqhZImS1aPVRpGB9Q=
Subject key identifier: DA:1D:5B:EA:77:BF:2A:40:D8:B6:AF:54:AD:E3:23:8C:2F:42:00:CD
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018A409FCEB7BDA3C22FBA374FDF065A83A4
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2h1b6ne_KkDYtq9UreMjjC9CAM0.roa
Signing time: Tue 29 Aug 2023 09:28:49 +0000
ROA not before: Tue 29 Aug 2023 09:28:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 109.94.144.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
94.24.108.0/23 maxlen: 24
62.122.40.0/21 maxlen: 24
192.64.44.0/23 maxlen: 24
88.135.96.0/20 maxlen: 24
94.24.64.0/21 maxlen: 24
89.46.248.0/22 maxlen: 24
91.245.216.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:9f:ce:b7:bd:a3:c2:2f:ba:37:4f:df:06:5a:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 29 09:28:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da1d5bea77bf2a40d8b6af54ade3238c2f4200cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:31:ca:f7:5e:7e:3f:83:af:55:06:fe:15:
b1:bf:c4:86:ad:3b:d6:fa:4c:b4:6b:20:9e:1a:c1:
4b:2e:22:fb:1d:89:da:8c:93:61:4c:7e:11:8a:84:
f0:25:e7:c7:7f:e6:8f:f1:42:3a:79:c0:8d:1e:7d:
4a:1b:9b:12:27:c2:85:4f:a9:01:3d:23:be:c3:b9:
0e:28:55:df:3d:6d:b5:1b:3c:cb:68:c3:df:03:38:
d1:d6:34:c4:d4:cc:39:eb:79:f1:2c:21:45:4c:29:
ef:47:db:14:6e:32:92:3f:64:d1:00:ea:43:65:5c:
dd:cb:9f:63:dd:be:6e:87:c0:97:23:35:18:6f:2e:
99:f0:3d:26:60:c4:41:c2:e9:fb:7c:7a:5f:07:ab:
90:95:12:27:39:d2:53:c5:38:1a:24:ec:a0:c5:ab:
39:c7:d2:e8:bb:e0:df:d8:18:89:21:e3:b5:4b:f3:
6f:d5:80:8e:7c:0f:59:a9:31:0e:18:4e:fa:ee:89:
e4:07:71:1a:55:fb:c7:f3:e6:c0:82:e8:22:9b:67:
c4:10:a9:48:fd:f0:dc:82:e3:47:89:b8:05:83:5c:
55:d6:94:9d:02:0c:5b:c5:77:4f:ea:a0:dd:bf:d6:
9f:17:50:2f:0f:86:6a:92:ad:fa:c8:5b:a7:2b:65:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:5B:EA:77:BF:2A:40:D8:B6:AF:54:AD:E3:23:8C:2F:42:00:CD
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2h1b6ne_KkDYtq9UreMjjC9CAM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
62.122.40.0/21
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
89.46.248.0/22
91.227.240.0/23
91.245.216.0/23
94.24.64.0/21
94.24.108.0/23
94.26.24.0/23
94.26.110.0/23
109.94.144.0/20
141.136.16.0/20
192.64.44.0/23
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
d3:63:14:97:eb:cd:77:e4:ba:af:df:06:c4:4b:d1:cc:39:63:
f6:d4:44:0b:1a:a0:f7:60:60:53:a3:c3:60:1c:62:49:73:a7:
ca:96:26:13:6e:a0:14:bb:bc:22:ce:b8:4f:a2:46:33:39:88:
f5:5d:a7:66:dd:5c:4c:85:28:7f:c7:39:86:9c:7e:17:3d:59:
68:5c:3c:d1:a2:16:aa:c2:de:9f:ad:6a:91:07:c1:d9:ae:3f:
8b:68:58:01:87:1b:6b:b5:52:51:13:19:48:96:c4:97:92:81:
df:82:00:9f:21:7e:5f:43:48:83:91:bf:13:d7:3a:da:d4:33:
50:18:d6:12:7b:25:16:f2:ff:02:57:6a:44:45:56:12:f9:3e:
d3:d7:a2:5c:01:b7:5c:e6:7b:1d:05:d2:88:bd:bc:67:1e:c4:
b3:6b:c6:42:d2:2d:db:39:19:dc:ae:a8:f4:3a:ba:ea:96:bf:
0c:b2:34:92:cc:3a:d8:9e:53:56:c9:94:ec:98:80:7a:34:fa:
e4:56:d3:a1:ed:ce:14:6c:fe:ee:aa:f1:14:5c:22:de:3a:2c:
66:16:f8:ed:ea:a1:9a:99:4c:58:a2:ef:8c:cb:e4:88:86:9c:
8a:5a:67:c6:63:af:06:d3:6f:9e:a5:d5:4d:dd:8e:69:f8:20:
39:e9:2b:51
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYpAn863vaPCL7o3T98GWoOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwODI5MDkyODQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTFkNWJlYTc3YmYyYTQwZDhiNmFmNTRhZGUzMjM4YzJmNDIwMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivIxyvdefj+Dr1UG/hWxv8SGrTvW
+ky0ayCeGsFLLiL7HYnajJNhTH4RioTwJefHf+aP8UI6ecCNHn1KG5sSJ8KFT6kB
PSO+w7kOKFXfPW21GzzLaMPfAzjR1jTE1Mw563nxLCFFTCnvR9sUbjKSP2TRAOpD
ZVzdy59j3b5uh8CXIzUYby6Z8D0mYMRBwun7fHpfB6uQlRInOdJTxTgaJOygxas5
x9Lou+Df2BiJIeO1S/Nv1YCOfA9ZqTEOGE767onkB3EaVfvH8+bAgugim2fEEKlI
/fDcguNHibgFg1xV1pSdAgxbxXdP6qDdv9afF1AvD4Zqkq36yFunK2WUnwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFNodW+p3vypA2LavVK3jI4wvQgDNMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvMmgxYjZuZV9La0RZdHE5VXJlTWpqQzlDQU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQDJfvIAwQD
PnooAwQEWIdgAwQBWSfSAwQBWSjcAwQCWS74AwQBW+PwAwQBW/XYAwQDXhhAAwQB
XhhsAwQBXhoYAwQBXhpuAwQEbV6QAwQEjYgQAwQBwEAsAwQD1Z+IMA0GCSqGSIb3
DQEBCwUAA4IBAQDTYxSX68135Lqv3wbES9HMOWP21EQLGqD3YGBTo8NgHGJJc6fK
liYTbqAUu7wizrhPokYzOYj1Xadm3VxMhSh/xzmGnH4XPVloXDzRohaqwt6frWqR
B8HZrj+LaFgBhxtrtVJRExlIlsSXkoHfggCfIX5fQ0iDkb8T1zra1DNQGNYSeyUW
8v8CV2pERVYS+T7T16JcAbdc5nsdBdKIvbxnHsSza8ZC0i3bORncrqj0Orrqlr8M
sjSSzDrYnlNWyZTsmIB6NPrkVtOh7c4UbP7uqvEUXCLeOixmFvjt6qGamUxYou+M
y+SIhpyKWmfGY68G02+epdVN3Y5p+CA56StR
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:58 2025 by rpki-client