Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/A3iIS8kiX0L97vuw6CVInqKd32A.roa
File: A3iIS8kiX0L97vuw6CVInqKd32A.roa (raw, json)
Hash identifier: vpw/Y0UzYqAoYlPvoFIZ1tB3ljV8skjJ7dFD2gapU1c=
Subject key identifier: 03:78:88:4B:C9:22:5F:42:FD:EE:FB:B0:E8:25:48:9E:A2:9D:DF:60
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018C684C41D8302892EF1172BD923D324D7A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/A3iIS8kiX0L97vuw6CVInqKd32A.roa
Signing time: Thu 14 Dec 2023 12:27:57 +0000
ROA not before: Thu 14 Dec 2023 12:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210176
IP address blocks: 89.39.210.0/23 maxlen: 24
109.94.144.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
37.251.240.0/21 maxlen: 24
192.64.44.0/23 maxlen: 24
94.24.64.0/21 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:4c:41:d8:30:28:92:ef:11:72:bd:92:3d:32:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Dec 14 12:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0378884bc9225f42fdeefbb0e825489ea29ddf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:e8:90:ea:ce:bc:7c:d6:20:26:19:88:26:
80:24:0f:a1:a1:8c:58:28:c6:a0:4c:81:78:df:e7:
dc:4e:d3:30:aa:3b:7e:d2:04:98:68:b2:27:20:87:
af:15:13:f3:38:9d:41:7d:2e:fd:3c:5e:f0:b9:4d:
59:78:28:74:7d:cf:94:f9:b5:5b:2b:b8:26:61:c7:
cc:44:4e:8f:92:57:7a:b3:f6:06:d0:6c:8a:f0:02:
97:6f:e4:73:b0:97:a2:9b:15:88:b9:60:76:cd:40:
67:7a:f2:d8:39:86:9e:20:3d:a1:f6:91:47:85:8c:
29:b5:a0:c2:07:fa:3d:95:9e:d7:a4:02:24:df:6c:
2e:9a:81:44:9c:f5:b9:da:bb:a6:06:7f:74:d9:d0:
4b:7d:ae:1f:91:dc:6c:40:1e:f8:38:ab:be:4c:b8:
9f:1c:1f:3f:1a:e2:1a:5f:a8:08:bd:67:b4:02:52:
df:99:28:57:2b:be:a1:b5:34:2f:ca:8b:d4:da:2e:
0f:2f:3c:99:cd:7e:8d:4b:ee:a4:2b:14:26:64:3c:
cc:cc:6d:39:07:1c:1f:1a:88:9a:ca:5a:32:b3:0e:
1e:d2:18:cd:4f:dd:12:5c:91:fe:81:37:64:b5:f2:
7d:f1:47:57:f9:ef:49:77:b6:7c:b9:0a:bb:9a:5b:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:88:4B:C9:22:5F:42:FD:EE:FB:B0:E8:25:48:9E:A2:9D:DF:60
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/A3iIS8kiX0L97vuw6CVInqKd32A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.231.104.0/21
62.122.40.0/21
89.39.210.0/23
89.40.220.0/23
94.24.64.0/21
94.26.24.0/23
109.94.144.0/20
141.136.16.0/20
192.64.44.0/23
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:2a:4c:c9:39:15:e5:02:a2:70:e0:b7:fd:fd:b8:64:bf:76:
9a:dc:e4:0b:60:c1:3e:a6:d7:c5:c4:dd:f4:44:fc:8b:34:70:
96:e7:b0:c6:a5:70:3b:82:94:46:5c:23:d3:f4:9e:d0:d4:8e:
12:68:36:05:99:42:d3:e4:b0:64:ee:4a:ce:63:b5:bf:7b:b2:
cf:4b:56:bc:fa:47:b2:a0:34:23:b2:93:9d:a8:9f:4b:94:24:
f2:46:58:3a:fd:7e:8e:73:c9:fe:6d:5f:a2:c1:e2:11:61:19:
c5:89:72:8f:86:cf:07:27:b3:a0:54:58:98:49:52:af:6f:f8:
fb:3e:19:15:ac:be:0c:ca:aa:16:4d:35:2f:40:f9:f1:4b:03:
2d:6f:7a:66:f3:a0:4f:6f:bc:3a:3a:d7:15:25:9c:a2:8a:1e:
b0:5a:2e:6f:ab:ab:55:2d:95:05:6c:c9:38:15:bb:d2:ce:52:
54:3b:c5:71:a9:98:38:69:08:d4:06:72:a7:0d:e5:99:9f:fa:
c9:c1:02:1e:ae:60:b9:4d:40:8d:0b:80:03:8c:65:be:cf:f4:
73:6e:97:e2:41:98:1d:b6:a0:6f:1b:5d:9b:81:37:e8:15:bb:
18:cf:0b:9a:9f:8f:32:3a:47:dd:5a:ce:88:75:7c:ac:1d:15:
27:ee:35:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYxoTEHYMCiS7xFyvZI9Mk16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMxMjE0MTIyNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzc4ODg0YmM5MjI1ZjQyZmRlZWZiYjBlODI1NDg5ZWEyOWRkZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03PokOrOvHzWICYZiCaAJA+hoYxY
KMagTIF43+fcTtMwqjt+0gSYaLInIIevFRPzOJ1BfS79PF7wuU1ZeCh0fc+U+bVb
K7gmYcfMRE6Pkld6s/YG0GyK8AKXb+RzsJeimxWIuWB2zUBnevLYOYaeID2h9pFH
hYwptaDCB/o9lZ7XpAIk32wumoFEnPW52rumBn902dBLfa4fkdxsQB74OKu+TLif
HB8/GuIaX6gIvWe0AlLfmShXK76htTQvyovU2i4PLzyZzX6NS+6kKxQmZDzMzG05
BxwfGoiayloysw4e0hjNT90SXJH+gTdktfJ98UdX+e9Jd7Z8uQq7mlvFaQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFAN4iEvJIl9C/e77sOglSJ6ind9gMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvQTNpSVM4a2lYMEw5N3Z1dzZDVklucUtkMzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQEJfuwAwQD
JfvIAwQDJfvwAwQDLudoAwQDPnooAwQBWSfSAwQBWSjcAwQDXhhAAwQBXhoYAwQE
bV6QAwQEjYgQAwQBwEAsAwQD1Z+IMA0GCSqGSIb3DQEBCwUAA4IBAQCaKkzJORXl
AqJw4Lf9/bhkv3aa3OQLYME+ptfFxN30RPyLNHCW57DGpXA7gpRGXCPT9J7Q1I4S
aDYFmULT5LBk7krOY7W/e7LPS1a8+keyoDQjspOdqJ9LlCTyRlg6/X6Oc8n+bV+i
weIRYRnFiXKPhs8HJ7OgVFiYSVKvb/j7PhkVrL4MyqoWTTUvQPnxSwMtb3pm86BP
b7w6OtcVJZyiih6wWi5vq6tVLZUFbMk4FbvSzlJUO8VxqZg4aQjUBnKnDeWZn/rJ
wQIermC5TUCNC4ADjGW+z/RzbpfiQZgdtqBvG12bgTfoFbsYzwuan48yOkfdWs6I
dXysHRUn7jXi
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:38 2025 by rpki-client