Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/URFgqH6ovXId9iMJWIAQMJiS8G0.roa
File: URFgqH6ovXId9iMJWIAQMJiS8G0.roa (raw, json)
Hash identifier: msQ3G1cSlz1YUoK4a/LAhR7dVAINHOI0Q3LkDW8/RkU=
Subject key identifier: 51:11:60:A8:7E:A8:BD:72:1D:F6:23:09:58:80:10:30:98:92:F0:6D
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01865C080E81AB9225943F768D10AC6751AF
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/URFgqH6ovXId9iMJWIAQMJiS8G0.roa
Signing time: Thu 16 Feb 2023 21:01:17 +0000
ROA not before: Thu 16 Feb 2023 21:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:08:0e:81:ab:92:25:94:3f:76:8d:10:ac:67:51:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 16 21:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511160a87ea8bd721df62309588010309892f06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:b2:37:a9:07:92:17:bf:e5:d0:e1:de:26:
20:f1:7a:1e:4e:da:2c:23:03:01:07:d4:50:f1:6f:
21:66:c3:5f:bd:29:75:49:43:ab:56:6e:54:b1:5c:
3b:77:d3:10:0d:66:f9:52:2a:a7:c8:a8:3e:cf:79:
d8:fa:68:eb:30:ce:14:f8:5b:2f:bb:34:b3:c8:62:
27:ab:ae:65:f9:37:d6:43:ed:26:8b:9b:1f:88:d9:
7e:ae:cd:d1:d1:8f:62:26:c8:ba:e3:9d:bb:7f:ac:
0c:d7:a9:05:02:d4:b1:44:a9:73:a2:70:7d:57:ff:
f7:11:76:9e:3c:90:0a:39:f0:f2:05:22:ee:1a:58:
19:62:45:e4:f9:64:95:f5:9c:0f:16:85:07:e3:22:
cc:57:d7:75:28:9d:93:de:92:4b:70:59:6f:cf:32:
99:ca:77:70:b4:05:63:a9:b7:ad:9c:c1:80:8f:5c:
cb:fd:38:a1:84:5e:55:11:9b:e8:a7:fd:48:f0:b2:
b6:5d:df:5d:30:6d:4f:28:66:f6:43:b9:60:2e:91:
16:20:90:e9:05:14:f8:9c:94:5b:87:fa:e7:8b:63:
26:45:15:52:81:a1:6a:58:41:b3:a7:59:15:03:a7:
42:80:c6:ee:79:ba:07:60:c2:7e:97:3b:bf:68:e9:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:60:A8:7E:A8:BD:72:1D:F6:23:09:58:80:10:30:98:92:F0:6D
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/URFgqH6ovXId9iMJWIAQMJiS8G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
37.251.240.0/21
46.231.104.0/21
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:db:ff:da:af:a5:12:ce:b9:70:76:28:f9:78:2b:e4:ca:4f:
67:18:38:18:30:0f:b3:d0:14:d9:03:f7:8c:32:56:da:f7:ac:
e8:d3:89:cf:f8:76:5d:19:5d:e2:f3:06:1e:3e:60:0c:0b:bc:
2b:0a:75:da:38:01:1f:59:c2:f9:4d:3b:d4:3c:7b:6d:ed:4e:
8d:77:30:12:92:a6:51:93:ad:4f:d0:08:e9:cd:12:6a:12:eb:
f1:4f:0a:40:6d:cd:05:40:82:9d:81:e0:6a:b0:1c:4e:dc:7b:
28:6d:82:19:2d:a3:70:5b:4e:17:6a:0f:2e:23:ee:13:aa:3b:
e4:7c:83:a3:dc:d3:cd:2a:40:9a:80:1c:21:25:2a:83:6e:65:
1b:36:0f:f1:3e:2c:49:5a:8c:03:f2:3e:c0:88:be:1d:81:77:
a0:bc:89:e1:04:9f:1f:f3:bb:b6:ad:6a:46:fb:6c:ff:3d:ce:
8a:60:79:a1:9c:11:3d:9f:9b:b4:aa:00:ed:c7:3c:9c:1c:d8:
f1:9d:11:68:46:b0:c4:10:52:6f:5c:29:2c:3d:db:ba:49:a4:
ef:c1:b3:2b:29:de:4c:c7:7c:28:7f:92:4b:43:85:0a:97:68:
94:96:da:a3:6e:fd:28:a6:8c:e9:03:50:96:72:f8:46:79:5e:
b7:a3:17:7c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYZcCA6Bq5IllD92jRCsZ1GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwMjE2MjEwMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTExNjBhODdlYThiZDcyMWRmNjIzMDk1ODgwMTAzMDk4OTJmMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmGyN6kHkhe/5dDh3iYg8XoeTtos
IwMBB9RQ8W8hZsNfvSl1SUOrVm5UsVw7d9MQDWb5UiqnyKg+z3nY+mjrMM4U+Fsv
uzSzyGInq65l+TfWQ+0mi5sfiNl+rs3R0Y9iJsi64527f6wM16kFAtSxRKlzonB9
V//3EXaePJAKOfDyBSLuGlgZYkXk+WSV9ZwPFoUH4yLMV9d1KJ2T3pJLcFlvzzKZ
yndwtAVjqbetnMGAj1zL/TihhF5VEZvop/1I8LK2Xd9dMG1PKGb2Q7lgLpEWIJDp
BRT4nJRbh/rni2MmRRVSgaFqWEGzp1kVA6dCgMbueboHYMJ+lzu/aOnsOwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFERYKh+qL1yHfYjCViAEDCYkvBtMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvVVJGZ3FINm92WElkOWlNSldJQVFNSmlTOEcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDJfvIAwQD
JfvwAwQDLudoAwQBXhoYAwQBXhpAAwQBXhpuMA0GCSqGSIb3DQEBCwUAA4IBAQC0
2//ar6USzrlwdij5eCvkyk9nGDgYMA+z0BTZA/eMMlba96zo04nP+HZdGV3i8wYe
PmAMC7wrCnXaOAEfWcL5TTvUPHtt7U6NdzASkqZRk61P0AjpzRJqEuvxTwpAbc0F
QIKdgeBqsBxO3HsobYIZLaNwW04Xag8uI+4TqjvkfIOj3NPNKkCagBwhJSqDbmUb
Ng/xPixJWowD8j7AiL4dgXegvInhBJ8f87u2rWpG+2z/Pc6KYHmhnBE9n5u0qgDt
xzycHNjxnRFoRrDEEFJvXCksPdu6SaTvwbMrKd5Mx3wof5JLQ4UKl2iUltqjbv0o
pozpA1CWcvhGeV63oxd8
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:42 2025 by rpki-client