Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bhQpPYVdVHPqk857eSDRlP0pnZY.roa
File: bhQpPYVdVHPqk857eSDRlP0pnZY.roa (raw, json)
Hash identifier: mSUw4ksl5U6XPFOs0wmSIRe7bNWWJcQPYJ3Pc1vprZI=
Subject key identifier: 6E:14:29:3D:85:5D:54:73:EA:93:CE:7B:79:20:D1:94:FD:29:9D:96
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01865C08F97CF057F082AEC94560816725DD
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bhQpPYVdVHPqk857eSDRlP0pnZY.roa
Signing time: Thu 16 Feb 2023 21:02:17 +0000
ROA not before: Thu 16 Feb 2023 21:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:08:f9:7c:f0:57:f0:82:ae:c9:45:60:81:67:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Feb 16 21:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e14293d855d5473ea93ce7b7920d194fd299d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:6a:ea:11:87:31:fe:8f:f3:4d:e6:f8:4d:
28:e2:a9:fc:2c:0c:3b:00:a6:c8:c8:8c:cf:15:7f:
08:2e:b3:07:53:6c:5a:58:89:7f:2d:87:be:e3:cb:
09:6d:56:25:54:06:da:a7:d9:2e:00:95:b7:af:92:
7d:8e:db:11:af:15:26:87:0f:0a:85:f1:a6:7e:3a:
6e:f3:93:7c:1f:b8:7d:da:0b:d9:9a:61:c0:13:e8:
0b:3c:70:81:a2:78:ce:a5:48:84:d3:f4:b8:2c:a1:
66:68:21:c0:cf:b9:6f:46:31:f5:9e:75:a6:07:9f:
f8:8c:86:21:6a:4b:f6:8e:cf:2a:96:b2:d9:9a:3d:
e9:da:d7:a4:dd:7b:ef:e5:fe:88:98:a8:81:aa:75:
fe:f0:96:9d:61:26:30:be:00:c1:a7:e9:1c:e3:eb:
a2:03:28:ef:0a:c7:a7:d8:a1:ec:a5:0a:7c:13:b4:
8b:34:4d:bb:45:c5:1f:07:59:7b:5b:8f:c9:bf:4a:
99:b9:c9:e5:87:e1:91:1b:e8:25:9b:a2:db:6a:2c:
5c:7f:7f:5a:56:ce:ad:77:82:c8:d1:92:78:16:61:
7c:ec:19:eb:ae:28:4c:17:0f:30:36:02:d7:02:da:
af:f3:73:43:21:09:80:d2:24:22:b4:84:13:33:33:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:29:3D:85:5D:54:73:EA:93:CE:7B:79:20:D1:94:FD:29:9D:96
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bhQpPYVdVHPqk857eSDRlP0pnZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
37.251.240.0/21
46.231.104.0/21
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:ea:6f:19:76:33:db:c7:5b:cf:90:06:93:67:22:5f:a7:9c:
aa:76:67:b6:ec:3d:ec:2f:8f:65:85:f8:b8:e2:be:59:e4:8e:
15:d2:af:d6:7e:1c:7e:3b:5a:85:f1:ce:b0:39:53:69:83:5d:
16:4b:13:90:97:69:ce:a9:6e:e1:46:e6:72:42:21:ef:5f:60:
71:93:01:d7:12:f9:19:d5:44:9e:25:0c:bf:9c:78:ff:82:25:
0e:c9:32:24:3c:42:b0:b5:c0:17:47:91:50:d9:02:df:df:f8:
a5:d2:4d:08:e4:bc:f4:6c:4d:09:08:31:1e:73:8e:bc:28:fd:
fd:a9:b5:93:8a:b8:24:41:a9:e5:76:1b:3c:48:96:5e:1f:08:
d8:91:b4:22:1f:59:d0:8b:f7:7b:18:c8:d9:dd:0b:f5:8c:04:
59:63:ba:3f:1b:6d:fc:fc:d6:c3:c8:b3:7d:d0:2f:28:16:e2:
c1:74:79:d8:b7:87:90:56:11:38:52:df:e0:65:41:46:21:84:
41:eb:05:96:b4:67:a4:a0:71:7a:d4:c1:b2:ab:22:3a:17:69:
d3:f3:76:0f:0d:e0:e3:d8:73:b2:66:3b:7a:a1:2e:d7:08:5e:
d8:28:95:04:bb:83:75:b4:18:6e:1a:b4:dc:c3:cb:a4:ca:29:
fd:0b:39:e9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYZcCPl88Ffwgq7JRWCBZyXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwMjE2MjEwMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTE0MjkzZDg1NWQ1NDczZWE5M2NlN2I3OTIwZDE5NGZkMjk5ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiANq6hGHMf6P803m+E0o4qn8LAw7
AKbIyIzPFX8ILrMHU2xaWIl/LYe+48sJbVYlVAbap9kuAJW3r5J9jtsRrxUmhw8K
hfGmfjpu85N8H7h92gvZmmHAE+gLPHCBonjOpUiE0/S4LKFmaCHAz7lvRjH1nnWm
B5/4jIYhakv2js8qlrLZmj3p2tek3Xvv5f6ImKiBqnX+8JadYSYwvgDBp+kc4+ui
AyjvCsen2KHspQp8E7SLNE27RcUfB1l7W4/Jv0qZucnlh+GRG+glm6Lbaixcf39a
Vs6td4LI0ZJ4FmF87BnrrihMFw8wNgLXAtqv83NDIQmA0iQitIQTMzPFuwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFG4UKT2FXVRz6pPOe3kg0ZT9KZ2WMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvYmhRcFBZVmRWSFBxazg1N2VTRFJsUDBwblpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDJfvIAwQD
JfvwAwQDLudoAwQBXhoYAwQBXhpAAwQBXhpuMA0GCSqGSIb3DQEBCwUAA4IBAQB6
6m8ZdjPbx1vPkAaTZyJfp5yqdme27D3sL49lhfi44r5Z5I4V0q/Wfhx+O1qF8c6w
OVNpg10WSxOQl2nOqW7hRuZyQiHvX2BxkwHXEvkZ1USeJQy/nHj/giUOyTIkPEKw
tcAXR5FQ2QLf3/il0k0I5Lz0bE0JCDEec468KP39qbWTirgkQanldhs8SJZeHwjY
kbQiH1nQi/d7GMjZ3Qv1jARZY7o/G238/NbDyLN90C8oFuLBdHnYt4eQVhE4Ut/g
ZUFGIYRB6wWWtGekoHF61MGyqyI6F2nT83YPDeDj2HOyZjt6oS7XCF7YKJUEu4N1
tBhuGrTcw8ukyin9Cznp
-----END CERTIFICATE-----
Generated at Wed Mar 12 07:10:31 2025 by rpki-client