Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/r3ptg5FR3d_FNARoZmsHTdQ-Mik.roa
File: r3ptg5FR3d_FNARoZmsHTdQ-Mik.roa (raw, json)
Hash identifier: FmKjQBDkzBVontxLVXCGEwTyiUA/hD/SmvcFtQQ09e8=
Subject key identifier: AF:7A:6D:83:91:51:DD:DF:C5:34:04:68:66:6B:07:4D:D4:3E:32:29
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0186B90299EFFD905504DE46CC94D40B4932
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/r3ptg5FR3d_FNARoZmsHTdQ-Mik.roa
Signing time: Mon 06 Mar 2023 22:20:00 +0000
ROA not before: Mon 06 Mar 2023 22:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:02:99:ef:fd:90:55:04:de:46:cc:94:d4:0b:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 6 22:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af7a6d839151dddfc5340468666b074dd43e3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:d7:0f:0d:e5:a2:4c:a3:5e:a1:10:d7:ef:
f7:8e:68:77:9d:d5:75:a8:a5:60:8d:c8:7a:bc:05:
14:e1:94:ff:20:e6:a3:b4:18:54:5e:aa:26:12:3f:
e1:35:41:6a:20:f6:74:1b:e1:89:db:de:56:b9:3a:
f2:db:8d:38:99:39:c7:9a:82:60:4c:be:5d:79:f1:
da:6b:19:7c:0b:64:37:a1:0d:4d:22:ba:92:e3:2e:
71:3d:4b:a2:52:ed:ac:51:71:10:45:d6:38:9d:57:
ff:37:c8:03:3b:26:f5:d8:86:92:f2:5c:f6:e8:8f:
7f:a1:2b:36:15:8b:21:e1:c2:b2:66:c8:05:ca:01:
8a:e7:10:2b:65:a0:ed:ee:2a:b6:e1:ed:cc:79:77:
ab:ee:e6:86:ec:54:d5:4c:a7:bb:d5:06:7b:e6:4e:
26:a8:37:ea:b7:c7:84:6d:fb:0c:8f:1b:7e:65:73:
e0:93:8e:a0:67:91:03:75:67:9a:ed:3b:a2:1f:28:
48:95:eb:95:24:a0:bc:95:25:44:bf:8b:53:c5:52:
ea:82:32:84:69:e8:eb:0e:1c:e8:5c:1e:d8:a8:ee:
29:1e:02:61:39:50:94:fb:c3:3c:e8:e4:70:7b:22:
5d:7c:de:dd:6f:93:4e:12:79:a7:9e:d3:a4:a1:6a:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:6D:83:91:51:DD:DF:C5:34:04:68:66:6B:07:4D:D4:3E:32:29
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/r3ptg5FR3d_FNARoZmsHTdQ-Mik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
94.26.24.0/23
94.26.110.0/23
141.136.16.0/20
Signature Algorithm: sha256WithRSAEncryption
17:a1:3a:56:9b:df:69:36:2f:c6:55:1e:aa:58:63:a3:85:cc:
80:70:5d:3f:98:48:49:37:24:b6:bb:c3:c3:12:00:99:71:ef:
53:b4:0d:a5:2b:9b:ad:77:6e:77:8a:4b:26:dd:eb:71:2e:5a:
14:84:6a:6b:87:58:55:43:f2:17:ba:f0:69:85:3f:df:08:21:
90:9b:80:02:01:4c:78:d1:11:ad:cc:9c:af:83:0b:5e:2b:26:
0b:d1:ec:5b:91:cb:b9:e2:2e:e2:61:51:82:8d:ba:1b:7d:59:
26:61:ef:6e:31:a7:ea:97:a4:5b:b5:db:f3:d3:dd:bb:e0:a5:
59:fd:dc:78:ef:13:b5:74:9f:fb:1f:ca:08:47:d9:fc:b9:e8:
03:9f:27:ab:47:26:02:f4:d5:d7:82:f1:78:76:87:0e:1c:99:
2d:2a:fc:f3:46:e3:6d:67:41:d1:e6:24:cd:54:e1:d1:3e:f7:
a9:c5:08:0f:e2:5d:17:0f:1c:1b:d8:72:fa:23:ef:36:81:d3:
18:7c:4b:42:02:d5:48:7a:78:09:8c:cb:8e:a1:f8:8d:94:c1:
9d:b3:f5:b3:1b:ef:a7:b5:04:ea:73:f5:42:ce:49:26:49:fb:
6e:32:70:7d:f8:1b:68:92:16:cb:f2:c4:6c:97:cb:da:a6:52:
8a:81:f1:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYa5Apnv/ZBVBN5GzJTUC0kyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwMzA2MjIyMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjdhNmQ4MzkxNTFkZGRmYzUzNDA0Njg2NjZiMDc0ZGQ0M2UzMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrbXDw3lokyjXqEQ1+/3jmh3ndV1
qKVgjch6vAUU4ZT/IOajtBhUXqomEj/hNUFqIPZ0G+GJ295WuTry2404mTnHmoJg
TL5defHaaxl8C2Q3oQ1NIrqS4y5xPUuiUu2sUXEQRdY4nVf/N8gDOyb12IaS8lz2
6I9/oSs2FYsh4cKyZsgFygGK5xArZaDt7iq24e3MeXer7uaG7FTVTKe71QZ75k4m
qDfqt8eEbfsMjxt+ZXPgk46gZ5EDdWea7TuiHyhIleuVJKC8lSVEv4tTxVLqgjKE
aejrDhzoXB7YqO4pHgJhOVCU+8M86ORweyJdfN7db5NOEnmnntOkoWoXKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK96bYORUd3fxTQEaGZrB03UPjIpMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvcjNwdGc1RlIzZF9GTkFSb1ptc0hUZFEtTWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJfvIAwQB
XhoYAwQBXhpuAwQEjYgQMA0GCSqGSIb3DQEBCwUAA4IBAQAXoTpWm99pNi/GVR6q
WGOjhcyAcF0/mEhJNyS2u8PDEgCZce9TtA2lK5utd253iksm3etxLloUhGprh1hV
Q/IXuvBphT/fCCGQm4ACAUx40RGtzJyvgwteKyYL0exbkcu54i7iYVGCjbobfVkm
Ye9uMafql6Rbtdvz09274KVZ/dx47xO1dJ/7H8oIR9n8uegDnyerRyYC9NXXgvF4
docOHJktKvzzRuNtZ0HR5iTNVOHRPvepxQgP4l0XDxwb2HL6I+82gdMYfEtCAtVI
engJjMuOofiNlMGds/WzG++ntQTqc/VCzkkmSftuMnB9+BtokhbL8sRsl8vaplKK
gfGf
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:41:39 2025 by rpki-client