Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ge1Vl2Egnl4SLedGvYctQakLCfY.roa
File: ge1Vl2Egnl4SLedGvYctQakLCfY.roa (raw, json)
Hash identifier: MpYLQuxbgoRbgrMjrPaFWz/EHyjBUP4EtjdmPjnWnHo=
Subject key identifier: 81:ED:55:97:61:20:9E:5E:12:2D:E7:46:BD:87:2D:41:A9:0B:09:F6
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0194981DA301CB32FB56ED216BEFCA213617
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ge1Vl2Egnl4SLedGvYctQakLCfY.roa
Signing time: Fri 24 Jan 2025 11:41:06 +0000
ROA not before: Fri 24 Jan 2025 11:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207676
IP address blocks: 46.243.179.0/24 maxlen: 24
141.101.197.0/24 maxlen: 24
141.101.249.0/24 maxlen: 24
178.170.249.0/24 maxlen: 24
178.170.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:1d:a3:01:cb:32:fb:56:ed:21:6b:ef:ca:21:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 24 11:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ed559761209e5e122de746bd872d41a90b09f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:b0:3a:62:1f:a4:04:33:90:4c:62:18:7c:
6d:68:b8:6d:3a:6e:9b:81:14:ac:2e:74:5d:94:0f:
90:0c:6f:55:4a:75:a7:50:39:27:3b:33:be:66:84:
fc:db:2d:7a:af:ee:76:0c:f5:66:a5:82:35:c5:1e:
91:66:af:45:03:1a:1f:35:f9:58:78:3b:7b:dd:ee:
b6:a6:3c:bb:3e:06:67:9d:6d:9c:52:f3:99:fd:66:
6d:f2:56:83:57:e9:a9:12:69:bb:d7:f9:42:75:fe:
72:47:a1:91:13:35:09:c7:8c:a9:de:39:f8:b7:41:
cf:3c:7a:f0:9a:bf:02:80:e8:db:32:ce:f9:d9:8d:
c0:d6:6e:17:c0:94:90:da:43:3e:0e:a1:7a:37:41:
ef:19:24:3d:0c:03:cf:98:cc:29:a3:2c:97:c7:bd:
d4:9f:cb:42:8d:0b:1f:39:b8:dc:8b:83:8a:10:10:
d8:ac:81:62:7f:c4:1d:8b:e1:2d:4a:f1:1d:fc:77:
dc:9a:2a:b3:ad:4c:24:94:fd:48:0a:8b:53:e5:db:
0a:57:72:9e:4d:39:db:57:e9:48:8c:bd:3a:0f:2b:
a1:54:03:c5:02:25:90:b4:d0:e3:7e:c9:1a:65:ae:
ed:b8:e9:a7:82:66:aa:89:fe:c5:77:c1:21:1d:03:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:55:97:61:20:9E:5E:12:2D:E7:46:BD:87:2D:41:A9:0B:09:F6
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ge1Vl2Egnl4SLedGvYctQakLCfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.179.0/24
141.101.197.0/24
141.101.249.0/24
178.170.249.0/24
178.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bd:74:1f:8d:6e:a7:3a:b2:20:ca:27:1c:8e:af:80:38:18:
40:98:cf:ae:8f:8d:54:45:bb:68:9b:51:94:c6:88:43:1f:30:
fd:aa:c5:a0:2f:47:84:5b:06:4d:ef:4d:c3:84:ed:02:a5:f2:
d6:e6:46:3b:93:8c:30:e8:36:aa:cd:db:74:5a:b1:cd:c3:db:
2f:30:7e:c3:8b:36:3c:c9:30:12:38:bf:ef:dc:f1:13:a4:b7:
c4:14:3d:fc:b3:88:ae:62:d5:ee:3c:a4:dc:25:0e:a5:ec:6e:
08:1e:ce:b8:6a:a9:f3:9e:ff:67:47:22:ca:38:63:b9:68:a7:
60:92:af:03:3e:62:64:b4:0b:44:b8:13:91:e7:0d:44:63:e9:
db:6a:d2:b3:16:68:94:e4:1c:47:c4:f2:80:bb:33:1b:df:10:
57:08:fd:df:3d:15:85:22:0d:d9:f0:56:34:cb:8f:f9:e7:e6:
7c:df:c6:71:52:4a:09:a9:f4:55:8c:f5:9d:3b:a9:af:4e:67:
8d:eb:16:1f:84:77:20:61:60:f5:61:a0:ef:c4:ae:03:18:f9:
b1:6c:ce:9c:97:4a:81:87:16:65:37:bf:b1:9d:2e:21:ee:a8:
f2:58:4e:cb:86:7a:f6:2d:15:eb:d3:54:46:54:6b:21:d3:70:
13:bf:e1:30
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZSYHaMByzL7Vu0ha+/KITYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTI0MTE0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWVkNTU5NzYxMjA5ZTVlMTIyZGU3NDZiZDg3MmQ0MWE5MGIwOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlOwOmIfpAQzkExiGHxtaLhtOm6b
gRSsLnRdlA+QDG9VSnWnUDknOzO+ZoT82y16r+52DPVmpYI1xR6RZq9FAxofNflY
eDt73e62pjy7PgZnnW2cUvOZ/WZt8laDV+mpEmm71/lCdf5yR6GREzUJx4yp3jn4
t0HPPHrwmr8CgOjbMs752Y3A1m4XwJSQ2kM+DqF6N0HvGSQ9DAPPmMwpoyyXx73U
n8tCjQsfObjci4OKEBDYrIFif8Qdi+EtSvEd/HfcmiqzrUwklP1ICotT5dsKV3Ke
TTnbV+lIjL06DyuhVAPFAiWQtNDjfskaZa7tuOmngmaqif7Fd8EhHQMZfQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIHtVZdhIJ5eEi3nRr2HLUGpCwn2MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvZ2UxVmwyRWdubDRTTGVkR3ZZY3RRYWtMQ2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALvOzAwQA
jWXFAwQAjWX5AwQAsqr5AwQAsqr7MA0GCSqGSIb3DQEBCwUAA4IBAQB9vXQfjW6n
OrIgyiccjq+AOBhAmM+uj41URbtom1GUxohDHzD9qsWgL0eEWwZN703DhO0CpfLW
5kY7k4ww6Daqzdt0WrHNw9svMH7DizY8yTASOL/v3PETpLfEFD38s4iuYtXuPKTc
JQ6l7G4IHs64aqnznv9nRyLKOGO5aKdgkq8DPmJktAtEuBOR5w1EY+nbatKzFmiU
5BxHxPKAuzMb3xBXCP3fPRWFIg3Z8FY0y4/55+Z838ZxUkoJqfRVjPWdO6mvTmeN
6xYfhHcgYWD1YaDvxK4DGPmxbM6cl0qBhxZlN7+xnS4h7qjyWE7Lhnr2LRXr01RG
VGsh03ATv+Ew
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:05 2025 by rpki-client