Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/e5xtcKoXRKHdHNWkEQU-rWgL-m4.roa
File: e5xtcKoXRKHdHNWkEQU-rWgL-m4.roa (raw, json)
Hash identifier: aP5wJmEZSqD8qL0qCCta8j1PvxuHilIsQuz8PHioFi0=
Subject key identifier: 7B:9C:6D:70:AA:17:44:A1:DD:1C:D5:A4:11:05:3E:AD:68:0B:FA:6E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E777E896F9210B70E5B08B96D8D6
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/e5xtcKoXRKHdHNWkEQU-rWgL-m4.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34295
IP address blocks: 46.10.217.0/24 maxlen: 24
62.176.118.0/24 maxlen: 24
87.126.120.0/22 maxlen: 24
90.154.144.0/21 maxlen: 24
90.154.152.0/22 maxlen: 22
90.154.152.0/24 maxlen: 24
90.154.153.0/24 maxlen: 24
90.154.154.0/24 maxlen: 24
90.154.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e7:77:e8:96:f9:21:0b:70:e5:b0:8b:96:d8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9c6d70aa1744a1dd1cd5a411053ead680bfa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:57:3b:fa:3d:e9:9a:9d:fd:3b:f6:ec:77:
a3:f7:d7:fe:97:ab:db:30:c5:51:c2:bf:a1:ff:2c:
6c:9f:47:47:96:04:b4:bd:59:63:32:df:38:7a:ee:
60:a8:f0:25:f0:a8:4d:aa:d2:58:88:92:3f:e1:09:
e1:82:e2:a7:88:b2:bd:af:51:e9:29:26:6a:41:21:
67:fd:f6:5d:2e:6b:ff:cb:b2:e0:9b:69:dd:24:83:
86:17:45:e3:9b:7f:5c:c4:ae:2f:a0:7b:06:9c:20:
06:0a:ce:9b:6d:36:0b:fb:ac:a3:b9:81:fa:ea:b0:
a8:c5:ba:10:2d:c6:4d:c0:02:96:30:f6:61:49:1e:
46:e2:81:b4:fe:fb:6e:00:ed:69:af:7e:95:e2:16:
62:4b:bf:b1:79:00:0b:06:77:54:d8:85:ac:23:57:
08:d6:81:b2:5f:38:6d:96:5d:64:e9:e3:07:27:2e:
f2:f9:05:59:11:f5:ff:e3:dc:4b:5e:0f:9c:7b:25:
53:2f:ec:cd:41:de:59:ef:88:6d:71:69:c5:2b:f9:
8d:9f:4c:bc:1f:76:75:2b:fe:ae:83:88:63:41:07:
7f:a6:c5:31:cb:d5:6c:78:49:e1:4f:26:64:db:ab:
20:4a:53:9e:1c:ef:25:99:ff:c2:53:06:7c:c1:d3:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:6D:70:AA:17:44:A1:DD:1C:D5:A4:11:05:3E:AD:68:0B:FA:6E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/e5xtcKoXRKHdHNWkEQU-rWgL-m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.217.0/24
62.176.118.0/24
87.126.120.0/22
90.154.144.0-90.154.155.255
Signature Algorithm: sha256WithRSAEncryption
a7:23:db:f0:a9:89:3d:73:01:db:00:6e:ac:fb:7d:38:fd:f0:
f9:a4:82:8d:da:cc:87:ae:54:ad:4f:c5:91:3a:d5:a2:7b:1c:
2f:89:0e:03:02:00:e9:f0:f1:1f:8e:2c:33:d7:5e:1f:93:f3:
bd:64:06:b4:78:08:31:7e:d1:14:93:8d:6a:33:a2:a4:be:73:
3a:01:8e:ba:b7:7a:3c:1f:10:fc:75:bf:a0:6c:b8:90:93:a4:
1a:28:29:35:ac:c6:f7:27:df:47:02:26:eb:2b:05:df:50:36:
c8:86:f1:6a:88:1c:53:da:ef:70:6a:e4:e3:a3:5a:0a:a9:2e:
2a:a1:cb:f6:1d:23:99:7f:4d:9c:29:96:ea:13:c3:b8:64:64:
c8:2a:33:8e:fc:54:af:20:30:90:0d:1b:00:99:01:b8:fa:7d:
bf:a4:d1:06:e5:b7:48:a5:50:88:76:95:72:ae:f3:5b:5d:97:
5b:fc:8c:fc:3c:a1:b2:62:39:ae:42:bb:f9:a9:69:fe:23:1e:
26:f8:29:29:6a:f8:1a:d2:f9:13:ce:b7:38:14:3d:d7:6c:7b:
1e:2a:10:b9:43:32:8c:19:f8:e6:6e:9b:2f:1a:94:66:03:f5:
22:d8:ad:e2:70:97:3b:c1:30:d1:90:0e:66:98:61:5f:03:6a:
12:be:1f:9f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQnR+d36Jb5IQtw5bCLltjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjljNmQ3MGFhMTc0NGExZGQxY2Q1YTQxMTA1M2VhZDY4MGJmYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/NXO/o96Zqd/Tv27Hej99f+l6vb
MMVRwr+h/yxsn0dHlgS0vVljMt84eu5gqPAl8KhNqtJYiJI/4QnhguKniLK9r1Hp
KSZqQSFn/fZdLmv/y7Lgm2ndJIOGF0Xjm39cxK4voHsGnCAGCs6bbTYL+6yjuYH6
6rCoxboQLcZNwAKWMPZhSR5G4oG0/vtuAO1pr36V4hZiS7+xeQALBndU2IWsI1cI
1oGyXzhtll1k6eMHJy7y+QVZEfX/49xLXg+ceyVTL+zNQd5Z74htcWnFK/mNn0y8
H3Z1K/6ug4hjQQd/psUxy9VseEnhTyZk26sgSlOeHO8lmf/CUwZ8wdMP/QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHucbXCqF0Sh3RzVpBEFPq1oC/puMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvZTV4dGNLb1hSS0hkSE5Xa0VRVS1yV2dMLW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALgrZAwQA
PrB2AwQCV354MAwDBARampADBAJampgwDQYJKoZIhvcNAQELBQADggEBAKcj2/Cp
iT1zAdsAbqz7fTj98Pmkgo3azIeuVK1PxZE61aJ7HC+JDgMCAOnw8R+OLDPXXh+T
871kBrR4CDF+0RSTjWozoqS+czoBjrq3ejwfEPx1v6BsuJCTpBooKTWsxvcn30cC
JusrBd9QNsiG8WqIHFPa73Bq5OOjWgqpLiqhy/YdI5l/TZwpluoTw7hkZMgqM478
VK8gMJANGwCZAbj6fb+k0Qblt0ilUIh2lXKu81tdl1v8jPw8obJiOa5Cu/mpaf4j
Hib4KSlq+BrS+RPOtzgUPddsex4qELlDMowZ+OZumy8alGYD9SLYreJwlzvBMNGQ
DmaYYV8DahK+H58=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:54 2025 by rpki-client