Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/zui8hjp5KQG3cY_nQ-1AiYpkf7Y.roa
File: zui8hjp5KQG3cY_nQ-1AiYpkf7Y.roa (raw, json)
Hash identifier: Gr5bYhDzQJQkFI6x/vI1Xeg08ZTRN8uVRgN8J6Rx7z0=
Subject key identifier: CE:E8:BC:86:3A:79:29:01:B7:71:8F:E7:43:ED:40:89:8A:64:7F:B6
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0194252096EBB785291DEC471A30E3D383DE
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/zui8hjp5KQG3cY_nQ-1AiYpkf7Y.roa
Signing time: Thu 02 Jan 2025 03:48:00 +0000
ROA not before: Thu 02 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 82.97.196.0/23 maxlen: 24
82.97.199.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
91.238.148.0/23 maxlen: 24
185.77.250.0/23 maxlen: 24
188.211.250.0/23 maxlen: 23
188.214.89.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.26.0/23 maxlen: 23
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:96:eb:b7:85:29:1d:ec:47:1a:30:e3:d3:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 2 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cee8bc863a792901b7718fe743ed40898a647fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:f4:ba:2f:35:1f:1d:1b:11:19:a6:3e:4c:
06:b1:c9:3b:c5:00:cc:be:d5:8c:1e:3c:38:a2:07:
ff:e5:25:5c:05:1d:d6:8a:eb:28:44:de:49:d1:0c:
aa:57:83:ba:0b:7b:d9:7a:6b:8c:92:2c:50:12:ea:
63:a8:88:af:97:75:cf:92:eb:25:97:9f:f9:56:9f:
8c:af:07:9a:bb:19:c9:af:f7:c5:4f:73:49:3c:48:
45:71:31:52:dc:16:80:2c:9f:66:1e:2f:6a:28:d6:
a7:12:14:d1:6b:0d:2e:d6:6b:33:23:39:83:72:95:
67:31:a8:3a:73:ff:e0:6b:07:37:8f:1b:42:74:60:
b3:75:ce:51:6b:f2:9e:68:69:99:a6:1f:0c:67:99:
ed:5c:18:bf:ba:b1:54:0d:a6:a2:07:93:68:6b:bf:
01:03:ea:48:19:a3:6e:34:89:12:03:67:57:87:05:
a3:87:11:52:d4:57:28:84:63:b6:38:5a:17:2f:9c:
5f:e0:1e:cc:9a:df:ac:4f:d1:55:82:dd:e5:8d:43:
43:87:aa:57:b8:55:7c:02:71:32:62:c2:39:77:f7:
9c:02:64:41:65:12:2a:b2:a4:2e:a3:a5:0d:5e:64:
4a:3c:41:13:d0:1b:99:8c:08:b0:e9:88:16:6a:f4:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:BC:86:3A:79:29:01:B7:71:8F:E7:43:ED:40:89:8A:64:7F:B6
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/zui8hjp5KQG3cY_nQ-1AiYpkf7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.196.0/23
82.97.199.0/24
89.38.106.0/23
91.238.148.0/23
185.77.250.0/23
188.211.250.0/23
188.214.89.0/24
188.241.59.0/24
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
1b:89:a5:28:e4:a8:2b:c9:cb:11:75:30:8f:36:ba:31:4d:37:
39:88:96:02:7a:10:4c:3d:e0:8c:d1:1b:c7:11:cf:3a:ce:77:
0f:13:5c:da:77:b2:a3:04:1c:04:98:5c:5a:3c:3e:05:f1:99:
d4:a8:b3:08:45:6f:2a:3f:0f:a0:08:f9:eb:42:18:52:7b:0b:
e0:40:94:d8:f1:78:48:2a:07:88:73:5b:af:34:ba:49:1c:42:
d9:46:be:44:a6:96:92:62:d7:12:c4:77:f4:0a:66:de:24:df:
c8:ae:75:a0:51:c9:bb:5e:86:1f:ca:ea:a8:a0:20:5f:04:18:
db:17:36:e2:b2:f9:1b:ff:b3:5c:e6:0a:69:f4:3e:1f:e1:bb:
8a:23:46:fd:de:2e:48:8e:99:ac:fb:4e:52:34:45:86:c9:3a:
3e:25:00:b6:55:a2:c1:30:8c:e8:89:ba:05:bc:d3:d0:c6:6f:
8a:cf:b1:e1:84:38:76:b6:62:1a:7d:99:e8:eb:bf:70:db:44:
b8:fe:f1:14:1c:b9:73:f6:8b:77:2a:4e:d4:d2:5a:57:12:be:
7c:cc:c8:0f:78:1d:86:1f:94:7a:05:74:f6:0a:5b:a3:1d:28:
45:72:55:3f:cd:a6:e4:a0:f6:46:d4:8c:04:bd:3d:8f:00:29:
43:81:d0:ea
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZQlIJbrt4UpHexHGjDj04PeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjUwMTAyMDM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWU4YmM4NjNhNzkyOTAxYjc3MThmZTc0M2VkNDA4OThhNjQ3ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbr0ui81Hx0bERmmPkwGsck7xQDM
vtWMHjw4ogf/5SVcBR3WiusoRN5J0QyqV4O6C3vZemuMkixQEupjqIivl3XPkusl
l5/5Vp+MrweauxnJr/fFT3NJPEhFcTFS3BaALJ9mHi9qKNanEhTRaw0u1mszIzmD
cpVnMag6c//gawc3jxtCdGCzdc5Ra/KeaGmZph8MZ5ntXBi/urFUDaaiB5Noa78B
A+pIGaNuNIkSA2dXhwWjhxFS1FcohGO2OFoXL5xf4B7Mmt+sT9FVgt3ljUNDh6pX
uFV8AnEyYsI5d/ecAmRBZRIqsqQuo6UNXmRKPEET0BuZjAiw6YgWavSM5QIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFM7ovIY6eSkBt3GP50PtQImKZH+2MB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvenVpOGhqcDVLUUczY1lfblEtMUFpWXBrZjdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAFS
YcQDBABSYccDBAFZJmoDBAFb7pQDBAG5TfoDBAG80/oDBAC81lkDBAC88TsDBAHB
qQgDBAHBwDQDBAHB76wDBAHB7/YDBAHCGOoDBAHCWIYDBAHChxoDBAHCh4QDBAHC
9moDBAHDAsQDBAHDDTADBAHDIlADBAHDXYwDBAHDgLwDBAHDhdADBAHDh8ADBAHD
vfoDBAHD0iwDBAHD/owwDAMEAdWfCgMEAdWfDDANBgkqhkiG9w0BAQsFAAOCAQEA
G4mlKOSoK8nLEXUwjza6MU03OYiWAnoQTD3gjNEbxxHPOs53DxNc2neyowQcBJhc
Wjw+BfGZ1KizCEVvKj8PoAj560IYUnsL4ECU2PF4SCoHiHNbrzS6SRxC2Ua+RKaW
kmLXEsR39Apm3iTfyK51oFHJu16GH8rqqKAgXwQY2xc24rL5G/+zXOYKafQ+H+G7
iiNG/d4uSI6ZrPtOUjRFhsk6PiUAtlWiwTCM6Im6BbzT0MZvis+x4YQ4drZiGn2Z
6Ou/cNtEuP7xFBy5c/aLdypO1NJaVxK+fMzID3gdhh+UegV09gpbox0oRXJVP82m
5KD2RtSMBL09jwApQ4HQ6g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:23 2025 by rpki-client