Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4A0zWJ4NV28Aj54h6zY-IluB6Do.roa
File: 4A0zWJ4NV28Aj54h6zY-IluB6Do.roa (raw, json)
Hash identifier: rfedrAjMllNAlqGJ74GuEiVJe7oNxWX2+pz2+IYq280=
Subject key identifier: E0:0D:33:58:9E:0D:57:6F:00:8F:9E:21:EB:36:3E:22:5B:81:E8:3A
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F15E0EC6E6B4CF9F5623041A01E7A
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4A0zWJ4NV28Aj54h6zY-IluB6Do.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5474
IP address blocks: 193.140.108.0/24 maxlen: 24
193.140.109.0/24 maxlen: 24
193.140.110.0/24 maxlen: 24
193.140.111.0/24 maxlen: 24
2001:a98:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:15:e0:ec:6e:6b:4c:f9:f5:62:30:41:a0:1e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e00d33589e0d576f008f9e21eb363e225b81e83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:65:63:7e:f8:09:31:e2:83:e9:ed:96:f9:
f6:dc:50:a1:86:93:8a:2f:2e:f9:1b:42:7d:43:15:
cc:58:93:44:d3:3c:f2:d1:1e:ef:ea:a2:b5:26:a5:
68:19:35:5d:90:ee:df:d9:d3:07:d6:7d:7c:a8:60:
b6:00:77:c3:19:d8:fb:5e:80:34:cb:d1:ae:ce:29:
7e:16:29:cc:3d:56:ad:6f:2f:1e:bc:fc:06:85:dd:
44:6f:f8:df:f5:cf:a3:46:70:aa:55:a3:62:98:7e:
ef:c7:a0:70:14:03:5c:08:81:e9:f7:c0:0b:04:91:
18:12:39:06:76:00:4f:1a:79:d5:27:20:6c:d6:e2:
ca:67:ab:56:d6:62:59:30:32:47:71:58:0a:09:f4:
28:f4:22:a9:bf:40:99:90:7d:b5:1b:1c:81:3d:d3:
7f:c3:36:ff:4c:2c:42:41:ee:ab:23:a4:3e:0c:bd:
56:5e:3d:5f:2b:96:b0:f2:9c:3f:ae:81:85:8b:b4:
29:8d:94:94:17:0d:99:57:31:bd:4e:0c:6d:41:44:
3b:d0:a3:7c:75:8b:98:e1:ed:7f:65:84:5d:31:e2:
f1:fd:34:0e:d2:2b:39:51:32:95:0d:74:71:e8:bb:
eb:89:b1:ce:0c:1f:98:2f:76:03:a5:87:7f:46:e2:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:33:58:9E:0D:57:6F:00:8F:9E:21:EB:36:3E:22:5B:81:E8:3A
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4A0zWJ4NV28Aj54h6zY-IluB6Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.108.0/22
IPv6:
2001:a98:100::/48
Signature Algorithm: sha256WithRSAEncryption
20:56:95:88:54:79:ad:c6:b6:7e:c2:20:e9:ac:e1:e5:7d:31:
45:ef:78:77:37:80:27:7d:5b:2e:c4:1f:1c:88:a7:a2:ac:31:
c7:58:83:4d:68:8d:2c:20:cb:29:14:d1:f5:7d:8a:dd:5c:cf:
b7:59:f2:44:68:e8:a6:54:b6:3b:5a:9a:26:64:b4:74:85:2a:
62:8c:f8:4c:12:65:b4:36:df:0c:e9:d0:8b:3e:1e:99:89:fb:
aa:35:4c:74:da:9a:fe:6b:58:7d:d5:27:3d:7b:1f:9f:15:8e:
46:4b:4d:24:11:79:da:2c:b8:88:2f:86:c0:73:69:71:62:0f:
12:b2:0e:33:aa:3f:2f:c2:e8:f3:e1:fd:f9:b8:b4:f9:8e:c3:
da:37:a6:a1:7e:ad:cf:9a:3f:8c:e1:ed:57:a4:28:80:af:69:
f9:2b:bc:c3:1d:c5:a9:e8:56:31:b9:7a:31:ce:2e:2c:83:1d:
43:b1:78:6e:ab:db:e7:1f:8d:b6:64:4a:eb:0c:e7:77:1d:6e:
9f:13:26:15:94:bb:28:0c:79:e7:ce:62:c0:87:c5:87:1a:64:
14:d9:55:1c:12:9a:4d:c2:68:e6:d4:b5:b8:c1:c1:66:d3:ba:
30:a3:c1:9c:5b:76:2f:6f:32:fe:43:49:60:4a:14:c0:a5:be:
49:ba:e5:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQljxXg7G5rTPn1YjBBoB56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjUwMTAyMDU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDBkMzM1ODllMGQ1NzZmMDA4ZjllMjFlYjM2M2UyMjViODFlODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgVlY374CTHig+ntlvn23FChhpOK
Ly75G0J9QxXMWJNE0zzy0R7v6qK1JqVoGTVdkO7f2dMH1n18qGC2AHfDGdj7XoA0
y9Guzil+FinMPVatby8evPwGhd1Eb/jf9c+jRnCqVaNimH7vx6BwFANcCIHp98AL
BJEYEjkGdgBPGnnVJyBs1uLKZ6tW1mJZMDJHcVgKCfQo9CKpv0CZkH21GxyBPdN/
wzb/TCxCQe6rI6Q+DL1WXj1fK5aw8pw/roGFi7QpjZSUFw2ZVzG9TgxtQUQ70KN8
dYuY4e1/ZYRdMeLx/TQO0is5UTKVDXRx6LvribHODB+YL3YDpYd/RuJCJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOANM1ieDVdvAI+eIes2PiJbgeg6MB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvNEEweldKNE5WMjhBajU0aDZ6WS1JbHVCNkRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwYxsMA8E
AgACMAkDBwAgAQqYAQAwDQYJKoZIhvcNAQELBQADggEBACBWlYhUea3Gtn7CIOms
4eV9MUXveHc3gCd9Wy7EHxyIp6KsMcdYg01ojSwgyykU0fV9it1cz7dZ8kRo6KZU
tjtamiZktHSFKmKM+EwSZbQ23wzp0Is+HpmJ+6o1THTamv5rWH3VJz17H58VjkZL
TSQRedosuIgvhsBzaXFiDxKyDjOqPy/C6PPh/fm4tPmOw9o3pqF+rc+aP4zh7Vek
KICvafkrvMMdxanoVjG5ejHOLiyDHUOxeG6r2+cfjbZkSusM53cdbp8TJhWUuygM
eefOYsCHxYcaZBTZVRwSmk3CaObUtbjBwWbTujCjwZxbdi9vMv5DSWBKFMClvkm6
5XI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:22 2025 by rpki-client