Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yG32tlHODIhV5vCLTDAj-FshTBg.roa
File: yG32tlHODIhV5vCLTDAj-FshTBg.roa (raw, json)
Hash identifier: PYArFpTe7F7o6/CCQVcEtf2E3kR9UBX3etNSz7nmqCQ=
Subject key identifier: C8:6D:F6:B6:51:CE:0C:88:55:E6:F0:8B:4C:30:23:F8:5B:21:4C:18
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F16461950C47A1E5A86EE2918C914
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yG32tlHODIhV5vCLTDAj-FshTBg.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8517
IP address blocks: 79.123.128.0/17 maxlen: 24
95.183.128.0/17 maxlen: 24
185.7.0.0/22 maxlen: 22
193.140.0.0/16 maxlen: 24
193.140.1.0/24 maxlen: 24
193.140.2.0/23 maxlen: 23
193.140.4.0/22 maxlen: 22
193.140.24.0/22 maxlen: 22
193.140.35.0/24 maxlen: 24
193.140.68.0/23 maxlen: 23
193.140.83.0/24 maxlen: 24
193.140.88.0/24 maxlen: 24
193.140.98.0/23 maxlen: 23
193.140.134.0/24 maxlen: 24
193.140.152.0/22 maxlen: 22
193.140.159.0/24 maxlen: 24
193.140.183.0/24 maxlen: 24
193.140.244.0/22 maxlen: 22
193.140.248.0/22 maxlen: 22
193.140.252.0/23 maxlen: 23
193.255.0.0/16 maxlen: 24
193.255.58.0/24 maxlen: 24
194.27.0.0/16 maxlen: 24
194.27.43.0/24 maxlen: 24
194.27.232.0/22 maxlen: 22
194.27.236.0/23 maxlen: 23
2001:a98::/32 maxlen: 32
2001:a98:1e::/48 maxlen: 48
2001:a98:20::/48 maxlen: 48
2001:a98:120::/48 maxlen: 48
2001:a98:130::/48 maxlen: 48
2001:a98:150::/48 maxlen: 48
2001:a98:160::/48 maxlen: 48
2001:a98:170::/48 maxlen: 48
2001:a98:180::/48 maxlen: 48
2001:a98:190::/48 maxlen: 48
2001:a98:1a0::/48 maxlen: 48
2001:a98:1b0::/48 maxlen: 48
2001:a98:1c0::/48 maxlen: 48
2001:a98:1d0::/48 maxlen: 48
2001:a98:1e0::/48 maxlen: 48
2001:a98:1f0::/48 maxlen: 48
2001:a98:200::/48 maxlen: 48
2001:a98:210::/48 maxlen: 48
2001:a98:220::/48 maxlen: 48
2001:a98:230::/48 maxlen: 48
2001:a98:240::/48 maxlen: 48
2001:a98:250::/48 maxlen: 48
2001:a98:260::/48 maxlen: 48
2001:a98:280::/48 maxlen: 48
2001:a98:290::/48 maxlen: 48
2001:a98:600::/48 maxlen: 48
2001:a98:1050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:16:46:19:50:c4:7a:1e:5a:86:ee:29:18:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c86df6b651ce0c8855e6f08b4c3023f85b214c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:e7:aa:7c:f7:37:07:50:15:c0:ff:d7:74:
aa:63:ed:9b:37:19:dd:be:79:b4:e3:06:9b:bb:ca:
ba:50:1c:e7:ae:7a:86:33:0c:12:6f:5e:f0:e7:f5:
41:94:5b:cd:a1:bb:71:94:22:ce:b1:c4:e4:b4:b0:
47:a5:9a:af:a7:78:28:1f:3e:ed:04:ea:33:3b:5a:
b9:1f:ae:46:8b:08:3a:e6:6a:a9:f4:cb:9e:4f:e8:
f7:95:78:4a:3d:31:9c:6b:02:b6:49:c6:37:c9:6a:
38:29:ec:1d:65:f4:c7:d6:11:5c:57:02:c6:53:4c:
11:49:bb:39:91:49:d6:13:b7:b7:3a:e2:49:77:e9:
e8:ee:2e:a3:7c:07:b9:e0:40:1c:d7:c3:07:d0:b0:
85:e7:bc:f9:6c:ac:ba:5c:5d:d0:cf:df:ae:06:1e:
7e:a6:d0:08:d7:95:e4:f3:c2:df:22:d1:e0:b8:ef:
26:97:a4:1d:2a:ba:87:e9:b4:57:18:11:08:d7:30:
1d:66:73:62:cf:48:25:ba:c6:0c:ec:00:28:cb:a7:
fd:9a:44:68:33:e6:4b:77:9a:1d:30:ef:b2:e6:bd:
2c:78:2a:6a:a4:47:37:b3:b3:2b:ae:54:eb:5f:d7:
55:b6:f4:b0:36:e0:2b:54:7b:e9:b7:ae:6b:7b:29:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:F6:B6:51:CE:0C:88:55:E6:F0:8B:4C:30:23:F8:5B:21:4C:18
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/yG32tlHODIhV5vCLTDAj-FshTBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.123.128.0/17
95.183.128.0/17
185.7.0.0/22
193.140.0.0/16
193.255.0.0/16
194.27.0.0/16
IPv6:
2001:a98::/32
Signature Algorithm: sha256WithRSAEncryption
92:20:e1:db:bc:c8:a2:aa:80:97:41:27:78:1b:e7:77:a6:c5:
74:40:cd:81:8d:9b:16:2c:a0:10:35:73:0a:30:d9:9d:f8:db:
a0:a5:9a:22:22:d8:57:4d:19:54:c5:b9:12:2c:d2:be:4a:d4:
06:30:36:1a:45:37:9a:6e:4c:a0:68:01:bb:72:64:4c:72:bd:
e9:b1:f4:40:68:65:6f:57:76:4e:f8:45:05:8e:0f:f4:43:13:
47:e7:ca:5b:a0:8d:eb:8b:03:26:83:a7:f1:30:2f:0f:88:b9:
64:d6:9d:c9:6e:5c:3d:7f:a3:75:c0:6c:cd:65:af:4c:f9:cc:
02:60:04:3e:40:31:a3:fa:e8:e2:f9:2c:71:a8:81:fb:cc:f2:
8e:76:11:0a:df:55:03:d0:75:6f:d1:ea:69:90:9e:aa:14:df:
af:81:86:d5:3d:64:f3:89:90:b6:40:3f:15:3e:bd:b0:91:03:
c4:2e:04:3e:cb:48:bb:a2:91:3a:7a:56:50:66:4c:47:4b:c4:
c9:bc:8d:9a:ce:4d:d4:32:51:9d:8d:b7:d9:4d:88:84:06:31:
52:af:62:3d:92:58:c7:05:6d:10:b4:07:bd:c1:f2:f0:5d:c2:
ca:0c:09:af:70:14:97:af:c6:af:ce:2c:20:de:12:3d:ba:ed:
93:f7:f8:66
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQljxZGGVDEeh5ahu4pGMkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjUwMTAyMDU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZkZjZiNjUxY2UwYzg4NTVlNmYwOGI0YzMwMjNmODViMjE0YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK7nqnz3NwdQFcD/13SqY+2bNxnd
vnm04wabu8q6UBznrnqGMwwSb17w5/VBlFvNobtxlCLOscTktLBHpZqvp3goHz7t
BOozO1q5H65Giwg65mqp9MueT+j3lXhKPTGcawK2ScY3yWo4KewdZfTH1hFcVwLG
U0wRSbs5kUnWE7e3OuJJd+no7i6jfAe54EAc18MH0LCF57z5bKy6XF3Qz9+uBh5+
ptAI15Xk88LfItHguO8ml6QdKrqH6bRXGBEI1zAdZnNiz0glusYM7AAoy6f9mkRo
M+ZLd5odMO+y5r0seCpqpEc3s7MrrlTrX9dVtvSwNuArVHvpt65reykE/wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMht9rZRzgyIVebwi0wwI/hbIUwYMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEveUczMnRsSE9ESWhWNXZDTFREQWotRnNoVEJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAnBAIAATAhAwQHT3uAAwQH
X7eAAwQCuQcAAwMAwYwDAwDB/wMDAMIbMA0EAgACMAcDBQAgAQqYMA0GCSqGSIb3
DQEBCwUAA4IBAQCSIOHbvMiiqoCXQSd4G+d3psV0QM2BjZsWLKAQNXMKMNmd+Nug
pZoiIthXTRlUxbkSLNK+StQGMDYaRTeabkygaAG7cmRMcr3psfRAaGVvV3ZO+EUF
jg/0QxNH58pboI3riwMmg6fxMC8PiLlk1p3Jblw9f6N1wGzNZa9M+cwCYAQ+QDGj
+uji+SxxqIH7zPKOdhEK31UD0HVv0eppkJ6qFN+vgYbVPWTziZC2QD8VPr2wkQPE
LgQ+y0i7opE6elZQZkxHS8TJvI2azk3UMlGdjbfZTYiEBjFSr2I9kljHBW0QtAe9
wfLwXcLKDAmvcBSXr8avziwg3hI9uu2T9/hm
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:14:30 2025 by rpki-client