Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/_JZCaLt9Be62ENSNemRuRzThRaM.roa
File: _JZCaLt9Be62ENSNemRuRzThRaM.roa (raw, json)
Hash identifier: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=
Subject key identifier: FC:96:42:68:BB:7D:05:EE:B6:10:D4:8D:7A:64:6E:47:34:E1:45:A3
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019421B1E8F381552E5DE4AE48D8053C9CCD
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/_JZCaLt9Be62ENSNemRuRzThRaM.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34471
IP address blocks: 5.182.160.0/22 maxlen: 24
185.107.160.0/22 maxlen: 24
185.218.252.0/22 maxlen: 24
193.111.171.0/24 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e8:f3:81:55:2e:5d:e4:ae:48:d8:05:3c:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc964268bb7d05eeb610d48d7a646e4734e145a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:b8:cf:6f:1c:c4:3f:c2:1d:a1:66:c5:47:
0e:ec:8a:e9:d0:45:42:29:88:cc:40:cf:8f:4b:6f:
66:78:5d:04:c2:4b:96:36:0a:2f:fd:2f:dc:60:b4:
1b:2e:b5:31:b6:7e:a8:ee:89:39:79:23:ba:6a:19:
e3:f4:8c:c5:4e:eb:d4:a0:10:c2:5f:da:c5:81:78:
d9:d4:52:8b:59:72:37:a4:7d:c0:51:e4:97:18:2d:
54:88:14:e4:06:54:b5:29:51:a8:cc:dd:ff:70:84:
7b:7e:c6:0f:c2:51:b9:5d:76:92:08:73:12:75:29:
2d:43:eb:93:d9:3d:5e:d7:77:b6:45:7d:b3:30:e3:
5f:4b:67:c5:d3:78:ab:66:c5:36:c5:fc:8d:fb:ed:
7c:ce:86:6e:67:b4:31:0c:86:3f:23:2b:44:25:4f:
e2:35:0c:9f:98:92:8b:ca:45:46:d5:d9:2b:51:54:
13:e3:c4:fb:07:8d:42:c1:7d:fb:6a:9f:ef:02:f4:
a2:aa:02:38:14:3b:24:7f:85:72:c3:a2:9d:4d:8f:
0c:8b:63:46:36:4f:8c:9a:94:cf:99:e7:03:02:fa:
03:86:95:06:94:46:56:8e:fb:85:c8:71:ed:4c:e1:
8d:df:02:9d:e4:24:2b:17:ab:bb:4e:9d:1b:f2:2b:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:42:68:BB:7D:05:EE:B6:10:D4:8D:7A:64:6E:47:34:E1:45:A3
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/_JZCaLt9Be62ENSNemRuRzThRaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
185.107.160.0/22
185.218.252.0/22
193.111.171.0/24
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
09:a7:2c:d3:bd:f5:4e:b5:73:12:b7:dc:e8:be:0f:9f:81:a1:
71:48:a8:e1:06:ef:86:c8:ee:23:88:72:6b:b4:ef:d4:7b:d2:
03:3e:7b:81:3b:1e:a3:7a:26:4a:ce:90:15:c6:83:62:2e:2d:
66:e9:b0:68:88:be:42:00:d1:19:a7:1f:dd:91:2e:88:cb:6f:
2a:36:af:c2:7a:b6:67:a3:61:d8:87:ce:13:eb:34:6e:6f:29:
ef:98:e2:83:06:b4:f8:9d:52:d7:b9:d8:ad:c0:c6:98:19:f6:
0a:9a:a9:46:f3:12:5c:3e:c0:40:c0:e6:1f:78:08:3a:94:eb:
e7:eb:aa:56:2a:4e:a4:28:25:07:e2:6c:de:a4:a3:f2:68:0a:
6f:63:70:1d:aa:47:0d:36:9e:a1:8b:29:d2:20:e0:82:b3:66:
1d:dd:e5:20:d1:01:87:2a:85:1f:a5:05:0b:a3:06:d5:7a:b3:
a9:2e:5b:f8:c4:90:05:c5:98:46:33:6a:10:36:9d:51:ab:4c:
a3:16:03:87:c6:2a:0e:1a:a3:c3:0a:4b:71:d3:14:b7:45:52:
2c:b4:d1:2a:8d:15:6a:bb:57:4d:2d:2f:0c:4b:e6:2e:3f:98:
3e:c7:1c:ae:c6:84:db:4f:f8:bf:f1:b6:e7:52:f6:8e:6d:97:
6b:f6:8a:84
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhsejzgVUuXeSuSNgFPJzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2
NzcyYjAwHhcNMjUwMTAxMTE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk2NDI2OGJiN2QwNWVlYjYxMGQ0OGQ3YTY0NmU0NzM0ZTE0NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3C4z28cxD/CHaFmxUcO7Irp0EVC
KYjMQM+PS29meF0EwkuWNgov/S/cYLQbLrUxtn6o7ok5eSO6ahnj9IzFTuvUoBDC
X9rFgXjZ1FKLWXI3pH3AUeSXGC1UiBTkBlS1KVGozN3/cIR7fsYPwlG5XXaSCHMS
dSktQ+uT2T1e13e2RX2zMONfS2fF03irZsU2xfyN++18zoZuZ7QxDIY/IytEJU/i
NQyfmJKLykVG1dkrUVQT48T7B41CwX37ap/vAvSiqgI4FDskf4Vyw6KdTY8Mi2NG
Nk+MmpTPmecDAvoDhpUGlEZWjvuFyHHtTOGN3wKd5CQrF6u7Tp0b8iuH/wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPyWQmi7fQXuthDUjXpkbkc04UWjMB8GA1UdIwQY
MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt
MjZjZGM1NTY0NGQ0LzEvX0paQ2FMdDlCZTYyRU5TTmVtUnVSelRoUmFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0
LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbagAwQC
uWugAwQCudr8AwQAwW+rAwQBwW/EMA0GCSqGSIb3DQEBCwUAA4IBAQAJpyzTvfVO
tXMSt9zovg+fgaFxSKjhBu+GyO4jiHJrtO/Ue9IDPnuBOx6jeiZKzpAVxoNiLi1m
6bBoiL5CANEZpx/dkS6Iy28qNq/CerZno2HYh84T6zRubynvmOKDBrT4nVLXudit
wMaYGfYKmqlG8xJcPsBAwOYfeAg6lOvn66pWKk6kKCUH4mzepKPyaApvY3AdqkcN
Np6hiynSIOCCs2Yd3eUg0QGHKoUfpQULowbVerOpLlv4xJAFxZhGM2oQNp1Rq0yj
FgOHxioOGqPDCktx0xS3RVIstNEqjRVqu1dNLS8MS+YuP5g+xxyuxoTbT/i/8bbn
UvaObZdr9oqE
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:15:00 2025 by rpki-client