Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/9TwneljnoP6bcfYQvihrxla0RcI.roa
File: 9TwneljnoP6bcfYQvihrxla0RcI.roa (raw, json)
Hash identifier: Zr2Ui8lpKBSfU5vJuPYuh/1cm8NiWiUfV6M604x4ojg=
Subject key identifier: F5:3C:27:7A:58:E7:A0:FE:9B:71:F6:10:BE:28:6B:C6:56:B4:45:C2
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01956A5AF2465A6DE68BA5EBFA5228764B8F
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/9TwneljnoP6bcfYQvihrxla0RcI.roa
Signing time: Thu 06 Mar 2025 07:28:19 +0000
ROA not before: Thu 06 Mar 2025 07:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 45.135.215.0/24 maxlen: 24
89.223.80.0/21 maxlen: 21
92.255.60.0/24 maxlen: 24
92.255.88.0/21 maxlen: 32
92.255.96.0/21 maxlen: 21
93.174.72.0/21 maxlen: 21
176.53.192.0/24 maxlen: 24
176.53.196.0/24 maxlen: 24
176.53.197.0/24 maxlen: 24
176.53.198.0/23 maxlen: 23
176.53.200.0/22 maxlen: 22
176.53.204.0/22 maxlen: 22
176.53.208.0/24 maxlen: 24
176.53.211.0/24 maxlen: 24
176.53.212.0/22 maxlen: 22
176.53.213.0/24 maxlen: 24
185.47.52.0/22 maxlen: 22
185.47.54.0/24 maxlen: 24
2a04:ac00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:5a:f2:46:5a:6d:e6:8b:a5:eb:fa:52:28:76:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Mar 6 07:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f53c277a58e7a0fe9b71f610be286bc656b445c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:42:9a:cd:e5:a5:c6:1d:c8:0a:23:56:79:
59:be:de:a7:13:75:23:94:1c:d7:82:f1:1b:69:4b:
4f:bc:25:51:a1:45:a1:75:56:80:62:bd:2e:68:41:
10:59:4a:4b:f7:4c:19:0d:08:5c:6d:1c:99:84:5d:
6b:89:d4:9f:6d:e4:4b:ed:7d:3e:ad:30:d1:85:31:
80:45:cc:fd:bf:68:25:ea:c3:1f:8f:41:e0:56:66:
d1:32:e1:1c:5d:09:05:fe:4e:af:7f:05:65:57:97:
d2:11:8a:1f:58:50:d5:6a:86:6b:f8:b8:db:08:84:
dc:5b:02:dd:91:d2:80:12:60:5a:f0:c8:d6:d2:84:
bf:69:89:3c:c8:f8:d9:7b:6b:98:1e:49:18:74:05:
5e:9b:ce:b7:51:99:e7:c4:97:cf:c9:97:07:b4:25:
8b:d7:84:01:b9:3d:2e:75:31:f2:74:95:79:4e:7a:
66:f5:4b:31:e9:1f:c3:38:3f:76:96:24:7a:cc:00:
f9:3a:15:67:c1:21:34:de:e7:16:1c:73:37:45:c8:
b3:63:e2:d6:4d:c4:0c:14:16:61:d5:cc:00:f1:b5:
f7:43:f7:8a:4f:ce:ee:31:99:96:ec:65:96:a2:75:
fb:03:ae:33:0b:be:13:22:02:5a:73:06:e2:50:5b:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:27:7A:58:E7:A0:FE:9B:71:F6:10:BE:28:6B:C6:56:B4:45:C2
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/9TwneljnoP6bcfYQvihrxla0RcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
89.223.80.0/21
92.255.60.0/24
92.255.88.0-92.255.103.255
93.174.72.0/21
176.53.192.0/24
176.53.196.0-176.53.208.255
176.53.211.0-176.53.215.255
185.47.52.0/22
IPv6:
2a04:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
3e:58:3d:59:15:b1:9a:f7:a9:e3:4a:b4:62:88:a5:e2:b1:da:
15:a8:8d:82:c1:62:c6:cf:79:92:89:f6:1b:64:8f:d9:59:67:
a7:3c:43:2c:a3:a6:3a:fc:19:c2:40:3a:fd:6a:45:9b:71:52:
c6:50:15:e4:bd:e3:74:1b:06:f8:73:02:cc:5a:7a:c2:a1:70:
39:8a:da:2e:51:f9:d2:5f:4b:bc:f3:de:b8:e2:53:52:8a:c2:
23:fe:65:c7:3d:cf:b9:94:48:67:9d:fd:e6:7a:e5:04:31:5b:
6c:e3:d5:e7:53:13:52:1b:42:fe:ae:79:e7:f2:66:c6:10:dd:
73:ab:81:24:5e:b7:13:28:22:b8:f2:5b:8f:6f:18:69:fc:6c:
7c:8b:89:d5:fd:4a:c2:86:07:2c:c0:a6:37:af:28:76:b9:5d:
b9:59:5d:da:e3:32:2e:74:23:82:57:54:ea:ff:93:30:c2:59:
8d:e9:08:29:5a:eb:c7:c3:de:41:f7:2d:77:fc:3b:c4:5a:48:
73:ca:9b:31:f5:e6:50:c8:bc:aa:5b:02:e2:bf:94:29:9b:93:
ad:ec:d0:1c:92:bb:df:21:42:af:1e:f8:ff:c5:42:10:01:5c:
57:ac:75:d4:ad:41:04:94:6d:9b:b2:58:9f:c6:4e:03:dc:27:
db:a5:6e:54
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZVqWvJGWm3mi6Xr+lIodkuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjUwMzA2MDcyODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTNjMjc3YTU4ZTdhMGZlOWI3MWY2MTBiZTI4NmJjNjU2YjQ0NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngBCms3lpcYdyAojVnlZvt6nE3Uj
lBzXgvEbaUtPvCVRoUWhdVaAYr0uaEEQWUpL90wZDQhcbRyZhF1ridSfbeRL7X0+
rTDRhTGARcz9v2gl6sMfj0HgVmbRMuEcXQkF/k6vfwVlV5fSEYofWFDVaoZr+Ljb
CITcWwLdkdKAEmBa8MjW0oS/aYk8yPjZe2uYHkkYdAVem863UZnnxJfPyZcHtCWL
14QBuT0udTHydJV5Tnpm9Usx6R/DOD92liR6zAD5OhVnwSE03ucWHHM3RcizY+LW
TcQMFBZh1cwA8bX3Q/eKT87uMZmW7GWWonX7A64zC74TIgJacwbiUFvmNwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFPU8J3pY56D+m3H2EL4oa8ZWtEXCMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvOVR3bmVsam5vUDZiY2ZZUXZpaHJ4bGEwUmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQALYfXAwQD
Wd9QAwQAXP88MAwDBANc/1gDBANc/2ADBANdrkgDBACwNcAwDAMEArA1xAMEALA1
0DAMAwQAsDXTAwQDsDXQAwQCuS80MA0EAgACMAcDBQMqBKwAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+WD1ZFbGa96njSrRiiKXisdoVqI2CwWLGz3mSifYbZI/ZWWenPEMs
o6Y6/BnCQDr9akWbcVLGUBXkveN0Gwb4cwLMWnrCoXA5itouUfnSX0u889644lNS
isIj/mXHPc+5lEhnnf3meuUEMVts49XnUxNSG0L+rnnn8mbGEN1zq4EkXrcTKCK4
8luPbxhp/Gx8i4nV/UrChgcswKY3ryh2uV25WV3a4zIudCOCV1Tq/5MwwlmN6Qgp
WuvHw95B9y13/DvEWkhzypsx9eZQyLyqWwLiv5Qpm5Ot7NAckrvfIUKvHvj/xUIQ
AVxXrHXUrUEElG2bslifxk4D3CfbpW5U
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:30 2025 by rpki-client