
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa
File: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (raw, json)
Hash identifier: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=
Subject key identifier: E1:FD:4B:3F:57:6F:CD:05:89:46:17:B4:A4:A9:D4:01:58:B6:33:32
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019473D59DD4CE5ECFDF68E1F6E57C8650D4
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa
Signing time: Fri 17 Jan 2025 10:36:06 +0000
ROA not before: Fri 17 Jan 2025 10:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12897
IP address blocks: 5.182.236.0/22 maxlen: 22
45.10.60.0/22 maxlen: 22
45.14.188.0/22 maxlen: 22
45.93.108.0/22 maxlen: 22
45.128.180.0/22 maxlen: 22
45.131.36.0/22 maxlen: 22
45.136.168.0/22 maxlen: 22
45.143.76.0/22 maxlen: 22
46.243.80.0/21 maxlen: 21
85.132.192.0/19 maxlen: 19
92.119.8.0/22 maxlen: 22
94.16.64.0/19 maxlen: 19
94.46.64.0/19 maxlen: 19
95.131.96.0/21 maxlen: 21
134.101.16.0/20 maxlen: 20
149.249.128.0/19 maxlen: 19
185.9.28.0/22 maxlen: 22
185.117.68.0/22 maxlen: 22
185.189.140.0/22 maxlen: 22
185.194.64.0/22 maxlen: 22
185.238.252.0/22 maxlen: 22
195.2.160.0/19 maxlen: 19
195.80.52.0/22 maxlen: 22
212.232.80.0/20 maxlen: 20
213.157.0.0/19 maxlen: 19
213.188.96.0/19 maxlen: 19
2a02:b98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:d5:9d:d4:ce:5e:cf:df:68:e1:f6:e5:7c:86:50:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jan 17 10:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1fd4b3f576fcd05894617b4a4a9d40158b63332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:47:56:78:44:9b:4c:dc:a0:5b:db:42:25:
36:cd:e4:6d:41:dc:ef:5b:53:37:a1:b0:59:43:e6:
94:b3:1c:75:5e:7f:8c:06:49:c6:48:c7:e8:df:87:
24:51:73:ed:5a:9b:28:82:9a:39:27:c7:6a:3d:60:
de:ca:2b:18:3a:3d:19:cd:5c:45:c5:5c:a0:61:0d:
9e:fe:b9:69:27:d5:1a:ab:82:46:9b:0a:97:4a:ed:
35:cf:35:dd:b8:1d:06:b9:3d:8a:53:6c:c1:e0:f1:
35:b3:1f:c3:70:d1:2a:cb:c2:a3:6c:0a:87:6c:ee:
ce:4b:cb:88:72:4b:5f:1b:73:08:36:20:42:4b:d9:
32:d3:32:5c:dc:0a:26:a0:a5:d0:e2:93:e8:d9:e7:
66:ff:18:50:a6:45:c9:e4:c6:64:43:65:b1:53:4f:
dc:e4:ec:20:d5:54:c9:c1:ae:97:61:10:04:71:1d:
48:d8:36:05:34:a9:c4:87:52:ba:c3:62:ee:a6:18:
42:1b:02:a4:69:b0:c3:a9:f7:86:d0:27:a0:0e:16:
44:e9:3f:f7:8b:b9:48:f5:5e:97:de:85:85:d4:4d:
55:81:9f:a3:10:24:8d:fc:84:f5:43:be:5a:c8:66:
6d:6c:f9:79:67:45:f9:c2:b0:49:56:cc:0b:e8:82:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:4B:3F:57:6F:CD:05:89:46:17:B4:A4:A9:D4:01:58:B6:33:32
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.236.0/22
45.10.60.0/22
45.14.188.0/22
45.93.108.0/22
45.128.180.0/22
45.131.36.0/22
45.136.168.0/22
45.143.76.0/22
46.243.80.0/21
85.132.192.0/19
92.119.8.0/22
94.16.64.0/19
94.46.64.0/19
95.131.96.0/21
134.101.16.0/20
149.249.128.0/19
185.9.28.0/22
185.117.68.0/22
185.189.140.0/22
185.194.64.0/22
185.238.252.0/22
195.2.160.0/19
195.80.52.0/22
212.232.80.0/20
213.157.0.0/19
213.188.96.0/19
IPv6:
2a02:b98::/32
Signature Algorithm: sha256WithRSAEncryption
87:aa:80:a9:49:79:2f:92:02:ca:c7:10:bf:82:53:2a:e3:5a:
77:e2:13:1e:17:ff:5d:f1:0a:61:56:f6:0e:d9:99:11:ee:eb:
db:6b:4f:ba:d9:79:b2:94:8d:4e:5f:8b:b2:0b:71:b3:ce:26:
0a:e1:13:8b:73:c3:ac:af:94:d9:cd:fd:00:de:15:e9:cf:eb:
42:6c:f2:a6:2d:84:28:16:4e:86:69:be:37:db:9e:4d:0d:04:
05:21:db:db:00:76:d6:94:41:33:7e:11:d3:60:79:0b:db:83:
a7:45:22:ac:e6:6c:52:e0:b5:01:a7:8b:9e:3e:0d:45:e5:55:
14:dd:e9:09:e2:3f:e9:a5:43:6c:3d:f7:7e:2d:3b:7d:50:36:
ee:ff:63:18:4e:fa:26:fa:07:06:72:09:70:2d:90:00:6f:46:
8c:5a:c3:89:67:3f:fb:dd:82:04:ce:dc:66:82:57:b1:47:64:
e8:68:b0:6b:ee:bf:b5:56:51:07:0c:39:67:56:de:db:31:52:
37:87:0c:45:65:b4:bd:a8:e6:2c:2e:23:2b:5e:a6:55:93:74:
77:1a:c3:ba:b4:ba:6a:8b:d2:55:bb:a9:4b:48:ea:41:e0:13:
b4:42:fe:f6:a6:a7:f4:c7:da:90:bb:ad:bd:83:d2:0d:67:01:
c4:9e:01:e4
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZRz1Z3Uzl7P32jh9uV8hlDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwMTE3MTAzNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWZkNGIzZjU3NmZjZDA1ODk0NjE3YjRhNGE5ZDQwMTU4YjYzMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriZHVnhEm0zcoFvbQiU2zeRtQdzv
W1M3obBZQ+aUsxx1Xn+MBknGSMfo34ckUXPtWpsogpo5J8dqPWDeyisYOj0ZzVxF
xVygYQ2e/rlpJ9Uaq4JGmwqXSu01zzXduB0GuT2KU2zB4PE1sx/DcNEqy8KjbAqH
bO7OS8uIcktfG3MINiBCS9ky0zJc3AomoKXQ4pPo2edm/xhQpkXJ5MZkQ2WxU0/c
5Owg1VTJwa6XYRAEcR1I2DYFNKnEh1K6w2LuphhCGwKkabDDqfeG0CegDhZE6T/3
i7lI9V6X3oWF1E1VgZ+jECSN/IT1Q75ayGZtbPl5Z0X5wrBJVswL6ILw/wIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFOH9Sz9Xb80FiUYXtKSp1AFYtjMyMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvNGYxTFAxZHZ6UVdKUmhlMHBLblVBVmkyTXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAIF
tuwDBAItCjwDBAItDrwDBAItXWwDBAItgLQDBAItgyQDBAItiKgDBAItj0wDBAMu
81ADBAVVhMADBAJcdwgDBAVeEEADBAVeLkADBANfg2ADBASGZRADBAWV+YADBAK5
CRwDBAK5dUQDBAK5vYwDBAK5wkADBAK57vwDBAXDAqADBALDUDQDBATU6FADBAXV
nQADBAXVvGAwDQQCAAIwBwMFACoCC5gwDQYJKoZIhvcNAQELBQADggEBAIeqgKlJ
eS+SAsrHEL+CUyrjWnfiEx4X/13xCmFW9g7ZmRHu69trT7rZebKUjU5fi7ILcbPO
JgrhE4tzw6yvlNnN/QDeFenP60Js8qYthCgWToZpvjfbnk0NBAUh29sAdtaUQTN+
EdNgeQvbg6dFIqzmbFLgtQGni54+DUXlVRTd6QniP+mlQ2w9934tO31QNu7/YxhO
+ib6BwZyCXAtkABvRoxaw4lnP/vdggTO3GaCV7FHZOhosGvuv7VWUQcMOWdW3tsx
UjeHDEVltL2o5iwuIyteplWTdHcaw7q0umqL0lW7qUtI6kHgE7RC/vamp/TH2pC7
rb2D0g1nAcSeAeQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:10 2025 by rpki-client