Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3126b4-6e17-4593-8530-62dd1846de67/1/PoHpm1ZpZjzts8uldslxWN6iKMs.roa
File: PoHpm1ZpZjzts8uldslxWN6iKMs.roa (raw, json)
Hash identifier: BOBIaP/uc17/or0RGgn2/pIMAKuER5zVGvPjPhv3cI0=
Subject key identifier: 3E:81:E9:9B:56:69:66:3C:ED:B3:CB:A5:76:C9:71:58:DE:A2:28:CB
Certificate issuer: /CN=74d66a73612de467720f196dc30b43854127574c
Certificate serial: 3BB3F0
Authority key identifier: 74:D6:6A:73:61:2D:E4:67:72:0F:19:6D:C3:0B:43:85:41:27:57:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNZqc2Et5GdyDxltwwtDhUEnV0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3126b4-6e17-4593-8530-62dd1846de67/1/PoHpm1ZpZjzts8uldslxWN6iKMs.roa
Signing time: Sat 01 Jan 2022 03:55:36 +0000
ROA not before: Sat 01 Jan 2022 03:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199770
IP address blocks: 188.240.236.0/22 maxlen: 22
185.198.108.0/22 maxlen: 22
45.136.34.0/24 maxlen: 24
45.136.35.0/24 maxlen: 24
45.136.32.0/24 maxlen: 24
45.136.33.0/24 maxlen: 24
185.46.124.0/22 maxlen: 22
2a01:8460::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3912688 (0x3bb3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d66a73612de467720f196dc30b43854127574c
Validity
Not Before: Jan 1 03:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e81e99b5669663cedb3cba576c97158dea228cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:4a:4c:c4:ff:49:cd:f0:f7:6a:28:0e:2c:
2b:7b:c9:78:34:99:f3:aa:0e:5f:8f:56:d6:16:4c:
e8:29:ba:df:ac:1e:ac:b8:ac:9c:ea:6f:2b:82:6f:
2b:96:ad:db:7b:ef:21:3b:a9:da:86:2b:fa:b8:93:
9f:64:88:35:ce:43:83:43:88:04:83:36:1e:60:6e:
b4:e3:c2:9a:e9:0c:50:2c:47:4c:a8:f2:b3:13:77:
aa:7e:3a:18:b6:23:49:71:49:92:09:53:62:69:61:
55:c6:f8:42:92:6c:2b:49:13:45:16:02:64:2a:ae:
4d:d4:a1:09:9c:c0:30:e0:97:17:59:01:dc:d3:f2:
3e:d6:59:43:1c:90:41:04:6b:d5:26:ca:08:7e:22:
4d:e5:9a:59:08:04:5e:2d:b8:4a:1d:2e:05:40:1d:
18:d4:65:1a:fd:1c:51:69:48:b3:a0:c9:4a:48:8f:
0b:c0:85:e5:92:31:30:f1:91:05:08:3e:28:7d:38:
1d:21:56:ec:6a:99:7d:e9:fb:60:1b:59:44:f5:55:
af:6f:2b:d0:e1:ca:12:b3:2c:e8:b9:53:69:9b:82:
44:6c:4c:bd:a8:1e:5b:13:d3:72:0f:99:99:04:74:
cb:b9:f6:f0:99:a4:06:c1:ff:cd:c2:4a:ac:a3:38:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:81:E9:9B:56:69:66:3C:ED:B3:CB:A5:76:C9:71:58:DE:A2:28:CB
X509v3 Authority Key Identifier:
keyid:74:D6:6A:73:61:2D:E4:67:72:0F:19:6D:C3:0B:43:85:41:27:57:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNZqc2Et5GdyDxltwwtDhUEnV0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3126b4-6e17-4593-8530-62dd1846de67/1/PoHpm1ZpZjzts8uldslxWN6iKMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3126b4-6e17-4593-8530-62dd1846de67/1/dNZqc2Et5GdyDxltwwtDhUEnV0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.32.0/22
185.46.124.0/22
185.198.108.0/22
188.240.236.0/22
IPv6:
2a01:8460::/32
Signature Algorithm: sha256WithRSAEncryption
66:af:96:be:c5:31:24:0e:18:29:b6:38:2a:1a:eb:d3:d9:10:
0e:0b:6a:ae:d8:46:1d:1c:dd:0a:74:19:72:f2:d1:93:64:9b:
ac:94:d4:4d:94:28:35:88:d4:e3:b9:9a:78:b0:0a:81:2d:7e:
68:59:43:4d:77:75:52:55:f2:3f:80:6e:3f:e1:a0:9d:10:a6:
b6:1f:ea:11:cf:9c:6f:31:a9:1c:27:72:cb:c4:31:b1:51:2d:
cc:87:3d:70:05:dc:b8:d4:b8:9d:a8:6e:94:5c:ca:f5:f3:31:
08:84:14:af:3c:6c:b6:67:68:e9:4f:46:bc:6f:22:ea:58:3a:
2e:d8:47:ba:c0:ae:84:18:76:30:db:96:b4:37:44:98:50:44:
02:fb:a6:dc:76:2d:84:6c:59:7b:43:9d:25:16:63:ca:35:9d:
11:a2:cc:76:ed:58:ae:b2:46:23:f3:09:3b:2e:00:fc:54:5d:
a8:98:04:95:6f:cc:ac:79:a2:2d:45:e0:81:09:95:b8:60:d3:
30:fb:8c:2b:73:be:fd:61:32:50:f3:fb:89:fa:3e:24:51:bb:
9b:6d:b9:99:ed:c7:9d:7c:16:0f:6a:24:ba:55:4b:05:3c:32:
f2:f6:80:b3:ce:d2:18:84:10:20:ef:6b:bd:86:e4:74:88:a1:
57:a2:ba:3d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIDO7PwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
ZDY2YTczNjEyZGU0Njc3MjBmMTk2ZGMzMGI0Mzg1NDEyNzU3NGMwHhcNMjIwMTAx
MDM1NTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzZTgxZTk5YjU2Njk2
NjNjZWRiM2NiYTU3NmM5NzE1OGRlYTIyOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0CFKTMT/Sc3w92ooDiwre8l4NJnzqg5fj1bWFkzoKbrfrB6s
uKyc6m8rgm8rlq3be+8hO6nahiv6uJOfZIg1zkODQ4gEgzYeYG6048Ka6QxQLEdM
qPKzE3eqfjoYtiNJcUmSCVNiaWFVxvhCkmwrSRNFFgJkKq5N1KEJnMAw4JcXWQHc
0/I+1llDHJBBBGvVJsoIfiJN5ZpZCAReLbhKHS4FQB0Y1GUa/RxRaUizoMlKSI8L
wIXlkjEw8ZEFCD4ofTgdIVbsapl96ftgG1lE9VWvbyvQ4coSsyzouVNpm4JEbEy9
qB5bE9NyD5mZBHTLufbwmaQGwf/NwkqsozhyNwIDAQABo4ICKjCCAiYwHQYDVR0O
BBYEFD6B6ZtWaWY87bPLpXbJcVjeoijLMB8GA1UdIwQYMBaAFHTWanNhLeRncg8Z
bcMLQ4VBJ1dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZE5acWMyRXQ1R2R5RHhsdHd3dERoVUVuVjB3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMS8zMTI2YjQtNmUxNy00NTkzLTg1MzAtNjJkZDE4NDZkZTY3LzEv
UG9IcG0xWnBaanp0czh1bGRzbHhXTjZpS01zLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8z
MTI2YjQtNmUxNy00NTkzLTg1MzAtNjJkZDE4NDZkZTY3LzEvZE5acWMyRXQ1R2R5
RHhsdHd3dERoVUVuVjB3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAG
CCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYggAwQCuS58AwQCucZsAwQCvPDs
MA0EAgACMAcDBQAqAYRgMA0GCSqGSIb3DQEBCwUAA4IBAQBmr5a+xTEkDhgptjgq
GuvT2RAOC2qu2EYdHN0KdBly8tGTZJuslNRNlCg1iNTjuZp4sAqBLX5oWUNNd3VS
VfI/gG4/4aCdEKa2H+oRz5xvMakcJ3LLxDGxUS3Mhz1wBdy41LidqG6UXMr18zEI
hBSvPGy2Z2jpT0a8byLqWDou2Ee6wK6EGHYw25a0N0SYUEQC+6bcdi2EbFl7Q50l
FmPKNZ0Rosx27ViuskYj8wk7LgD8VF2omASVb8yseaItReCBCZW4YNMw+4wrc779
YTJQ8/uJ+j4kUbubbbmZ7cedfBYPaiS6VUsFPDLy9oCzztIYhBAg72u9huR0iKFX
oro9
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:25:45 2025 by rpki-client