Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa
File: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (raw, json)
Hash identifier: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=
Subject key identifier: B2:BF:ED:0F:02:64:1E:48:FE:25:73:4C:B7:46:72:E7:2A:42:27:B8
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8BFBE418CC07243D12E4E831FD5B
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 81.194.0.0/16 maxlen: 16
193.48.0.0/14 maxlen: 14
193.48.80.0/24 maxlen: 24
193.48.81.0/24 maxlen: 24
193.48.91.0/24 maxlen: 24
193.48.101.0/24 maxlen: 24
193.48.104.0/24 maxlen: 24
193.48.106.0/24 maxlen: 24
193.48.179.0/24 maxlen: 24
193.49.96.0/24 maxlen: 24
193.51.56.0/24 maxlen: 24
193.52.0.0/16 maxlen: 16
193.52.0.0/24 maxlen: 24
193.52.1.0/24 maxlen: 24
193.52.68.0/24 maxlen: 24
193.52.216.0/24 maxlen: 24
193.52.217.0/24 maxlen: 24
193.54.0.0/15 maxlen: 15
193.54.67.0/24 maxlen: 24
193.54.149.0/24 maxlen: 24
194.57.0.0/16 maxlen: 16
194.57.138.0/24 maxlen: 24
194.57.176.0/24 maxlen: 24
194.57.177.0/24 maxlen: 24
194.57.215.0/24 maxlen: 24
194.57.216.0/24 maxlen: 24
194.167.0.0/16 maxlen: 16
194.167.41.0/24 maxlen: 24
194.167.190.0/24 maxlen: 24
194.199.0.0/16 maxlen: 16
194.214.0.0/16 maxlen: 16
194.254.0.0/16 maxlen: 16
194.254.139.0/24 maxlen: 24
195.83.0.0/16 maxlen: 16
195.83.163.0/24 maxlen: 24
195.83.164.0/24 maxlen: 24
195.83.165.0/24 maxlen: 24
195.83.225.0/24 maxlen: 24
195.83.226.0/24 maxlen: 24
195.98.224.0/19 maxlen: 19
195.220.0.0/16 maxlen: 16
195.221.0.0/16 maxlen: 16
195.221.234.0/24 maxlen: 24
195.221.235.0/24 maxlen: 24
2001:660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:fb:e4:18:cc:07:24:3d:12:e4:e8:31:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2bfed0f02641e48fe25734cb74672e72a4227b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:5d:03:81:e0:71:ad:45:b3:77:cb:39:53:
d0:55:37:83:e4:c8:ab:6f:98:38:4f:72:bd:9b:e9:
27:91:85:4e:bf:a2:eb:38:7b:d5:c5:d3:b2:d9:e9:
1a:11:f8:7b:2d:c4:6b:04:38:21:0d:e3:18:e0:d7:
98:dd:c8:be:a2:7e:d3:e7:5b:e3:e7:91:cd:2d:82:
89:f4:9e:4c:fa:14:ad:f8:4d:ee:5a:11:bd:66:e8:
fd:4a:3a:0e:f4:99:28:70:89:98:78:2b:7f:54:66:
cc:21:0c:57:21:a2:da:74:0b:e5:bf:7d:cf:11:2c:
85:ab:24:30:01:63:22:d1:9a:64:83:5e:0f:4d:b4:
3c:3a:77:9a:02:c8:1e:c8:ce:b7:79:1b:e6:08:bd:
d3:c3:f0:2c:75:6c:b4:46:81:8d:2a:de:89:cf:3c:
38:b8:2c:19:ee:10:c2:93:04:31:8c:89:f7:40:c6:
8f:84:32:70:3b:41:7d:a8:4a:1e:90:26:40:33:d5:
69:3b:39:a9:94:97:01:85:4a:33:78:99:d6:88:88:
15:52:db:6b:ee:25:d1:5c:45:2c:48:d3:86:a0:a9:
a1:de:db:33:e7:20:e0:cb:65:e5:fb:d2:5e:9a:51:
6a:0a:e1:a4:06:3a:f1:d3:1c:07:95:94:3c:20:b0:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:ED:0F:02:64:1E:48:FE:25:73:4C:B7:46:72:E7:2A:42:27:B8
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.194.0.0/16
193.48.0.0-193.52.255.255
193.54.0.0/15
194.57.0.0/16
194.167.0.0/16
194.199.0.0/16
194.214.0.0/16
194.254.0.0/16
195.83.0.0/16
195.98.224.0/19
195.220.0.0/15
IPv6:
2001:660::/32
Signature Algorithm: sha256WithRSAEncryption
65:7e:d3:17:1e:36:2f:5a:9e:a1:4d:3e:e6:c0:7d:90:77:4e:
64:d1:60:b0:dd:40:64:d3:3f:11:97:93:37:22:49:8b:64:cb:
6d:0c:68:71:75:a5:2a:f3:c3:ec:fe:68:12:3d:d4:e0:a7:b1:
aa:b4:44:e0:20:4c:42:b7:8e:d8:bb:63:4a:d1:4a:7c:c4:55:
e3:39:08:8c:fc:95:8f:75:4a:f9:e1:de:70:9d:e0:f5:4b:a6:
9c:4e:66:f0:f3:c4:bd:66:b2:1c:98:70:3a:f4:8c:8d:29:e7:
94:0d:fe:8f:f5:a1:59:d6:ea:28:ad:f5:56:3f:6d:a0:ab:eb:
b8:89:06:66:6c:b6:f4:e1:1d:64:8a:bb:5c:7b:4f:09:4d:65:
4e:50:8a:a6:cc:4e:33:25:91:1c:82:3c:5a:4b:64:1b:21:98:
00:a5:75:ff:ef:32:7b:30:a0:6a:a3:e3:06:5e:75:e9:0c:be:
65:a2:44:3b:2e:2e:be:86:11:a7:b0:c4:85:d4:ed:9f:85:41:
bf:c4:ba:05:9d:19:97:3f:ae:b0:5e:5e:18:3e:f5:37:59:f4:
0e:fc:d8:ee:fd:48:7d:f8:25:ab:cf:d9:90:f6:41:03:32:b7:
94:07:6e:12:e6:2a:49:1e:c3:28:df:36:dc:f2:38:2a:ba:af:
45:d7:69:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZQlj4v75BjMByQ9EuToMf1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmJmZWQwZjAyNjQxZTQ4ZmUyNTczNGNiNzQ2NzJlNzJhNDIyN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygBdA4Hgca1Fs3fLOVPQVTeD5Mir
b5g4T3K9m+knkYVOv6LrOHvVxdOy2ekaEfh7LcRrBDghDeMY4NeY3ci+on7T51vj
55HNLYKJ9J5M+hSt+E3uWhG9Zuj9SjoO9JkocImYeCt/VGbMIQxXIaLadAvlv33P
ESyFqyQwAWMi0Zpkg14PTbQ8OneaAsgeyM63eRvmCL3Tw/AsdWy0RoGNKt6Jzzw4
uCwZ7hDCkwQxjIn3QMaPhDJwO0F9qEoekCZAM9VpOzmplJcBhUozeJnWiIgVUttr
7iXRXEUsSNOGoKmh3tsz5yDgy2Xl+9JemlFqCuGkBjrx0xwHlZQ8ILArbQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFLK/7Q8CZB5I/iVzTLdGcucqQie4MB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvc3JfdER3SmtIa2otSlhOTXQwWnk1eXBDSjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBFBAIAATA/AwMAUcIwCgMD
BMEwAwMAwTQDAwHBNgMDAMI5AwMAwqcDAwDCxwMDAMLWAwMAwv4DAwDDUwMEBcNi
4AMDAcPcMA0EAgACMAcDBQAgAQZgMA0GCSqGSIb3DQEBCwUAA4IBAQBlftMXHjYv
Wp6hTT7mwH2Qd05k0WCw3UBk0z8Rl5M3IkmLZMttDGhxdaUq88Ps/mgSPdTgp7Gq
tETgIExCt47Yu2NK0Up8xFXjOQiM/JWPdUr54d5wneD1S6acTmbw88S9ZrIcmHA6
9IyNKeeUDf6P9aFZ1uoorfVWP22gq+u4iQZmbLb04R1kirtce08JTWVOUIqmzE4z
JZEcgjxaS2QbIZgApXX/7zJ7MKBqo+MGXnXpDL5lokQ7Li6+hhGnsMSF1O2fhUG/
xLoFnRmXP66wXl4YPvU3WfQO/Nju/Uh9+CWrz9mQ9kEDMreUB24S5ipJHsMo3zbc
8jgquq9F12kf
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:50 2025 by rpki-client