Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/fJD7z5W46VOLzeoaeSMZMVRh4kA.roa
File: fJD7z5W46VOLzeoaeSMZMVRh4kA.roa (raw, json)
Hash identifier: pURScjXXbZJC6U0MeTCVL2VN72D8WT/3VROsCz1ZSaA=
Subject key identifier: 7C:90:FB:CF:95:B8:E9:53:8B:CD:EA:1A:79:23:19:31:54:61:E2:40
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: 01856D0184C9452A09D64E5D97C8AE170EDF
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/fJD7z5W46VOLzeoaeSMZMVRh4kA.roa
Signing time: Sun 01 Jan 2023 11:04:54 +0000
ROA not before: Sun 01 Jan 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 185.10.112.0/22 maxlen: 24
178.20.144.0/21 maxlen: 24
88.85.224.0/19 maxlen: 24
46.235.88.0/21 maxlen: 24
212.12.160.0/19 maxlen: 24
176.241.184.0/21 maxlen: 24
2a00:1560::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:84:c9:45:2a:09:d6:4e:5d:97:c8:ae:17:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Jan 1 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c90fbcf95b8e9538bcdea1a792319315461e240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:c9:9d:71:81:55:3b:36:23:07:f5:b0:75:
9c:38:3d:ff:e2:6f:91:03:40:83:e4:63:53:79:9e:
48:e5:b2:c6:d0:09:2f:be:38:8c:4d:10:e5:fd:4d:
73:fe:74:0a:b4:84:c8:b0:ab:bf:fa:a4:22:0f:9f:
06:02:ee:38:d0:a9:e6:b1:07:31:68:09:1c:76:5f:
58:84:b7:5c:b2:89:57:60:bf:39:2f:40:4b:fc:40:
2e:82:f8:fc:5d:68:d0:07:b1:db:e1:1c:27:27:dc:
d5:7a:0d:c0:f7:f6:54:d8:5d:b2:2c:9d:d9:84:b4:
77:6e:8a:e3:2d:ed:87:f7:da:73:31:fe:3c:80:58:
2e:76:6f:5d:24:d3:cb:92:b8:e2:4a:0d:6e:60:1e:
01:48:c6:2d:1d:55:48:e3:e5:84:45:2b:76:c5:8c:
d2:a9:62:f2:4e:88:95:54:fb:c3:96:6d:f4:68:23:
13:1e:2a:bc:1c:ab:35:e8:5a:43:db:ad:68:96:8c:
8d:3c:fa:19:92:26:c3:45:33:03:dd:c3:69:b7:93:
3a:01:87:3c:c6:92:08:83:19:df:c0:ac:ab:8a:aa:
4b:6a:02:b8:39:ab:40:7c:68:65:cf:3c:18:24:b9:
83:36:2b:a3:10:5b:fe:47:87:89:33:6c:33:93:44:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:FB:CF:95:B8:E9:53:8B:CD:EA:1A:79:23:19:31:54:61:E2:40
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/fJD7z5W46VOLzeoaeSMZMVRh4kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
88.85.224.0/19
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
212.12.160.0/19
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
9f:01:a6:00:c8:34:d4:9b:b0:5b:13:ca:2f:12:7b:e6:1b:a0:
06:fe:d9:8b:f1:67:26:a6:11:95:a5:c1:5d:95:d7:8b:de:59:
be:98:8a:06:3d:6a:94:8e:e6:a7:15:bf:6b:29:bf:8d:95:b8:
68:6a:cd:9d:91:34:bf:1c:77:23:61:20:aa:fe:c3:d0:8c:98:
6c:f2:c4:b6:2f:9b:23:ef:ef:8f:39:95:b6:b4:94:e6:d1:89:
7c:a4:0a:6e:1a:fd:a2:40:40:f7:7b:b7:53:f2:d3:24:56:d0:
63:ba:30:fb:5a:31:56:78:5e:8d:80:e3:78:cf:40:e2:e8:d1:
91:83:cb:41:07:81:7a:7a:3b:f3:96:5c:93:41:eb:c5:cb:1c:
bf:27:71:45:0f:54:dc:50:cb:8f:42:b5:03:90:bb:87:69:72:
39:8a:43:4f:a1:27:d1:2c:00:7d:c3:b5:0a:a5:d3:18:a6:6e:
60:95:12:ae:54:be:f1:d0:e6:44:bb:2b:d6:21:44:68:0b:d0:
89:97:e1:31:54:0b:c7:d6:c5:e8:34:5e:6f:03:2a:2b:d4:fa:
26:70:87:8a:77:e9:96:52:fd:af:6d:7a:ba:f8:bd:b2:48:4d:
4a:c1:9c:c3:7c:c2:fa:eb:b8:51:48:f7:30:cc:aa:c2:0e:c7:
17:f5:3b:65
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVtAYTJRSoJ1k5dl8iuFw7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTE1ODNhY2ExZTgwNTlmZDMxZTI2N2U4MzAyZDBjMmZl
MDA4ZDYwHhcNMjMwMTAxMTEwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzkwZmJjZjk1YjhlOTUzOGJjZGVhMWE3OTIzMTkzMTU0NjFlMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HfJnXGBVTs2Iwf1sHWcOD3/4m+R
A0CD5GNTeZ5I5bLG0AkvvjiMTRDl/U1z/nQKtITIsKu/+qQiD58GAu440KnmsQcx
aAkcdl9YhLdcsolXYL85L0BL/EAugvj8XWjQB7Hb4RwnJ9zVeg3A9/ZU2F2yLJ3Z
hLR3borjLe2H99pzMf48gFgudm9dJNPLkrjiSg1uYB4BSMYtHVVI4+WERSt2xYzS
qWLyToiVVPvDlm30aCMTHiq8HKs16FpD261oloyNPPoZkibDRTMD3cNpt5M6AYc8
xpIIgxnfwKyriqpLagK4OatAfGhlzzwYJLmDNiujEFv+R4eJM2wzk0Sp2QIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHyQ+8+VuOlTi83qGnkjGTFUYeJAMB8GA1UdIwQY
MBaAFDsRWDrKHoBZ/THiZ+gwLQwv4AjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hGWU9zb2VnRm45TWVKbjZEQXREQ19nQ05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mM2ViY2UtOTYwOC00MTgwLWE4OTEt
ZGNlMGQwYWU2NzAzLzEvZkpEN3o1VzQ2Vk9MemVvYWVTTVpNVlJoNGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mM2ViY2UtOTYwOC00MTgwLWE4OTEtZGNlMGQwYWU2NzAz
LzEvT3hGWU9zb2VnRm45TWVKbjZEQXREQ19nQ05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLutYAwQF
WFXgAwQDsPG4AwQDshSQAwQCuQpwAwQF1AygMA0EAgACMAcDBQAqABVgMA0GCSqG
SIb3DQEBCwUAA4IBAQCfAaYAyDTUm7BbE8ovEnvmG6AG/tmL8WcmphGVpcFdldeL
3lm+mIoGPWqUjuanFb9rKb+Nlbhoas2dkTS/HHcjYSCq/sPQjJhs8sS2L5sj7++P
OZW2tJTm0Yl8pApuGv2iQED3e7dT8tMkVtBjujD7WjFWeF6NgON4z0Di6NGRg8tB
B4F6ejvzllyTQevFyxy/J3FFD1TcUMuPQrUDkLuHaXI5ikNPoSfRLAB9w7UKpdMY
pm5glRKuVL7x0OZEuyvWIURoC9CJl+ExVAvH1sXoNF5vAyor1PomcIeKd+mWUv2v
bXq6+L2ySE1KwZzDfML667hRSPcwzKrCDscX9Ttl
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:07:02 2025 by rpki-client