Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/msgHj6xmorfoNOfZsZb5ETqiqaA.roa
File: msgHj6xmorfoNOfZsZb5ETqiqaA.roa (raw, json)
Hash identifier: davuURTv1RuRRgwdIiSAzCJyzxncjXyzjPx2RLzZg2A=
Subject key identifier: 9A:C8:07:8F:AC:66:A2:B7:E8:34:E7:D9:B1:96:F9:11:3A:A2:A9:A0
Certificate issuer: /CN=974801a0c6f084154acba91154cb50dd08e5a2c3
Certificate serial: 0E5041
Authority key identifier: 97:48:01:A0:C6:F0:84:15:4A:CB:A9:11:54:CB:50:DD:08:E5:A2:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0gBoMbwhBVKy6kRVMtQ3QjlosM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/msgHj6xmorfoNOfZsZb5ETqiqaA.roa
Signing time: Sat 01 Jan 2022 00:56:11 +0000
ROA not before: Sat 01 Jan 2022 00:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201704
IP address blocks: 212.63.96.0/21 maxlen: 21
37.98.200.0/22 maxlen: 22
185.65.184.0/22 maxlen: 22
89.42.164.0/22 maxlen: 22
2a03:1d20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938049 (0xe5041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974801a0c6f084154acba91154cb50dd08e5a2c3
Validity
Not Before: Jan 1 00:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ac8078fac66a2b7e834e7d9b196f9113aa2a9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:da:27:2c:1f:73:a6:27:30:fa:38:b4:39:
6c:47:30:27:f6:ec:67:d0:c4:77:b9:d2:cc:46:1c:
14:59:25:fd:b9:2d:f4:9d:10:2d:b9:3a:66:47:ed:
ee:c4:6e:9e:16:46:e0:29:9a:b6:17:74:fb:3f:27:
33:b3:d6:8c:db:0f:33:fa:60:60:cb:46:53:f0:ac:
09:eb:3c:d5:96:05:10:71:eb:06:4b:91:a3:44:12:
3c:6f:6d:a0:c8:c3:99:6c:ad:9c:11:eb:0b:b9:1c:
c5:52:df:35:f8:83:91:8b:0c:57:d6:2b:cc:91:94:
e3:01:93:5e:d5:6a:e4:1d:ad:32:44:5f:25:49:92:
83:91:03:ea:e7:9f:59:b6:f0:cf:b9:e1:a1:fb:06:
2c:28:36:5f:e0:a2:05:a8:72:1f:7a:ce:b3:7a:10:
28:28:2f:8b:69:7d:73:0f:29:53:90:45:c0:9b:3b:
df:82:5a:5d:82:51:ea:dc:d9:73:47:ca:16:7e:d2:
cf:31:02:19:18:3d:5e:e2:43:ab:fd:5e:97:9f:92:
ac:bd:66:07:ec:4e:cc:41:31:c0:2a:75:9a:d1:41:
f0:51:f4:49:9f:ea:5c:6b:3c:86:50:52:74:be:79:
23:33:51:b7:d8:33:21:25:7b:27:f2:e4:2d:99:bf:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:07:8F:AC:66:A2:B7:E8:34:E7:D9:B1:96:F9:11:3A:A2:A9:A0
X509v3 Authority Key Identifier:
keyid:97:48:01:A0:C6:F0:84:15:4A:CB:A9:11:54:CB:50:DD:08:E5:A2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0gBoMbwhBVKy6kRVMtQ3QjlosM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/msgHj6xmorfoNOfZsZb5ETqiqaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/l0gBoMbwhBVKy6kRVMtQ3QjlosM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.200.0/22
89.42.164.0/22
185.65.184.0/22
212.63.96.0/21
IPv6:
2a03:1d20::/32
Signature Algorithm: sha256WithRSAEncryption
a0:55:d1:df:bb:06:09:4f:d2:b9:5a:1d:67:58:66:a5:90:c3:
1b:b8:08:01:55:db:08:2a:96:e4:91:55:73:68:1b:99:03:20:
b8:24:69:aa:0b:74:bb:67:b6:af:91:70:6c:e1:37:81:6e:87:
f1:34:ab:e0:03:2c:7f:23:6a:36:cd:bd:fd:9b:08:cb:19:52:
1a:77:23:ff:25:39:1f:23:e8:b0:69:54:97:8a:36:18:1b:a8:
6c:0e:55:65:42:54:6e:a8:54:cf:12:ad:ba:e9:89:6b:e0:ad:
1d:59:6c:8f:39:23:fc:8f:15:70:15:a8:b3:25:35:cb:43:18:
70:51:48:de:ec:30:7d:b1:82:ee:1b:c8:f7:f4:ac:71:9c:16:
3f:a8:da:86:7e:0f:5a:99:d7:5e:31:f2:c0:7a:be:8b:7a:de:
a1:92:d2:ea:f1:d2:a0:5c:cb:a3:91:05:fa:3b:ca:7e:18:4c:
f1:94:e2:33:86:2b:77:b0:97:13:b1:21:6f:09:a7:d6:3c:79:
31:7c:2d:0e:5a:bb:0a:fb:9d:dd:d7:b8:b0:1e:5c:07:37:b5:
28:00:52:ed:d5:ee:06:df:8e:44:fc:89:81:2c:71:58:44:c4:
ee:97:0d:6c:46:95:0e:75:8a:da:e2:4f:e9:56:c0:44:bf:60:
8c:10:33:30
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIDDlBBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
NDgwMWEwYzZmMDg0MTU0YWNiYTkxMTU0Y2I1MGRkMDhlNWEyYzMwHhcNMjIwMTAx
MDA1NjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5YWM4MDc4ZmFjNjZh
MmI3ZTgzNGU3ZDliMTk2ZjkxMTNhYTJhOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsuTaJywfc6YnMPo4tDlsRzAn9uxn0MR3udLMRhwUWSX9uS30
nRAtuTpmR+3uxG6eFkbgKZq2F3T7Pyczs9aM2w8z+mBgy0ZT8KwJ6zzVlgUQcesG
S5GjRBI8b22gyMOZbK2cEesLuRzFUt81+IORiwxX1ivMkZTjAZNe1WrkHa0yRF8l
SZKDkQPq559ZtvDPueGh+wYsKDZf4KIFqHIfes6zehAoKC+LaX1zDylTkEXAmzvf
glpdglHq3NlzR8oWftLPMQIZGD1e4kOr/V6Xn5KsvWYH7E7MQTHAKnWa0UHwUfRJ
n+pcazyGUFJ0vnkjM1G32DMhJXsn8uQtmb+QnwIDAQABo4ICKjCCAiYwHQYDVR0O
BBYEFJrIB4+sZqK36DTn2bGW+RE6oqmgMB8GA1UdIwQYMBaAFJdIAaDG8IQVSsup
EVTLUN0I5aLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bDBnQm9NYndoQlZLeTZrUlZNdFEzUWpsb3NNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZS8xMmU1NDYtMDAwMC00NWVjLWIxOWYtZGNiZTI4Mjk0MjQxLzEv
bXNnSGo2eG1vcmZvTk9mWnNaYjVFVHFpcWFBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8x
MmU1NDYtMDAwMC00NWVjLWIxOWYtZGNiZTI4Mjk0MjQxLzEvbDBnQm9NYndoQlZL
eTZrUlZNdFEzUWpsb3NNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAG
CCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCJWLIAwQCWSqkAwQCuUG4AwQD1D9g
MA0EAgACMAcDBQAqAx0gMA0GCSqGSIb3DQEBCwUAA4IBAQCgVdHfuwYJT9K5Wh1n
WGalkMMbuAgBVdsIKpbkkVVzaBuZAyC4JGmqC3S7Z7avkXBs4TeBbofxNKvgAyx/
I2o2zb39mwjLGVIadyP/JTkfI+iwaVSXijYYG6hsDlVlQlRuqFTPEq266Ylr4K0d
WWyPOSP8jxVwFaizJTXLQxhwUUje7DB9sYLuG8j39KxxnBY/qNqGfg9amddeMfLA
er6Let6hktLq8dKgXMujkQX6O8p+GEzxlOIzhit3sJcTsSFvCafWPHkxfC0OWrsK
+53d17iwHlwHN7UoAFLt1e4G345E/ImBLHFYRMTulw1sRpUOdYra4k/pVsBEv2CM
EDMw
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:31 2025 by rpki-client