Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/D9cQs8T0lREbDkHnHmr1x3Y9h1E.roa
File: D9cQs8T0lREbDkHnHmr1x3Y9h1E.roa (raw, json)
Hash identifier: wgQgSSgN9d/3usqVy9sISurOqwKUmkPtlRbxthzkFPI=
Subject key identifier: 0F:D7:10:B3:C4:F4:95:11:1B:0E:41:E7:1E:6A:F5:C7:76:3D:87:51
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019421B1E1255E902489A465AA853C6429CF
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/D9cQs8T0lREbDkHnHmr1x3Y9h1E.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44679
IP address blocks: 84.239.4.0/24 maxlen: 24
84.239.8.0/24 maxlen: 24
84.239.9.0/24 maxlen: 24
84.239.11.0/24 maxlen: 24
84.239.13.0/24 maxlen: 24
84.239.14.0/24 maxlen: 24
84.239.15.0/24 maxlen: 24
84.239.32.0/24 maxlen: 24
84.239.34.0/24 maxlen: 24
84.239.35.0/24 maxlen: 24
84.239.36.0/24 maxlen: 24
84.239.38.0/24 maxlen: 24
84.239.39.0/24 maxlen: 24
84.239.40.0/24 maxlen: 24
84.239.44.0/24 maxlen: 24
84.239.46.0/24 maxlen: 24
84.239.49.0/24 maxlen: 24
84.239.51.0/24 maxlen: 24
84.239.55.0/24 maxlen: 24
84.239.56.0/24 maxlen: 24
84.239.57.0/24 maxlen: 24
84.239.58.0/24 maxlen: 24
84.239.59.0/24 maxlen: 24
185.193.52.0/24 maxlen: 24
185.193.53.0/24 maxlen: 24
185.193.54.0/24 maxlen: 24
185.193.55.0/24 maxlen: 24
2a02:2160:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e1:25:5e:90:24:89:a4:65:aa:85:3c:64:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fd710b3c4f495111b0e41e71e6af5c7763d8751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:a3:fe:00:e8:0f:4d:f5:79:8d:7f:e7:09:
51:39:9b:4f:8c:99:f5:8f:85:30:13:b3:83:ca:24:
9c:b3:21:03:bc:b1:d5:7d:4f:0b:0a:d7:d2:b8:0d:
85:c0:6f:e3:53:29:9f:83:26:24:b6:1b:bc:86:6c:
53:0b:a5:c6:01:a5:72:dd:77:55:12:09:5a:1f:3d:
fa:90:d9:b2:86:26:f3:18:b3:c5:7a:e1:99:30:65:
92:ef:5e:86:a4:0f:fa:3c:ed:48:0d:95:02:f5:90:
6f:29:da:88:b8:8f:0d:ae:82:fc:65:a4:44:b1:dc:
37:aa:cf:1b:77:44:9f:69:55:2d:dd:b1:09:5b:e9:
ef:0c:c6:5d:94:b5:df:8c:33:b4:25:fe:da:78:2f:
d4:f8:7d:49:c4:23:11:13:f3:ba:b5:f8:2b:c5:3d:
3a:44:e0:e9:80:0c:b8:ab:d5:5d:26:b7:42:58:81:
30:e2:58:6a:24:ab:33:41:25:07:85:f6:e8:d6:e3:
27:ce:53:72:2a:e5:2f:f9:93:ec:07:c7:85:44:ab:
39:f6:3a:74:4c:0a:66:f6:08:b8:4c:2e:a5:9b:d7:
2f:a5:78:1d:2f:25:2e:c6:87:4b:41:62:7a:f5:bd:
d3:9c:20:ff:72:df:19:9b:08:3b:47:87:9d:5f:98:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:10:B3:C4:F4:95:11:1B:0E:41:E7:1E:6A:F5:C7:76:3D:87:51
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/D9cQs8T0lREbDkHnHmr1x3Y9h1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.4.0/24
84.239.8.0/23
84.239.11.0/24
84.239.13.0-84.239.15.255
84.239.32.0/24
84.239.34.0-84.239.36.255
84.239.38.0-84.239.40.255
84.239.44.0/24
84.239.46.0/24
84.239.49.0/24
84.239.51.0/24
84.239.55.0-84.239.59.255
185.193.52.0/22
IPv6:
2a02:2160:8000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:c7:75:cd:2d:53:a9:e0:67:a9:60:3c:b1:0e:6b:2b:3a:31:
19:00:45:60:c4:f9:7b:4a:c3:8f:9c:86:a5:5d:fd:95:fe:b9:
b6:bb:2d:ac:dc:b9:93:11:80:d8:0a:bd:b4:88:64:ef:32:e0:
5a:66:ad:0a:5c:a0:94:3e:a6:a4:f5:96:91:81:19:16:20:72:
81:59:44:39:7e:79:44:88:33:55:29:8c:aa:c7:c3:ea:32:be:
1c:23:bc:dc:17:a2:bf:9d:cf:2c:bb:c5:8d:ec:13:a7:8e:04:
96:d0:49:7d:d0:d3:67:76:95:0f:ba:d0:b9:27:ae:1b:da:e5:
5b:d3:37:d3:d5:94:70:5a:e6:8b:b4:9b:b0:43:fe:d0:d2:57:
9a:91:e8:0f:19:cd:74:46:88:8a:99:f7:17:2e:3d:7d:66:8d:
4a:1e:4a:9d:5b:55:af:7e:e7:92:fb:ff:d8:8a:83:79:40:48:
13:80:b2:59:16:90:99:3c:2e:c8:40:6f:56:3c:f1:b1:91:e0:
8d:0e:49:33:20:e2:d0:96:10:61:86:6f:26:17:fa:f9:12:35:
28:a8:50:00:7f:51:cc:c0:16:11:4b:f4:7d:69:9d:ff:cf:61:
17:73:dd:5e:0d:b6:65:26:9f:85:63:aa:31:b3:1d:ba:89:00:
4d:27:da:94
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhseElXpAkiaRlqoU8ZCnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmQ3MTBiM2M0ZjQ5NTExMWIwZTQxZTcxZTZhZjVjNzc2M2Q4NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DOj/gDoD031eY1/5wlROZtPjJn1
j4UwE7ODyiScsyEDvLHVfU8LCtfSuA2FwG/jUymfgyYkthu8hmxTC6XGAaVy3XdV
EglaHz36kNmyhibzGLPFeuGZMGWS716GpA/6PO1IDZUC9ZBvKdqIuI8NroL8ZaRE
sdw3qs8bd0SfaVUt3bEJW+nvDMZdlLXfjDO0Jf7aeC/U+H1JxCMRE/O6tfgrxT06
RODpgAy4q9VdJrdCWIEw4lhqJKszQSUHhfbo1uMnzlNyKuUv+ZPsB8eFRKs59jp0
TApm9gi4TC6lm9cvpXgdLyUuxodLQWJ69b3TnCD/ct8Zmwg7R4edX5iGUwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFA/XELPE9JURGw5B5x5q9cd2PYdRMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvRDljUXM4VDBsUkViRGtIbkhtcjF4M1k5aDFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB0BAIAATBuAwQAVO8E
AwQBVO8IAwQAVO8LMAwDBABU7w0DBARU7wADBABU7yAwDAMEAVTvIgMEAFTvJDAM
AwQBVO8mAwQAVO8oAwQAVO8sAwQAVO8uAwQAVO8xAwQAVO8zMAwDBABU7zcDBAJU
7zgDBAK5wTQwDgQCAAIwCAMGBCoCIWCAMA0GCSqGSIb3DQEBCwUAA4IBAQA6x3XN
LVOp4GepYDyxDmsrOjEZAEVgxPl7SsOPnIalXf2V/rm2uy2s3LmTEYDYCr20iGTv
MuBaZq0KXKCUPqak9ZaRgRkWIHKBWUQ5fnlEiDNVKYyqx8PqMr4cI7zcF6K/nc8s
u8WN7BOnjgSW0El90NNndpUPutC5J64b2uVb0zfT1ZRwWuaLtJuwQ/7Q0leakegP
Gc10RoiKmfcXLj19Zo1KHkqdW1WvfueS+//YioN5QEgTgLJZFpCZPC7IQG9WPPGx
keCNDkkzIOLQlhBhhm8mF/r5EjUoqFAAf1HMwBYRS/R9aZ3/z2EXc91eDbZlJp+F
Y6oxsx26iQBNJ9qU
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:56 2025 by rpki-client