Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/X7o2UMH7VtE-ev6Vz12RKMcJCxk.roa
File: X7o2UMH7VtE-ev6Vz12RKMcJCxk.roa (raw, json)
Hash identifier: BEsmcGKj0TelDPyJAXgEJIX0q8UyL2CZtJuSvBtoibA=
Subject key identifier: 5F:BA:36:50:C1:FB:56:D1:3E:7A:FE:95:CF:5D:91:28:C7:09:0B:19
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194D6E78C1E7F4DCD18CD359574FC4FBD2D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/X7o2UMH7VtE-ev6Vz12RKMcJCxk.roa
Signing time: Wed 05 Feb 2025 16:18:06 +0000
ROA not before: Wed 05 Feb 2025 16:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 45.138.12.0/24 maxlen: 24
45.138.13.0/24 maxlen: 24
45.138.14.0/24 maxlen: 24
45.138.15.0/24 maxlen: 24
91.132.160.0/24 maxlen: 24
91.132.161.0/24 maxlen: 24
91.132.162.0/24 maxlen: 24
91.132.163.0/24 maxlen: 24
152.89.28.0/24 maxlen: 24
152.89.29.0/24 maxlen: 24
152.89.30.0/24 maxlen: 24
152.89.31.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:e7:8c:1e:7f:4d:cd:18:cd:35:95:74:fc:4f:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 5 16:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fba3650c1fb56d13e7afe95cf5d9128c7090b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:65:07:08:e8:2e:4e:4f:4a:cc:fa:c3:ee:
b0:80:db:d6:4c:2f:81:d0:b6:f4:dd:55:cd:c1:60:
58:de:9e:5c:d2:8f:19:24:c9:71:2d:4a:67:b3:95:
06:0c:b2:96:95:69:a7:9b:d3:56:bf:a2:d8:9e:d0:
c5:cf:b7:fa:28:c5:bc:ff:bd:c1:00:db:34:0c:25:
21:10:42:0f:5b:6b:1a:15:c3:09:7c:19:1f:2b:c1:
e0:67:48:fd:b9:d5:bf:e4:02:b7:bc:61:e1:c1:e5:
db:87:24:93:33:bd:f9:01:f3:0f:e0:88:24:62:33:
99:2d:6b:de:6b:a7:2e:88:97:6b:b6:45:17:6c:eb:
5f:db:d0:8d:25:86:d4:ac:b0:59:7a:33:df:21:2c:
ee:24:32:36:fa:d6:93:23:4f:db:e2:9c:9c:02:b0:
46:02:d7:79:fa:09:ad:4a:7c:b8:ae:cd:b0:39:91:
00:24:9a:e9:04:af:f6:2d:73:03:45:c6:e9:c7:a5:
e2:c6:49:38:a5:b2:41:df:9d:ee:ef:38:f8:cf:71:
de:77:13:65:52:20:0a:e7:99:b5:07:0c:38:0d:0a:
9d:ce:66:e1:d6:8a:3f:d8:4e:ae:c6:01:62:99:39:
27:77:38:a0:de:74:52:37:01:04:34:c6:6b:30:e3:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:36:50:C1:FB:56:D1:3E:7A:FE:95:CF:5D:91:28:C7:09:0B:19
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/X7o2UMH7VtE-ev6Vz12RKMcJCxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
91.132.160.0/22
152.89.28.0/22
193.135.157.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
84:64:e0:55:5e:9f:0f:a0:1c:cb:88:dc:42:4e:16:26:31:b4:
56:f3:2d:86:10:a5:dc:40:15:30:7b:ab:df:7e:f5:79:2f:b7:
80:77:fb:67:c9:56:3e:06:a9:a7:16:32:a8:cf:f3:62:2d:ea:
f9:0c:fa:aa:d0:5c:1d:2f:47:95:7b:51:fe:ab:25:aa:2a:56:
60:c9:b2:7c:3f:1b:7f:e6:bc:c4:17:56:51:2f:d0:a0:95:c8:
0c:03:4a:3b:0c:15:61:16:c2:25:69:85:2a:b4:2b:0d:0e:9c:
a3:c9:0b:7e:27:aa:99:ba:eb:e9:f2:65:5c:59:51:84:95:8b:
36:72:10:96:8a:df:5b:ce:03:93:5d:4d:50:7b:b3:dd:1c:f8:
8a:6c:20:e8:9f:3b:6b:0f:d4:51:60:9b:a9:88:fc:6d:2c:3b:
e1:d1:0c:da:b8:d0:8e:53:96:81:f1:df:c1:cd:31:c8:a0:ec:
29:79:b4:73:c1:33:bd:94:b3:f4:49:6a:18:39:6a:9f:6d:c3:
2d:f4:e2:8a:50:e4:f8:cf:31:58:fa:cc:ef:bd:27:31:70:36:
30:38:79:7c:ca:f3:c0:5c:b9:00:17:0b:65:a1:c9:83:7e:14:
27:a4:9a:37:9e:cb:c1:5a:26:dd:89:00:c3:07:97:68:28:54:
5d:4a:df:2b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZTW54wef03NGM01lXT8T70tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjUwMjA1MTYxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmJhMzY1MGMxZmI1NmQxM2U3YWZlOTVjZjVkOTEyOGM3MDkwYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfZlBwjoLk5PSsz6w+6wgNvWTC+B
0Lb03VXNwWBY3p5c0o8ZJMlxLUpns5UGDLKWlWmnm9NWv6LYntDFz7f6KMW8/73B
ANs0DCUhEEIPW2saFcMJfBkfK8HgZ0j9udW/5AK3vGHhweXbhySTM735AfMP4Igk
YjOZLWvea6cuiJdrtkUXbOtf29CNJYbUrLBZejPfISzuJDI2+taTI0/b4pycArBG
Atd5+gmtSny4rs2wOZEAJJrpBK/2LXMDRcbpx6Xixkk4pbJB353u7zj4z3HedxNl
UiAK55m1Bww4DQqdzmbh1oo/2E6uxgFimTkndzig3nRSNwEENMZrMOPNmwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFF+6NlDB+1bRPnr+lc9dkSjHCQsZMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvWDdvMlVNSDdWdEUtZXY2VnoxMlJLTWNKQ3hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYoMAwQC
W4SgAwQCmFkcAwQAwYedAwQAwYeuMA0GCSqGSIb3DQEBCwUAA4IBAQCEZOBVXp8P
oBzLiNxCThYmMbRW8y2GEKXcQBUwe6vffvV5L7eAd/tnyVY+BqmnFjKoz/NiLer5
DPqq0FwdL0eVe1H+qyWqKlZgybJ8Pxt/5rzEF1ZRL9CglcgMA0o7DBVhFsIlaYUq
tCsNDpyjyQt+J6qZuuvp8mVcWVGElYs2chCWit9bzgOTXU1Qe7PdHPiKbCDonztr
D9RRYJupiPxtLDvh0QzauNCOU5aB8d/BzTHIoOwpebRzwTO9lLP0SWoYOWqfbcMt
9OKKUOT4zzFY+szvvScxcDYwOHl8yvPAXLkAFwtlocmDfhQnpJo3nsvBWibdiQDD
B5doKFRdSt8r
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:16 2025 by rpki-client