Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/LaYkRMNeto2OFZ9VBnU48w_HGgs.roa
File: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (raw, json)
Hash identifier: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=
Subject key identifier: 2D:A6:24:44:C3:5E:B6:8D:8E:15:9F:55:06:75:38:F3:0F:C7:1A:0B
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019425219CC249C7281797C04E6AAB494E20
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/LaYkRMNeto2OFZ9VBnU48w_HGgs.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
5.253.183.0/24 maxlen: 24
82.102.7.0/24 maxlen: 24
94.46.12.0/22 maxlen: 22
94.46.12.0/24 maxlen: 24
94.46.13.0/24 maxlen: 24
94.46.14.0/24 maxlen: 24
94.46.15.0/24 maxlen: 24
94.46.16.0/22 maxlen: 22
94.46.16.0/24 maxlen: 24
94.46.20.0/22 maxlen: 22
94.46.20.0/24 maxlen: 24
94.46.21.0/24 maxlen: 24
94.46.22.0/24 maxlen: 24
94.46.23.0/24 maxlen: 24
94.46.25.0/24 maxlen: 24
94.46.26.0/24 maxlen: 24
94.46.27.0/24 maxlen: 24
94.46.28.0/22 maxlen: 22
94.46.28.0/24 maxlen: 24
94.46.29.0/24 maxlen: 24
94.46.30.0/24 maxlen: 24
94.46.128.0/21 maxlen: 21
94.46.132.0/24 maxlen: 24
94.46.133.0/24 maxlen: 24
94.46.160.0/20 maxlen: 24
94.46.176.0/21 maxlen: 21
109.71.40.0/21 maxlen: 21
109.71.40.0/24 maxlen: 24
109.71.41.0/24 maxlen: 24
109.71.42.0/24 maxlen: 24
109.71.43.0/24 maxlen: 24
109.71.44.0/24 maxlen: 24
109.71.45.0/24 maxlen: 24
109.71.46.0/24 maxlen: 24
109.71.47.0/24 maxlen: 24
130.185.80.0/21 maxlen: 21
130.185.81.0/24 maxlen: 24
130.185.82.0/24 maxlen: 24
130.185.83.0/24 maxlen: 24
130.185.84.0/24 maxlen: 24
130.185.85.0/24 maxlen: 24
130.185.86.0/24 maxlen: 24
130.185.87.0/24 maxlen: 24
185.15.20.0/22 maxlen: 22
185.15.20.0/24 maxlen: 24
185.15.22.0/24 maxlen: 24
185.15.23.0/24 maxlen: 24
2a00:1650::/33 maxlen: 33
2a00:1650:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9c:c2:49:c7:28:17:97:c0:4e:6a:ab:49:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2da62444c35eb68d8e159f55067538f30fc71a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:9a:5e:b7:85:82:01:cc:d5:60:72:f6:27:
5a:be:e7:23:d1:6d:bf:1f:64:8d:fe:be:9a:e3:f5:
28:e9:49:31:95:10:b9:8a:17:c7:4e:72:28:62:99:
97:ac:23:93:8e:9f:9f:b7:65:8e:a7:be:65:18:77:
78:c8:15:42:71:db:5e:ff:1c:64:a6:0b:4c:bd:41:
90:88:99:17:22:73:0c:94:e8:18:3c:9b:99:78:0c:
5f:c4:9c:88:f7:51:91:7b:75:82:ae:16:b2:30:a4:
95:07:77:dd:b3:52:75:c8:3b:5f:eb:fa:eb:5d:c8:
ed:b6:6b:39:33:dd:8e:4d:1f:13:14:09:fa:1c:9f:
89:3c:d8:9e:b9:20:b5:32:b9:1a:32:f6:d8:42:d4:
47:5b:99:e2:02:cd:ab:b7:52:1e:07:be:4c:6c:02:
5c:39:8b:8f:a0:80:30:53:c2:7c:6c:e7:a4:38:85:
35:61:7e:3a:46:32:18:68:f6:cc:ee:e8:bb:60:f6:
30:8c:f5:1f:ca:02:c1:d6:3f:e0:a3:17:f3:b6:1a:
79:60:de:ca:ec:1a:89:2f:c1:c2:9c:4c:bc:41:1c:
d4:8c:c8:9f:f2:44:dc:66:97:06:c7:38:f5:ba:ed:
20:52:38:a1:40:13:4b:8f:06:79:64:ca:63:7c:10:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:24:44:C3:5E:B6:8D:8E:15:9F:55:06:75:38:F3:0F:C7:1A:0B
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/LaYkRMNeto2OFZ9VBnU48w_HGgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0-5.253.183.255
82.102.7.0/24
94.46.12.0-94.46.23.255
94.46.25.0-94.46.31.255
94.46.128.0/21
94.46.160.0-94.46.183.255
109.71.40.0/21
130.185.80.0/21
185.15.20.0/22
IPv6:
2a00:1650::/32
Signature Algorithm: sha256WithRSAEncryption
2d:08:8f:f3:65:1f:eb:37:d7:26:47:f9:33:3c:d8:39:3d:d9:
df:25:84:10:9f:93:42:60:b9:95:ab:53:22:95:3a:d5:54:63:
ae:35:f0:29:d7:eb:73:e0:26:35:93:6b:1e:e0:f1:aa:d4:d1:
c0:53:d2:f4:88:e0:54:db:65:f8:a3:15:2f:79:94:18:1f:5d:
6d:ff:52:e3:7b:59:97:a4:28:38:e3:54:43:01:c8:f8:cf:b4:
4a:92:7a:8e:ba:37:49:83:0b:85:2e:be:5f:8a:45:0e:45:9b:
c8:2d:d9:cb:e9:6f:b5:80:9a:d6:18:ad:a7:8a:9d:88:6a:57:
fd:dc:48:15:e6:91:18:fa:7e:4e:fc:9a:7b:c9:22:76:1d:35:
14:e3:5f:df:e9:1b:a3:bd:28:66:8e:26:08:be:cd:24:d5:f5:
5b:73:a2:15:0d:f8:83:6a:86:51:66:3a:99:36:9b:e8:27:bf:
88:e5:a3:b5:d5:09:5c:22:02:e9:bb:85:c4:94:0c:b5:fe:6c:
d1:4f:4d:d3:ad:8b:fe:e5:bd:92:6c:fb:fd:8f:8e:b5:e2:b0:
e5:68:35:93:1e:24:1b:fa:91:c8:b8:58:70:8f:bd:b9:5e:28:
2f:8a:51:af:4f:d2:e2:89:d3:33:cd:86:a5:36:e6:79:7d:d0:
c3:ab:b0:41
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZQlIZzCSccoF5fATmqrSU4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjUwMTAyMDM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGE2MjQ0NGMzNWViNjhkOGUxNTlmNTUwNjc1MzhmMzBmYzcxYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLSaXreFggHM1WBy9idavucj0W2/
H2SN/r6a4/Uo6UkxlRC5ihfHTnIoYpmXrCOTjp+ft2WOp75lGHd4yBVCcdte/xxk
pgtMvUGQiJkXInMMlOgYPJuZeAxfxJyI91GRe3WCrhayMKSVB3fds1J1yDtf6/rr
Xcjttms5M92OTR8TFAn6HJ+JPNieuSC1MrkaMvbYQtRHW5niAs2rt1IeB75MbAJc
OYuPoIAwU8J8bOekOIU1YX46RjIYaPbM7ui7YPYwjPUfygLB1j/goxfzthp5YN7K
7BqJL8HCnEy8QRzUjMif8kTcZpcGxzj1uu0gUjihQBNLjwZ5ZMpjfBDYiwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFC2mJETDXraNjhWfVQZ1OPMPxxoLMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvTGFZa1JNTmV0bzJPRlo5VkJuVTQ4d19IR2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWMAwDBAAF/bUD
BAMF/bADBABSZgcwDAMEAl4uDAMEA14uEDAMAwQAXi4ZAwQFXi4AAwQDXi6AMAwD
BAVeLqADBANeLrADBANtRygDBAOCuVADBAK5DxQwDQQCAAIwBwMFACoAFlAwDQYJ
KoZIhvcNAQELBQADggEBAC0Ij/NlH+s31yZH+TM82Dk92d8lhBCfk0JguZWrUyKV
OtVUY6418CnX63PgJjWTax7g8arU0cBT0vSI4FTbZfijFS95lBgfXW3/UuN7WZek
KDjjVEMByPjPtEqSeo66N0mDC4Uuvl+KRQ5Fm8gt2cvpb7WAmtYYraeKnYhqV/3c
SBXmkRj6fk78mnvJInYdNRTjX9/pG6O9KGaOJgi+zSTV9VtzohUN+INqhlFmOpk2
m+gnv4jlo7XVCVwiAum7hcSUDLX+bNFPTdOti/7lvZJs+/2PjrXisOVoNZMeJBv6
kci4WHCPvbleKC+KUa9P0uKJ0zPNhqU25nl90MOrsEE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:42 2025 by rpki-client